$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json) Hash identifier: J+feu5uH9Lgh86wDHARp2Gccbr3t+vHWUi1Ss9APBM8= Subject key identifier: 35:AC:AF:58:10:C9:3B:2A:12:F9:15:ED:AB:B7:D5:4D:B2:D2:DE:AA Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft Manifest number: 04E7 Signing time: Wed 17 Sep 2025 00:06:29 +0000 Manifest this update: Wed 17 Sep 2025 00:06:29 +0000 Manifest next update: Wed 24 Sep 2025 00:06:29 +0000 Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: ut+xeJjA22pL6fJEUtbmE8y6YDmalMTuKX6mupTtiu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Validity Not Before: Sep 17 00:06:29 2025 GMT Not After : Sep 24 00:06:29 2025 GMT Subject: CN=68c9fb85-394a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d4:60:fb:d7:aa:a3:c3:2c:9a:a4:d8:66:84: b5:6b:b3:7d:8d:d6:60:d1:33:f1:8b:aa:75:7a:f0: 0f:02:07:55:8a:a7:d4:55:7e:61:48:19:7a:30:cd: e1:b2:1c:9c:66:bc:5e:15:95:18:29:24:cc:e1:56: da:de:58:3d:80:fb:f5:5b:0c:3c:11:00:e7:1b:14: a5:9b:7a:01:a5:93:cd:cf:ea:3a:7e:07:6a:fd:17: 1a:a7:22:fa:2e:6c:7c:22:21:f5:12:12:06:14:eb: aa:83:a2:db:cb:b0:3f:8f:68:ca:e3:a1:a2:ce:8a: 1d:45:11:3c:2b:ee:f4:f3:d2:b3:3d:f2:c6:fc:cf: 7d:6c:c2:d5:41:83:73:11:d4:68:89:b8:f5:f2:dc: 1d:db:68:f4:0d:fc:fc:45:a3:e0:2b:26:cf:78:c7: 9d:11:c4:b4:20:ba:65:72:a4:59:9e:f8:e8:6c:5b: f3:6d:8d:dd:c6:1f:e8:1b:9f:02:23:cf:41:84:67: cb:c2:7d:fb:8a:96:c9:f8:35:fa:80:04:fa:28:8a: 5f:94:04:51:bd:7f:4c:dc:00:3d:99:5e:1b:f9:b4: 50:34:f4:11:35:0a:a1:95:62:a8:19:89:68:bb:53: 0e:52:24:aa:d4:3d:4d:85:ed:23:98:29:2a:32:c4: b9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AC:AF:58:10:C9:3B:2A:12:F9:15:ED:AB:B7:D5:4D:B2:D2:DE:AA X509v3 Authority Key Identifier: keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:54:eb:22:09:1d:21:8e:f4:53:b8:81:49:7d:80:19:58:fa: e2:3c:63:a2:80:d9:43:1f:b9:61:66:00:d6:1f:a3:54:8d:73: bd:6d:b4:ea:dd:ae:77:3e:51:1a:c9:22:8d:a8:f9:9a:1c:d7: 0a:b7:7c:75:e8:9f:f9:4a:13:d2:07:8c:f0:85:e3:6b:90:f6: d7:a6:e8:f5:96:8a:64:d2:fe:73:91:f0:20:1d:cb:01:0b:f9: ca:36:db:21:48:23:0a:aa:fc:68:dd:72:d9:5a:e1:5a:a1:4d: de:20:9a:a0:a2:9c:3e:15:08:e4:6a:65:6d:a9:7c:c4:3b:9c: 96:ec:35:42:96:af:7f:04:49:2b:9b:c7:1c:f5:d8:27:4f:57: f4:11:ff:7a:d6:db:cc:18:c6:f0:c6:92:9b:30:f5:1c:93:56: 79:1b:5a:a3:dc:48:33:cd:0c:75:a2:d3:93:ff:cc:09:a3:76: 8e:ed:52:9a:c9:a7:d2:df:d7:da:8c:10:e1:db:18:7a:b0:ca: 2d:84:27:f6:c0:75:d0:08:07:9c:1d:14:ad:07:0a:64:6b:b3: 16:70:94:12:97:51:e4:0f:e3:0c:1d:0b:2b:75:3a:c2:30:46: b5:a1:cd:63:e5:26:3a:89:0a:35:5f:1a:65:8d:0d:ee:41:e6: 90:d3:c0:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MEYxMTAvBgNVBAUTKDVGN0RCNjUwQ0FDNDM0NTE3NkFDM0YwN0RFRkM5OTFB RDRGRURFQjgwHhcNMjUwOTE3MDAwNjI5WhcNMjUwOTI0MDAwNjI5WjAYMRYwFAYD VQQDEw02OGM5ZmI4NS0zOTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8tRg+9eqo8MsmqTYZoS1a7N9jdZg0TPxi6p1evAPAgdViqfUVX5hSBl6MM3h shycZrxeFZUYKSTM4Vba3lg9gPv1Www8EQDnGxSlm3oBpZPNz+o6fgdq/RcapyL6 Lmx8IiH1EhIGFOuqg6Lby7A/j2jK46GizoodRRE8K+7089KzPfLG/M99bMLVQYNz EdRoibj18twd22j0Dfz8RaPgKybPeMedEcS0ILplcqRZnvjobFvzbY3dxh/oG58C I89BhGfLwn37ipbJ+DX6gAT6KIpflARRvX9M3AA9mV4b+bRQNPQRNQqhlWKoGYlo u1MOUiSq1D1Nhe0jmCkqMsS5cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWsr1gQ yTsqEvkV7au31U2y0t6qMB8GA1UdIwQYMBaAFF99tlDKxDRRdqw/B978mRrU/t64 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcwRi9ENTVFQjVGMDJE MEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5GRjJyRDhIM3Z5Wkd0VC0z cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gzMjJVTXJFTkZGMnJEOEgzdnlaR3RULTNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcwRi9ENTVFQjVGMDJEMEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5G RjJyRDhIM3Z5Wkd0VC0zcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADVOsiCR0hjvRTuIFJfYAZWPriPGOigNlDH7lhZgDWH6NUjXO9bbTq 3a53PlEaySKNqPmaHNcKt3x16J/5ShPSB4zwheNrkPbXpuj1lopk0v5zkfAgHcsB C/nKNtshSCMKqvxo3XLZWuFaoU3eIJqgopw+FQjkamVtqXzEO5yW7DVClq9/BEkr m8cc9dgnT1f0Ef961tvMGMbwxpKbMPUck1Z5G1qj3EgzzQx1otOT/8wJo3aO7VKa yafS39fajBDh2xh6sMothCf2wHXQCAecHRStBwpka7MWcJQSl1HkD+MMHQsrdTrC MEa1oc1j5SY6iQo1XxpljQ3uQeaQ08BY -----END CERTIFICATE-----Generated at Thu Sep 18 19:12:12 2025 by rpki-client