$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: KitEjP/zkxr4V3onJcZNpu5Wf2TwbDUkoD2IITE3DPk= Subject key identifier: 75:7E:B1:68:C9:E3:D4:34:42:A4:3A:AA:D3:EF:3A:24:AF:69:B7:A3 Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 0A29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 0A1E Signing time: Sun 20 Jul 2025 19:54:14 +0000 Manifest this update: Sun 20 Jul 2025 19:54:14 +0000 Manifest next update: Sun 27 Jul 2025 19:54:14 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: Kgl3A7qI/Htircg/2CGjbKMJ+DX0BtKVuy0nxXyXhMk=) 2: 51D92BD25DD711F09B20C44DC4F9AE02.roa (hash: GSOu67thxVMGW+aBdpC8IU1FXpmsRcWLr3fcMku7g6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2601 (0xa29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Jul 20 19:54:14 2025 GMT Not After : Jul 27 19:54:14 2025 GMT Subject: CN=687d4966-ba9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fe:b1:11:11:ba:51:35:72:2c:49:e0:2a:96: c5:ac:c8:ca:02:78:95:76:d7:8a:aa:e6:59:5e:49: 42:7c:e0:b9:b1:b5:92:f7:c7:d3:c4:e9:44:9b:44: dc:a4:76:a5:9b:b2:f4:50:fd:c1:59:5a:65:49:f3: 15:33:99:c8:cd:a7:e6:56:e2:aa:c9:87:bd:f0:b2: 41:fc:52:73:af:cf:09:ee:8e:c7:9d:d2:cc:a7:7a: e4:4b:69:dd:09:7f:3f:e2:b8:d1:47:dc:c5:f2:4d: 30:fa:eb:53:c0:75:34:77:0d:ce:cf:f3:fc:d2:1e: 7d:03:3d:0e:3c:81:96:3f:55:c4:79:c4:49:bf:92: 7b:95:d2:02:a6:c3:45:48:e8:b9:ce:15:d0:c8:b4: db:a4:60:ac:c0:76:00:aa:70:0c:24:89:46:3a:59: bf:4c:b0:74:e4:44:cb:25:5a:7c:a1:ed:f8:b8:41: 8d:52:ee:9b:72:d4:ac:18:1b:e1:cc:8e:e9:68:89: 07:d0:b9:33:3a:43:12:4e:d6:a0:27:66:fe:b9:53: 43:f2:65:dc:59:a6:61:a9:91:97:3e:b3:07:19:ed: 45:aa:37:db:ef:e3:0b:75:37:b1:26:33:12:71:0d: 60:94:28:04:60:65:5e:5f:f9:39:80:82:1d:9e:79: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7E:B1:68:C9:E3:D4:34:42:A4:3A:AA:D3:EF:3A:24:AF:69:B7:A3 X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:c6:2d:e6:a0:44:96:6c:1a:59:dc:ab:56:2e:5d:14:0f:f2: a9:2c:89:c0:ef:07:68:49:d1:49:c7:d1:68:83:24:df:3e:00: 5c:a4:e3:bc:ae:0e:e0:e1:55:77:cd:1b:ae:2c:aa:71:4a:c1: 2d:33:29:88:89:22:bb:63:d3:04:99:ee:8b:e7:70:fa:98:e0: ff:1a:0a:de:5b:81:57:2a:74:6e:ce:28:79:bb:17:5b:70:a9: 65:ac:1d:86:90:21:d5:a5:81:da:fc:de:4e:47:4c:e0:84:ff: b3:52:5b:d9:2e:c7:a8:b0:07:33:e0:21:f2:27:c0:3b:0c:bb: 43:b2:a4:0f:32:dd:2f:b5:87:20:a9:44:48:8f:fd:6d:e2:39: 82:ab:e6:7b:38:fa:b5:8c:52:e7:d8:aa:e0:e7:44:77:bb:18: a8:30:81:c2:29:0d:d5:80:cd:cd:0f:80:c6:81:6f:f2:60:16: 3c:81:6c:58:41:f3:86:a3:42:e0:f7:dc:7a:aa:89:fe:4a:9e: c6:8a:19:14:cd:d5:88:dc:bb:30:9a:72:0a:03:8a:fc:d3:e7: 11:a4:65:52:32:8e:10:a9:2d:e8:64:74:31:c6:be:48:bc:45: 3e:35:cd:da:9d:17:6c:50:3d:6f:42:3f:56:a5:84:63:d1:69: 7f:cd:a6:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjUwNzIwMTk1NDE0WhcNMjUwNzI3MTk1NDE0WjAYMRYwFAYD VQQDEw02ODdkNDk2Ni1iYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/6xERG6UTVyLEngKpbFrMjKAniVdteKquZZXklCfOC5sbWS98fTxOlEm0Tc pHalm7L0UP3BWVplSfMVM5nIzafmVuKqyYe98LJB/FJzr88J7o7HndLMp3rkS2nd CX8/4rjRR9zF8k0w+utTwHU0dw3Oz/P80h59Az0OPIGWP1XEecRJv5J7ldICpsNF SOi5zhXQyLTbpGCswHYAqnAMJIlGOlm/TLB05ETLJVp8oe34uEGNUu6bctSsGBvh zI7paIkH0LkzOkMSTtagJ2b+uVND8mXcWaZhqZGXPrMHGe1Fqjfb7+MLdTexJjMS cQ1glCgEYGVeX/k5gIIdnnlYNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHV+sWjJ 49Q0QqQ6qtPvOiSvabejMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASxi3moESWbBpZ3KtWLl0UD/KpLInA7wdoSdFJx9FogyTfPgBcpOO8 rg7g4VV3zRuuLKpxSsEtMymIiSK7Y9MEme6L53D6mOD/GgreW4FXKnRuzih5uxdb cKllrB2GkCHVpYHa/N5OR0zghP+zUlvZLseosAcz4CHyJ8A7DLtDsqQPMt0vtYcg qURIj/1t4jmCq+Z7OPq1jFLn2Krg50R3uxioMIHCKQ3VgM3ND4DGgW/yYBY8gWxY QfOGo0Lg99x6qon+Sp7GihkUzdWI3LswmnIKA4r80+cRpGVSMo4QqS3oZHQxxr5I vEU+Nc3anRdsUD1vQj9WpYRj0Wl/zaa2 -----END CERTIFICATE-----Generated at Mon Jul 21 12:25:17 2025 by rpki-client