$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft File: XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json) Hash identifier: dNd8F0e8ru2B9RibvpTBqDiEw7ZWWIBjzAx5HmP+XEM= Subject key identifier: B2:A9:A2:25:80:9F:A1:9D:BB:4A:2D:00:81:85:E1:6D:FD:0C:82:4D Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC Certificate issuer: /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft Manifest number: 02A7 Signing time: Sat 23 Aug 2025 01:47:38 +0000 Manifest this update: Sat 23 Aug 2025 01:47:38 +0000 Manifest next update: Sat 30 Aug 2025 01:47:38 +0000 Files and hashes: 1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: rLmgqVj6wgGNvoCeiBqIJg5Hy2SGbVbH2jyP54m2Ayw=) 2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: yP2d46I6eQAvhpe/ALVhIcW2d8YQgRGFzGAw4LWLaPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Validity Not Before: Aug 23 01:47:38 2025 GMT Not After : Aug 30 01:47:38 2025 GMT Subject: CN=68a91dba-907e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:b7:db:4e:e1:8e:44:c2:ad:8a:19:c2:7a: b6:0a:57:1a:fb:09:bf:50:60:d5:e9:fe:5f:3c:42: b4:c6:b4:99:df:72:7c:3e:03:d1:58:20:c9:6d:0d: a5:bd:c2:11:03:96:e7:34:8f:b7:66:6c:17:79:e8: 2f:07:b0:b4:6e:c4:3c:3f:ef:85:77:4f:c5:1c:7d: c1:57:f3:d3:1e:39:a6:0d:f5:56:37:1d:42:2f:3f: 20:da:b7:99:87:9c:33:54:bf:f4:46:dd:f0:fa:8f: 30:b9:5a:6b:a1:bd:ce:33:22:ff:72:48:2c:66:b4: 5e:83:77:fc:aa:01:2b:49:11:31:b3:a2:4d:26:dd: d5:5b:98:18:3e:e8:f7:11:4f:71:23:4d:c5:1a:55: 4d:b0:ed:03:0d:03:79:37:c7:bb:c5:fe:6e:09:5b: 55:ce:a1:61:3e:38:d2:a4:ba:36:20:aa:92:4a:28: 9b:3b:57:e0:98:17:55:f4:57:40:44:8c:e6:d8:e1: ae:75:b9:ff:8f:d5:a2:22:7e:82:34:e5:3c:2e:ba: 4d:b2:40:b0:da:dc:8b:ae:1a:74:4b:a6:d2:c8:65: 13:dd:5b:4e:b7:fb:84:0e:e4:b7:2b:fb:57:ea:80: be:21:f4:8c:18:bc:c5:c0:d0:3e:fe:31:60:3a:dd: ca:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A9:A2:25:80:9F:A1:9D:BB:4A:2D:00:81:85:E1:6D:FD:0C:82:4D X509v3 Authority Key Identifier: keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:04:f2:0d:4e:70:b7:50:d1:ff:c8:de:92:7b:93:d6:aa:a3: d3:f7:b7:8f:7f:91:36:6f:37:cd:d1:1b:06:e0:2b:89:b5:93: db:d1:9b:7a:6e:b7:ce:c8:4d:eb:f7:83:40:10:ba:91:1f:5a: eb:ee:05:49:3d:37:b7:92:9d:21:dc:66:77:7f:9b:19:48:0d: 5d:d5:8f:6e:0d:35:43:9f:00:6a:02:a3:56:c7:52:b8:16:47: dc:fe:f4:be:5f:73:fd:f5:a1:7c:62:e9:6c:fe:ae:7e:3f:cf: ae:33:e3:90:50:c7:b2:d3:39:ba:1d:3e:69:8a:27:5c:fc:9f: f0:40:fe:8b:9d:fc:02:39:09:6f:3f:a0:15:a6:18:2e:ad:e8: 91:33:de:28:07:63:bd:85:22:09:ef:c7:d4:99:b9:7e:ca:79: 3f:8c:39:79:1c:7b:c4:8e:76:21:98:55:4b:3c:7b:fe:31:5b: 9d:f7:91:da:49:13:74:dc:34:62:5a:4e:43:d2:4e:51:86:01: fb:f9:2f:e3:c5:93:cb:f1:7c:5f:52:eb:c7:45:75:71:7b:50: 67:0b:d3:93:83:da:36:fe:7a:2d:d3:6e:32:83:82:de:11:1f: 90:45:22:34:08:de:3e:2b:61:08:24:cb:d7:03:22:3b:65:72: ab:df:aa:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1OUUxMTAvBgNVBAUTKDVFNzNFREQ5NkZGMjdBODg1RjYxMzU2RUE3N0IxRjU0 MzVDODRGQ0MwHhcNMjUwODIzMDE0NzM4WhcNMjUwODMwMDE0NzM4WjAYMRYwFAYD VQQDEw02OGE5MWRiYS05MDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArt+3207hjkTCrYoZwnq2Clca+wm/UGDV6f5fPEK0xrSZ33J8PgPRWCDJbQ2l vcIRA5bnNI+3ZmwXeegvB7C0bsQ8P++Fd0/FHH3BV/PTHjmmDfVWNx1CLz8g2reZ h5wzVL/0Rt3w+o8wuVprob3OMyL/ckgsZrReg3f8qgErSRExs6JNJt3VW5gYPuj3 EU9xI03FGlVNsO0DDQN5N8e7xf5uCVtVzqFhPjjSpLo2IKqSSiibO1fgmBdV9FdA RIzm2OGudbn/j9WiIn6CNOU8LrpNskCw2tyLrhp0S6bSyGUT3VtOt/uEDuS3K/tX 6oC+IfSMGLzFwNA+/jFgOt3KAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKpoiWA n6Gdu0otAIGF4W39DIJNMB8GA1UdIwQYMBaAFF5z7dlv8nqIX2E1bqd7H1Q1yE/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU5RS9DQjBFQTc3NjBD Q0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVvaGZZVFZ1cDNzZlZEWElU OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huUHQyV195ZW9oZllUVnVwM3NmVkRYSVQ4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU5RS9DQjBFQTc3NjBDQ0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVv aGZZVFZ1cDNzZlZEWElUOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+BPINTnC3UNH/yN6Se5PWqqPT97ePf5E2bzfN0RsG4CuJtZPb0Zt6 brfOyE3r94NAELqRH1rr7gVJPTe3kp0h3GZ3f5sZSA1d1Y9uDTVDnwBqAqNWx1K4 Fkfc/vS+X3P99aF8Yuls/q5+P8+uM+OQUMey0zm6HT5piidc/J/wQP6LnfwCOQlv P6AVphgureiRM94oB2O9hSIJ78fUmbl+ynk/jDl5HHvEjnYhmFVLPHv+MVud95Ha SRN03DRiWk5D0k5RhgH7+S/jxZPL8XxfUuvHRXVxe1BnC9OTg9o2/not024yg4Le ER+QRSI0CN4+K2EIJMvXAyI7ZXKr36oY -----END CERTIFICATE-----Generated at Sun Aug 24 05:45:32 2025 by rpki-client