$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft File: F_XLSRgEUqiWf5wPZjdatwnQ52g.mft (raw, json) Hash identifier: VcbsefIPzKjBsSbvEIDX9kkLy6MkyHAaZJhwUVNpwt8= Subject key identifier: 4B:F5:86:9B:0E:01:C7:43:F2:DA:BA:6E:75:07:38:C9:53:19:3B:E9 Authority key identifier: 17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 Certificate issuer: /CN=A917FD40/serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Certificate serial: 053B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft Manifest number: 05C7 Signing time: Thu 18 Sep 2025 23:49:20 +0000 Manifest this update: Thu 18 Sep 2025 23:49:19 +0000 Manifest next update: Thu 25 Sep 2025 23:49:19 +0000 Files and hashes: 1: F_XLSRgEUqiWf5wPZjdatwnQ52g.crl (hash: n+brBkgurRbqjG5J5ME6TGohuaSL/CzhQ8Mb0LzI67I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1339 (0x53b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FD40, serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Validity Not Before: Sep 18 23:49:19 2025 GMT Not After : Sep 25 23:49:19 2025 GMT Subject: CN=68cc9a80-5629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:c0:a7:cf:64:59:4c:08:15:22:f8:80:3e: fa:8c:bc:ae:43:44:e1:1f:17:26:c8:83:e7:27:42: 2c:ae:75:25:c8:88:6a:1a:0a:d6:61:51:2f:78:cf: 8b:d9:4b:cb:bf:af:c6:01:a4:a2:41:63:71:25:09: be:e6:2b:95:58:27:d2:64:22:4f:8b:f5:98:8c:e0: cd:5c:8e:be:c2:71:4b:00:d8:c1:11:27:d6:d4:f1: ea:e8:52:57:bd:5c:93:14:71:21:e4:84:fe:ea:e1: 57:ab:ae:d3:da:3b:c7:db:eb:56:c5:63:70:4a:f7: 3e:47:ba:b9:f3:2c:58:47:29:90:92:94:8d:f7:f2: ff:e2:73:31:d7:5b:ad:53:84:40:b4:14:c3:95:fd: 3e:cf:4a:2d:8b:7d:1a:17:b3:b5:d1:a0:94:10:f1: fe:e2:76:77:e4:ac:ca:2a:3b:8d:53:e6:00:cc:5c: f1:c3:0c:03:5e:c6:82:1d:10:53:b2:4b:80:8f:02: 03:75:bf:8e:cd:9d:77:dc:5e:74:53:1f:ea:ee:1c: 06:82:4e:88:2c:2e:4b:6a:5e:f1:3a:ee:16:63:37: 69:99:bf:1b:dd:fe:1b:2c:90:05:15:f1:3e:37:6a: f9:88:86:6b:3a:a3:b4:63:31:23:87:34:9f:57:86: 16:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F5:86:9B:0E:01:C7:43:F2:DA:BA:6E:75:07:38:C9:53:19:3B:E9 X509v3 Authority Key Identifier: keyid:17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:5f:01:e5:d6:7f:3c:11:cd:9d:a8:09:c7:d1:a1:4a:1c:a5: e5:ae:84:d9:71:95:54:7e:3f:4e:68:e7:46:58:ae:23:f4:df: 46:0b:1d:18:72:f4:1b:8d:2d:e5:f4:f6:40:e5:d2:ab:16:29: ff:88:d3:cf:95:68:41:76:a1:00:c7:ea:c1:1b:96:c5:89:6d: ae:18:c5:49:ed:67:cd:2d:4b:9f:5b:ea:91:d5:0e:56:59:c8: 67:0d:32:cc:35:f0:76:41:d7:24:91:62:2e:d6:ba:83:28:77: a5:a1:04:72:b1:d9:c7:be:01:74:c7:6e:c5:49:7a:f6:ad:4b: c3:cd:cc:9a:6d:00:f3:83:e0:3a:a4:1d:1c:9d:a2:f4:4c:f5: 2f:75:ad:a2:5b:c7:84:5a:29:b8:01:98:6d:fc:82:c8:50:18: de:42:44:19:00:d2:11:df:f4:ab:c6:74:4b:cd:a8:ee:7c:94: ba:dc:75:6e:75:3c:9a:50:28:81:7b:72:bb:af:bb:ae:ca:74: f7:15:ec:71:05:ee:e7:c9:61:b3:14:d7:30:ee:12:e2:15:52: c8:0a:45:65:64:80:a1:0d:25:ae:7f:c8:41:b4:4f:b5:ae:b7: 8a:4f:d8:9e:ac:c0:23:e6:d2:79:a2:98:17:97:7c:63:f3:cc: d8:9f:f7:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZENDAxMTAvBgNVBAUTKDE3RjVDQjQ5MTgwNDUyQTg5NjdGOUMwRjY2Mzc1QUI3 MDlEMEU3NjgwHhcNMjUwOTE4MjM0OTE5WhcNMjUwOTI1MjM0OTE5WjAYMRYwFAYD VQQDEw02OGNjOWE4MC01NjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1nAp89kWUwIFSL4gD76jLyuQ0ThHxcmyIPnJ0IsrnUlyIhqGgrWYVEveM+L 2UvLv6/GAaSiQWNxJQm+5iuVWCfSZCJPi/WYjODNXI6+wnFLANjBESfW1PHq6FJX vVyTFHEh5IT+6uFXq67T2jvH2+tWxWNwSvc+R7q58yxYRymQkpSN9/L/4nMx11ut U4RAtBTDlf0+z0oti30aF7O10aCUEPH+4nZ35KzKKjuNU+YAzFzxwwwDXsaCHRBT skuAjwIDdb+OzZ133F50Ux/q7hwGgk6ILC5Lal7xOu4WYzdpmb8b3f4bLJAFFfE+ N2r5iIZrOqO0YzEjhzSfV4YWrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEv1hpsO AcdD8tq6bnUHOMlTGTvpMB8GA1UdIwQYMBaAFBf1y0kYBFKoln+cD2Y3WrcJ0Odo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkQ0MC9GQzIxOTU1RTBC RDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVxaVdmNXdQWmpkYXR3blE1 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfWExTUmdFVXFpV2Y1d1BaamRhdHduUTUyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkQ0MC9GQzIxOTU1RTBCRDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVx aVdmNXdQWmpkYXR3blE1MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9XwHl1n88Ec2dqAnH0aFKHKXlroTZcZVUfj9OaOdGWK4j9N9GCx0Y cvQbjS3l9PZA5dKrFin/iNPPlWhBdqEAx+rBG5bFiW2uGMVJ7WfNLUufW+qR1Q5W WchnDTLMNfB2QdckkWIu1rqDKHeloQRysdnHvgF0x27FSXr2rUvDzcyabQDzg+A6 pB0cnaL0TPUvda2iW8eEWim4AZht/ILIUBjeQkQZANIR3/SrxnRLzajufJS63HVu dTyaUCiBe3K7r7uuynT3FexxBe7nyWGzFNcw7hLiFVLICkVlZIChDSWuf8hBtE+1 rreKT9ierMAj5tJ5opgXl3xj88zYn/eZ -----END CERTIFICATE-----Generated at Fri Sep 19 13:42:53 2025 by rpki-client