$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft File: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft (raw, json) Hash identifier: IpCYMzE1OyY0eAKRp+Z6svjxjYzUHU3iqP3gDKi1KTI= Subject key identifier: 8F:CD:ED:B7:9E:1A:68:17:7F:57:41:FD:23:3E:3A:0B:C8:EA:F1:84 Authority key identifier: C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 Certificate issuer: /CN=A9148E62/serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Certificate serial: 02DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft Manifest number: 02D1 Signing time: Wed 17 Sep 2025 01:52:36 +0000 Manifest this update: Wed 17 Sep 2025 01:52:35 +0000 Manifest next update: Wed 24 Sep 2025 01:52:35 +0000 Files and hashes: 1: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl (hash: ldVikm6YcG+vz8gw+IbRwad8AeWhBUsQlfvGjYOLsMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E62, serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Validity Not Before: Sep 17 01:52:35 2025 GMT Not After : Sep 24 01:52:35 2025 GMT Subject: CN=68ca1463-cc53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ee:4f:ba:0e:07:14:f9:fb:f8:c9:e5:ce:ff: 24:69:25:6c:71:cf:61:10:24:e3:5a:90:f2:cd:e8: 7c:bb:55:2d:71:93:27:68:f7:d7:ab:f1:a7:ab:39: 2f:23:c3:aa:72:97:ba:3f:77:db:a4:e9:eb:c1:8f: 8f:f8:88:c6:d2:92:dd:ac:54:c1:48:0e:61:42:11: dd:0a:c1:e6:a4:a8:35:16:4f:a8:e9:1e:7a:18:b6: a7:9f:e7:6c:60:b4:d1:be:cc:a3:a0:18:2d:4f:03: 99:ed:8e:3c:f7:4c:58:be:99:51:b7:67:1b:11:1f: 1f:ce:03:81:88:44:c3:04:2a:5b:8a:70:60:18:81: 7b:c1:11:71:3d:2c:76:1e:29:36:5c:f4:f0:ef:84: de:00:50:b3:97:60:f0:7f:99:55:2c:0c:16:4a:ea: a0:06:c3:b9:8e:00:9d:ff:32:91:15:29:0e:eb:d6: dd:d8:8c:a1:8a:39:b6:ca:fa:e4:40:33:41:e5:6d: 0e:2e:26:bc:67:4a:48:95:71:b7:b6:f4:f3:de:6a: 4b:f0:bc:09:50:f1:4c:64:2a:9d:a5:ef:45:e2:29: 8e:6f:1e:87:0a:2b:3e:c2:66:fc:36:69:07:2c:08: 21:be:28:f5:30:c6:95:c8:92:05:4f:d5:d0:4a:78: 3a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CD:ED:B7:9E:1A:68:17:7F:57:41:FD:23:3E:3A:0B:C8:EA:F1:84 X509v3 Authority Key Identifier: keyid:C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:66:04:a7:ed:e3:40:ed:9e:e9:3b:89:98:a5:81:4a:ba:b5: b1:af:23:a2:4b:fa:a4:31:e0:8e:25:97:e8:d8:3c:da:1a:a7: 64:ee:ea:52:23:c3:37:61:b3:e5:55:f9:cb:42:ea:3c:a6:24: 6f:92:11:c8:d4:33:bf:e6:f6:83:6c:ba:de:e4:c1:e9:1a:23: b7:0f:d4:50:03:25:28:46:a5:e7:86:ab:4d:d6:9f:a2:4a:cb: 51:31:31:13:a0:94:af:14:63:3d:f0:60:b9:e3:ae:78:ef:1c: d0:1d:1e:55:51:b0:73:7b:e5:f2:21:3b:24:cd:7a:43:ed:dc: 1f:de:94:60:0f:fb:f6:16:c3:d4:d6:4d:e1:3d:0a:0c:92:14: 29:ad:fd:a1:a0:ca:8c:8b:6f:cf:1c:56:7f:e0:9e:13:77:68: 49:c5:25:0a:9c:55:11:99:38:cd:62:cd:0e:cb:64:bf:40:18: 7d:1d:1b:ae:66:58:85:b9:05:94:10:da:6c:da:23:56:e8:74: ad:d8:03:50:31:d3:6d:b5:f0:37:e9:a6:ad:ca:ad:a1:ce:c7: d3:1f:46:58:db:b7:3c:58:c1:5a:48:ac:89:6f:79:6f:46:39: 83:a7:c7:0d:8d:b0:7c:ce:f1:3d:cd:c2:e3:67:19:11:d8:fc: c0:e8:c8:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFNjIxMTAvBgNVBAUTKEM2MzA1NjA0MUMwRjkwQjkyQjJCODdEQkZGQTk3RTNF OURBMDI4RDQwHhcNMjUwOTE3MDE1MjM1WhcNMjUwOTI0MDE1MjM1WjAYMRYwFAYD VQQDEw02OGNhMTQ2My1jYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3e5Pug4HFPn7+Mnlzv8kaSVscc9hECTjWpDyzeh8u1UtcZMnaPfXq/Gnqzkv I8Oqcpe6P3fbpOnrwY+P+IjG0pLdrFTBSA5hQhHdCsHmpKg1Fk+o6R56GLann+ds YLTRvsyjoBgtTwOZ7Y4890xYvplRt2cbER8fzgOBiETDBCpbinBgGIF7wRFxPSx2 Hik2XPTw74TeAFCzl2Dwf5lVLAwWSuqgBsO5jgCd/zKRFSkO69bd2Iyhijm2yvrk QDNB5W0OLia8Z0pIlXG3tvTz3mpL8LwJUPFMZCqdpe9F4imObx6HCis+wmb8NmkH LAghvij1MMaVyJIFT9XQSng6NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/N7bee GmgXf1dB/SM+OgvI6vGEMB8GA1UdIwQYMBaAFMYwVgQcD5C5KyuH2/+pfj6doCjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU2Mi9ENkI5Nzk2MjAy QTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtMa3JLNGZiXzZsLVBwMmdL TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqQldCQndQa0xrcks0ZmJfNmwtUHAyZ0tOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU2Mi9ENkI5Nzk2MjAyQTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtM a3JLNGZiXzZsLVBwMmdLTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaZgSn7eNA7Z7pO4mYpYFKurWxryOiS/qkMeCOJZfo2DzaGqdk7upS I8M3YbPlVfnLQuo8piRvkhHI1DO/5vaDbLre5MHpGiO3D9RQAyUoRqXnhqtN1p+i SstRMTEToJSvFGM98GC546547xzQHR5VUbBze+XyITskzXpD7dwf3pRgD/v2FsPU 1k3hPQoMkhQprf2hoMqMi2/PHFZ/4J4Td2hJxSUKnFURmTjNYs0Oy2S/QBh9HRuu ZliFuQWUENps2iNW6HSt2ANQMdNttfA36aatyq2hzsfTH0ZY27c8WMFaSKyJb3lv RjmDp8cNjbB8zvE9zcLjZxkR2PzA6Mi4 -----END CERTIFICATE-----Generated at Fri Sep 19 02:36:37 2025 by rpki-client