$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft File: F_XLSRgEUqiWf5wPZjdatwnQ52g.mft (raw, json) Hash identifier: a3AY8AToHQQMFL80NZHcgbHHvsDtrFk3+/vPzLbKbAE= Subject key identifier: 3D:33:0E:2C:4B:D3:51:6F:50:39:1D:78:A7:35:D0:2A:7B:CE:12:B2 Authority key identifier: 17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 Certificate issuer: /CN=A917FD40/serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Certificate serial: 051B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft Manifest number: 0587 Signing time: Fri 18 Jul 2025 23:56:07 +0000 Manifest this update: Fri 18 Jul 2025 23:56:06 +0000 Manifest next update: Fri 25 Jul 2025 23:56:06 +0000 Files and hashes: 1: F_XLSRgEUqiWf5wPZjdatwnQ52g.crl (hash: IaGb24iA3HcJWUqfJc41v44cxQAUZnkO0tGUUv+Wg9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1307 (0x51b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FD40, serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Validity Not Before: Jul 18 23:56:06 2025 GMT Not After : Jul 25 23:56:06 2025 GMT Subject: CN=687adf17-e5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:f9:1b:4d:68:f9:bd:fd:9b:b5:d1:4b:53: e2:b2:04:16:29:83:9d:44:30:8d:9b:d3:50:ff:d2: c9:8d:9e:53:25:93:22:84:4f:1e:d4:f7:b7:1c:f2: 36:57:a0:70:5a:d8:ed:24:97:fe:78:79:da:29:23: 3e:b6:7b:74:87:17:46:e6:11:e1:7c:45:f8:90:54: 0f:0a:e4:d4:92:96:d8:cc:88:5b:f2:1d:5f:50:42: a5:c1:fe:a3:84:11:15:2b:49:1f:62:92:4b:3c:2e: e7:fe:62:4f:92:ee:7e:0f:7b:82:a5:0c:01:54:79: c7:8b:94:99:29:e7:53:fb:97:82:76:7e:7e:e6:ad: 78:76:b4:9d:27:fb:f5:38:17:d4:ce:7d:65:51:91: 6b:71:a0:d1:bb:ac:0d:fc:ca:bb:bb:b3:7f:98:52: f6:59:4c:cd:0f:5b:e7:83:f1:3d:0e:24:31:d9:c4: 2c:bf:d3:ad:8c:57:dd:7c:67:6e:21:ac:80:15:33: de:ef:bf:b0:58:86:0c:0d:3a:33:18:3f:d7:e0:c6: a7:d9:16:08:7d:40:e3:d4:c6:ba:96:87:ed:9f:ec: a6:d8:c3:04:d2:a4:f1:fc:62:e4:18:da:7f:4e:c9: b2:2a:4c:23:b1:77:34:01:de:9f:12:04:3e:51:65: 2e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:33:0E:2C:4B:D3:51:6F:50:39:1D:78:A7:35:D0:2A:7B:CE:12:B2 X509v3 Authority Key Identifier: keyid:17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ac:b9:51:92:16:e2:02:f7:8b:81:45:af:cc:7d:76:8b:37: 87:fc:6d:00:94:f6:63:47:79:2e:07:2f:88:ed:d5:16:1a:e8: 51:0f:d8:bb:45:66:1e:90:60:51:15:af:2b:4a:8c:b5:e4:7e: c2:eb:e7:b2:de:7e:16:65:58:21:62:a5:63:0d:0b:5f:2e:6a: f2:ee:f3:f6:ad:57:1c:4a:cc:57:21:c6:60:b9:35:b8:df:b3: 2b:ef:fe:e4:36:8b:6f:78:b0:55:70:aa:8a:b8:2c:fe:b1:ed: d0:70:6d:24:ac:f2:d9:e9:92:26:91:27:57:a4:bc:0f:23:1a: d4:6b:50:88:84:a6:ce:c5:2c:bd:0e:65:a5:58:a6:82:65:00: 92:20:cc:59:e9:1b:fa:e1:78:d3:7b:d8:19:e8:23:a4:7d:10: 78:2e:61:aa:85:ed:14:b8:fc:76:13:91:9f:5c:e6:8e:59:57: 87:af:fe:0b:13:a5:d7:94:2d:94:44:23:c4:f7:46:33:c6:2c: 0a:2d:ab:5a:b6:e0:5e:d5:3b:74:b7:6d:e7:b6:3d:5d:f9:e7: 6c:15:24:c5:a6:b3:61:99:35:25:47:7e:06:e2:2e:26:f4:6b: dc:93:7e:9f:79:91:9f:3d:83:bb:eb:f2:fa:a7:08:b1:de:fb: d8:a8:c0:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZENDAxMTAvBgNVBAUTKDE3RjVDQjQ5MTgwNDUyQTg5NjdGOUMwRjY2Mzc1QUI3 MDlEMEU3NjgwHhcNMjUwNzE4MjM1NjA2WhcNMjUwNzI1MjM1NjA2WjAYMRYwFAYD VQQDEw02ODdhZGYxNy1lNWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwm75G01o+b39m7XRS1PisgQWKYOdRDCNm9NQ/9LJjZ5TJZMihE8e1Pe3HPI2 V6BwWtjtJJf+eHnaKSM+tnt0hxdG5hHhfEX4kFQPCuTUkpbYzIhb8h1fUEKlwf6j hBEVK0kfYpJLPC7n/mJPku5+D3uCpQwBVHnHi5SZKedT+5eCdn5+5q14drSdJ/v1 OBfUzn1lUZFrcaDRu6wN/Mq7u7N/mFL2WUzND1vng/E9DiQx2cQsv9OtjFfdfGdu IayAFTPe77+wWIYMDTozGD/X4Man2RYIfUDj1Ma6loftn+ym2MME0qTx/GLkGNp/ TsmyKkwjsXc0Ad6fEgQ+UWUuAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0zDixL 01FvUDkdeKc10Cp7zhKyMB8GA1UdIwQYMBaAFBf1y0kYBFKoln+cD2Y3WrcJ0Odo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkQ0MC9GQzIxOTU1RTBC RDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVxaVdmNXdQWmpkYXR3blE1 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfWExTUmdFVXFpV2Y1d1BaamRhdHduUTUyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkQ0MC9GQzIxOTU1RTBCRDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVx aVdmNXdQWmpkYXR3blE1MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAErLlRkhbiAveLgUWvzH12izeH/G0AlPZjR3kuBy+I7dUWGuhRD9i7 RWYekGBRFa8rSoy15H7C6+ey3n4WZVghYqVjDQtfLmry7vP2rVccSsxXIcZguTW4 37Mr7/7kNotveLBVcKqKuCz+se3QcG0krPLZ6ZImkSdXpLwPIxrUa1CIhKbOxSy9 DmWlWKaCZQCSIMxZ6Rv64XjTe9gZ6COkfRB4LmGqhe0UuPx2E5GfXOaOWVeHr/4L E6XXlC2URCPE90YzxiwKLatatuBe1Tt0t23ntj1d+edsFSTFprNhmTUlR34G4i4m 9Gvck36feZGfPYO76/L6pwix3vvYqMBS -----END CERTIFICATE-----Generated at Sun Jul 20 06:16:11 2025 by rpki-client