$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft File: XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft (raw, json) Hash identifier: QHF7uMFS7oBbRHgyEy2n/kIzJ13yqGQb/yZSlWSSp4I= Subject key identifier: 16:E5:B7:8F:F0:B8:BF:2C:04:44:EA:58:C2:BA:60:1A:A9:F5:51:BB Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 Certificate issuer: /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft Manifest number: 014E Signing time: Wed 17 Sep 2025 04:53:27 +0000 Manifest this update: Wed 17 Sep 2025 04:53:26 +0000 Manifest next update: Wed 24 Sep 2025 04:53:26 +0000 Files and hashes: 1: XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl (hash: K5D6tc9fVlclTSCYf9tDKmu6vLzt/AblqfHxU1eK+0M=) 2: 262FD0CEFE5C11EFA373D67EC4F9AE02.roa (hash: lo15Nf+0CZOirk0eAvSgxMDUvp2nF6KYkcsnfZSUw20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F54, serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Validity Not Before: Sep 17 04:53:26 2025 GMT Not After : Sep 24 04:53:26 2025 GMT Subject: CN=68ca3ec6-93ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:90:ee:18:08:b3:41:1a:2f:d9:be:42:d2:49: fb:db:e2:80:1e:51:e3:d8:0c:f4:a0:08:4e:d7:7e: 06:7c:44:7a:18:ef:00:eb:18:fa:b8:fb:f9:52:20: b6:cb:a5:84:70:7a:6a:f7:de:76:18:67:f7:2f:83: 5e:2c:18:9e:7f:03:74:65:12:bb:a2:4a:f3:bc:8a: e7:2e:a6:d9:91:2c:47:4d:01:10:74:ca:82:f5:3c: aa:ce:17:01:34:7b:e5:2f:f1:bc:ee:dc:c6:43:b5: 58:0f:98:62:a5:34:91:70:b2:74:23:ed:b0:9f:4c: dd:c6:5d:bd:5f:3b:8a:6f:c3:2d:82:66:3d:6b:a3: 12:9f:53:04:f8:6c:23:49:0b:2c:b2:d3:c8:a7:8f: 8a:2f:f1:a0:34:b8:56:c0:2b:00:2c:88:78:d9:a6: 7a:6a:ad:6e:74:52:87:86:38:03:81:19:82:3f:c4: 41:f7:b6:e7:c1:ad:c8:3b:4c:d7:c2:e9:b3:0a:14: 55:dc:12:b5:b8:eb:a8:79:86:e7:a3:fb:4b:33:3d: 7e:6d:8b:47:04:29:44:33:2d:2c:8f:1c:2c:58:d1: 82:64:3d:1a:1e:40:02:c8:42:d8:51:15:75:b1:28: d8:6f:40:c1:c4:c4:b1:8a:8f:f2:a5:13:f3:ad:21: 13:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E5:B7:8F:F0:B8:BF:2C:04:44:EA:58:C2:BA:60:1A:A9:F5:51:BB X509v3 Authority Key Identifier: keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3a:1e:e4:f7:c2:d1:6a:c0:28:b5:7f:33:10:b7:1d:52:71: 6c:f4:f7:79:19:05:41:e2:3d:e9:d7:a2:fa:96:63:12:4b:02: cf:09:fd:dc:8d:42:16:a9:d5:53:70:3a:f5:c8:0d:57:d8:73: 0b:3e:b7:d2:4e:60:f3:ca:65:8e:78:e3:dc:32:29:98:f4:6b: 1c:06:85:ae:8c:8d:c9:f3:57:e3:e8:d1:32:b8:2c:09:bd:08: a7:fe:07:af:1f:b0:df:da:c6:89:e6:88:4b:e3:cd:d5:6b:59: 74:2c:5f:6d:a4:97:bf:c0:80:9e:ff:54:71:c9:74:a3:2b:9a: b6:27:a1:5d:15:f6:e4:f4:a5:a0:bf:19:fd:8d:f9:e2:d8:55: e3:68:13:91:26:71:2f:ae:52:6f:d3:4d:88:15:0a:9e:2b:4f: 66:ff:5d:ba:d2:f1:ec:9d:82:3f:46:56:d4:68:0a:c6:d5:d1: 61:38:54:2f:3b:ee:06:05:36:81:bf:c1:7f:e6:18:b8:2b:df: 2f:a2:f1:67:01:b5:60:5c:61:f2:45:47:e7:76:4e:93:0b:9a: fa:73:21:f0:c2:68:98:cf:1e:5f:0f:70:c5:32:32:c8:8a:75: 9e:ae:d4:55:a2:a7:a5:56:9c:ed:c8:98:3f:e3:bd:4f:10:0c: df:3e:45:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNTQxMTAvBgNVBAUTKDVEQjU3RUQzODYwMzlFQTY2NEQxRUZGNzU3MDczNkQ2 RjlGMDRDNDQwHhcNMjUwOTE3MDQ1MzI2WhcNMjUwOTI0MDQ1MzI2WjAYMRYwFAYD VQQDEw02OGNhM2VjNi05M2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJDuGAizQRov2b5C0kn72+KAHlHj2Az0oAhO134GfER6GO8A6xj6uPv5UiC2 y6WEcHpq9952GGf3L4NeLBiefwN0ZRK7okrzvIrnLqbZkSxHTQEQdMqC9TyqzhcB NHvlL/G87tzGQ7VYD5hipTSRcLJ0I+2wn0zdxl29XzuKb8MtgmY9a6MSn1ME+Gwj SQssstPIp4+KL/GgNLhWwCsALIh42aZ6aq1udFKHhjgDgRmCP8RB97bnwa3IO0zX wumzChRV3BK1uOuoeYbno/tLMz1+bYtHBClEMy0sjxwsWNGCZD0aHkACyELYURV1 sSjYb0DBxMSxio/ypRPzrSET0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBblt4/w uL8sBETqWMK6YBqp9VG7MB8GA1UdIwQYMBaAFF21ftOGA56mZNHv91cHNtb58ExE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1NC81MUI2RUNFNDlG MjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5xWmswZV8zVndjMjF2bndU RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hiVi0wNFlEbnFaazBlXzNWd2MyMXZud1RFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1NC81MUI2RUNFNDlGMjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5x WmswZV8zVndjMjF2bndURVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMOh7k98LRasAotX8zELcdUnFs9Pd5GQVB4j3p16L6lmMSSwLPCf3c jUIWqdVTcDr1yA1X2HMLPrfSTmDzymWOeOPcMimY9GscBoWujI3J81fj6NEyuCwJ vQin/gevH7Df2saJ5ohL483Va1l0LF9tpJe/wICe/1RxyXSjK5q2J6FdFfbk9KWg vxn9jfni2FXjaBORJnEvrlJv002IFQqeK09m/1260vHsnYI/RlbUaArG1dFhOFQv O+4GBTaBv8F/5hi4K98vovFnAbVgXGHyRUfndk6TC5r6cyHwwmiYzx5fD3DFMjLI inWertRVoqelVpztyJg/471PEAzfPkU5 -----END CERTIFICATE-----Generated at Fri Sep 19 00:56:39 2025 by rpki-client