$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft File: xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json) Hash identifier: +YgZwQBI92LCcucdpDLGXDCvEt+r0b8E8cHM1W/WxVk= Subject key identifier: F3:5E:9A:77:5D:5F:9F:82:F6:E1:74:C2:3C:8F:2D:C4:F8:20:F6:3A Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D Certificate issuer: /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft Manifest number: 35 Signing time: Sat 23 Aug 2025 07:49:44 +0000 Manifest this update: Sat 23 Aug 2025 07:49:43 +0000 Manifest next update: Sat 30 Aug 2025 07:49:43 +0000 Files and hashes: 1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: zN+RPpAl0zbpLez1IYk6ich1Mnl2EHY+pyE3c1uQ+Bs=) 2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: C2K9dK4do/Lq7H5EaXQP1EBA+uUbAkgLMeJKgVTTBgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Validity Not Before: Aug 23 07:49:43 2025 GMT Not After : Aug 30 07:49:43 2025 GMT Subject: CN=68a97297-8f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:79:82:08:cb:66:ff:5c:50:3f:4b:a3:6c: 4f:7e:3b:2e:df:13:9b:10:26:47:66:f6:f4:6f:59: 9c:cd:0f:4a:0e:81:09:ae:48:5c:0a:00:53:dd:21: 24:1c:b8:9b:08:9b:5a:54:92:10:3a:31:41:4c:80: 52:f6:65:2f:8a:a0:b0:a1:32:f0:3f:64:30:c7:dc: ee:58:da:ea:6a:78:05:9e:52:6a:fd:59:d9:d9:76: 74:25:cd:dc:33:ec:99:e8:03:d1:3f:be:ed:b3:3a: 89:f3:70:69:48:b9:7a:6a:af:09:15:6d:7a:8e:91: 12:12:55:8f:f9:0c:15:a8:a1:39:28:7e:24:dc:ee: 8c:da:ea:c3:f9:30:fc:48:29:67:23:ae:87:36:fe: 6e:fe:e2:e5:7c:f3:65:9e:be:8f:1c:af:ec:13:ee: 46:c3:ac:d1:29:e1:4b:05:e0:f2:ba:65:a3:90:44: f8:8b:15:c4:a3:36:c6:15:e9:7e:3d:0b:75:4c:26: 84:ba:b1:68:30:95:26:f9:0f:83:40:6d:5a:4d:b9: 37:fe:ef:54:90:cf:93:80:78:c7:37:de:81:94:a9: d7:d4:d0:81:f6:9d:61:5f:6b:b3:9d:ed:20:cd:56: 24:c3:61:01:03:be:fe:5a:f4:5d:ad:80:c1:17:d7: 33:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5E:9A:77:5D:5F:9F:82:F6:E1:74:C2:3C:8F:2D:C4:F8:20:F6:3A X509v3 Authority Key Identifier: keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:b9:3b:fa:7e:d4:82:43:cc:b7:0b:87:ab:01:c9:76:b5:36: 6b:17:35:75:a7:a6:a4:fe:9f:ad:1f:ee:dc:c1:1b:50:a2:ac: c7:ed:c3:41:0a:6d:32:e7:ee:1f:f7:6f:95:54:4a:5a:8b:ff: bf:c9:26:a0:eb:34:d1:57:a8:8c:a6:cd:8d:ca:a0:de:11:2a: 5d:07:9d:1e:8a:15:14:a9:57:31:ed:f5:93:18:04:09:ce:ea: 2d:5e:28:07:29:b5:86:ba:7a:b6:05:21:37:88:7d:f0:a4:0e: 69:e0:f2:ff:35:e4:99:52:17:ff:9f:4f:92:2f:6c:a4:c4:49: 9a:42:ae:95:31:ec:5f:6d:e5:12:e1:3b:86:60:89:f5:dd:00: d6:ce:3d:26:f9:9d:1c:71:d7:63:46:88:5f:3f:07:06:63:ff: 2c:88:2f:4a:72:24:cf:a4:a9:fd:03:89:c8:37:af:de:53:90: 17:22:9c:8a:59:8d:a0:5c:27:10:d5:b1:01:4f:aa:bc:f3:11: 57:61:8c:5a:4c:1a:1c:81:b8:cc:60:38:d0:e5:4a:62:c6:e6: 47:1a:8c:cd:2b:5d:cc:45:be:7c:95:cd:91:d1:33:3b:a2:29: 6f:4c:51:d9:e3:37:19:ec:fa:62:47:d4:b6:23:30:b4:9f:17: bd:11:6e:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzMxMTExMC8GA1UEBRMoQzZERTM2QTRFNDVFN0E5OTFGQzQ0NEY4Q0IxQjQ1NUYx NzQ2MkM4RDAeFw0yNTA4MjMwNzQ5NDNaFw0yNTA4MzAwNzQ5NDNaMBgxFjAUBgNV BAMTDTY4YTk3Mjk3LThmNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfG3mCCMtm/1xQP0ujbE9+Oy7fE5sQJkdm9vRvWZzND0oOgQmuSFwKAFPdISQc uJsIm1pUkhA6MUFMgFL2ZS+KoLChMvA/ZDDH3O5Y2upqeAWeUmr9WdnZdnQlzdwz 7JnoA9E/vu2zOonzcGlIuXpqrwkVbXqOkRISVY/5DBWooTkofiTc7oza6sP5MPxI KWcjroc2/m7+4uV882Wevo8cr+wT7kbDrNEp4UsF4PK6ZaOQRPiLFcSjNsYV6X49 C3VMJoS6sWgwlSb5D4NAbVpNuTf+71SQz5OAeMc33oGUqdfU0IH2nWFfa7Od7SDN ViTDYQEDvv5a9F2tgMEX1zPLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU816ad11f n4L24XTCPI8txPgg9jowHwYDVR0jBBgwFoAUxt42pOReepkfxET4yxtFXxdGLI0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDMzExL0YxRjdBRjI2MkZC RjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBrZnhFVDR5eHRGWHhkR0xJ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHQ0MnBPUmVlcGtmeEVUNHl4dEZYeGRHTEkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND MzExL0YxRjdBRjI2MkZCRjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBr ZnhFVDR5eHRGWHhkR0xJMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFa5O/p+1IJDzLcLh6sByXa1NmsXNXWnpqT+n60f7tzBG1CirMftw0EK bTLn7h/3b5VUSlqL/7/JJqDrNNFXqIymzY3KoN4RKl0HnR6KFRSpVzHt9ZMYBAnO 6i1eKAcptYa6erYFITeIffCkDmng8v815JlSF/+fT5IvbKTESZpCrpUx7F9t5RLh O4ZgifXdANbOPSb5nRxx12NGiF8/BwZj/yyIL0pyJM+kqf0Dicg3r95TkBcinIpZ jaBcJxDVsQFPqrzzEVdhjFpMGhyBuMxgONDlSmLG5kcajM0rXcxFvnyVzZHRMzui KW9MUdnjNxns+mJH1LYjMLSfF70RbkU= -----END CERTIFICATE-----Generated at Sun Aug 24 00:36:56 2025 by rpki-client