$ rpki-client -vvf rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft File: xctXefg2BxxSgISGkWfLwa4IuRc.mft (raw, json) Hash identifier: nNlXRp8rhf3p6yMyAp4m9REM8vk6pp8EsDjGCivid/U= Subject key identifier: E9:07:86:E4:D2:59:22:88:CB:96:5F:35:83:4E:05:D9:A9:99:04:95 Authority key identifier: C5:CB:57:79:F8:36:07:1C:52:80:84:86:91:67:CB:C1:AE:08:B9:17 Certificate issuer: /CN=A913F927/serialNumber=C5CB5779F836071C528084869167CBC1AE08B917 Certificate serial: 0C86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xctXefg2BxxSgISGkWfLwa4IuRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft Manifest number: 0C81 Signing time: Wed 20 Aug 2025 18:22:27 +0000 Manifest this update: Wed 20 Aug 2025 18:22:27 +0000 Manifest next update: Wed 27 Aug 2025 18:22:27 +0000 Files and hashes: 1: xctXefg2BxxSgISGkWfLwa4IuRc.crl (hash: Ud6EPiL5vutLlXuiVFfuwb1XqpEwg6fRvrYYpicph9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.crl rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xctXefg2BxxSgISGkWfLwa4IuRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F927, serialNumber=C5CB5779F836071C528084869167CBC1AE08B917 Validity Not Before: Aug 20 18:22:27 2025 GMT Not After : Aug 27 18:22:27 2025 GMT Subject: CN=68a61263-b167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:87:06:df:35:d9:35:ad:ed:55:30:b4:54: 4e:6a:87:26:18:26:9a:0c:8d:d2:38:cc:e4:36:86: 9b:76:3a:6b:42:ea:ec:df:bb:be:9a:9e:be:7c:25: 3e:af:28:32:8a:f4:45:75:a6:3b:b5:6e:7b:d6:b6: 15:81:d6:cb:e5:0b:73:e3:b4:6a:bb:5f:65:b5:bf: 0f:c8:15:06:fe:17:f2:5d:9c:94:cc:71:5a:4b:89: a1:4d:92:7a:7f:d6:13:28:c6:90:cb:24:9a:35:47: 55:d1:bb:56:bb:55:ea:1e:7d:81:90:18:35:49:7f: eb:27:ed:9d:66:bc:37:32:3f:57:14:03:3f:21:b3: 9e:8d:30:c1:f8:6f:4b:58:cc:b7:0f:21:92:14:c0: 7e:da:05:d9:24:88:a2:ce:e0:28:b3:71:74:86:4d: 1e:cb:a4:70:ee:57:11:e1:42:84:55:e8:46:bc:45: 72:ce:b7:cb:e1:3f:ab:38:e4:86:63:90:28:6d:00: d2:39:88:c0:bf:b0:0d:0c:5e:29:b8:8b:62:ee:85: fe:2a:72:aa:30:d6:e8:ef:ca:63:79:b1:8e:76:5d: ff:7f:bd:61:d4:75:c9:f0:75:d6:b3:46:8d:70:7c: 57:75:20:22:84:ae:5d:02:9a:e3:40:de:cb:9a:2e: 61:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:07:86:E4:D2:59:22:88:CB:96:5F:35:83:4E:05:D9:A9:99:04:95 X509v3 Authority Key Identifier: keyid:C5:CB:57:79:F8:36:07:1C:52:80:84:86:91:67:CB:C1:AE:08:B9:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xctXefg2BxxSgISGkWfLwa4IuRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F927/AF5211FE00A211EA9A4E8A87C4F9AE02/xctXefg2BxxSgISGkWfLwa4IuRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0d:42:3a:3f:67:59:43:72:fe:46:1b:1f:03:d5:93:09:4c: c4:0c:2c:ea:e2:b7:91:61:ed:05:33:f4:53:be:16:1c:e2:48: 7a:b9:44:72:4c:a9:76:b7:0a:08:90:34:81:bd:87:0a:9e:c0: 9c:e8:46:25:8f:37:2e:99:80:86:71:4a:28:37:97:7f:c0:4b: ed:9d:67:34:22:3f:03:23:97:70:9a:42:ff:88:37:e7:8e:ba: 8d:f3:31:18:2d:17:3f:c2:c8:10:b9:a0:fe:e0:69:6c:26:2e: cd:b7:0a:6f:c5:9a:bf:fe:45:a8:ae:53:07:a7:bc:90:4d:18: 56:c4:a4:27:f5:0b:bc:60:79:06:25:64:73:5e:d6:24:71:b3: e0:7a:a2:59:ee:36:48:50:c1:d2:99:95:5b:1c:a8:9a:7f:cf: 13:2f:91:1c:54:a9:34:92:cd:5a:e7:41:5b:cb:ca:b2:5a:59: c6:6f:f7:87:22:90:58:7c:12:56:c7:f4:ae:09:22:5f:c6:3e: 45:c4:6f:3f:a1:6b:62:a5:1e:9f:af:8d:0a:68:f2:a3:6c:89: 23:d2:84:5e:f8:f5:44:48:5c:60:9c:34:83:38:6b:84:4c:ed: 33:ef:2f:ea:4f:d4:33:f0:aa:da:89:5f:52:1a:35:aa:41:c2: e2:93:ff:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y5MjcxMTAvBgNVBAUTKEM1Q0I1Nzc5RjgzNjA3MUM1MjgwODQ4NjkxNjdDQkMx QUUwOEI5MTcwHhcNMjUwODIwMTgyMjI3WhcNMjUwODI3MTgyMjI3WjAYMRYwFAYD VQQDEw02OGE2MTI2My1iMTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyISHBt812TWt7VUwtFROaocmGCaaDI3SOMzkNoabdjprQurs37u+mp6+fCU+ rygyivRFdaY7tW571rYVgdbL5Qtz47Rqu19ltb8PyBUG/hfyXZyUzHFaS4mhTZJ6 f9YTKMaQyySaNUdV0btWu1XqHn2BkBg1SX/rJ+2dZrw3Mj9XFAM/IbOejTDB+G9L WMy3DyGSFMB+2gXZJIiizuAos3F0hk0ey6Rw7lcR4UKEVehGvEVyzrfL4T+rOOSG Y5AobQDSOYjAv7ANDF4puIti7oX+KnKqMNbo78pjebGOdl3/f71h1HXJ8HXWs0aN cHxXdSAihK5dAprjQN7Lmi5hfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkHhuTS WSKIy5ZfNYNOBdmpmQSVMB8GA1UdIwQYMBaAFMXLV3n4NgccUoCEhpFny8GuCLkX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjkyNy9BRjUyMTFGRTAw QTIxMUVBOUE0RThBODdDNEY5QUUwMi94Y3RYZWZnMkJ4eFNnSVNHa1dmTHdhNEl1 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hjdFhlZmcyQnh4U2dJU0drV2ZMd2E0SXVSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjkyNy9BRjUyMTFGRTAwQTIxMUVBOUE0RThBODdDNEY5QUUwMi94Y3RYZWZnMkJ4 eFNnSVNHa1dmTHdhNEl1UmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqDUI6P2dZQ3L+RhsfA9WTCUzEDCzq4reRYe0FM/RTvhYc4kh6uURy TKl2twoIkDSBvYcKnsCc6EYljzcumYCGcUooN5d/wEvtnWc0Ij8DI5dwmkL/iDfn jrqN8zEYLRc/wsgQuaD+4GlsJi7NtwpvxZq//kWorlMHp7yQTRhWxKQn9Qu8YHkG JWRzXtYkcbPgeqJZ7jZIUMHSmZVbHKiaf88TL5EcVKk0ks1a50Fby8qyWlnGb/eH IpBYfBJWx/SuCSJfxj5FxG8/oWtipR6fr40KaPKjbIkj0oRe+PVESFxgnDSDOGuE TO0z7y/qT9Qz8KraiV9SGjWqQcLik/93 -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:51 2025 by rpki-client