$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft File: XLz7z59AY6eYAiqPHiafvf6jb_g.mft (raw, json) Hash identifier: NExQL1F/s9dE3VmlOdb5HZpiVvIHxrMHZWH7mse822Y= Subject key identifier: D2:22:11:83:87:34:00:94:C7:C7:AA:CD:0C:AD:6F:84:DA:60:50:9D Authority key identifier: 5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 Certificate issuer: /CN=A917F4F2/serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft Manifest number: 0321 Signing time: Wed 17 Sep 2025 01:36:46 +0000 Manifest this update: Wed 17 Sep 2025 01:36:45 +0000 Manifest next update: Wed 24 Sep 2025 01:36:45 +0000 Files and hashes: 1: XLz7z59AY6eYAiqPHiafvf6jb_g.crl (hash: gg7AYG9b31ybI06h0w0CZbELH03XqHnUSQzp9lZk+yk=) 2: CA455C5CE0B311ECBC9BEA63C4F9AE02.roa (hash: +ZSBEXRcgClmiO74ln8lB46inGp0vsN6jKOzaxEdX6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4F2, serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Validity Not Before: Sep 17 01:36:45 2025 GMT Not After : Sep 24 01:36:45 2025 GMT Subject: CN=68ca10ae-55cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d9:c9:85:52:29:48:6d:c8:9f:b4:8b:ba:71: 0f:e2:86:d2:73:fb:7e:69:b7:5b:57:83:5c:bd:4a: cd:8e:bf:5d:cd:1b:2f:db:dd:4e:6a:00:1e:6d:b2: 23:3d:3a:a5:fc:28:06:56:3b:71:1d:50:cf:8a:e1: 09:84:33:2a:97:75:c9:86:52:e3:9e:42:5a:14:0b: f1:52:3c:2c:9e:26:a7:ff:ec:c9:c3:7a:80:d2:d4: 29:17:83:f2:dd:c0:ea:eb:05:69:ac:94:45:f3:5e: 72:c1:9b:70:2a:e2:7b:b0:90:7e:8e:60:70:6b:96: a1:0c:21:22:76:a0:ff:15:dc:0a:6d:82:30:69:7b: f7:7c:1d:d5:41:53:1f:d7:66:a7:be:08:a2:61:45: 2f:73:c1:de:cd:3a:82:a5:cc:07:7d:cb:9a:0c:9b: 37:db:4e:16:e3:a4:0d:cb:99:30:d3:a4:b9:7a:ea: a9:bc:e2:5f:e3:57:24:ac:b7:84:56:b3:72:48:fe: 0e:85:86:70:96:cd:1e:c0:f7:91:c9:88:93:fe:88: 08:96:29:68:85:4d:3d:f4:f7:e0:47:48:8d:19:09: cc:1a:79:cd:e2:ed:32:6b:5d:95:44:8d:5c:ee:f4: 80:79:ea:7f:47:20:99:16:4e:4c:8b:d5:3b:da:40: c4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:22:11:83:87:34:00:94:C7:C7:AA:CD:0C:AD:6F:84:DA:60:50:9D X509v3 Authority Key Identifier: keyid:5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f7:27:7c:6c:c3:5d:f0:13:9f:dd:af:8e:a7:07:d8:02:ce: 4e:a4:fc:6f:39:d5:77:83:a4:e4:3c:66:17:0c:67:85:94:8a: b3:95:da:1d:9d:8f:6d:de:d1:65:29:41:db:20:85:5e:29:5b: 92:d7:e9:e4:b1:62:da:48:0f:71:00:93:39:2a:6f:76:70:6e: 3c:45:09:fe:65:3e:c9:3f:08:a9:52:13:60:08:e5:12:a9:2b: c7:01:75:d0:cb:c4:ee:ad:b6:42:1b:df:b6:b0:ca:1f:17:d7: 46:33:58:72:cf:e0:af:c2:fb:77:4b:f9:a5:e5:de:b1:a7:2d: 18:e4:4e:8b:25:a0:37:ed:30:61:5a:75:50:a5:76:87:18:5b: e1:f1:70:0e:72:66:59:ef:71:48:2e:86:52:e4:37:b0:2b:6e: 03:31:23:70:b6:43:97:d5:79:ae:6f:6e:bc:50:f3:e6:da:ba: c7:3d:d7:26:de:69:3e:08:e4:65:9d:a4:62:35:3d:29:50:f4: 80:99:90:00:de:02:ee:2c:69:a7:85:b0:99:7d:17:12:e0:cc: 09:97:dc:bf:9b:5d:b6:53:ba:7f:5c:fb:8e:6b:50:82:69:cc: a4:9a:e9:a8:d0:1f:8d:0f:02:82:e9:da:47:e8:0d:aa:59:87: b8:ed:e3:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RjIxMTAvBgNVBAUTKDVDQkNGQkNGOUY0MDYzQTc5ODAyMkE4RjFFMjY5RkJE RkVBMzZGRjgwHhcNMjUwOTE3MDEzNjQ1WhcNMjUwOTI0MDEzNjQ1WjAYMRYwFAYD VQQDEw02OGNhMTBhZS01NWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA69nJhVIpSG3In7SLunEP4obSc/t+abdbV4NcvUrNjr9dzRsv291OagAebbIj PTql/CgGVjtxHVDPiuEJhDMql3XJhlLjnkJaFAvxUjwsnian/+zJw3qA0tQpF4Py 3cDq6wVprJRF815ywZtwKuJ7sJB+jmBwa5ahDCEidqD/FdwKbYIwaXv3fB3VQVMf 12anvgiiYUUvc8HezTqCpcwHfcuaDJs3204W46QNy5kw06S5euqpvOJf41ckrLeE VrNySP4OhYZwls0ewPeRyYiT/ogIlilohU099PfgR0iNGQnMGnnN4u0ya12VRI1c 7vSAeep/RyCZFk5Mi9U72kDEuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIiEYOH NACUx8eqzQytb4TaYFCdMB8GA1UdIwQYMBaAFFy8+8+fQGOnmAIqjx4mn73+o2/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjRGMi8zNEQ1NTQzMkUw QUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2ZVlBaXFQSGlhZnZmNmpi X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hMejd6NTlBWTZlWUFpcVBIaWFmdmY2amJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjRGMi8zNEQ1NTQzMkUwQUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2 ZVlBaXFQSGlhZnZmNmpiX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb9yd8bMNd8BOf3a+OpwfYAs5OpPxvOdV3g6TkPGYXDGeFlIqzldod nY9t3tFlKUHbIIVeKVuS1+nksWLaSA9xAJM5Km92cG48RQn+ZT7JPwipUhNgCOUS qSvHAXXQy8TurbZCG9+2sMofF9dGM1hyz+Cvwvt3S/ml5d6xpy0Y5E6LJaA37TBh WnVQpXaHGFvh8XAOcmZZ73FILoZS5DewK24DMSNwtkOX1Xmub268UPPm2rrHPdcm 3mk+CORlnaRiNT0pUPSAmZAA3gLuLGmnhbCZfRcS4MwJl9y/m122U7p/XPuOa1CC acykmumo0B+NDwKC6dpH6A2qWYe47ePm -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:16 2025 by rpki-client