$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft File: xqIW5CMmizknfcEi8-Gq2GxtmkM.mft (raw, json) Hash identifier: xw7a6no2pH7NNxLcsC/T24YWjt55SOw6zMc1+DN4rH4= Subject key identifier: BA:B2:97:A5:2E:BE:A7:BF:10:42:8A:4E:DB:75:83:FC:4A:DB:01:65 Authority key identifier: C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 Certificate issuer: /CN=A9135FB6/serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft Manifest number: 8B Signing time: Sat 23 Aug 2025 06:47:33 +0000 Manifest this update: Sat 23 Aug 2025 06:47:33 +0000 Manifest next update: Sat 30 Aug 2025 06:47:33 +0000 Files and hashes: 1: xqIW5CMmizknfcEi8-Gq2GxtmkM.crl (hash: rE7mGK8/7Nvuh1+8IhkghNJHiu+zB+iwXphWO6hIF/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135FB6, serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Validity Not Before: Aug 23 06:47:33 2025 GMT Not After : Aug 30 06:47:33 2025 GMT Subject: CN=68a96405-19b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b2:7b:a3:3f:6c:9d:50:55:7b:e9:0f:c2:46: 6c:b5:a0:e8:05:e7:b8:85:56:42:a2:4d:e5:ef:d5: 8e:22:2f:45:70:1c:8c:ae:ef:e3:28:90:5e:0b:4e: ab:c9:a3:0b:2b:7b:0c:cc:f4:94:02:3d:ba:c1:13: 5e:26:b8:a3:68:b1:ba:46:3c:48:4d:58:a4:a3:f1: de:26:93:95:ee:0b:8c:a2:74:59:b9:94:33:c2:38: 1e:bb:a3:6a:85:4f:e8:4a:66:65:60:36:4e:ab:f7: 50:f7:0f:98:9f:6b:65:98:ef:96:13:6b:f4:b2:8d: f1:63:c8:aa:d6:5b:b2:a2:1e:3a:de:3f:4c:d7:b5: 3a:d5:24:29:eb:ff:2a:b4:c9:88:28:79:aa:4d:e1: 56:0c:4c:ce:bb:05:07:fa:43:4e:98:ef:62:49:4e: d6:94:ee:ee:2a:d4:90:b7:ca:30:85:bc:96:8b:ce: 48:c9:5b:5f:f5:8f:f8:3a:e4:84:24:77:a1:8b:98: fa:ee:f8:6e:22:36:28:c7:4c:ec:46:d5:f3:6d:89: 6c:3a:3a:84:fc:8f:31:6c:9e:a6:68:20:a9:db:41: f2:0c:c8:a3:4d:3c:7f:8a:f6:c7:56:63:0d:61:bc: ce:b5:d0:da:99:8d:86:fd:61:64:5c:f5:ea:cc:2c: 3d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B2:97:A5:2E:BE:A7:BF:10:42:8A:4E:DB:75:83:FC:4A:DB:01:65 X509v3 Authority Key Identifier: keyid:C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:10:7c:ef:0b:52:0d:c0:5a:7a:f2:50:bf:7c:47:48:d7:b7: e0:f2:0a:5c:45:fa:97:30:23:22:a1:32:0d:56:98:fc:a8:f1: 81:af:91:2e:0b:da:1b:7a:c7:d8:89:95:8b:b1:08:55:56:82: 00:6f:f1:15:52:64:23:2e:bf:9a:12:6d:ca:4e:56:4b:d2:1c: 88:77:54:98:11:2b:b0:1d:8c:4b:74:45:0b:5c:8d:11:d2:f4: f6:31:27:db:c0:be:6e:f8:46:f3:d2:7c:51:5d:96:7c:68:53: 55:f5:48:4d:d0:46:fe:e9:76:71:40:f0:5e:57:9e:56:1e:15: 5f:be:b1:d3:22:bf:85:13:00:28:ea:62:e9:39:0e:46:28:f6: 36:68:0f:26:e5:cd:cb:15:cf:b5:f4:29:4c:19:30:a2:43:1b: 82:4a:91:44:a6:c7:1d:f1:88:22:a6:90:20:00:d5:80:83:39: af:af:3a:b6:c1:28:a4:a3:2c:8c:e7:d1:30:7f:de:48:7b:19: ab:10:13:91:6e:a0:97:ae:c3:7b:6d:59:63:7c:a3:a0:53:12: 14:df:d6:6a:cb:c1:1b:aa:15:c9:9a:42:bf:4b:55:74:80:eb: f4:c5:6a:96:87:92:1b:15:2d:c1:90:7c:17:08:da:9b:92:b7: 58:9e:77:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGQjYxMTAvBgNVBAUTKEM2QTIxNkU0MjMyNjhCMzkyNzdEQzEyMkYzRTFBQUQ4 NkM2RDlBNDMwHhcNMjUwODIzMDY0NzMzWhcNMjUwODMwMDY0NzMzWjAYMRYwFAYD VQQDEw02OGE5NjQwNS0xOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rJ7oz9snVBVe+kPwkZstaDoBee4hVZCok3l79WOIi9FcByMru/jKJBeC06r yaMLK3sMzPSUAj26wRNeJrijaLG6RjxITViko/HeJpOV7guMonRZuZQzwjgeu6Nq hU/oSmZlYDZOq/dQ9w+Yn2tlmO+WE2v0so3xY8iq1luyoh463j9M17U61SQp6/8q tMmIKHmqTeFWDEzOuwUH+kNOmO9iSU7WlO7uKtSQt8owhbyWi85IyVtf9Y/4OuSE JHehi5j67vhuIjYox0zsRtXzbYlsOjqE/I8xbJ6maCCp20HyDMijTTx/ivbHVmMN YbzOtdDamY2G/WFkXPXqzCw99wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqyl6Uu vqe/EEKKTtt1g/xK2wFlMB8GA1UdIwQYMBaAFMaiFuQjJos5J33BIvPhqthsbZpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUZCNi84RUMzNURFNEFD NjQxMUVGQjY4NDI2N0JDNEY5QUUwMi94cUlXNUNNbWl6a25mY0VpOC1HcTJHeHRt a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxSVc1Q01taXprbmZjRWk4LUdxMkd4dG1rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUZCNi84RUMzNURFNEFDNjQxMUVGQjY4NDI2N0JDNEY5QUUwMi94cUlXNUNNbWl6 a25mY0VpOC1HcTJHeHRta00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEEHzvC1INwFp68lC/fEdI17fg8gpcRfqXMCMioTINVpj8qPGBr5Eu C9obesfYiZWLsQhVVoIAb/EVUmQjLr+aEm3KTlZL0hyId1SYESuwHYxLdEULXI0R 0vT2MSfbwL5u+Ebz0nxRXZZ8aFNV9UhN0Eb+6XZxQPBeV55WHhVfvrHTIr+FEwAo 6mLpOQ5GKPY2aA8m5c3LFc+19ClMGTCiQxuCSpFEpscd8YgippAgANWAgzmvrzq2 wSikoyyM59Ewf95IexmrEBORbqCXrsN7bVljfKOgUxIU39Zqy8EbqhXJmkK/S1V0 gOv0xWqWh5IbFS3BkHwXCNqbkrdYnncI -----END CERTIFICATE-----Generated at Sat Aug 23 20:25:54 2025 by rpki-client