$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: dxvlQ1LFvxuKUEyH2ft6Qqc1RnL0cEsCCll0owFv2LI= Subject key identifier: 46:5E:7B:3D:90:CB:87:EF:81:10:84:57:FD:5F:5A:64:2E:13:0E:B7 Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 0214 Signing time: Thu 21 Aug 2025 02:15:35 +0000 Manifest this update: Thu 21 Aug 2025 02:15:35 +0000 Manifest next update: Thu 28 Aug 2025 02:15:35 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: wGOJuscW7ZPKLszYd7PI5ckMSD2o/bxbyIoJ5MrcQeo=) 2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: /pTedztaSiCOyPS1HOnaWKUVCcU322igmimIyTxJJbg=) 3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: HWKUOlRf26vXVLrvzxoCBARsK7RmPl1k0ABbjAs3vlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: Aug 21 02:15:35 2025 GMT Not After : Aug 28 02:15:35 2025 GMT Subject: CN=68a68147-e3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3e:e8:0c:fd:26:64:5b:2b:7f:28:3b:2e:c6: 11:f7:ab:a9:5e:42:ed:b4:bf:c8:0b:0d:de:62:73: 2a:75:5d:e8:35:82:68:38:18:53:6e:86:38:c5:cd: a3:e9:3b:23:ce:1d:8a:b3:bb:57:e0:15:30:a4:31: 28:51:66:12:6e:aa:fd:0a:0e:d9:61:9a:c6:28:cd: ab:86:1b:c7:b4:d6:19:db:01:32:d5:77:50:92:13: 12:a2:cf:8c:bb:e3:59:48:dd:72:d3:93:07:4d:52: 47:f0:3a:4b:53:09:97:88:33:45:96:01:6c:25:7a: 06:07:29:a5:1a:a8:fc:46:b0:b9:f1:66:eb:5b:f5: 3a:43:e1:44:8b:62:11:80:ee:62:3a:fc:65:5c:5e: 9a:f8:11:5e:2f:c8:ea:68:88:dd:64:3d:64:a4:e8: a3:91:e4:4b:2e:3e:cb:fb:c7:6f:dd:fd:8c:66:f1: 87:5f:09:5c:96:83:89:ba:9e:21:4e:8e:6c:00:94: 70:eb:3c:4d:2e:54:45:1a:a1:9d:55:49:54:5f:9b: ee:8a:3a:4e:7e:6d:18:ed:d4:30:b5:b9:74:bd:1f: 3c:a7:30:05:ba:4e:3d:16:53:99:40:2a:ae:30:8f: ab:b0:be:84:83:6e:bf:1f:a1:9b:0f:a4:b7:3b:06: d8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5E:7B:3D:90:CB:87:EF:81:10:84:57:FD:5F:5A:64:2E:13:0E:B7 X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3d:86:e1:99:24:20:05:b3:0e:57:1e:7b:57:c4:3e:06:d6: b4:ca:61:2b:0d:de:d1:e4:b8:a0:43:0f:d4:67:b5:4f:73:b1: 4a:07:d0:2b:83:d9:02:90:76:59:e7:18:4d:2f:0a:a2:70:d6: 66:60:57:35:06:71:32:fa:f1:a7:7c:d2:fe:dc:8a:9b:e8:d3: f0:bd:6e:46:a8:74:7e:4a:ac:e3:0c:44:0d:ee:81:ab:1a:47: 28:df:fa:f9:3d:0e:b3:b2:e0:5b:a5:6a:3e:40:7a:4e:10:ac: 9d:66:4e:84:9b:87:f4:04:a2:f9:27:ec:f6:28:12:89:2b:87: c0:63:aa:7a:c8:06:1d:4c:78:a3:f3:5d:74:62:ad:ab:34:26: dc:75:e1:d5:b2:b1:dc:bc:20:c8:6c:df:42:25:b9:b9:eb:3c: 78:7b:4b:4c:7c:a3:56:c9:bd:65:b3:b0:37:70:24:79:cf:cf: 2e:9c:c9:c6:ff:68:17:ff:92:03:11:c1:73:40:2a:44:f6:05: 3c:48:fe:c2:f8:98:94:ce:8c:06:41:b7:3e:16:04:71:80:19: e3:a5:c2:a6:00:df:2c:a2:d8:c6:cd:14:88:3d:23:86:dd:39: d2:1d:95:9e:5b:d4:d0:8d:57:d1:09:f4:b8:38:d7:b4:c5:8f: 5e:0f:06:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjUwODIxMDIxNTM1WhcNMjUwODI4MDIxNTM1WjAYMRYwFAYD VQQDEw02OGE2ODE0Ny1lM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoT7oDP0mZFsrfyg7LsYR96upXkLttL/ICw3eYnMqdV3oNYJoOBhTboY4xc2j 6Tsjzh2Ks7tX4BUwpDEoUWYSbqr9Cg7ZYZrGKM2rhhvHtNYZ2wEy1XdQkhMSos+M u+NZSN1y05MHTVJH8DpLUwmXiDNFlgFsJXoGBymlGqj8RrC58WbrW/U6Q+FEi2IR gO5iOvxlXF6a+BFeL8jqaIjdZD1kpOijkeRLLj7L+8dv3f2MZvGHXwlcloOJup4h To5sAJRw6zxNLlRFGqGdVUlUX5vuijpOfm0Y7dQwtbl0vR88pzAFuk49FlOZQCqu MI+rsL6Eg26/H6GbD6S3OwbYWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZeez2Q y4fvgRCEV/1fWmQuEw63MB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvPYbhmSQgBbMOVx57V8Q+Bta0ymErDd7R5LigQw/UZ7VPc7FKB9Ar g9kCkHZZ5xhNLwqicNZmYFc1BnEy+vGnfNL+3Iqb6NPwvW5GqHR+SqzjDEQN7oGr Gkco3/r5PQ6zsuBbpWo+QHpOEKydZk6Em4f0BKL5J+z2KBKJK4fAY6p6yAYdTHij 8110Yq2rNCbcdeHVsrHcvCDIbN9CJbm56zx4e0tMfKNWyb1ls7A3cCR5z88unMnG /2gX/5IDEcFzQCpE9gU8SP7C+JiUzowGQbc+FgRxgBnjpcKmAN8sotjGzRSIPSOG 3TnSHZWeW9TQjVfRCfS4ONe0xY9eDwat -----END CERTIFICATE-----Generated at Fri Aug 22 16:15:46 2025 by rpki-client