$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft File: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json) Hash identifier: 5fhS9ODyhEquCV0IaEw+kR68GmX1nT5SOmkXhCBlZSY= Subject key identifier: 12:D7:50:4B:46:82:82:93:E3:8F:38:FD:F7:2F:8D:00:12:BE:A4:BF Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft Manifest number: 01D9 Signing time: Sat 19 Jul 2025 02:55:50 +0000 Manifest this update: Sat 19 Jul 2025 02:55:50 +0000 Manifest next update: Sat 26 Jul 2025 02:55:50 +0000 Files and hashes: 1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: 6NhHN3E7G0aJwR5VteR6MWkAskQ0gOWuydJh1d7e7DE=) 2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: RmJtDMkcxfQ3eQrKn0Yy1kaaLYDY2h9Y7DjrNYqUSm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA19, serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Validity Not Before: Jul 19 02:55:50 2025 GMT Not After : Jul 26 02:55:50 2025 GMT Subject: CN=687b0936-3f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8b:7a:aa:9b:06:d6:5f:2e:4c:6f:ee:1a:da: 19:11:4e:64:6d:a8:de:f9:a2:28:a2:7d:22:28:32: ee:9b:9b:59:f5:63:ee:6d:81:c6:06:12:27:65:6a: b0:a2:32:e9:31:19:e0:93:5f:6a:f3:e9:0d:a9:de: cc:51:ab:fd:a5:7d:63:ca:48:08:8d:30:b6:74:d6: 83:c3:73:5c:88:23:bb:81:86:bf:84:4c:3c:e9:bc: f8:ac:58:61:79:9a:fe:24:f5:e6:67:7c:b3:a6:07: cd:ff:2f:61:d4:2a:32:7c:e7:8d:f9:57:b1:a6:71: 25:1c:bd:e9:07:10:4e:f6:75:b4:60:2d:7a:78:e3: 6e:58:bd:16:a1:eb:f6:fa:bf:6e:72:53:86:66:f7: 68:b9:bd:f4:b0:0a:ca:bf:0f:f8:b0:dc:3c:74:cc: d1:81:27:b5:37:0f:eb:8c:17:7d:70:7c:d8:c1:26: a4:64:ca:aa:b4:c7:e2:ed:4c:01:7a:35:7a:11:79: d9:1c:0b:99:82:01:b1:1f:bc:a3:db:8f:b8:f9:1f: 2b:16:0e:7c:bc:13:74:fc:c3:30:68:9d:79:d6:28: cf:ef:fa:2d:9d:a7:b5:cb:3d:a8:1c:d8:33:e1:00: 88:6d:80:04:80:0e:c8:04:c1:b2:76:64:43:17:95: 83:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D7:50:4B:46:82:82:93:E3:8F:38:FD:F7:2F:8D:00:12:BE:A4:BF X509v3 Authority Key Identifier: keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:43:4c:05:c2:36:84:bd:de:41:a3:cb:21:82:fd:d5:70:a3: b4:46:74:07:f8:49:2a:b3:1c:a4:15:32:f8:0a:ac:08:e2:f4: 4e:e7:bf:39:b3:5e:05:6d:30:5f:3f:d8:c8:19:68:5b:87:ef: af:ff:db:dd:22:e6:08:da:21:68:3e:11:a6:fe:8f:ae:9f:67: b7:09:25:9f:0f:e8:44:42:5f:df:f9:92:f5:13:64:f1:be:ff: 3f:35:c2:de:63:d7:91:da:bc:e6:f9:88:4a:14:d8:54:1f:10: 5b:e1:92:fb:67:b9:ab:1c:42:2c:39:e4:e1:d9:33:e2:24:db: b0:61:01:04:5d:d3:30:b2:2d:fc:97:b9:d0:81:66:a8:fd:48: d1:c8:cd:09:d5:d9:90:aa:b6:43:a0:91:ba:dd:d2:c7:8b:cc: ce:38:a3:e0:fa:13:78:2f:43:84:75:b7:56:e6:49:c7:50:64: 8b:8d:b1:20:3f:bc:18:3f:86:ff:5a:e8:4b:7d:30:c8:cd:d1: 5c:87:b9:88:8e:a3:1a:3a:3d:6e:75:e7:30:3e:ab:b7:6b:0f: f1:f3:57:3c:bc:06:98:fd:ba:58:33:b9:eb:a7:57:8a:6b:2e: a3:0b:96:51:7c:83:a3:37:f7:e6:02:06:96:df:33:d8:16:ae: fd:53:ce:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMTkxMTAvBgNVBAUTKEM0RjkzMjJFRUU5NjcwOUU0MjIxQzZERDNDRUNCODQw Mzg0RjAyMDEwHhcNMjUwNzE5MDI1NTUwWhcNMjUwNzI2MDI1NTUwWjAYMRYwFAYD VQQDEw02ODdiMDkzNi0zZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4t6qpsG1l8uTG/uGtoZEU5kbaje+aIoon0iKDLum5tZ9WPubYHGBhInZWqw ojLpMRngk19q8+kNqd7MUav9pX1jykgIjTC2dNaDw3NciCO7gYa/hEw86bz4rFhh eZr+JPXmZ3yzpgfN/y9h1CoyfOeN+VexpnElHL3pBxBO9nW0YC16eONuWL0Woev2 +r9uclOGZvdoub30sArKvw/4sNw8dMzRgSe1Nw/rjBd9cHzYwSakZMqqtMfi7UwB ejV6EXnZHAuZggGxH7yj24+4+R8rFg58vBN0/MMwaJ151ijP7/otnae1yz2oHNgz 4QCIbYAEgA7IBMGydmRDF5WDQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLXUEtG goKT4484/fcvjQASvqS/MB8GA1UdIwQYMBaAFMT5Mi7ulnCeQiHG3TzsuEA4TwIB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ExOS9GODAyQTQyNDhD RDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NKNUNJY2JkUE95NFFEaFBB Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQa3lMdTZXY0o1Q0ljYmRQT3k0UURoUEFnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ExOS9GODAyQTQyNDhDRDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NK NUNJY2JkUE95NFFEaFBBZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Q0wFwjaEvd5Bo8shgv3VcKO0RnQH+EkqsxykFTL4CqwI4vRO5785 s14FbTBfP9jIGWhbh++v/9vdIuYI2iFoPhGm/o+un2e3CSWfD+hEQl/f+ZL1E2Tx vv8/NcLeY9eR2rzm+YhKFNhUHxBb4ZL7Z7mrHEIsOeTh2TPiJNuwYQEEXdMwsi38 l7nQgWao/UjRyM0J1dmQqrZDoJG63dLHi8zOOKPg+hN4L0OEdbdW5knHUGSLjbEg P7wYP4b/WuhLfTDIzdFch7mIjqMaOj1udecwPqu3aw/x81c8vAaY/bpYM7nrp1eK ay6jC5ZRfIOjN/fmAgaW3zPYFq79U87o -----END CERTIFICATE-----Generated at Sun Jul 20 07:13:47 2025 by rpki-client