$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft File: XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft (raw, json) Hash identifier: 7XXajCUeUc4TEgz0c6Axg8jzPWTHYsKnH2GZCeGKoE8= Subject key identifier: D5:BC:F7:E2:F7:AF:B4:F3:65:E7:FA:52:4F:08:A6:B1:76:9D:FA:23 Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 Certificate issuer: /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft Manifest number: 012F Signing time: Sat 19 Jul 2025 04:52:13 +0000 Manifest this update: Sat 19 Jul 2025 04:52:12 +0000 Manifest next update: Sat 26 Jul 2025 04:52:12 +0000 Files and hashes: 1: XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl (hash: +edeq7cgBteSz25FitejSoFWX/zolUHf8IRjr60/dPc=) 2: 262FD0CEFE5C11EFA373D67EC4F9AE02.roa (hash: lo15Nf+0CZOirk0eAvSgxMDUvp2nF6KYkcsnfZSUw20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F54, serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Validity Not Before: Jul 19 04:52:12 2025 GMT Not After : Jul 26 04:52:12 2025 GMT Subject: CN=687b247d-f96d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:b3:ec:2f:a8:e3:a2:5a:d7:14:b4:28:ca: d0:e2:ce:67:cc:fe:a0:7c:35:19:14:10:36:3b:eb: d0:01:69:be:c6:b7:14:f2:85:63:94:3e:2c:37:66: e1:91:0a:22:08:f7:ef:04:aa:be:f7:99:a8:d4:c6: 0f:c8:ea:20:49:a5:d7:a6:e4:af:96:04:a7:56:51: 36:59:c1:9e:f1:05:f7:97:92:20:1e:30:9d:e8:e2: f9:54:07:f4:f4:50:c1:14:7e:d4:e3:71:5a:5c:43: 57:61:cc:af:da:82:71:87:d5:51:83:9f:7a:a5:18: 80:63:fe:2b:c3:68:10:0c:5b:ef:e1:bd:7a:cb:95: ce:6a:26:a2:64:39:16:da:a7:03:63:d5:b2:25:ac: c5:ea:66:d2:e1:9f:26:6d:b5:38:55:ef:53:13:bf: be:cf:44:d5:57:53:08:31:ab:d7:bc:87:7c:99:83: 25:bf:77:ed:d8:38:7a:a1:93:14:50:7e:81:a8:47: 7d:50:9d:cc:01:4e:08:d6:33:39:2d:a6:63:ec:14: 2a:93:a5:16:c7:57:6c:ae:da:f4:ab:fe:d3:c3:91: e0:e8:87:e0:1a:a5:af:c2:a5:27:58:81:1e:5e:1b: 01:a4:62:71:85:6a:b2:a2:90:dd:59:15:ed:d0:7b: fc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BC:F7:E2:F7:AF:B4:F3:65:E7:FA:52:4F:08:A6:B1:76:9D:FA:23 X509v3 Authority Key Identifier: keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:1f:3c:df:71:03:97:61:25:0e:38:f0:12:1e:8d:fb:86:ee: 6c:c5:d1:00:59:6e:73:ba:20:6f:e6:6b:12:33:83:ba:99:28: 41:76:f8:9b:60:cf:45:55:9b:a0:15:0e:f0:1e:b4:8b:1a:b7: 62:53:35:20:19:88:97:5a:43:14:62:d2:4a:fd:a0:3b:14:aa: 45:c5:ab:41:1f:95:be:61:b2:cb:40:6f:65:75:99:44:1b:fa: 43:3d:6a:16:5f:90:9d:fb:d4:4e:96:45:fd:dd:93:6f:d2:4f: a9:6e:e3:4e:57:2f:f3:1c:c1:ca:56:d7:b9:e1:4b:53:80:8b: 4b:4f:72:37:f7:6a:2d:0d:87:39:6a:85:cb:05:09:0f:06:30: d9:a8:98:ec:a5:d7:ba:ae:06:d9:b2:ef:29:31:33:69:cd:79: 51:b9:d7:64:d7:87:f7:d1:7c:52:30:ce:12:96:19:ce:07:11: 45:f9:76:82:7e:83:b3:10:d0:e9:04:17:dc:be:8d:13:bc:ef: ef:a1:48:ab:85:83:04:de:7f:0e:d4:52:e2:f0:65:11:25:3e: 42:8f:fa:e2:3d:fe:6b:45:a5:d5:2d:f0:b3:3a:70:ba:8b:33: 48:53:94:a7:13:ca:3e:c9:0c:c7:b0:32:59:2b:1f:f4:7b:b7: dd:f8:2a:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNTQxMTAvBgNVBAUTKDVEQjU3RUQzODYwMzlFQTY2NEQxRUZGNzU3MDczNkQ2 RjlGMDRDNDQwHhcNMjUwNzE5MDQ1MjEyWhcNMjUwNzI2MDQ1MjEyWjAYMRYwFAYD VQQDEw02ODdiMjQ3ZC1mOTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDqz7C+o46Ja1xS0KMrQ4s5nzP6gfDUZFBA2O+vQAWm+xrcU8oVjlD4sN2bh kQoiCPfvBKq+95mo1MYPyOogSaXXpuSvlgSnVlE2WcGe8QX3l5IgHjCd6OL5VAf0 9FDBFH7U43FaXENXYcyv2oJxh9VRg596pRiAY/4rw2gQDFvv4b16y5XOaiaiZDkW 2qcDY9WyJazF6mbS4Z8mbbU4Ve9TE7++z0TVV1MIMavXvId8mYMlv3ft2Dh6oZMU UH6BqEd9UJ3MAU4I1jM5LaZj7BQqk6UWx1dsrtr0q/7Tw5Hg6IfgGqWvwqUnWIEe XhsBpGJxhWqyopDdWRXt0Hv8gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNW89+L3 r7TzZef6Uk8IprF2nfojMB8GA1UdIwQYMBaAFF21ftOGA56mZNHv91cHNtb58ExE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1NC81MUI2RUNFNDlG MjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5xWmswZV8zVndjMjF2bndU RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hiVi0wNFlEbnFaazBlXzNWd2MyMXZud1RFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1NC81MUI2RUNFNDlGMjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5x WmswZV8zVndjMjF2bndURVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuHzzfcQOXYSUOOPASHo37hu5sxdEAWW5zuiBv5msSM4O6mShBdvib YM9FVZugFQ7wHrSLGrdiUzUgGYiXWkMUYtJK/aA7FKpFxatBH5W+YbLLQG9ldZlE G/pDPWoWX5Cd+9ROlkX93ZNv0k+pbuNOVy/zHMHKVte54UtTgItLT3I392otDYc5 aoXLBQkPBjDZqJjspde6rgbZsu8pMTNpzXlRuddk14f30XxSMM4SlhnOBxFF+XaC foOzENDpBBfcvo0TvO/voUirhYME3n8O1FLi8GURJT5Cj/riPf5rRaXVLfCzOnC6 izNIU5SnE8o+yQzHsDJZKx/0e7fd+Cqc -----END CERTIFICATE-----Generated at Sun Jul 20 11:20:08 2025 by rpki-client