$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft File: xPuRgT57oJnZHpxIFyCUuZBcDxE.mft (raw, json) Hash identifier: q45Fp3AUzsK+EOqkFqN4Okh5OvStcbs/cZdv5TspmBY= Subject key identifier: 8B:33:65:BD:3D:8E:3C:28:67:71:FA:AB:52:11:28:DA:20:09:2D:C3 Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11 Certificate issuer: /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11 Certificate serial: 1E59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft Manifest number: 1E3B Signing time: Sun 24 Aug 2025 16:04:17 +0000 Manifest this update: Sun 24 Aug 2025 16:04:16 +0000 Manifest next update: Sun 31 Aug 2025 16:04:16 +0000 Files and hashes: 1: xPuRgT57oJnZHpxIFyCUuZBcDxE.crl (hash: 5gKr9oTNU46q06DpG4K/HBWXfxwn2flFqX5LoxkR8OE=) 2: 6553E9461A0611F08E7AD42AC4F9AE02.roa (hash: f1rUI1t3KqdGMKeqiBAUTM/laLwJwP3gycWHTBm/djM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7769 (0x1e59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11 Validity Not Before: Aug 24 16:04:16 2025 GMT Not After : Aug 31 16:04:16 2025 GMT Subject: CN=68ab3801-e7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:41:6d:a6:1a:a7:f4:c7:c4:26:5d:e4:2c:4d: b0:88:0c:5e:4b:00:34:95:61:27:80:29:51:8d:c0: 23:4e:06:b3:3c:ca:4c:ac:0a:b0:84:f8:2a:ed:4f: 7b:c5:12:04:5b:9f:0a:c1:5d:d3:c4:b3:b3:4a:bc: 3a:94:47:64:89:1a:c8:c6:54:5d:aa:bf:ae:57:a4: 33:b4:6f:9b:0d:a8:f9:73:3f:3f:e5:a8:c0:aa:17: 4d:00:27:b8:19:c4:5c:4b:31:41:a7:5a:ee:a7:c5: 9b:c7:63:a9:00:07:79:f7:76:bc:59:53:da:24:88: f2:9b:bf:29:27:34:5e:48:0e:52:c3:80:f7:d8:20: 01:93:57:9a:20:3d:24:6c:2f:0b:0d:3a:01:91:19: 9e:46:65:92:a3:cb:a9:05:1c:f4:c4:ea:3e:45:e0: c9:96:ad:e9:03:8c:e4:c8:a9:94:a7:1d:d5:fc:2c: 67:59:fe:16:e4:dd:26:36:b9:b1:a5:51:92:16:18: f6:ed:5f:21:54:ca:a0:29:29:5b:0e:62:e8:f4:b1: d1:3f:0c:94:84:94:25:55:58:a4:66:f2:7a:22:b6: 86:d7:7f:c9:b4:8f:00:b1:74:a4:4a:57:8a:7a:b7: 78:f5:03:1f:38:0a:f1:bc:0c:94:15:93:2f:76:83: e5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:33:65:BD:3D:8E:3C:28:67:71:FA:AB:52:11:28:DA:20:09:2D:C3 X509v3 Authority Key Identifier: keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:86:4b:6b:5c:dc:fd:ea:64:9e:80:cc:27:4e:dc:c7:81:2b: 2c:9c:e2:a2:89:48:26:f0:52:4c:50:5c:b8:e8:92:e5:9a:f1: 5c:16:66:dc:35:35:ff:cf:f0:59:cf:7a:ca:ba:dc:0a:dd:74: 51:c5:33:bc:df:bd:9d:b9:57:9c:86:97:8a:31:62:8c:07:6e: 9b:25:ab:87:fa:3d:c7:a7:38:a6:a6:31:27:21:da:d2:b1:c9: ce:ff:d1:5f:ca:43:d0:e9:7d:fb:3a:f3:32:02:72:97:5b:e8: e0:28:17:8a:37:69:ba:53:29:c3:b3:4f:de:ca:4b:49:8b:5e: d6:dd:d5:db:b6:22:21:cf:40:69:2c:65:2b:e7:77:15:4a:e8: 15:73:c9:82:0f:59:7e:fc:30:9e:22:57:71:c2:d3:c9:3c:78: 09:7a:cf:31:de:0c:db:49:55:2a:59:18:d4:59:ba:ad:36:fb: 9a:fc:15:32:01:a7:2a:3f:35:31:aa:ed:0d:c5:33:8a:89:e2: 04:a1:ec:8f:18:17:99:cd:6b:89:95:24:03:16:ad:f2:55:85: 7d:1a:e6:ad:9e:af:c5:9a:90:f1:d8:18:80:fd:f7:65:10:d5: 94:93:f3:53:61:e4:a0:39:91:e4:27:8f:8c:c4:0e:9b:c7:9e: 13:b4:5e:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzQkMxMTAvBgNVBAUTKEM0RkI5MTgxM0U3QkEwOTlEOTFFOUM0ODE3MjA5NEI5 OTA1QzBGMTEwHhcNMjUwODI0MTYwNDE2WhcNMjUwODMxMTYwNDE2WjAYMRYwFAYD VQQDEw02OGFiMzgwMS1lN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkFtphqn9MfEJl3kLE2wiAxeSwA0lWEngClRjcAjTgazPMpMrAqwhPgq7U97 xRIEW58KwV3TxLOzSrw6lEdkiRrIxlRdqr+uV6QztG+bDaj5cz8/5ajAqhdNACe4 GcRcSzFBp1rup8Wbx2OpAAd593a8WVPaJIjym78pJzReSA5Sw4D32CABk1eaID0k bC8LDToBkRmeRmWSo8upBRz0xOo+ReDJlq3pA4zkyKmUpx3V/CxnWf4W5N0mNrmx pVGSFhj27V8hVMqgKSlbDmLo9LHRPwyUhJQlVVikZvJ6IraG13/JtI8AsXSkSleK erd49QMfOArxvAyUFZMvdoPlFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIszZb09 jjwoZ3H6q1IRKNogCS3DMB8GA1UdIwQYMBaAFMT7kYE+e6CZ2R6cSBcglLmQXA8R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zODEyNDRGRThG OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi94UHVSZ1Q1N29KblpIcHhJRnlDVXVaQmNE eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQdVJnVDU3b0puWkhweElGeUNVdVpCY0R4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjNCQy8zODEyNDRGRThGOUIxMUU2QkVDNUNCMjVDNEY5QUUwMi94UHVSZ1Q1N29K blpIcHhJRnlDVXVaQmNEeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAohktrXNz96mSegMwnTtzHgSssnOKiiUgm8FJMUFy46JLlmvFcFmbc NTX/z/BZz3rKutwK3XRRxTO8372duVechpeKMWKMB26bJauH+j3HpzimpjEnIdrS scnO/9FfykPQ6X37OvMyAnKXW+jgKBeKN2m6UynDs0/eyktJi17W3dXbtiIhz0Bp LGUr53cVSugVc8mCD1l+/DCeIldxwtPJPHgJes8x3gzbSVUqWRjUWbqtNvua/BUy AacqPzUxqu0NxTOKieIEoeyPGBeZzWuJlSQDFq3yVYV9Guatnq/FmpDx2BiA/fdl ENWUk/NTYeSgOZHkJ4+MxA6bx54TtF4G -----END CERTIFICATE-----Generated at Sun Aug 24 21:51:59 2025 by rpki-client