$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft File: XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft (raw, json) Hash identifier: 32iRUsAIw5BJ3fIV94sdZBZ4EVIRpofI2N5HxIEU7uk= Subject key identifier: 35:02:B7:C5:01:51:1E:A5:E6:A3:B4:C2:92:B7:6C:31:11:A8:50:BD Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44 Certificate issuer: /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft Manifest number: 1E Signing time: Mon 21 Jul 2025 08:04:38 +0000 Manifest this update: Mon 21 Jul 2025 08:04:38 +0000 Manifest next update: Mon 28 Jul 2025 08:04:38 +0000 Files and hashes: 1: XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl (hash: Hx0mXypcAJJh/KUIn+rLoN7HTC9U4xhQ5CthRnU4PsM=) 2: C053613E38B311F08DB63209C4F9AE02.roa (hash: uKfaLXcOCNJdE2XGkLLuO2/nisMUjVXsuFOacDhWkTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 08:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144 Validity Not Before: Jul 21 08:04:38 2025 GMT Not After : Jul 28 08:04:38 2025 GMT Subject: CN=687df496-7616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:97:fc:68:c2:0b:9e:8d:50:66:c4:21:33:75: e0:cd:dd:21:e7:4c:a3:be:59:b7:0a:ed:62:b3:75: fb:12:00:95:3f:2e:b9:83:25:41:64:66:a7:07:2e: dc:20:42:c1:e8:e4:cb:db:97:e6:a6:53:b3:30:cd: f8:99:f7:7e:dd:c2:79:6c:e4:4b:19:60:3d:7d:c7: 5a:73:51:ba:3e:e0:0f:a4:66:07:42:d8:d9:d7:16: 43:c0:6f:91:e9:8d:b7:ce:d9:d1:fd:4b:81:c9:d3: 70:e7:fc:e5:fa:49:8e:cd:62:f8:13:50:d4:65:89: cb:81:ec:68:4a:1b:64:94:fa:2a:74:a8:4f:89:99: c1:be:17:34:95:b0:be:2d:c3:3f:9d:07:ab:4e:eb: 5c:cd:02:9f:03:89:b5:49:1b:42:18:30:7b:4f:17: e9:d9:86:d9:f2:76:72:29:c9:42:63:07:ab:fd:b0: b3:07:fc:dc:07:d2:51:e2:10:5c:dd:89:e9:99:2d: 0a:eb:c9:52:e6:7c:0f:d0:cf:0e:26:ca:e7:0d:a0: 56:7f:6f:0e:f3:9a:1d:e8:39:76:6a:87:20:86:bb: 44:36:63:c3:7f:f0:0c:d5:9c:82:0a:36:fb:3b:3a: e0:b0:59:d1:43:a1:fd:8c:9f:57:51:c7:4a:66:0b: c2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:02:B7:C5:01:51:1E:A5:E6:A3:B4:C2:92:B7:6C:31:11:A8:50:BD X509v3 Authority Key Identifier: keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:f3:82:ae:ac:e5:63:63:d0:6b:1b:57:c2:6f:89:13:db:aa: 40:8e:ef:97:57:2a:79:dc:ee:fd:09:d1:21:8e:e2:4c:e3:ce: 4f:80:f6:92:97:94:fb:00:c9:b2:14:2e:60:fa:01:d8:ae:04: b9:85:6a:7a:05:79:fd:e5:79:77:c4:92:a3:60:a2:96:4d:62: 56:5e:01:0b:65:63:ac:23:b0:9b:20:31:03:42:f3:6b:20:be: 4b:b5:3b:89:b1:af:da:4f:7f:29:c4:60:76:c1:3d:47:b7:94: 45:e4:89:4b:1f:e3:df:00:b6:e5:af:fa:db:ab:aa:f1:45:64: 33:f4:88:a6:21:c2:67:ac:e3:52:7d:50:52:57:e4:db:f7:ef: 6b:24:b6:d0:56:d8:ec:0a:d6:59:75:90:a5:2c:fb:95:89:db: b0:2f:86:a7:0a:ca:93:35:62:87:94:ec:f7:17:ba:d1:d6:2e: be:65:bc:2a:af:01:0f:ca:c3:c1:e7:84:46:46:5b:a5:8c:3f: 90:80:16:ec:d4:84:c3:b2:5c:85:46:a6:33:cd:f4:40:24:81: ab:24:2b:32:3c:d2:23:22:fa:a0:47:b5:9c:b2:9a:c7:87:cb: 3f:a9:31:bc:fd:0c:67:2d:86:00:aa:8c:26:32:0c:17:1c:1c: 4d:da:03:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoNUVDNUZCMzM0RUU1MkI5MDA5Q0I5MjNDNjkzQkQyMEYw NDc4QTE0NDAeFw0yNTA3MjEwODA0MzhaFw0yNTA3MjgwODA0MzhaMBgxFjAUBgNV BAMTDTY4N2RmNDk2LTc2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDxl/xowguejVBmxCEzdeDN3SHnTKO+WbcK7WKzdfsSAJU/LrmDJUFkZqcHLtwg QsHo5Mvbl+amU7MwzfiZ937dwnls5EsZYD19x1pzUbo+4A+kZgdC2NnXFkPAb5Hp jbfO2dH9S4HJ03Dn/OX6SY7NYvgTUNRlicuB7GhKG2SU+ip0qE+JmcG+FzSVsL4t wz+dB6tO61zNAp8DibVJG0IYMHtPF+nZhtnydnIpyUJjB6v9sLMH/NwH0lHiEFzd iemZLQrryVLmfA/Qzw4myucNoFZ/bw7zmh3oOXZqhyCGu0Q2Y8N/8AzVnIIKNvs7 OuCwWdFDof2Mn1dRx0pmC8LXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNQK3xQFR HqXmo7TCkrdsMRGoUL0wHwYDVR0jBBgwFoAUXsX7M07lK5AJy5I8aTvSDwR4oUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzM0MDA4MDIyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL1hzWDdNMDdsSzVBSnk1SThhVHZTRHdSNG9V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHNYN00wN2xLNUFKeTVJOGFUdlNEd1I0b1VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzM0MDA4MDIyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL1hzWDdNMDdsSzVB Snk1SThhVHZTRHdSNG9VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEHzgq6s5WNj0GsbV8JviRPbqkCO75dXKnnc7v0J0SGO4kzjzk+A9pKX lPsAybIULmD6AdiuBLmFanoFef3leXfEkqNgopZNYlZeAQtlY6wjsJsgMQNC82sg vku1O4mxr9pPfynEYHbBPUe3lEXkiUsf498AtuWv+turqvFFZDP0iKYhwmes41J9 UFJX5Nv372skttBW2OwK1ll1kKUs+5WJ27AvhqcKypM1YoeU7PcXutHWLr5lvCqv AQ/Kw8HnhEZGW6WMP5CAFuzUhMOyXIVGpjPN9EAkgaskKzI80iMi+qBHtZyymseH yz+pMbz9DGcthgCqjCYyDBccHE3aA/Y= -----END CERTIFICATE-----Generated at Wed Jul 23 02:29:22 2025 by rpki-client