$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: QEVrRw4g0b2jeaTtRKggwrUQ6u2HFH8ixUEGoyBuo4I= Subject key identifier: 96:A1:44:CA:27:62:98:CC:B1:0E:C2:DB:73:A9:39:AD:F3:93:E4:31 Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 34B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 34B6 Signing time: Sat 06 Sep 2025 15:13:42 +0000 Manifest this update: Sat 06 Sep 2025 15:13:42 +0000 Manifest next update: Sat 13 Sep 2025 15:13:42 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: FIjEx310KgdYBG5UJ9eIei9oRqSbGghlNywtbv2i/Pg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13494 (0x34b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: Sep 6 15:13:42 2025 GMT Not After : Sep 13 15:13:42 2025 GMT Subject: CN=68bc4fa6-dee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:4f:15:ff:67:54:9d:fb:d1:e6:96:ee:af: 1a:10:65:b0:b6:47:16:94:14:42:72:6a:0c:d9:9c: 69:5e:86:b6:ce:21:75:d7:81:b5:2a:56:f5:56:80: 61:3c:5b:8e:06:39:04:ce:bd:20:e8:53:b6:97:7c: d3:52:c1:5a:76:96:41:58:15:84:ee:d1:1e:76:20: c7:36:f1:79:54:f6:82:53:7d:44:91:30:ac:cc:81: 40:89:ad:98:ec:d2:6a:8b:35:e8:f9:47:fd:cb:75: a9:03:68:56:af:49:69:d9:6f:c8:ec:b2:54:e9:67: 47:4e:c9:dc:0d:c6:35:dc:10:8e:be:b8:e4:e1:b7: 60:8c:68:57:72:07:9a:52:b3:63:ec:c7:0e:15:f4: 55:b3:70:41:58:fb:fc:15:25:64:30:4b:63:5a:60: cb:a7:51:e2:9b:96:55:48:89:81:84:35:df:f3:bb: 15:2f:64:03:6c:7d:77:7a:b7:d0:63:18:5a:d2:41: 9a:21:0c:a7:e9:20:1f:2a:38:d5:7b:d4:1a:85:ff: ec:ad:1d:0b:61:cc:72:aa:41:ef:69:d2:41:c7:b4: 7e:ef:07:6a:de:0f:1e:84:4b:79:c2:c9:83:c7:2a: 36:cd:b5:05:05:32:5f:12:24:ce:89:73:cb:76:1c: 6c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A1:44:CA:27:62:98:CC:B1:0E:C2:DB:73:A9:39:AD:F3:93:E4:31 X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:09:9a:50:f9:91:d4:71:06:72:b8:ff:fd:96:8c:a5:af:d5: dd:08:14:dd:c4:6e:59:1d:3c:2a:0e:bd:22:a1:1c:f8:a9:a7: a5:7a:d5:cc:92:5a:68:e0:05:86:04:91:84:19:61:75:19:4c: 7f:63:82:b8:3d:69:13:99:07:5a:c1:f8:87:d6:77:05:d9:ed: 24:29:c2:30:2c:27:46:70:eb:88:18:9e:72:b0:e3:7f:a7:53: b7:54:1a:40:ce:2a:b5:71:cc:21:6c:17:00:4d:0c:dc:49:c8: d5:03:1c:e0:2b:f3:65:0b:c4:bf:a8:f9:dc:1d:09:f5:1e:2c: 38:bf:04:9c:fc:cf:5f:5e:2c:3f:bd:c2:18:ed:68:ed:c7:0c: 9f:77:ce:3d:ca:21:1e:9a:bf:dc:7d:b1:41:e9:65:83:04:b1: 82:db:9f:e2:f2:38:8f:e1:1b:65:36:fb:4a:32:c5:1e:dc:08: c4:4d:16:5a:ae:e3:20:c4:e6:9c:d2:1e:5c:42:4f:8c:d5:f9: d0:72:90:98:8f:5e:0a:f5:83:13:0b:03:5d:40:0a:15:c5:dc: 8c:01:f3:2a:8d:e8:3d:ec:86:df:ca:40:1e:b9:7c:4a:14:c7: d3:bc:06:49:c9:99:a6:7e:f1:ea:c0:55:11:1a:b1:ff:4c:85: de:24:2b:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjUwOTA2MTUxMzQyWhcNMjUwOTEzMTUxMzQyWjAYMRYwFAYD VQQDEw02OGJjNGZhNi1kZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/dPFf9nVJ370eaW7q8aEGWwtkcWlBRCcmoM2ZxpXoa2ziF114G1Klb1VoBh PFuOBjkEzr0g6FO2l3zTUsFadpZBWBWE7tEediDHNvF5VPaCU31EkTCszIFAia2Y 7NJqizXo+Uf9y3WpA2hWr0lp2W/I7LJU6WdHTsncDcY13BCOvrjk4bdgjGhXcgea UrNj7McOFfRVs3BBWPv8FSVkMEtjWmDLp1Him5ZVSImBhDXf87sVL2QDbH13erfQ Yxha0kGaIQyn6SAfKjjVe9Qahf/srR0LYcxyqkHvadJBx7R+7wdq3g8ehEt5wsmD xyo2zbUFBTJfEiTOiXPLdhxsYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJahRMon YpjMsQ7C23OpOa3zk+QxMB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrCZpQ+ZHUcQZyuP/9loylr9XdCBTdxG5ZHTwqDr0ioRz4qaeletXM klpo4AWGBJGEGWF1GUx/Y4K4PWkTmQdawfiH1ncF2e0kKcIwLCdGcOuIGJ5ysON/ p1O3VBpAziq1ccwhbBcATQzcScjVAxzgK/NlC8S/qPncHQn1Hiw4vwSc/M9fXiw/ vcIY7Wjtxwyfd849yiEemr/cfbFB6WWDBLGC25/i8jiP4RtlNvtKMsUe3AjETRZa ruMgxOac0h5cQk+M1fnQcpCYj14K9YMTCwNdQAoVxdyMAfMqjeg97IbfykAeuXxK FMfTvAZJyZmmfvHqwFURGrH/TIXeJCvT -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:57 2025 by rpki-client