$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json) Hash identifier: gPGsAIJpIX3x8aA7LuaC7Wk76glzp38Jpr7B3UqMtDM= Subject key identifier: AD:99:1F:06:AD:F5:06:B1:62:C1:55:2E:E1:3B:D8:70:E0:BC:77:AA Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft Manifest number: 04C8 Signing time: Sat 19 Jul 2025 00:11:15 +0000 Manifest this update: Sat 19 Jul 2025 00:11:15 +0000 Manifest next update: Sat 26 Jul 2025 00:11:15 +0000 Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: 7tYeTScJcGZx+cDTg5xAnhcfN76rrMHGG8RO/xt4bW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Validity Not Before: Jul 19 00:11:15 2025 GMT Not After : Jul 26 00:11:15 2025 GMT Subject: CN=687ae2a3-3178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c1:d8:cc:8c:66:99:d0:51:51:35:34:6f:ea: 24:4a:86:9b:29:5e:aa:7b:54:1e:83:c1:3d:cc:c2: d0:e7:5e:c7:b5:56:8c:be:21:24:90:ee:8c:bf:16: 4a:de:70:70:78:db:58:60:3d:47:c6:bf:42:ce:91: 8e:1a:b0:32:56:34:16:db:89:24:95:fb:b5:a3:c5: 71:f0:49:58:d5:e1:fe:6f:d4:5e:e0:c8:12:50:5e: 34:76:00:4c:90:b1:45:3d:ec:87:1b:be:df:a9:d5: 96:c1:48:9d:dd:cd:cc:d5:34:10:c2:f0:4c:39:37: cb:60:a0:c8:aa:5e:d0:3c:fc:14:f5:0d:e6:34:3b: 5c:a7:52:b0:82:6d:4f:6b:9e:cc:0f:03:e1:51:ef: a6:40:2a:0b:01:cd:4e:9c:df:84:a9:bb:fc:e8:98: e6:09:c8:b4:84:44:26:c1:52:9a:19:64:b3:79:ed: 2e:a1:65:9a:e2:b3:2a:fd:5e:be:1a:f7:58:eb:1c: 21:47:27:a3:33:19:38:9c:5f:7a:88:bd:25:c9:53: f6:32:ec:d9:a0:8d:b3:7f:b5:9e:c9:50:f8:f1:75: 96:b3:2d:a8:bd:2b:52:5e:88:09:93:41:d2:bb:17: 09:5b:23:e7:31:f6:17:79:22:90:09:f7:3a:04:50: 16:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:99:1F:06:AD:F5:06:B1:62:C1:55:2E:E1:3B:D8:70:E0:BC:77:AA X509v3 Authority Key Identifier: keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:eb:22:a1:f9:29:6b:8a:7a:99:8c:d8:9b:0d:4e:8f:51:a2: 0d:93:a6:0b:2e:f1:25:54:e6:37:f1:6a:b8:58:17:bc:ca:78: 2b:b9:db:2b:97:15:e7:25:b7:21:59:da:8d:e4:a8:f7:69:33: a1:f5:31:e0:8d:fd:98:a6:59:98:86:fb:58:42:c2:b5:0c:9d: 7f:d3:90:2a:a5:4e:93:ef:51:ad:ef:d1:cf:9e:ec:33:ad:aa: 81:3b:75:2f:aa:1e:11:df:13:7d:00:48:06:65:c9:f9:07:d1: f2:08:63:f9:b8:21:97:a2:e3:c4:73:04:4d:67:ed:d9:04:8e: 5d:04:6d:92:a7:58:c6:80:51:d0:13:cd:c3:e9:51:4d:d0:36: fe:ae:e8:0d:a7:0a:9d:88:39:6e:05:2d:e0:f0:50:72:aa:fa: 37:64:eb:83:ce:2b:25:02:40:f1:f2:d5:05:5a:4b:40:9f:94: cc:bb:cb:c5:20:4a:5a:47:c6:a9:b2:c8:54:98:7a:4d:06:97: 3e:e5:c8:4b:66:05:61:c2:6b:b5:b3:f4:e0:0c:dd:ad:81:cc: 31:d9:14:8c:1c:3f:39:99:b1:c0:9c:a7:62:ee:07:e2:c5:54: 2d:32:a9:3f:7c:39:0b:f2:64:f5:d1:03:36:86:aa:a8:45:53: a9:e6:17:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MEYxMTAvBgNVBAUTKDVGN0RCNjUwQ0FDNDM0NTE3NkFDM0YwN0RFRkM5OTFB RDRGRURFQjgwHhcNMjUwNzE5MDAxMTE1WhcNMjUwNzI2MDAxMTE1WjAYMRYwFAYD VQQDEw02ODdhZTJhMy0zMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcHYzIxmmdBRUTU0b+okSoabKV6qe1Qeg8E9zMLQ517HtVaMviEkkO6MvxZK 3nBweNtYYD1Hxr9CzpGOGrAyVjQW24kklfu1o8Vx8ElY1eH+b9Re4MgSUF40dgBM kLFFPeyHG77fqdWWwUid3c3M1TQQwvBMOTfLYKDIql7QPPwU9Q3mNDtcp1Kwgm1P a57MDwPhUe+mQCoLAc1OnN+Eqbv86JjmCci0hEQmwVKaGWSzee0uoWWa4rMq/V6+ GvdY6xwhRyejMxk4nF96iL0lyVP2MuzZoI2zf7WeyVD48XWWsy2ovStSXogJk0HS uxcJWyPnMfYXeSKQCfc6BFAWMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2ZHwat 9QaxYsFVLuE72HDgvHeqMB8GA1UdIwQYMBaAFF99tlDKxDRRdqw/B978mRrU/t64 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcwRi9ENTVFQjVGMDJE MEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5GRjJyRDhIM3Z5Wkd0VC0z cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gzMjJVTXJFTkZGMnJEOEgzdnlaR3RULTNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcwRi9ENTVFQjVGMDJEMEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5G RjJyRDhIM3Z5Wkd0VC0zcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP6yKh+SlrinqZjNibDU6PUaINk6YLLvElVOY38Wq4WBe8yngrudsr lxXnJbchWdqN5Kj3aTOh9THgjf2YplmYhvtYQsK1DJ1/05AqpU6T71Gt79HPnuwz raqBO3Uvqh4R3xN9AEgGZcn5B9HyCGP5uCGXouPEcwRNZ+3ZBI5dBG2Sp1jGgFHQ E83D6VFN0Db+rugNpwqdiDluBS3g8FByqvo3ZOuDzislAkDx8tUFWktAn5TMu8vF IEpaR8apsshUmHpNBpc+5chLZgVhwmu1s/TgDN2tgcwx2RSMHD85mbHAnKdi7gfi xVQtMqk/fDkL8mT10QM2hqqoRVOp5hdM -----END CERTIFICATE-----Generated at Sun Jul 20 10:17:45 2025 by rpki-client