$ rpki-client -vvf rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft File: xem-kywNTgcfsYgsriUoEEdzKVA.mft (raw, json) Hash identifier: Ywx6UQh3RUrnghhzJBTK2g2zTyZ129fm7i2inW77e/c= Subject key identifier: E0:BE:3D:B4:D2:BD:9D:65:49:21:7D:2D:FF:40:1B:F9:53:5B:F2:9D Authority key identifier: C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50 Certificate issuer: /CN=A9121AB0/serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft Manifest number: 022A Signing time: Sun 19 Oct 2025 04:12:48 +0000 Manifest this update: Sun 19 Oct 2025 04:12:47 +0000 Manifest next update: Sun 26 Oct 2025 04:12:47 +0000 Files and hashes: 1: xem-kywNTgcfsYgsriUoEEdzKVA.crl (hash: I6FxqIM2ab3Pf5NxCK3xlzVFOYjGsLdxxNdFOAFCNew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.crl rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121AB0, serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950 Validity Not Before: Oct 19 04:12:47 2025 GMT Not After : Oct 26 04:12:47 2025 GMT Subject: CN=68f4653f-387b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1f:a0:18:02:7b:f8:f7:ad:49:c7:60:7f:1d: 64:83:35:39:43:89:ce:93:cf:38:44:3e:e2:a2:8f: a8:ad:e1:e1:78:78:8d:94:86:6e:e3:06:f2:59:c0: b8:fb:2c:12:4e:70:ad:e4:39:af:b1:b1:df:69:f8: 4b:22:bd:18:9f:32:fb:79:cf:5d:b7:fd:2d:52:76: 9f:74:8a:30:f5:48:10:5e:3c:6b:d7:34:35:88:5e: 83:b9:32:27:1c:ac:b2:ca:e4:06:66:8c:fc:ab:44: c6:78:06:e5:0e:66:4c:dd:2f:a8:c4:19:f8:5b:92: ca:ef:1a:37:2c:78:9b:53:42:43:c6:a6:79:7e:f8: bd:2b:4c:fd:9b:fa:db:02:53:76:91:b0:85:1e:ba: 28:4c:ff:db:a9:a4:ca:8a:da:67:c3:48:bb:fa:8c: 90:be:5f:f1:e5:f6:e1:29:62:d3:9b:3a:87:ec:d8: 03:84:55:c0:b5:76:d4:7c:22:f7:7b:db:5d:15:52: ee:91:a6:ab:5f:4d:f1:e2:e3:18:10:00:31:fb:fe: 66:d2:bf:a7:ee:4b:bd:d9:e8:26:97:20:02:09:95: 96:70:d5:6c:f1:60:ce:26:3c:62:a5:75:2b:00:f2: a9:c6:69:78:8d:87:ba:6f:bb:79:9c:4d:0d:50:02: 1b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BE:3D:B4:D2:BD:9D:65:49:21:7D:2D:FF:40:1B:F9:53:5B:F2:9D X509v3 Authority Key Identifier: keyid:C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f3:5f:de:7c:92:68:8a:dd:1d:7e:ff:b4:ed:1b:00:d2:6a: 12:f3:9e:56:82:80:31:c2:0d:30:60:11:80:bb:c6:f2:42:b8: 60:b2:aa:f1:c2:12:f3:e3:66:f3:b1:fc:59:6b:ad:1f:fb:d3: 2e:85:f4:58:4b:a5:ef:db:60:02:a0:bc:98:13:20:68:02:df: 4d:1b:ce:f7:a3:02:4c:b4:5e:c7:89:93:54:d6:43:ed:ff:25: a3:11:c8:a2:9d:e5:ff:58:84:6f:92:fc:3e:b4:44:75:c2:67: 51:1c:67:55:ad:7a:5d:b1:20:c6:18:d3:25:93:55:8c:e8:b8: 3f:68:58:cf:0b:cf:67:d1:d2:b3:18:df:e2:45:9a:ee:6e:7b: 70:32:8f:b3:12:70:59:7b:44:aa:80:96:04:70:23:33:36:a0: 9e:3b:50:79:71:c2:b7:34:16:f8:73:76:54:d1:76:44:c7:f9: 0f:d5:db:f4:e9:33:88:d0:21:1d:24:0b:fe:ba:3b:48:c5:0b: 46:86:76:c1:24:0a:e3:88:9c:b0:40:85:ab:fe:3d:97:82:63: 15:85:8b:7f:74:d4:e3:c1:f0:c2:d7:83:86:b0:8a:3a:3b:bb: bc:86:f4:f9:31:8e:af:1f:f7:13:9e:d4:10:5f:51:b6:ea:64: bf:d1:04:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFBQjAxMTAvBgNVBAUTKEM1RTlCRTkzMkMwRDRFMDcxRkIxODgyQ0FFMjUyODEw NDc3MzI5NTAwHhcNMjUxMDE5MDQxMjQ3WhcNMjUxMDI2MDQxMjQ3WjAYMRYwFAYD VQQDEw02OGY0NjUzZi0zODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5R+gGAJ7+PetScdgfx1kgzU5Q4nOk884RD7ioo+oreHheHiNlIZu4wbyWcC4 +ywSTnCt5DmvsbHfafhLIr0YnzL7ec9dt/0tUnafdIow9UgQXjxr1zQ1iF6DuTIn HKyyyuQGZoz8q0TGeAblDmZM3S+oxBn4W5LK7xo3LHibU0JDxqZ5fvi9K0z9m/rb AlN2kbCFHrooTP/bqaTKitpnw0i7+oyQvl/x5fbhKWLTmzqH7NgDhFXAtXbUfCL3 e9tdFVLukaarX03x4uMYEAAx+/5m0r+n7ku92egmlyACCZWWcNVs8WDOJjxipXUr APKpxml4jYe6b7t5nE0NUAIbjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOC+PbTS vZ1lSSF9Lf9AG/lTW/KdMB8GA1UdIwQYMBaAFMXpvpMsDU4HH7GILK4lKBBHcylQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUFCMC8xRkY4ODgzMjVD QkUxMUVEQjFGMEMwNENDNEY5QUUwMi94ZW0ta3l3TlRnY2ZzWWdzcmlVb0VFZHpL VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hlbS1reXdOVGdjZnNZZ3NyaVVvRUVkektWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUFCMC8xRkY4ODgzMjVDQkUxMUVEQjFGMEMwNENDNEY5QUUwMi94ZW0ta3l3TlRn Y2ZzWWdzcmlVb0VFZHpLVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw81/efJJoit0dfv+07RsA0moS855WgoAxwg0wYBGAu8byQrhgsqrx whLz42bzsfxZa60f+9MuhfRYS6Xv22ACoLyYEyBoAt9NG873owJMtF7HiZNU1kPt /yWjEciineX/WIRvkvw+tER1wmdRHGdVrXpdsSDGGNMlk1WM6Lg/aFjPC89n0dKz GN/iRZrubntwMo+zEnBZe0SqgJYEcCMzNqCeO1B5ccK3NBb4c3ZU0XZEx/kP1dv0 6TOI0CEdJAv+ujtIxQtGhnbBJArjiJywQIWr/j2XgmMVhYt/dNTjwfDC14OGsIo6 O7u8hvT5MY6vH/cTntQQX1G26mS/0QTX -----END CERTIFICATE-----Generated at Tue Oct 21 03:16:57 2025 by rpki-client