$ rpki-client -vvf rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft File: xem-kywNTgcfsYgsriUoEEdzKVA.mft (raw, json) Hash identifier: DLWw4KIYVGZ51MRjKJ8EEc5bsofkLySv+czMD353KyY= Subject key identifier: BE:BC:7C:E4:22:53:04:85:68:55:82:93:BF:38:4A:12:A2:B3:C6:FE Authority key identifier: C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50 Certificate issuer: /CN=A9121AB0/serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950 Certificate serial: 01F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft Manifest number: 01F3 Signing time: Thu 03 Jul 2025 02:33:49 +0000 Manifest this update: Thu 03 Jul 2025 02:33:49 +0000 Manifest next update: Thu 10 Jul 2025 02:33:49 +0000 Files and hashes: 1: xem-kywNTgcfsYgsriUoEEdzKVA.crl (hash: 92Akecb8IxxSS66tY5d0aoSiY4Z7KB2OFIkGqWyxA+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.crl rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121AB0, serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950 Validity Not Before: Jul 3 02:33:49 2025 GMT Not After : Jul 10 02:33:49 2025 GMT Subject: CN=6865ec0d-7790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cd:ee:78:03:6b:8d:11:d9:45:0b:e2:cb:a8: 18:56:30:28:cc:63:ae:2f:79:06:a5:9a:fc:aa:1c: 4a:2a:85:15:e3:67:76:ca:17:7f:8c:32:ed:17:77: 39:94:6b:e5:74:d6:11:2f:44:08:53:1c:24:7e:06: 67:09:1d:87:c7:1a:7f:d0:a5:5a:04:0b:82:6a:a2: 9b:57:16:b5:15:75:af:ab:90:7a:71:b9:98:aa:38: 8d:4c:06:77:bb:ca:36:78:fe:ec:06:8e:19:1b:e4: 15:4e:70:31:e2:a7:8f:dc:b3:5f:b3:da:4f:6f:8a: cc:15:17:29:74:d8:88:ac:b3:c3:d4:c7:64:49:66: 2b:e8:d3:33:29:aa:44:b9:e7:c2:0f:01:48:b0:6f: 9f:c0:61:5f:43:6c:d2:c3:dc:4e:55:ae:14:39:91: 3a:6d:8d:ac:95:04:cf:09:d9:f4:29:3d:3f:d8:82: f4:13:bb:66:f4:42:c6:00:43:6d:ca:9f:a5:6a:a7: d9:31:4f:fb:8a:b1:54:d4:ce:ad:95:d7:13:b7:b7: 8c:62:73:3a:0d:1c:f9:16:c4:3b:0d:4d:68:05:a4: a7:0c:9a:78:3a:e6:3f:0a:17:c5:7f:6a:15:03:19: 2e:88:9d:72:bc:8f:8c:15:06:52:c4:15:67:4d:c0: f0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BC:7C:E4:22:53:04:85:68:55:82:93:BF:38:4A:12:A2:B3:C6:FE X509v3 Authority Key Identifier: keyid:C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:00:02:97:63:38:ec:d6:54:c3:8d:00:b1:cf:07:2f:9a:32: 82:eb:1d:7f:7e:46:29:f3:6b:39:e4:43:91:1f:70:a9:65:9b: 93:eb:9e:63:2f:51:83:5f:bc:11:ba:04:27:a2:c5:c6:6b:dc: 71:a0:89:f4:2f:67:a0:28:f9:91:b3:9b:ef:6a:6f:99:2f:29: 58:e0:35:17:a6:15:4d:c7:52:9c:d1:d0:1a:75:cd:ed:88:62: 6a:8c:d2:f3:e7:54:fd:a4:06:84:d0:35:ad:cf:3b:05:2a:54: 62:ab:6a:aa:0e:59:0c:d4:62:99:15:d2:93:72:43:b3:45:9a: 82:79:c9:60:34:19:7f:69:d0:3d:b2:20:fd:32:8c:97:59:1f: aa:ea:c5:0c:87:77:be:f6:cb:5c:bb:ef:4f:9b:91:ef:8b:04: 87:0b:d5:c6:93:13:83:20:d1:7c:59:bc:a2:f6:93:36:c7:23: 19:81:84:14:46:17:58:58:13:82:5b:3e:dc:18:62:02:3a:3f: 3c:f2:5f:d3:c3:a1:47:12:6e:17:75:73:0e:5b:9a:df:ab:dd: aa:3a:c6:42:fa:36:3a:5b:c1:be:e7:93:59:6f:50:d2:c2:0d: 1d:7b:a8:48:08:e4:67:63:91:14:07:25:ad:01:39:8a:fb:3e: 02:bd:f5:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFBQjAxMTAvBgNVBAUTKEM1RTlCRTkzMkMwRDRFMDcxRkIxODgyQ0FFMjUyODEw NDc3MzI5NTAwHhcNMjUwNzAzMDIzMzQ5WhcNMjUwNzEwMDIzMzQ5WjAYMRYwFAYD VQQDEw02ODY1ZWMwZC03NzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7M3ueANrjRHZRQviy6gYVjAozGOuL3kGpZr8qhxKKoUV42d2yhd/jDLtF3c5 lGvldNYRL0QIUxwkfgZnCR2Hxxp/0KVaBAuCaqKbVxa1FXWvq5B6cbmYqjiNTAZ3 u8o2eP7sBo4ZG+QVTnAx4qeP3LNfs9pPb4rMFRcpdNiIrLPD1MdkSWYr6NMzKapE uefCDwFIsG+fwGFfQ2zSw9xOVa4UOZE6bY2slQTPCdn0KT0/2IL0E7tm9ELGAENt yp+laqfZMU/7irFU1M6tldcTt7eMYnM6DRz5FsQ7DU1oBaSnDJp4OuY/ChfFf2oV AxkuiJ1yvI+MFQZSxBVnTcDweQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL68fOQi UwSFaFWCk784ShKis8b+MB8GA1UdIwQYMBaAFMXpvpMsDU4HH7GILK4lKBBHcylQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUFCMC8xRkY4ODgzMjVD QkUxMUVEQjFGMEMwNENDNEY5QUUwMi94ZW0ta3l3TlRnY2ZzWWdzcmlVb0VFZHpL VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hlbS1reXdOVGdjZnNZZ3NyaVVvRUVkektWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUFCMC8xRkY4ODgzMjVDQkUxMUVEQjFGMEMwNENDNEY5QUUwMi94ZW0ta3l3TlRn Y2ZzWWdzcmlVb0VFZHpLVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLAAKXYzjs1lTDjQCxzwcvmjKC6x1/fkYp82s55EORH3CpZZuT655j L1GDX7wRugQnosXGa9xxoIn0L2egKPmRs5vvam+ZLylY4DUXphVNx1Kc0dAadc3t iGJqjNLz51T9pAaE0DWtzzsFKlRiq2qqDlkM1GKZFdKTckOzRZqCeclgNBl/adA9 siD9MoyXWR+q6sUMh3e+9stcu+9Pm5HviwSHC9XGkxODINF8Wbyi9pM2xyMZgYQU RhdYWBOCWz7cGGICOj888l/Tw6FHEm4XdXMOW5rfq92qOsZC+jY6W8G+55NZb1DS wg0de6hICORnY5EUByWtATmK+z4CvfX9 -----END CERTIFICATE-----Generated at Fri Jul 4 08:21:48 2025 by rpki-client