$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft File: xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft (raw, json) Hash identifier: RsaSI8f3XcW0BcTwdZC9WAsGU1qjDPHm7BfpuCuyeyo= Subject key identifier: B8:D2:D2:25:F0:08:4B:1D:35:C0:D5:19:8D:45:8D:61:B2:AC:D5:ED Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 Certificate issuer: /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft Manifest number: 018A Signing time: Sat 19 Jul 2025 03:42:52 +0000 Manifest this update: Sat 19 Jul 2025 03:42:51 +0000 Manifest next update: Sat 26 Jul 2025 03:42:51 +0000 Files and hashes: 1: xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl (hash: 4kAa/c+w7DnAdxXWmKiOIMPFObWqAkHlDA71QTb86w4=) 2: CD377A6C06B411EE841D6C4AC4F9AE02.roa (hash: eGRq+1XhrILN9pC7Bu29wtZG2xTxwIWpAe96/Tzv+yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A750, serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Validity Not Before: Jul 19 03:42:51 2025 GMT Not After : Jul 26 03:42:51 2025 GMT Subject: CN=687b143b-37a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:97:01:cc:2b:c0:16:d7:c6:b6:3f:6f:50: b0:23:79:e5:5d:68:c2:6c:18:7a:78:af:cb:ec:a7: 49:ef:17:ee:2b:82:ae:90:22:8f:78:94:35:22:36: 0b:c8:70:6b:f7:cc:1e:a7:a5:97:71:15:e3:eb:38: 83:67:b4:65:57:f9:d1:50:3c:d0:98:8d:d1:35:03: f0:9c:b6:7d:0e:b6:89:9f:86:13:07:03:61:4b:0e: 0b:64:b1:ab:21:f0:7e:3e:12:6e:26:73:2e:f7:a8: d1:f5:92:04:74:b9:e3:6a:b2:dd:87:84:ed:a2:20: 1d:b4:2d:04:4e:35:d7:2c:04:43:1b:16:2f:a1:bc: 63:b8:31:e2:64:b1:9d:b0:f8:06:f2:c7:6b:a1:3a: 6f:fe:bb:ec:c6:5e:8e:f9:28:1a:e8:df:61:e0:d8: e0:17:dd:a2:09:5e:44:6f:cd:21:d9:81:fd:cb:4b: 04:97:b4:3d:97:fa:a6:91:d7:b2:fb:59:b8:e6:b6: 22:2c:0d:3e:d6:23:64:1c:c5:52:7b:fe:83:0d:8f: 51:21:b9:ee:ef:53:b5:a5:9c:3c:fb:8f:c3:7d:59: 31:37:2d:2e:57:d3:51:aa:98:3a:79:a6:8f:7c:e3: eb:97:de:14:14:ca:3f:1d:84:99:7f:50:6f:69:9c: 6c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D2:D2:25:F0:08:4B:1D:35:C0:D5:19:8D:45:8D:61:B2:AC:D5:ED X509v3 Authority Key Identifier: keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:22:fb:29:2f:8e:ba:cb:ce:ad:ef:5a:ba:07:0a:18:d0:7e: 42:a2:bb:de:5b:44:73:f6:7a:83:07:99:d3:2b:e4:fd:f6:f2: c4:27:22:32:d6:d7:55:89:17:66:8b:96:d3:5d:0e:ff:26:88: b8:cf:4f:9b:c2:8e:29:a4:23:dd:f0:aa:7c:a3:38:f5:3e:85: d1:63:e2:85:47:9c:aa:5f:b6:60:3f:30:38:cc:d3:61:31:90: ac:73:3d:a3:81:32:f6:25:09:39:e8:d8:af:a9:f7:99:4a:ca: 7c:a7:b8:91:35:42:fb:a0:16:d3:79:30:1c:66:38:6f:54:1d: d1:1e:8a:20:0a:15:e5:9a:64:3b:0e:85:5d:eb:e1:00:b7:f3: 49:87:2b:25:f9:f4:ea:d2:37:f4:8b:23:c5:79:19:5b:cf:61: f7:d7:63:58:63:2e:b5:07:08:6b:a3:19:e9:6a:d0:cc:94:0a: 09:f3:4d:b0:60:15:13:1d:07:5b:2c:ed:db:11:c2:70:f1:75: 68:99:ca:86:e2:fa:e4:0b:d1:42:95:02:16:17:60:c7:ba:28: 4e:69:d8:4a:51:23:02:79:04:cc:d5:dd:e8:1e:79:a6:60:f1: 0b:ff:17:ed:41:2b:fc:16:35:de:93:58:16:b1:e5:9f:d3:ef: 39:8b:d4:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE3NTAxMTAvBgNVBAUTKEM2NTRGQzQ3NkNERjJFMzA2QkUyNzcwREFFOTEwNDIz NjExQTMxOTIwHhcNMjUwNzE5MDM0MjUxWhcNMjUwNzI2MDM0MjUxWjAYMRYwFAYD VQQDEw02ODdiMTQzYi0zN2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zWXAcwrwBbXxrY/b1CwI3nlXWjCbBh6eK/L7KdJ7xfuK4KukCKPeJQ1IjYL yHBr98wep6WXcRXj6ziDZ7RlV/nRUDzQmI3RNQPwnLZ9DraJn4YTBwNhSw4LZLGr IfB+PhJuJnMu96jR9ZIEdLnjarLdh4TtoiAdtC0ETjXXLARDGxYvobxjuDHiZLGd sPgG8sdroTpv/rvsxl6O+Sga6N9h4NjgF92iCV5Eb80h2YH9y0sEl7Q9l/qmkdey +1m45rYiLA0+1iNkHMVSe/6DDY9RIbnu71O1pZw8+4/DfVkxNy0uV9NRqpg6eaaP fOPrl94UFMo/HYSZf1BvaZxsPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjS0iXw CEsdNcDVGY1FjWGyrNXtMB8GA1UdIwQYMBaAFMZU/Eds3y4wa+J3Da6RBCNhGjGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTc1MC80NTFENkE2QTA2 QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6ZkxqQnI0bmNOcnBFRUkyRWFN WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsVDhSMnpmTGpCcjRuY05ycEVFSTJFYU1aSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTc1MC80NTFENkE2QTA2QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6Zkxq QnI0bmNOcnBFRUkyRWFNWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByIvspL466y86t71q6BwoY0H5CorveW0Rz9nqDB5nTK+T99vLEJyIy 1tdViRdmi5bTXQ7/Joi4z0+bwo4ppCPd8Kp8ozj1PoXRY+KFR5yqX7ZgPzA4zNNh MZCscz2jgTL2JQk56NivqfeZSsp8p7iRNUL7oBbTeTAcZjhvVB3RHoogChXlmmQ7 DoVd6+EAt/NJhysl+fTq0jf0iyPFeRlbz2H312NYYy61BwhroxnpatDMlAoJ802w YBUTHQdbLO3bEcJw8XVomcqG4vrkC9FClQIWF2DHuihOadhKUSMCeQTM1d3oHnmm YPEL/xftQSv8FjXek1gWseWf0+85i9R6 -----END CERTIFICATE-----Generated at Sun Jul 20 08:00:37 2025 by rpki-client