$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft File: XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json) Hash identifier: GDtUTmdEWFEX+sVUm8/2VHUfhys9Xl7h+DJB6TaGU94= Subject key identifier: 3C:D4:19:12:35:FC:15:6F:54:D7:4E:9A:40:C8:FB:97:58:98:F9:34 Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Certificate serial: 0B61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft Manifest number: 0B52 Signing time: Sun 20 Jul 2025 19:12:41 +0000 Manifest this update: Sun 20 Jul 2025 19:12:41 +0000 Manifest next update: Sun 27 Jul 2025 19:12:41 +0000 Files and hashes: 1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: QxTiGi8IAuubLm7YzGqO/jsx5Q5QoTNxU6prOgmN/xk=) 2: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: z+/TKQAcf6VE8NuqmnIeG+tuqaOl0QxpRj3ReMN+jL0=) 3: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: Jhq/OLItI0gDhEIBYho+XP9iO0Y/7Srvb27SpQGuffU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2913 (0xb61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Validity Not Before: Jul 20 19:12:41 2025 GMT Not After : Jul 27 19:12:41 2025 GMT Subject: CN=687d3fa9-f148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ac:be:ed:58:a3:c7:7c:aa:d8:60:e7:6d:99: 60:ca:47:93:fe:c6:8c:10:ec:4b:69:16:08:e6:60: df:f2:b9:26:37:f5:e5:b1:8a:dd:41:99:0a:45:2c: d8:e9:3c:d1:53:4e:aa:7d:88:38:ca:ae:e5:cf:43: d1:2d:81:38:14:48:74:42:8c:0c:17:33:b5:5b:b6: c4:af:cf:39:1d:8c:3b:7c:05:e2:d0:ab:1d:a5:21: cb:3b:52:e0:ce:dc:0b:94:45:d3:15:e3:f1:54:f5: dd:34:9a:05:2f:c0:97:f8:8e:c3:65:88:18:16:58: 27:0b:8e:d9:80:19:8c:60:6a:a4:08:d8:78:58:28: 93:f0:b5:51:90:ac:07:c5:51:ed:a5:53:cc:cb:02: 73:02:c6:aa:6e:f4:9d:81:7f:e0:0a:21:46:d4:a9: 7f:5c:2a:3a:48:a2:77:56:7e:d1:89:3e:58:f7:f7: 75:4f:cf:75:fb:1f:32:98:b0:67:4b:40:84:7d:b2: a5:d2:63:95:28:1d:a8:22:f5:27:60:b3:c6:d7:45: c8:b6:a3:8b:a7:f7:96:d2:60:cc:37:63:9d:6b:b6: 11:8b:7f:b4:c0:fc:6a:01:bd:20:29:2a:f8:c6:f9: f7:e3:79:b9:02:aa:61:d6:43:3c:a0:5f:d8:95:2d: e3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D4:19:12:35:FC:15:6F:54:D7:4E:9A:40:C8:FB:97:58:98:F9:34 X509v3 Authority Key Identifier: keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:d5:af:cf:7b:92:67:19:6a:8b:95:10:14:3d:36:37:23:c5: d6:87:c6:69:6d:6e:a2:ef:35:31:66:a1:3a:5c:db:40:bd:89: c4:c4:54:d9:9d:11:7f:a4:0a:f2:c3:9f:84:7b:08:55:38:8a: 79:60:d9:cb:d0:87:3d:22:a7:76:bd:50:ec:ba:a6:4c:89:41: fa:89:2f:92:cb:0b:85:1b:b4:47:12:9d:7a:0e:62:19:12:11: 48:4f:c5:bd:97:d4:e5:0e:57:a6:9c:97:59:bb:a8:aa:af:1e: 01:71:a6:b5:d8:47:ac:18:bb:6b:c5:46:4a:94:0a:c1:cf:a9: 46:72:1c:6b:c1:3e:ef:50:e0:f6:73:f4:22:58:29:42:82:ed: 99:50:f4:7a:b0:87:d7:92:9d:8a:ff:02:a8:cd:0b:2a:f2:c4: 34:22:04:f6:03:9c:64:32:06:c8:1c:4a:d1:a4:75:ae:38:ff: 5f:f6:53:46:9c:c7:68:01:32:95:6d:a5:c4:f6:3a:34:4a:54: c1:dc:fb:2f:56:45:57:3c:10:3d:05:f5:f9:2d:9d:3c:94:50: e2:c1:f4:8e:83:5a:ba:cd:aa:3c:0a:d9:a5:98:9d:72:a7:0f: e6:0c:d4:e1:28:d0:fb:d5:af:c6:6a:1e:3f:d1:b2:d4:a7:4a: ff:04:63:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4NDMxMTAvBgNVBAUTKDVDRkJBMjg5MTZFQUMwN0IyMzU5MDk0ODU1RDg5RTE2 QTA4MTRCQUMwHhcNMjUwNzIwMTkxMjQxWhcNMjUwNzI3MTkxMjQxWjAYMRYwFAYD VQQDEw02ODdkM2ZhOS1mMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA96y+7Vijx3yq2GDnbZlgykeT/saMEOxLaRYI5mDf8rkmN/XlsYrdQZkKRSzY 6TzRU06qfYg4yq7lz0PRLYE4FEh0QowMFzO1W7bEr885HYw7fAXi0KsdpSHLO1Lg ztwLlEXTFePxVPXdNJoFL8CX+I7DZYgYFlgnC47ZgBmMYGqkCNh4WCiT8LVRkKwH xVHtpVPMywJzAsaqbvSdgX/gCiFG1Kl/XCo6SKJ3Vn7RiT5Y9/d1T891+x8ymLBn S0CEfbKl0mOVKB2oIvUnYLPG10XItqOLp/eW0mDMN2Oda7YRi3+0wPxqAb0gKSr4 xvn343m5Aqph1kM8oF/YlS3j6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzUGRI1 /BVvVNdOmkDI+5dYmPk0MB8GA1UdIwQYMBaAFFz7ookW6sB7I1kJSFXYnhaggUus MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg0My85NTdCQ0I0NDM5 NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdIc2pXUWxJVmRpZUZxQ0JT NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hQdWlpUmJxd0hzaldRbElWZGllRnFDQlM2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg0My85NTdCQ0I0NDM5NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdI c2pXUWxJVmRpZUZxQ0JTNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE1a/Pe5JnGWqLlRAUPTY3I8XWh8ZpbW6i7zUxZqE6XNtAvYnExFTZ nRF/pAryw5+EewhVOIp5YNnL0Ic9Iqd2vVDsuqZMiUH6iS+SywuFG7RHEp16DmIZ EhFIT8W9l9TlDlemnJdZu6iqrx4Bcaa12EesGLtrxUZKlArBz6lGchxrwT7vUOD2 c/QiWClCgu2ZUPR6sIfXkp2K/wKozQsq8sQ0IgT2A5xkMgbIHErRpHWuOP9f9lNG nMdoATKVbaXE9jo0SlTB3PsvVkVXPBA9BfX5LZ08lFDiwfSOg1q6zao8CtmlmJ1y pw/mDNThKND71a/Gah4/0bLUp0r/BGM6 -----END CERTIFICATE-----Generated at Tue Jul 22 05:11:09 2025 by rpki-client