$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: t76w9J7Vz55hW8dx5vk5GoEEjNWITwmB6iseqLJQ6i8= Subject key identifier: 29:64:A4:F9:6A:27:C3:A2:91:83:00:0C:01:70:8B:FC:23:68:04:6E Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0C6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0C64 Signing time: Wed 20 Aug 2025 18:31:19 +0000 Manifest this update: Wed 20 Aug 2025 18:31:19 +0000 Manifest next update: Wed 27 Aug 2025 18:31:19 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: 6sAx7CaKmQOQhVLV8vm5t3Wqc0YDdIMlWX8QyiSPhHQ=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: jepyyGmhyczAJbapeZ5nuaRxeukad7rFEbIHfvNySKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3179 (0xc6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: Aug 20 18:31:19 2025 GMT Not After : Aug 27 18:31:19 2025 GMT Subject: CN=68a61477-bd19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:b8:54:f5:e9:e1:37:ff:db:f0:76:25:0c: c4:fd:5e:ab:ab:a1:61:e5:08:a3:a9:46:16:a1:10: 08:5a:dc:f9:ec:ad:e9:a5:72:75:c8:1c:d3:14:76: e9:01:2d:ce:14:f6:c8:3f:a6:19:b3:bc:39:fb:d8: e3:2c:8f:b5:b4:7c:ba:9d:83:93:18:8a:c6:94:7d: c9:79:cf:2f:49:9c:4d:bb:c5:45:f0:f4:bc:fb:10: d9:ee:4d:09:96:97:b5:6b:cd:7a:ee:e7:1d:96:bf: b5:23:96:ad:c7:6a:4d:8f:fb:6e:ad:be:51:4d:53: e2:47:f2:7d:7a:b0:98:c8:2c:25:0e:0e:08:13:01: c3:8a:fe:39:48:76:60:80:19:3d:35:96:19:23:8f: e3:30:bf:6a:3a:56:7a:d5:54:49:1c:a9:a7:a5:7f: 74:82:7c:43:9d:90:09:d1:25:14:a1:e4:77:5e:67: b3:a0:f2:6c:30:3e:9b:97:c3:7b:bc:25:eb:81:f3: fd:bb:9f:25:6a:23:05:c6:b2:ed:1d:f8:b6:d7:9e: 5b:ba:8a:4f:c4:46:f1:e3:eb:2f:95:2c:7c:bb:c6: c8:c9:44:fe:f5:71:c4:6d:78:b2:08:89:62:a6:4f: 37:98:43:5f:0b:38:70:f7:26:f4:9b:39:08:2a:56: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:64:A4:F9:6A:27:C3:A2:91:83:00:0C:01:70:8B:FC:23:68:04:6E X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:11:e4:d2:bf:9d:ac:80:36:86:0d:3d:f7:b8:b2:9f:fc:08: da:9c:18:5c:6a:ba:74:bf:0d:06:39:5f:13:ca:9e:90:81:18: 00:84:84:2a:fb:77:90:2f:f9:a4:af:30:d0:a3:4d:18:83:7f: 86:c8:f4:4e:96:60:35:d0:97:ab:47:4d:fc:38:be:68:49:90: 9d:19:d4:71:83:71:9a:be:ba:40:60:db:05:87:ed:83:dc:8c: bb:f9:6c:4d:8c:00:c4:e7:9a:58:da:e8:46:f8:79:1b:f8:b8: a6:1a:e3:5a:f9:b2:49:2a:92:9f:89:ab:d7:f9:04:80:c8:61: b3:fe:b5:b5:38:01:ef:66:2f:81:6c:c0:58:05:22:b1:59:93: 3e:1b:25:35:29:ce:ed:7f:98:8d:66:43:49:9d:5c:1c:bd:4d: 57:6b:b8:41:b9:77:84:d8:64:1f:b1:ec:cd:b7:f3:81:db:00: 7a:56:58:5d:f0:60:79:58:ee:ae:f6:0f:80:8f:7a:45:06:e7: fc:17:09:f5:25:2f:fe:ea:92:f9:2b:8b:ac:ab:6d:e9:e7:83: 34:8a:05:78:54:41:3f:13:80:ff:03:85:77:b0:d3:ce:25:25: cd:ed:52:3e:9c:fa:bc:ff:e9:e0:0b:05:0e:1b:c3:6a:7e:2f: 82:52:90:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjUwODIwMTgzMTE5WhcNMjUwODI3MTgzMTE5WjAYMRYwFAYD VQQDEw02OGE2MTQ3Ny1iZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TK4VPXp4Tf/2/B2JQzE/V6rq6Fh5QijqUYWoRAIWtz57K3ppXJ1yBzTFHbp AS3OFPbIP6YZs7w5+9jjLI+1tHy6nYOTGIrGlH3Jec8vSZxNu8VF8PS8+xDZ7k0J lpe1a8167ucdlr+1I5atx2pNj/turb5RTVPiR/J9erCYyCwlDg4IEwHDiv45SHZg gBk9NZYZI4/jML9qOlZ61VRJHKmnpX90gnxDnZAJ0SUUoeR3XmezoPJsMD6bl8N7 vCXrgfP9u58laiMFxrLtHfi2155buopPxEbx4+svlSx8u8bIyUT+9XHEbXiyCIli pk83mENfCzhw9yb0mzkIKlYzbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClkpPlq J8OikYMADAFwi/wjaARuMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEEeTSv52sgDaGDT33uLKf/AjanBhcarp0vw0GOV8Typ6QgRgAhIQq +3eQL/mkrzDQo00Yg3+GyPROlmA10JerR038OL5oSZCdGdRxg3GavrpAYNsFh+2D 3Iy7+WxNjADE55pY2uhG+Hkb+LimGuNa+bJJKpKfiavX+QSAyGGz/rW1OAHvZi+B bMBYBSKxWZM+GyU1Kc7tf5iNZkNJnVwcvU1Xa7hBuXeE2GQfsezNt/OB2wB6Vlhd 8GB5WO6u9g+Aj3pFBuf8Fwn1JS/+6pL5K4usq23p54M0igV4VEE/E4D/A4V3sNPO JSXN7VI+nPq8/+ngCwUOG8Nqfi+CUpCO -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:39 2025 by rpki-client