$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft File: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft (raw, json) Hash identifier: kRC1vy8hXFtrYqZ6dInTlCEaD3AfT1LbeWNmSM4xgkA= Subject key identifier: 28:EA:58:A5:06:EE:11:9E:78:E8:E9:B1:68:58:2E:B7:F0:68:16:91 Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 Certificate issuer: /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft Manifest number: 0150 Signing time: Wed 17 Sep 2025 04:50:35 +0000 Manifest this update: Wed 17 Sep 2025 04:50:34 +0000 Manifest next update: Wed 24 Sep 2025 04:50:34 +0000 Files and hashes: 1: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl (hash: 0sV7c3AyHQTtoKDzDwfT/mWGUHebTFTs4MDFvmUazCQ=) 2: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (hash: oApvSZT8Sv3uSmM9SxIKbWqw6D6WWZsa1SWpMmDS0a4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Validity Not Before: Sep 17 04:50:34 2025 GMT Not After : Sep 24 04:50:34 2025 GMT Subject: CN=68ca3e1a-f7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:b2:5b:45:d8:73:6a:92:56:d6:ef:f0:18: ab:64:1d:61:a1:d3:c2:cf:51:15:a0:fe:0d:e8:4c: 28:b3:10:e9:cd:7a:08:e3:37:05:cb:1c:43:63:53: c8:36:9f:34:af:32:3a:65:48:b6:2a:9b:08:e5:23: 2c:a1:b7:08:72:0e:b5:29:a0:58:c3:01:81:e0:d6: 4b:fd:18:f5:43:bc:93:f9:ff:3f:c2:75:73:d4:dc: 70:86:c1:e7:a5:a5:c3:2a:6a:f2:c9:ee:fe:82:93: 35:b4:96:3a:25:b0:5c:52:9a:cf:b4:47:76:40:e0: 2b:24:35:43:7a:46:97:8a:e5:2c:c4:25:19:d1:54: e7:8e:17:a4:ae:3a:f5:fe:4d:f4:e2:a0:31:65:37: ba:8d:37:88:5d:8d:99:df:6a:54:76:e5:dd:97:79: 43:92:b4:22:95:4b:71:fc:f9:04:b9:b5:ef:2e:a2: 5b:c1:65:f6:58:ff:f7:25:e8:4f:ab:c5:d2:45:e7: f5:dd:59:25:e0:f6:d5:9c:a3:d8:af:4c:e3:03:5a: 19:62:15:be:fd:d2:09:a8:23:fb:99:3e:58:ad:99: 91:1b:07:f6:c8:0e:9e:00:ed:78:a4:2e:ef:bb:15: 14:4a:1a:c0:00:95:12:42:91:30:dc:51:03:9d:89: 59:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EA:58:A5:06:EE:11:9E:78:E8:E9:B1:68:58:2E:B7:F0:68:16:91 X509v3 Authority Key Identifier: keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:48:b4:58:a0:55:3a:82:f8:ed:bf:0a:ea:67:a7:47:2d:6b: a1:fc:ae:01:57:8f:e7:b7:0e:8c:ff:5e:85:37:ea:f9:58:ea: 01:bc:f2:a2:56:23:c1:38:73:91:11:c4:15:8b:01:50:aa:fd: 9e:66:b9:24:22:76:ee:79:f3:b3:3f:59:62:7c:06:b3:08:e9: 71:17:95:03:1c:28:b3:0b:61:ab:5a:fd:61:04:c8:f9:59:2c: a9:6a:c2:b7:61:94:3a:80:0f:06:7d:43:e3:62:8b:12:f8:2c: b4:12:89:59:60:15:28:1e:84:0e:cc:cf:b7:6d:75:7c:b1:8d: 0a:e5:6d:3a:f2:d8:9e:0e:cc:d7:91:ce:0d:c0:c6:a0:61:f7: 4f:6f:41:45:cd:c7:f4:25:50:58:95:53:f1:c4:74:21:65:3b: c9:0d:0b:fe:ce:d4:b1:42:cb:f7:de:8a:af:9f:40:ea:b2:af: 7d:54:ee:d1:85:cb:89:d0:69:76:ae:a2:1b:4a:80:1e:cb:90: 77:b2:68:cd:1c:79:cd:70:8a:a8:17:37:8d:b5:e1:83:13:3a: 36:db:a8:56:28:4b:be:53:70:42:a0:c2:49:20:a2:c7:59:da: b4:52:4f:9c:0b:ae:80:f4:51:3f:fa:12:4a:58:ec:84:25:64: ee:31:61:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRjIxMTAvBgNVBAUTKDVDQzkxQUZENUI4QjM3RUQ4QzUwOUY2MTE4OUY0NDhF NzMxMjFGOTcwHhcNMjUwOTE3MDQ1MDM0WhcNMjUwOTI0MDQ1MDM0WjAYMRYwFAYD VQQDEw02OGNhM2UxYS1mN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqV+yW0XYc2qSVtbv8BirZB1hodPCz1EVoP4N6EwosxDpzXoI4zcFyxxDY1PI Np80rzI6ZUi2KpsI5SMsobcIcg61KaBYwwGB4NZL/Rj1Q7yT+f8/wnVz1NxwhsHn paXDKmryye7+gpM1tJY6JbBcUprPtEd2QOArJDVDekaXiuUsxCUZ0VTnjhekrjr1 /k304qAxZTe6jTeIXY2Z32pUduXdl3lDkrQilUtx/PkEubXvLqJbwWX2WP/3JehP q8XSRef13Vkl4PbVnKPYr0zjA1oZYhW+/dIJqCP7mT5YrZmRGwf2yA6eAO14pC7v uxUUShrAAJUSQpEw3FEDnYlZzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjqWKUG 7hGeeOjpsWhYLrfwaBaRMB8GA1UdIwQYMBaAFFzJGv1bizftjFCfYRifRI5zEh+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNGMi8wMDUxREJDQzk3 RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4tMk1VSjloR0o5RWpuTVNI NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hNa2FfVnVMTi0yTVVKOWhHSjlFam5NU0g1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNGMi8wMDUxREJDQzk3RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4t Mk1VSjloR0o5RWpuTVNINWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/SLRYoFU6gvjtvwrqZ6dHLWuh/K4BV4/ntw6M/16FN+r5WOoBvPKi ViPBOHOREcQViwFQqv2eZrkkInbuefOzP1lifAazCOlxF5UDHCizC2GrWv1hBMj5 WSypasK3YZQ6gA8GfUPjYosS+Cy0EolZYBUoHoQOzM+3bXV8sY0K5W068tieDszX kc4NwMagYfdPb0FFzcf0JVBYlVPxxHQhZTvJDQv+ztSxQsv33oqvn0Dqsq99VO7R hcuJ0Gl2rqIbSoAey5B3smjNHHnNcIqoFzeNteGDEzo226hWKEu+U3BCoMJJIKLH Wdq0Uk+cC66A9FE/+hJKWOyEJWTuMWET -----END CERTIFICATE-----Generated at Fri Sep 19 00:38:58 2025 by rpki-client