$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json) Hash identifier: 2/Kg8nym68TAaRf4Z7v5TTskSp5supDwUMbsxQ/E/ec= Subject key identifier: 13:D2:CD:33:AC:A2:F8:4E:3F:35:6C:30:9F:84:96:5E:AC:8E:FD:11 Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Certificate serial: 2BD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft Manifest number: 2BD2 Signing time: Fri 22 Aug 2025 15:35:07 +0000 Manifest this update: Fri 22 Aug 2025 15:35:06 +0000 Manifest next update: Fri 29 Aug 2025 15:35:06 +0000 Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: LxWNRUuj6QgR8IF7bUS/0bPlY/eS3RFHzVVNuH5Ptng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11218 (0x2bd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Validity Not Before: Aug 22 15:35:06 2025 GMT Not After : Aug 29 15:35:06 2025 GMT Subject: CN=68a88e2a-1712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:dd:60:f7:61:ad:c4:4b:e8:63:75:a7:73:54: a5:8d:95:98:55:9b:87:84:e0:a0:37:43:50:74:ad: 6c:ca:fb:2f:64:b2:89:7f:f7:2c:68:33:2c:c5:11: db:62:7b:07:88:c2:ea:6a:a2:9a:b0:c1:fe:2b:e5: 17:03:7d:5d:cf:30:97:24:0f:d8:b1:ac:a8:a6:98: b0:ae:80:04:d4:8a:20:c6:5c:70:e9:78:f2:db:43: 8f:41:2d:c3:6e:49:b4:9b:77:4d:b4:02:bd:13:27: 0d:04:35:73:45:11:39:99:0d:b8:a6:72:b5:33:5f: e4:69:2d:1e:34:9a:0c:c1:61:94:59:9e:6a:48:63: d9:bf:ab:3f:b6:27:29:fd:bf:ef:47:d7:73:c5:0c: 4b:a2:00:66:9a:ca:be:c0:ac:de:40:2b:01:0d:ee: 87:fb:c0:fd:49:3d:30:2f:ca:cf:20:1a:5f:1b:a5: dd:33:8d:62:35:b0:2d:70:6d:6d:e8:d4:64:ab:ab: 2a:f3:07:b2:d8:ed:55:99:e7:8d:ce:35:3a:24:a5: 63:94:02:87:9c:f5:ae:21:42:25:2e:c4:dd:49:40: 22:14:81:06:15:28:1d:99:1d:8c:d5:ad:8e:dc:76: 4a:5b:f9:02:2c:fe:43:35:78:86:02:5b:d6:0b:30: 87:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D2:CD:33:AC:A2:F8:4E:3F:35:6C:30:9F:84:96:5E:AC:8E:FD:11 X509v3 Authority Key Identifier: keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:6c:ef:e7:09:70:17:75:92:21:6a:0e:a8:87:b6:3c:79:ac: 5b:cd:52:19:3b:8f:63:1e:11:4f:3f:a6:9b:78:f0:32:86:a1: 61:3a:77:30:b6:82:9d:c3:01:d2:86:da:37:f7:1f:17:2a:6b: 82:34:7e:81:93:37:97:2b:ce:14:85:7b:a6:c8:5d:7c:39:89: c4:7a:2a:e4:16:75:b6:df:47:c3:78:41:27:4a:51:08:30:5b: 34:ba:c9:a4:35:cd:36:d8:71:30:50:f8:4a:8f:35:de:71:aa: 94:cb:0b:ad:5e:4e:d1:ac:c7:cb:33:62:ed:c4:6a:7c:a5:0c: 65:29:9d:22:9f:c7:24:91:35:ed:00:d8:67:28:5d:90:a9:98: 3a:72:a1:11:98:65:14:a4:44:f4:1e:f5:e3:e5:c4:fd:47:eb: 9d:cc:f8:52:65:87:87:5f:fd:c6:6b:bf:a5:f1:e3:8d:ea:e9: 83:fb:70:b9:00:c0:30:bd:60:eb:fd:f6:49:b9:4f:49:e1:c8: da:e3:b6:74:80:69:47:41:e1:87:27:ce:f2:0b:a2:5c:19:6a: 3f:60:a3:c1:23:62:bd:bb:00:83:6c:15:3a:49:6d:fc:46:a5: e4:1d:44:87:2f:76:b5:45:92:dd:e1:9a:9f:d4:f3:dc:ae:e3: 10:34:02:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEM2NTU4RjhGQzBEOEQwNDI5RUQ3ODdFQUY5NjdCRUZD N0EwOURDMTMwHhcNMjUwODIyMTUzNTA2WhcNMjUwODI5MTUzNTA2WjAYMRYwFAYD VQQDEw02OGE4OGUyYS0xNzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA991g92GtxEvoY3Wnc1SljZWYVZuHhOCgN0NQdK1syvsvZLKJf/csaDMsxRHb YnsHiMLqaqKasMH+K+UXA31dzzCXJA/YsayoppiwroAE1Iogxlxw6Xjy20OPQS3D bkm0m3dNtAK9EycNBDVzRRE5mQ24pnK1M1/kaS0eNJoMwWGUWZ5qSGPZv6s/ticp /b/vR9dzxQxLogBmmsq+wKzeQCsBDe6H+8D9ST0wL8rPIBpfG6XdM41iNbAtcG1t 6NRkq6sq8wey2O1VmeeNzjU6JKVjlAKHnPWuIUIlLsTdSUAiFIEGFSgdmR2M1a2O 3HZKW/kCLP5DNXiGAlvWCzCH2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPSzTOs ovhOPzVsMJ+Ell6sjv0RMB8GA1UdIwQYMBaAFMZVj4/A2NBCnteH6vlnvvx6CdwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC80ODQ2MDRCMkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBFS2UxNGZxLVdlLV9Ib0oz Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsV1BqOERZMEVLZTE0ZnEtV2UtX0hvSjNCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC80ODQ2MDRCMkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBF S2UxNGZxLVdlLV9Ib0ozQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVbO/nCXAXdZIhag6oh7Y8eaxbzVIZO49jHhFPP6abePAyhqFhOncw toKdwwHShto39x8XKmuCNH6BkzeXK84UhXumyF18OYnEeirkFnW230fDeEEnSlEI MFs0usmkNc022HEwUPhKjzXecaqUywutXk7RrMfLM2LtxGp8pQxlKZ0in8ckkTXt ANhnKF2QqZg6cqERmGUUpET0HvXj5cT9R+udzPhSZYeHX/3Ga7+l8eON6umD+3C5 AMAwvWDr/fZJuU9J4cja47Z0gGlHQeGHJ87yC6JcGWo/YKPBI2K9uwCDbBU6SW38 RqXkHUSHL3a1RZLd4Zqf1PPcruMQNALu -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:32 2025 by rpki-client