$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: j2Hb4+rABnrMM+5atCaZKCl8/WvumOVKC45C1rEa57E= Subject key identifier: 9A:99:71:E2:62:8B:B3:F8:11:E6:47:AC:DD:95:B6:C0:99:9B:FE:90 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: 012F Signing time: Wed 17 Sep 2025 05:09:01 +0000 Manifest this update: Wed 17 Sep 2025 05:09:01 +0000 Manifest next update: Wed 24 Sep 2025 05:09:01 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: Fnsm1jIYnDG/J+FWq4Ceuv3e39b+Nq2kpgBKuNwgw8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Sep 17 05:09:01 2025 GMT Not After : Sep 24 05:09:01 2025 GMT Subject: CN=68ca426d-643e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:89:b4:dc:6d:4a:d5:eb:ee:40:5e:6d:ea:6b: 99:68:86:a7:e5:23:b9:6d:e0:57:00:c1:a9:0a:40: 77:3f:e4:bd:83:14:e1:34:fd:03:7a:86:c9:b2:8a: c0:fa:60:1c:d1:79:36:69:08:73:bf:26:81:2c:f1: 3b:39:a5:c4:5a:4e:30:d0:b0:05:07:39:c7:95:1f: de:4a:79:95:73:b0:2f:c4:8a:cd:91:43:45:cd:8f: 10:0c:d1:f0:e4:5a:1b:4f:f1:0d:3c:3a:de:bf:04: 03:9a:da:5e:93:b3:7a:e4:84:fa:4d:d3:f3:f2:f4: a1:50:6d:9e:35:0b:bf:9c:d2:44:a1:68:33:0f:5d: a8:cf:4d:5f:d9:d5:2f:26:4e:9e:5e:00:71:b0:56: 16:82:02:a7:74:b1:d5:fa:2e:10:45:b1:9d:79:82: 3f:71:c5:53:30:42:f9:f5:80:69:a9:27:f7:25:2d: 61:ac:2a:72:d3:54:11:59:10:51:7d:a2:df:17:eb: 5c:47:22:f9:68:0b:93:5f:13:38:3e:44:d6:8f:da: ff:5e:67:61:a8:0d:4c:e6:04:e8:02:9c:15:19:7f: 14:ac:01:68:ae:6e:16:1c:9a:b0:40:e0:29:9f:75: 81:70:4d:c6:54:7d:60:6e:e1:d6:cb:fc:1e:cc:af: 12:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:99:71:E2:62:8B:B3:F8:11:E6:47:AC:DD:95:B6:C0:99:9B:FE:90 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:c8:0b:a0:02:e3:61:1b:94:9d:6f:d0:9b:50:d5:c2:ee:e1: f3:b8:3b:6d:55:dd:cc:10:fe:38:6b:aa:e3:5e:ae:ea:0c:5d: 90:1d:6f:99:17:cd:6f:e5:30:15:fb:89:81:ab:c0:52:02:95: 8c:d9:2b:8c:ff:24:a2:b8:8b:68:55:26:4a:01:65:0a:b2:0c: 38:62:36:99:48:d4:f7:ee:bf:a4:16:c4:16:82:3c:17:ae:2b: aa:13:21:62:ac:4f:7b:f5:c9:f5:6a:76:de:fb:52:1d:2f:9d: 4d:15:8e:8d:98:ed:c1:24:5e:4a:01:5b:2f:4a:41:b4:25:78: 10:2e:c6:2b:7a:61:16:16:fc:a2:21:65:bb:24:1c:65:86:e2: 64:60:43:fb:ba:9d:82:7c:52:1b:64:9f:70:2c:62:30:e3:1a: 80:f7:c5:0c:99:61:0a:44:d3:8d:6c:ef:5a:53:7f:d0:7b:e5: ae:3a:65:df:5a:c8:d7:03:cd:5b:1f:df:0c:e6:58:0d:f6:4f: 8d:c6:eb:34:6e:f6:36:b6:82:58:b9:08:1d:13:52:b3:99:33: c8:7f:20:a4:e8:20:ea:ba:6c:93:0b:fb:11:f7:0f:06:ae:c4: 9c:d6:48:a6:0b:c1:c2:ae:5c:3e:b4:34:bc:da:ea:45:6b:b4: 84:90:8d:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjUwOTE3MDUwOTAxWhcNMjUwOTI0MDUwOTAxWjAYMRYwFAYD VQQDEw02OGNhNDI2ZC02NDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4m03G1K1evuQF5t6muZaIan5SO5beBXAMGpCkB3P+S9gxThNP0DeobJsorA +mAc0Xk2aQhzvyaBLPE7OaXEWk4w0LAFBznHlR/eSnmVc7AvxIrNkUNFzY8QDNHw 5FobT/ENPDrevwQDmtpek7N65IT6TdPz8vShUG2eNQu/nNJEoWgzD12oz01f2dUv Jk6eXgBxsFYWggKndLHV+i4QRbGdeYI/ccVTMEL59YBpqSf3JS1hrCpy01QRWRBR faLfF+tcRyL5aAuTXxM4PkTWj9r/XmdhqA1M5gToApwVGX8UrAForm4WHJqwQOAp n3WBcE3GVH1gbuHWy/wezK8SHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqZceJi i7P4EeZHrN2VtsCZm/6QMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTyAugAuNhG5Sdb9CbUNXC7uHzuDttVd3MEP44a6rjXq7qDF2QHW+Z F81v5TAV+4mBq8BSApWM2SuM/ySiuItoVSZKAWUKsgw4YjaZSNT37r+kFsQWgjwX riuqEyFirE979cn1anbe+1IdL51NFY6NmO3BJF5KAVsvSkG0JXgQLsYremEWFvyi IWW7JBxlhuJkYEP7up2CfFIbZJ9wLGIw4xqA98UMmWEKRNONbO9aU3/Qe+WuOmXf WsjXA81bH98M5lgN9k+Nxus0bvY2toJYuQgdE1KzmTPIfyCk6CDqumyTC/sR9w8G rsSc1kimC8HCrlw+tDS82upFa7SEkI3D -----END CERTIFICATE-----Generated at Thu Sep 18 20:51:22 2025 by rpki-client