$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json) Hash identifier: qLDMMrJVJU/hjRikooOBZD+7aYSAxC+ZZxTky1stwfQ= Subject key identifier: 73:2E:C1:B7:EF:66:8B:6B:F0:90:2A:AA:7F:BE:E7:13:17:BC:51:EB Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Certificate serial: 2BE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft Manifest number: 2BE0 Signing time: Thu 18 Sep 2025 15:36:23 +0000 Manifest this update: Thu 18 Sep 2025 15:36:22 +0000 Manifest next update: Thu 25 Sep 2025 15:36:22 +0000 Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: 0jkxVcwq/GNpo6srKR1sNNewxJQLQUITWKI/LrnmyOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11232 (0x2be0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Validity Not Before: Sep 18 15:36:22 2025 GMT Not After : Sep 25 15:36:22 2025 GMT Subject: CN=68cc26f7-8878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e8:bd:c5:15:cc:08:f8:1f:06:9e:50:8e:69: 86:09:37:4e:3f:81:ca:33:da:69:da:6a:2d:6a:8d: a1:61:f8:e7:b1:af:a8:95:b2:83:8c:a3:12:16:b3: 0f:ea:84:be:a6:84:94:05:da:52:40:64:63:1f:93: b5:e2:38:bb:4d:7e:7c:13:73:76:41:5c:e3:30:b3: ef:1a:4f:9b:d2:0e:9f:86:5e:19:d5:27:a3:fa:0f: 85:66:8f:b8:d8:fd:6c:8d:c0:db:9f:86:37:b2:a1: 6d:69:90:a7:70:15:61:3f:34:a2:3d:26:33:62:1b: b2:d5:1e:9a:80:3e:35:2d:fe:b4:df:d9:78:ed:22: 5b:be:c7:d2:00:02:94:6b:8b:a4:07:c3:07:f2:08: c9:9f:41:9b:c9:c9:24:51:74:19:fb:5f:27:c4:8c: 64:0d:4e:06:d8:ec:1b:06:15:84:4f:fc:ba:ea:af: 7d:c1:75:ee:cf:65:90:15:50:97:ed:ab:61:a5:f1: c7:45:84:3f:84:31:da:cf:4e:78:5a:2f:26:51:ad: d7:9a:d2:65:0b:8b:58:a8:c7:2b:e7:c1:b9:75:e8: 5a:90:9f:cd:d7:6f:13:bc:11:ad:e2:52:12:4c:87: 2d:6d:5f:1e:d3:a2:ce:27:fb:2d:3a:91:4e:84:5c: 27:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2E:C1:B7:EF:66:8B:6B:F0:90:2A:AA:7F:BE:E7:13:17:BC:51:EB X509v3 Authority Key Identifier: keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ff:4b:35:20:34:dc:6d:1a:c5:5b:0c:88:50:ee:7e:89:26: e8:da:78:a8:1f:b0:be:c0:2b:0d:18:7f:2d:27:d7:45:4e:43: 24:4e:0c:76:51:dd:a2:69:f9:96:3a:48:a8:aa:d6:34:65:08: 15:5b:73:ae:6c:f6:e5:82:48:c4:95:28:8b:69:ac:2a:45:97: 0d:26:a8:26:58:19:7f:dd:e0:52:3a:9c:e1:c8:56:e3:d3:1e: f4:00:7f:d4:56:bc:c0:60:6a:af:4c:9c:d5:8c:9f:4d:0a:5b: 9f:78:1a:a0:d5:73:19:0e:bf:72:a8:c1:29:d5:fc:5b:43:39: 4a:b0:7f:d4:cd:9b:f5:0e:c3:f2:db:3b:c3:b5:a7:b0:c4:54: 33:c9:11:ce:3d:b1:47:a3:9f:e3:78:e2:fb:4e:d1:4e:31:e7: a5:02:5c:f7:8a:79:89:34:2c:42:3f:26:5c:41:20:96:9b:5d: fa:d9:5c:60:27:e6:55:e0:15:8d:a0:55:70:60:47:c4:66:00: 79:43:52:ce:a3:ac:e4:bb:3e:d5:df:4c:f1:27:23:b7:43:c3: d0:aa:ed:91:bc:6c:ab:5b:c4:6e:a1:43:0f:19:9b:e4:78:9e: 55:75:7d:e3:f7:be:30:3f:78:2f:c3:09:e7:90:ed:64:69:b1: 26:0e:9c:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEM2NTU4RjhGQzBEOEQwNDI5RUQ3ODdFQUY5NjdCRUZD N0EwOURDMTMwHhcNMjUwOTE4MTUzNjIyWhcNMjUwOTI1MTUzNjIyWjAYMRYwFAYD VQQDEw02OGNjMjZmNy04ODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ei9xRXMCPgfBp5QjmmGCTdOP4HKM9pp2motao2hYfjnsa+olbKDjKMSFrMP 6oS+poSUBdpSQGRjH5O14ji7TX58E3N2QVzjMLPvGk+b0g6fhl4Z1Sej+g+FZo+4 2P1sjcDbn4Y3sqFtaZCncBVhPzSiPSYzYhuy1R6agD41Lf6039l47SJbvsfSAAKU a4ukB8MH8gjJn0GbyckkUXQZ+18nxIxkDU4G2OwbBhWET/y66q99wXXuz2WQFVCX 7athpfHHRYQ/hDHaz054Wi8mUa3XmtJlC4tYqMcr58G5dehakJ/N128TvBGt4lIS TIctbV8e06LOJ/stOpFOhFwnLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMuwbfv Zotr8JAqqn++5xMXvFHrMB8GA1UdIwQYMBaAFMZVj4/A2NBCnteH6vlnvvx6CdwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC80ODQ2MDRCMkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBFS2UxNGZxLVdlLV9Ib0oz Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsV1BqOERZMEVLZTE0ZnEtV2UtX0hvSjNCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC80ODQ2MDRCMkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBF S2UxNGZxLVdlLV9Ib0ozQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi/0s1IDTcbRrFWwyIUO5+iSbo2nioH7C+wCsNGH8tJ9dFTkMkTgx2 Ud2iafmWOkioqtY0ZQgVW3OubPblgkjElSiLaawqRZcNJqgmWBl/3eBSOpzhyFbj 0x70AH/UVrzAYGqvTJzVjJ9NClufeBqg1XMZDr9yqMEp1fxbQzlKsH/UzZv1DsPy 2zvDtaewxFQzyRHOPbFHo5/jeOL7TtFOMeelAlz3inmJNCxCPyZcQSCWm1362Vxg J+ZV4BWNoFVwYEfEZgB5Q1LOo6zkuz7V30zxJyO3Q8PQqu2RvGyrW8RuoUMPGZvk eJ5VdX3j974wP3gvwwnnkO1kabEmDpxo -----END CERTIFICATE-----Generated at Thu Sep 18 23:49:51 2025 by rpki-client