$ rpki-client -vvf rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft File: xem-kywNTgcfsYgsriUoEEdzKVA.mft (raw, json) Hash identifier: Qj8pWTOZ+bU/dTnDUIVzwyHDWV532EDsSuxcPLo154c= Subject key identifier: 15:B0:54:3D:45:95:25:B1:52:58:F1:93:29:CF:4F:E5:FC:B9:CF:7B Authority key identifier: C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50 Certificate issuer: /CN=A9121AB0/serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft Manifest number: 020D Signing time: Sat 23 Aug 2025 02:19:27 +0000 Manifest this update: Sat 23 Aug 2025 02:19:27 +0000 Manifest next update: Sat 30 Aug 2025 02:19:27 +0000 Files and hashes: 1: xem-kywNTgcfsYgsriUoEEdzKVA.crl (hash: 2NmSxM2frfG2s8M+W5HruJ2Ua5Jkh79F74zjGD2/jQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.crl rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121AB0, serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950 Validity Not Before: Aug 23 02:19:27 2025 GMT Not After : Aug 30 02:19:27 2025 GMT Subject: CN=68a9252f-7493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:66:71:8c:46:0e:fd:64:36:88:5b:fe:c8:7f: 5a:1c:25:ed:c1:8a:e6:0f:a0:25:2c:8f:34:d3:9c: 04:32:75:26:45:85:a8:a3:ce:e9:57:35:e1:a7:ef: 3b:0f:c1:71:81:a3:cd:11:4e:99:46:45:f1:e4:f7: fd:48:2e:a1:d7:78:70:c9:1c:4a:9c:d4:29:6b:f7: 12:6e:f5:81:b3:78:51:3c:2a:e5:57:7e:cf:85:7a: 0b:14:b6:11:b7:b7:98:a4:cf:60:c4:12:a7:6a:6c: 72:0d:58:d0:0b:85:23:88:4f:41:25:4c:cb:91:c0: 36:b3:5c:79:4d:ed:ad:1b:3c:2d:b5:39:3e:0b:97: 9b:49:3b:1a:f2:db:4c:bb:64:f9:b7:c7:b8:1d:51: 2d:69:dd:85:cf:e1:8d:76:66:1f:4f:6c:25:f1:ec: c1:f3:75:98:34:56:ad:a3:2a:9c:96:16:32:e5:eb: 66:dc:11:6b:17:f4:eb:fe:ae:59:9c:56:3a:f2:64: a0:77:de:a1:6b:4e:ad:76:a3:69:fa:a9:b8:a9:ca: b2:bd:07:02:82:f4:32:b5:b2:11:63:1e:03:0e:c8: cc:77:a5:43:50:d8:fa:a8:3c:34:80:64:e2:45:a2: b4:0b:46:bb:62:06:9d:ab:a8:cc:b2:ef:16:95:18: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B0:54:3D:45:95:25:B1:52:58:F1:93:29:CF:4F:E5:FC:B9:CF:7B X509v3 Authority Key Identifier: keyid:C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:1f:fa:0b:c3:7b:4a:80:ae:0f:76:08:9f:47:20:7e:f8:16: a4:c4:97:d7:0a:04:51:5d:57:15:5e:9f:a4:5b:cb:c5:4e:ac: 11:e8:ad:65:7f:12:c5:32:c5:28:73:0c:6d:63:3b:68:c7:ba: eb:bd:3c:0a:9d:15:fb:a5:65:8f:1a:46:68:e4:12:c7:96:84: 16:f0:db:6e:d0:c3:55:32:33:71:63:a8:4d:34:dc:36:4d:ae: 89:c3:70:8b:8d:62:68:de:8c:43:a5:e3:09:e1:c5:a3:3f:c5: 12:a6:95:d7:5b:3c:8b:b2:cc:01:a9:b4:f4:18:0c:2f:0a:88: ff:5e:8c:8e:1d:3a:39:43:f5:b2:91:87:c3:91:94:68:12:47: 49:41:6d:1b:b6:5f:c2:85:1d:58:b4:2e:0f:71:53:09:9d:ff: 86:78:b3:23:19:81:74:fd:31:01:aa:62:cb:e2:9b:08:cb:72: d2:c5:c8:e9:fc:79:1a:de:dd:eb:26:af:66:d3:99:39:a3:07: c7:ea:cb:a6:3b:2f:95:2a:da:33:18:99:be:fe:58:a4:a3:da: d2:26:9a:f6:a8:0b:c2:75:bd:1f:19:1f:74:50:0d:87:c7:30: 58:33:7a:c4:0f:8c:64:f3:c3:e1:3f:bf:3b:e8:a0:be:54:a5: d0:bc:bc:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFBQjAxMTAvBgNVBAUTKEM1RTlCRTkzMkMwRDRFMDcxRkIxODgyQ0FFMjUyODEw NDc3MzI5NTAwHhcNMjUwODIzMDIxOTI3WhcNMjUwODMwMDIxOTI3WjAYMRYwFAYD VQQDEw02OGE5MjUyZi03NDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2ZxjEYO/WQ2iFv+yH9aHCXtwYrmD6AlLI8005wEMnUmRYWoo87pVzXhp+87 D8FxgaPNEU6ZRkXx5Pf9SC6h13hwyRxKnNQpa/cSbvWBs3hRPCrlV37PhXoLFLYR t7eYpM9gxBKnamxyDVjQC4UjiE9BJUzLkcA2s1x5Te2tGzwttTk+C5ebSTsa8ttM u2T5t8e4HVEtad2Fz+GNdmYfT2wl8ezB83WYNFatoyqclhYy5etm3BFrF/Tr/q5Z nFY68mSgd96ha06tdqNp+qm4qcqyvQcCgvQytbIRYx4DDsjMd6VDUNj6qDw0gGTi RaK0C0a7Ygadq6jMsu8WlRhSJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWwVD1F lSWxUljxkynPT+X8uc97MB8GA1UdIwQYMBaAFMXpvpMsDU4HH7GILK4lKBBHcylQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUFCMC8xRkY4ODgzMjVD QkUxMUVEQjFGMEMwNENDNEY5QUUwMi94ZW0ta3l3TlRnY2ZzWWdzcmlVb0VFZHpL VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hlbS1reXdOVGdjZnNZZ3NyaVVvRUVkektWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUFCMC8xRkY4ODgzMjVDQkUxMUVEQjFGMEMwNENDNEY5QUUwMi94ZW0ta3l3TlRn Y2ZzWWdzcmlVb0VFZHpLVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBH/oLw3tKgK4PdgifRyB++BakxJfXCgRRXVcVXp+kW8vFTqwR6K1l fxLFMsUocwxtYztox7rrvTwKnRX7pWWPGkZo5BLHloQW8Ntu0MNVMjNxY6hNNNw2 Ta6Jw3CLjWJo3oxDpeMJ4cWjP8USppXXWzyLsswBqbT0GAwvCoj/XoyOHTo5Q/Wy kYfDkZRoEkdJQW0btl/ChR1YtC4PcVMJnf+GeLMjGYF0/TEBqmLL4psIy3LSxcjp /Hka3t3rJq9m05k5owfH6sumOy+VKtozGJm+/liko9rSJpr2qAvCdb0fGR90UA2H xzBYM3rED4xk88PhP7876KC+VKXQvLxN -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:23 2025 by rpki-client