$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json) Hash identifier: cCuX9dyHBRmYjkCvDDiHSfmbqU2B8jQkLdQkD4Lx3jk= Subject key identifier: 8B:26:E8:15:04:B1:AF:FB:61:C6:36:B2:45:65:17:C7:29:50:04:E0 Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C Certificate issuer: /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft Manifest number: 44 Signing time: Sat 06 Sep 2025 17:48:29 +0000 Manifest this update: Sat 06 Sep 2025 17:48:29 +0000 Manifest next update: Sat 13 Sep 2025 17:48:29 +0000 Files and hashes: 1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: UoJ0T/JnOAvaf1eAOB/+0nYn33iclHKx0aXOz5xvB0Q=) 2: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: Je+up3kY6qu1B3So3Vnq/xOYjMIPNymqMCzCxvb8aL4=) 3: 87087F00267E11F09183092AC4F9AE02.roa (hash: vPD3MBlV+VYxtTk5npGCIsRmwvlSAFp0uTh8dXUbHV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 17:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Validity Not Before: Sep 6 17:48:29 2025 GMT Not After : Sep 13 17:48:29 2025 GMT Subject: CN=68bc73ed-cd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:74:60:9d:07:09:55:20:48:5f:72:8d:62:75: 8a:b3:5c:f4:1f:df:61:8e:28:0e:24:11:9e:eb:bd: 5a:7e:63:5c:7a:48:2b:49:9f:35:5a:c0:cc:fd:73: 3a:c8:fd:8c:d8:6a:6d:a0:c9:a3:be:e4:34:b0:6b: 61:1a:17:f3:4a:05:da:a4:b3:96:cb:c3:fd:4e:05: 48:e8:b2:05:3e:7a:39:eb:65:c9:37:a8:ff:d3:ce: 38:32:f7:a7:ba:d3:42:3f:1e:17:b1:41:00:03:ef: 24:19:9b:d5:c6:d0:68:52:5c:c1:42:b1:62:73:8b: 27:c0:a1:25:7a:ac:7d:ff:93:bc:80:10:16:30:e6: 15:c4:95:ac:72:14:78:78:fb:cf:aa:38:c6:65:fd: 22:54:1b:c5:38:66:8e:9b:48:d6:71:a4:94:c0:a8: 7b:cd:dc:60:21:4a:d1:76:4a:51:1a:50:06:46:f5: b9:f4:cf:69:50:e5:9e:90:33:c0:29:8e:24:3d:da: 21:61:db:a9:45:02:4d:fe:57:50:76:1b:f2:e9:e5: e7:80:ed:6c:70:17:fa:e5:2e:cb:6d:27:93:06:12: 86:e7:2c:b0:f2:70:a3:b9:22:55:9e:ee:70:a8:38: cc:c2:34:ff:16:79:83:8a:32:9f:2f:c0:0b:0f:37: 07:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:26:E8:15:04:B1:AF:FB:61:C6:36:B2:45:65:17:C7:29:50:04:E0 X509v3 Authority Key Identifier: keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4a:f5:b0:33:db:13:70:5b:00:80:28:a4:c3:3a:be:41:e5: c1:49:0b:6e:fc:61:fd:fa:d0:dc:f0:92:5e:c4:32:3d:0d:fc: 41:63:a8:99:8f:b3:2c:d7:f3:e3:06:e7:ed:62:6a:ef:1e:f0: 92:9b:5f:4a:5b:90:75:37:e8:ce:ec:33:15:9e:ec:10:53:bd: 6e:64:44:25:dc:d1:21:6c:dc:75:6f:a0:c8:a0:9e:d8:4c:7c: 4e:8f:42:d8:f2:47:b9:48:f0:1c:51:03:bc:61:cd:2f:80:fc: e4:43:db:92:ba:36:59:0b:b8:3c:14:2f:7f:95:8e:21:b8:82: 2a:8a:d9:68:a0:23:c6:cf:68:d8:85:b8:18:15:e0:c6:c7:30: 08:c6:aa:1c:cb:2c:7a:3a:c9:e7:86:df:0c:89:72:84:41:34: 1c:53:61:35:95:93:ff:3f:25:14:e0:7c:d7:b8:68:05:b5:20: fb:e4:5d:44:73:f6:2b:79:e9:a5:83:2e:fc:16:ec:36:67:9f: 82:15:ea:69:74:fc:cf:2d:6a:f7:a8:55:5b:be:67:54:5c:92: 97:9b:41:c9:eb:aa:58:3b:ea:c3:cc:9d:74:77:1f:ad:dc:e7: 85:58:ba:90:0d:04:aa:d6:bd:c5:f8:bd:21:d2:0d:1e:c7:c9: 02:40:97:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Njk4RTExMC8GA1UEBRMoNURCNzVCMkRGOTREMDQ0NzRBNkU1RTJENEI3OENDMDg0 QkZDMkE2QzAeFw0yNTA5MDYxNzQ4MjlaFw0yNTA5MTMxNzQ4MjlaMBgxFjAUBgNV BAMTDTY4YmM3M2VkLWNkMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzdGCdBwlVIEhfco1idYqzXPQf32GOKA4kEZ7rvVp+Y1x6SCtJnzVawMz9czrI /YzYam2gyaO+5DSwa2EaF/NKBdqks5bLw/1OBUjosgU+ejnrZck3qP/Tzjgy96e6 00I/HhexQQAD7yQZm9XG0GhSXMFCsWJziyfAoSV6rH3/k7yAEBYw5hXElaxyFHh4 +8+qOMZl/SJUG8U4Zo6bSNZxpJTAqHvN3GAhStF2SlEaUAZG9bn0z2lQ5Z6QM8Ap jiQ92iFh26lFAk3+V1B2G/Lp5eeA7WxwF/rlLsttJ5MGEobnLLDycKO5IlWe7nCo OMzCNP8WeYOKMp8vwAsPNwdpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiyboFQSx r/thxjayRWUXxylQBOAwHwYDVR0jBBgwFoAUXbdbLflNBEdKbl4tS3jMCEv8Kmww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2OThFLzA5NUY2QzhDMjY3 QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEtt dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGJkYkxmbE5CRWRLYmw0dFMzak1DRXY4S213LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 OThFLzA5NUY2QzhDMjY3QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVk S2JsNHRTM2pNQ0V2OEttdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAApK9bAz2xNwWwCAKKTDOr5B5cFJC278Yf360Nzwkl7EMj0N/EFjqJmP syzX8+MG5+1iau8e8JKbX0pbkHU36M7sMxWe7BBTvW5kRCXc0SFs3HVvoMignthM fE6PQtjyR7lI8BxRA7xhzS+A/ORD25K6NlkLuDwUL3+VjiG4giqK2WigI8bPaNiF uBgV4MbHMAjGqhzLLHo6yeeG3wyJcoRBNBxTYTWVk/8/JRTgfNe4aAW1IPvkXURz 9it56aWDLvwW7DZnn4IV6ml0/M8taveoVVu+Z1RckpebQcnrqlg76sPMnXR3H63c 54VYupANBKrWvcX4vSHSDR7HyQJAl3M= -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:18 2025 by rpki-client