$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft File: XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft (raw, json) Hash identifier: F7rXRbeskW1yjnZX0SAK6VNEt/U4pWmXTRjwhqlE9VM= Subject key identifier: 38:CF:B0:47:E0:60:47:A4:52:6E:F0:91:AD:59:B2:DD:8A:FD:4C:3C Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44 Certificate issuer: /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft Manifest number: 36 Signing time: Fri 05 Sep 2025 08:05:55 +0000 Manifest this update: Fri 05 Sep 2025 08:05:54 +0000 Manifest next update: Fri 12 Sep 2025 08:05:54 +0000 Files and hashes: 1: XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl (hash: 5DhlwrgqyS/cwie7ha9hA0Blil1Fdd0VOBL6xVkzkCk=) 2: C053613E38B311F08DB63209C4F9AE02.roa (hash: uKfaLXcOCNJdE2XGkLLuO2/nisMUjVXsuFOacDhWkTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144 Validity Not Before: Sep 5 08:05:54 2025 GMT Not After : Sep 12 08:05:54 2025 GMT Subject: CN=68ba99e2-3cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8e:59:67:2e:2a:e8:3d:e4:50:02:e2:f5:57: 1d:d6:17:58:01:e6:67:89:fb:3e:cc:fb:1a:1c:77: 6c:46:aa:2e:d3:18:f9:25:a5:a8:7f:ea:19:e8:89: dd:aa:8f:d4:76:8b:e5:32:6a:26:03:24:65:2d:ee: b6:52:5f:8b:1b:12:68:cf:ce:59:33:15:da:b6:bd: c4:77:09:34:74:f9:e7:81:d9:cd:70:5a:63:92:52: db:df:7a:bf:d2:f9:18:5c:cd:ce:80:c1:20:cc:49: 12:e5:7d:3f:a9:c0:37:3c:0a:ab:b4:4b:56:d4:ee: 5e:b7:71:ea:a5:a0:85:e4:0f:d5:e3:18:1d:a4:97: 62:b5:87:5a:6f:f2:58:72:cf:96:75:05:1c:50:5e: fd:4d:87:70:00:f3:2f:5a:b9:ed:15:d1:ac:19:bb: 90:44:c3:8e:d3:6f:42:4a:d7:c7:13:ba:fb:18:f9: 90:24:a6:80:0c:0b:95:3b:11:80:bd:49:00:3b:38: 0d:30:f9:43:21:12:e6:fb:fd:e5:b0:86:46:ad:00: 3e:b3:70:46:af:55:ce:c7:f6:5f:fb:ed:2c:2c:90: 33:a6:85:40:a9:8b:86:ef:b6:8d:bf:04:a1:0a:63: 01:6d:42:76:bf:b9:6e:32:c2:aa:09:18:ce:34:3a: 98:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CF:B0:47:E0:60:47:A4:52:6E:F0:91:AD:59:B2:DD:8A:FD:4C:3C X509v3 Authority Key Identifier: keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:4f:38:74:f4:72:10:21:8f:9d:e0:26:4a:19:74:3e:d9:86: 15:ad:0a:f5:84:ab:fa:46:5b:52:a0:db:f9:d5:9e:ec:d2:b6: 1c:df:74:8f:31:93:f9:0d:e2:96:78:7b:e0:9c:cf:fb:2f:c3: 29:1f:11:5e:7f:15:48:44:a0:40:11:f3:45:39:3d:ec:10:26: 3c:a2:86:6b:df:05:0c:2b:3f:64:9b:13:9e:50:9b:83:a7:9d: 82:70:f8:c2:99:7d:a0:a3:35:94:01:07:c3:c8:04:fb:a8:ce: 6a:22:53:0d:14:ba:ea:e1:7c:af:da:46:1e:e7:75:98:f4:ca: 4b:36:59:41:b1:a2:55:11:90:bd:39:2c:38:63:f1:20:d6:98: af:c7:70:8b:1a:c4:c6:c0:a1:bb:cf:6e:42:ef:c2:ea:84:d2: 5f:0b:99:20:6d:8c:3c:fd:3c:65:d7:90:d1:7a:3a:9e:f4:61: cc:a6:96:bd:82:49:72:2e:25:af:98:fe:d6:89:84:83:cc:38: b6:84:7a:f0:13:8a:22:c0:f3:65:06:5b:ac:dc:0c:8b:0c:66: 62:09:46:8f:88:db:32:2b:41:c6:17:1c:ec:cc:84:4f:eb:cc: ca:20:af:cc:27:7e:a0:79:05:0a:79:c5:bb:30:12:19:77:d5: 02:a7:49:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoNUVDNUZCMzM0RUU1MkI5MDA5Q0I5MjNDNjkzQkQyMEYw NDc4QTE0NDAeFw0yNTA5MDUwODA1NTRaFw0yNTA5MTIwODA1NTRaMBgxFjAUBgNV BAMTDTY4YmE5OWUyLTNjZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+jllnLiroPeRQAuL1Vx3WF1gB5meJ+z7M+xocd2xGqi7TGPklpah/6hnoid2q j9R2i+UyaiYDJGUt7rZSX4sbEmjPzlkzFdq2vcR3CTR0+eeB2c1wWmOSUtvfer/S +Rhczc6AwSDMSRLlfT+pwDc8Cqu0S1bU7l63ceqloIXkD9XjGB2kl2K1h1pv8lhy z5Z1BRxQXv1Nh3AA8y9aue0V0awZu5BEw47Tb0JK18cTuvsY+ZAkpoAMC5U7EYC9 SQA7OA0w+UMhEub7/eWwhkatAD6zcEavVc7H9l/77SwskDOmhUCpi4bvto2/BKEK YwFtQna/uW4ywqoJGM40OpifAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOM+wR+Bg R6RSbvCRrVmy3Yr9TDwwHwYDVR0jBBgwFoAUXsX7M07lK5AJy5I8aTvSDwR4oUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzM0MDA4MDIyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL1hzWDdNMDdsSzVBSnk1SThhVHZTRHdSNG9V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHNYN00wN2xLNUFKeTVJOGFUdlNEd1I0b1VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzM0MDA4MDIyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL1hzWDdNMDdsSzVB Snk1SThhVHZTRHdSNG9VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK1POHT0chAhj53gJkoZdD7ZhhWtCvWEq/pGW1Kg2/nVnuzSthzfdI8x k/kN4pZ4e+Ccz/svwykfEV5/FUhEoEAR80U5PewQJjyihmvfBQwrP2SbE55Qm4On nYJw+MKZfaCjNZQBB8PIBPuozmoiUw0UuurhfK/aRh7ndZj0yks2WUGxolURkL05 LDhj8SDWmK/HcIsaxMbAobvPbkLvwuqE0l8LmSBtjDz9PGXXkNF6Op70Ycymlr2C SXIuJa+Y/taJhIPMOLaEevATiiLA82UGW6zcDIsMZmIJRo+I2zIrQcYXHOzMhE/r zMogr8wnfqB5BQp5xbswEhl31QKnSZ0= -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:13 2025 by rpki-client