$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: vN0UFZwwAdF/b4Dejqiz8fsUyE2ujJVP+ZWLaZI6/2c= Subject key identifier: 2E:D3:73:97:57:19:2F:F0:9D:10:CC:85:AA:A0:E9:C6:48:51:79:B1 Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: C5 Signing time: Sat 23 Aug 2025 05:55:18 +0000 Manifest this update: Sat 23 Aug 2025 05:55:18 +0000 Manifest next update: Sat 30 Aug 2025 05:55:18 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: j38JRrrrH0aosFetxI74tdPXVwbcz0aBJJT2Fpc8x7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: Aug 23 05:55:18 2025 GMT Not After : Aug 30 05:55:18 2025 GMT Subject: CN=68a957c6-8037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:19:b9:a5:e6:64:f6:d6:55:18:c4:68:bc:2b: d6:05:07:06:e5:4b:1c:cc:96:a5:52:e7:23:37:78: ff:84:62:eb:34:9b:03:30:0f:0a:2a:a8:4d:8c:06: 2e:54:8a:32:fb:16:99:56:d5:11:8b:ec:54:9f:af: 28:42:41:46:37:a4:b7:11:58:83:ac:d0:35:f3:09: af:1e:61:d4:7f:d5:87:bd:7e:5a:b6:46:25:9a:ff: 09:02:be:f3:c7:f9:18:07:c4:90:e8:2e:7c:93:7f: 3d:0a:37:e5:07:80:4a:22:e0:a3:cc:c8:c9:b3:ec: b2:cb:d3:61:c8:40:e3:c2:65:a4:4a:d7:8f:6f:67: 98:e3:5d:86:63:9b:b7:63:81:c9:7a:df:c9:90:a2: 79:c0:0c:8d:34:74:d4:10:1c:65:66:77:b9:90:52: 47:a8:09:59:8d:c8:4a:9a:4c:ef:1a:01:6a:7f:b9: 82:1f:9c:d0:d2:74:d8:56:fc:8b:76:b5:88:dd:7a: f7:ac:5f:ab:2c:61:6d:6f:70:4f:e6:d9:da:e9:75: 33:59:4e:88:19:61:d4:b3:e6:5b:2c:45:14:f3:ef: a0:e4:15:c8:0b:30:d3:0b:f2:5f:26:f4:e1:4e:e6: 58:59:67:03:fe:08:d3:b0:5c:1d:4d:78:c9:49:7a: fd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D3:73:97:57:19:2F:F0:9D:10:CC:85:AA:A0:E9:C6:48:51:79:B1 X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e0:a8:91:8f:bc:dc:a5:9a:f4:eb:07:72:89:19:e5:49:76: f1:14:cf:47:50:18:47:b1:c8:fd:b4:97:2a:34:1d:b5:7b:ba: 62:19:d8:9d:d5:b1:8e:86:69:d9:39:15:fb:59:5e:4c:46:ed: 45:8d:a9:64:15:94:98:ba:f6:ec:68:00:cf:38:79:a8:fa:e0: 82:a2:fa:93:04:e0:2c:28:11:8b:4b:b4:9d:1e:1f:46:e2:57: 1c:65:53:38:10:db:d9:6b:29:64:69:3b:8d:38:7d:56:37:95: b9:c2:48:3c:41:c6:02:d0:3f:fc:dc:74:71:2f:59:c2:c0:c5: 02:d6:c4:5b:4a:8b:9c:90:1f:65:42:2a:42:51:bd:86:e2:4b: 05:7b:54:fd:73:3b:41:f4:1c:f8:ce:4b:7b:65:ce:c3:c6:b4: ef:a3:f5:89:91:1c:d4:a9:c6:00:72:d5:c9:8d:1c:a0:3f:87: f8:18:61:27:59:58:2d:14:24:e7:5f:23:64:14:dd:42:3e:35: eb:d4:d6:3b:1e:b0:48:f3:75:93:fd:6d:bd:1b:2e:c0:3f:6a: 94:02:b3:b2:0e:95:f5:53:07:ba:db:68:4f:d1:cc:47:05:9c: 81:6d:bd:4d:25:11:96:f4:9c:84:b7:77:5b:71:57:14:9b:1c: 92:d4:44:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG QUE4OENEODQwHhcNMjUwODIzMDU1NTE4WhcNMjUwODMwMDU1NTE4WjAYMRYwFAYD VQQDEw02OGE5NTdjNi04MDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Bm5peZk9tZVGMRovCvWBQcG5UsczJalUucjN3j/hGLrNJsDMA8KKqhNjAYu VIoy+xaZVtURi+xUn68oQkFGN6S3EViDrNA18wmvHmHUf9WHvX5atkYlmv8JAr7z x/kYB8SQ6C58k389CjflB4BKIuCjzMjJs+yyy9NhyEDjwmWkStePb2eY412GY5u3 Y4HJet/JkKJ5wAyNNHTUEBxlZne5kFJHqAlZjchKmkzvGgFqf7mCH5zQ0nTYVvyL drWI3Xr3rF+rLGFtb3BP5tna6XUzWU6IGWHUs+ZbLEUU8++g5BXICzDTC/JfJvTh TuZYWWcD/gjTsFwdTXjJSXr9nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7Tc5dX GS/wnRDMhaqg6cZIUXmxMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6 WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1 RkdwQU92cFZmRno2cUl6WVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo4KiRj7zcpZr06wdyiRnlSXbxFM9HUBhHscj9tJcqNB21e7piGdid 1bGOhmnZORX7WV5MRu1FjalkFZSYuvbsaADPOHmo+uCCovqTBOAsKBGLS7SdHh9G 4lccZVM4ENvZaylkaTuNOH1WN5W5wkg8QcYC0D/83HRxL1nCwMUC1sRbSouckB9l QipCUb2G4ksFe1T9cztB9Bz4zkt7Zc7DxrTvo/WJkRzUqcYActXJjRygP4f4GGEn WVgtFCTnXyNkFN1CPjXr1NY7HrBI83WT/W29Gy7AP2qUArOyDpX1Uwe622hP0cxH BZyBbb1NJRGW9JyEt3dbcVcUmxyS1EQn -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:58 2025 by rpki-client