$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft File: XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json) Hash identifier: opNNGB64j+l/TYdokBv1832rVATrTACekMnQ41VAaME= Subject key identifier: A3:08:0D:86:DC:24:70:84:0B:E1:51:AC:3A:76:89:9A:C5:73:B2:01 Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Certificate serial: 0B7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft Manifest number: 0B6C Signing time: Mon 08 Sep 2025 19:05:56 +0000 Manifest this update: Mon 08 Sep 2025 19:05:55 +0000 Manifest next update: Mon 15 Sep 2025 19:05:55 +0000 Files and hashes: 1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: /e1i6aziRUx9UCABj7TwJUZgxs5Apl0mtAETQTtoLZc=) 2: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: z+/TKQAcf6VE8NuqmnIeG+tuqaOl0QxpRj3ReMN+jL0=) 3: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: Jhq/OLItI0gDhEIBYho+XP9iO0Y/7Srvb27SpQGuffU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2939 (0xb7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Validity Not Before: Sep 8 19:05:55 2025 GMT Not After : Sep 15 19:05:55 2025 GMT Subject: CN=68bf2914-6407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:db:df:39:60:e1:a1:bf:e2:07:1a:57:a2:25: 9a:8e:de:99:7a:64:39:8f:d6:4e:1b:e1:31:e7:02: cb:a7:27:9c:bc:c3:61:99:b0:ec:42:8f:82:5c:03: c1:de:9b:5f:e2:0d:3a:0b:73:d2:a1:6e:39:13:10: c8:f6:0e:72:b0:e0:df:99:62:84:86:a8:14:c7:71: e0:85:d0:0f:c7:7f:3d:cf:cd:b3:e9:d1:34:5e:f6: 07:cc:4f:16:3e:4e:a5:b9:0f:23:46:08:2f:30:6d: 1b:c9:00:76:a7:0f:15:97:ae:4f:39:6a:7d:dd:e0: af:ac:9f:6c:8c:e0:19:59:83:a4:02:01:05:a7:e1: 9c:50:18:c8:12:68:f0:2b:3e:c6:02:c1:74:b7:cd: 84:be:ea:9e:cb:1f:6e:07:d0:77:8b:2b:f4:55:0f: 89:1c:8a:13:94:59:c2:dd:eb:87:f7:b2:3b:ca:6f: b4:34:c1:00:0f:87:a7:ef:a5:6b:2c:4a:29:e3:15: c1:5c:69:57:dd:c5:b6:08:69:8a:6c:e7:cd:01:c2: 99:75:49:97:fe:29:5f:42:d2:87:13:8d:c7:06:68: 30:d3:5a:97:5a:a8:e7:3b:22:62:ba:f1:fe:06:b2: 5e:33:0c:a8:f0:e2:dd:a8:bf:3a:96:9e:dc:dc:d7: 3c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:08:0D:86:DC:24:70:84:0B:E1:51:AC:3A:76:89:9A:C5:73:B2:01 X509v3 Authority Key Identifier: keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:32:05:6d:43:04:c5:72:fc:62:73:20:22:9f:ab:1f:bc:7c: 27:23:56:b3:6a:76:95:a6:7c:b4:4d:3b:74:3b:5f:ff:5a:2d: 7d:82:f7:29:9f:fb:22:4a:22:b3:53:d6:f8:10:e1:0b:46:bf: 38:4a:2b:c8:fc:97:53:da:56:a7:bb:19:b8:1e:ca:4f:ad:b8: 96:20:ed:ba:0f:a2:11:50:85:40:86:aa:df:42:54:d9:b4:36: 6c:e4:f1:6b:a6:2a:e9:e5:32:50:26:68:80:5d:6a:73:4c:60: 6f:ba:54:2f:61:04:98:8c:57:46:1c:19:bf:74:13:f9:6b:e7: 49:a2:fc:93:a5:33:0d:84:63:bf:09:3e:75:63:cb:49:f8:e3: 00:fc:94:c9:d9:4b:3b:a6:67:b0:03:91:fa:b0:3e:ca:99:ee: 3b:83:a9:02:98:f9:f8:11:98:f2:47:2a:81:48:ce:66:da:bf: dc:ed:93:b9:4b:b4:38:77:ef:b1:e8:79:08:2f:0f:28:12:5c: a0:14:85:79:65:48:55:84:37:9b:38:96:bb:ed:07:35:61:a1: 4e:d8:bc:05:f3:28:6e:df:37:17:01:54:da:60:40:8a:79:93: 33:de:d5:58:61:75:4a:22:60:77:ef:a9:2a:81:26:04:42:50: a6:af:15:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4NDMxMTAvBgNVBAUTKDVDRkJBMjg5MTZFQUMwN0IyMzU5MDk0ODU1RDg5RTE2 QTA4MTRCQUMwHhcNMjUwOTA4MTkwNTU1WhcNMjUwOTE1MTkwNTU1WjAYMRYwFAYD VQQDEw02OGJmMjkxNC02NDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9vfOWDhob/iBxpXoiWajt6ZemQ5j9ZOG+Ex5wLLpyecvMNhmbDsQo+CXAPB 3ptf4g06C3PSoW45ExDI9g5ysODfmWKEhqgUx3HghdAPx389z82z6dE0XvYHzE8W Pk6luQ8jRggvMG0byQB2pw8Vl65POWp93eCvrJ9sjOAZWYOkAgEFp+GcUBjIEmjw Kz7GAsF0t82Evuqeyx9uB9B3iyv0VQ+JHIoTlFnC3euH97I7ym+0NMEAD4en76Vr LEop4xXBXGlX3cW2CGmKbOfNAcKZdUmX/ilfQtKHE43HBmgw01qXWqjnOyJiuvH+ BrJeMwyo8OLdqL86lp7c3Nc8TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMIDYbc JHCEC+FRrDp2iZrFc7IBMB8GA1UdIwQYMBaAFFz7ookW6sB7I1kJSFXYnhaggUus MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg0My85NTdCQ0I0NDM5 NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdIc2pXUWxJVmRpZUZxQ0JT NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hQdWlpUmJxd0hzaldRbElWZGllRnFDQlM2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg0My85NTdCQ0I0NDM5NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdI c2pXUWxJVmRpZUZxQ0JTNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDMgVtQwTFcvxicyAin6sfvHwnI1azanaVpny0TTt0O1//Wi19gvcp n/siSiKzU9b4EOELRr84SivI/JdT2lanuxm4HspPrbiWIO26D6IRUIVAhqrfQlTZ tDZs5PFrpirp5TJQJmiAXWpzTGBvulQvYQSYjFdGHBm/dBP5a+dJovyTpTMNhGO/ CT51Y8tJ+OMA/JTJ2Us7pmewA5H6sD7Kme47g6kCmPn4EZjyRyqBSM5m2r/c7ZO5 S7Q4d++x6HkILw8oElygFIV5ZUhVhDebOJa77Qc1YaFO2LwF8yhu3zcXAVTaYECK eZMz3tVYYXVKImB376kqgSYEQlCmrxVW -----END CERTIFICATE-----Generated at Tue Sep 9 07:52:22 2025 by rpki-client