$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft File: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft (raw, json) Hash identifier: iECBk+9JZMd0Wx3VjIsU+poknLJs3d2xOf99Qq/wJ3s= Subject key identifier: 7F:F1:D3:4B:A5:C2:03:69:5D:4F:34:98:9B:BA:AA:95:BB:D6:9E:AE Authority key identifier: C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 Certificate issuer: /CN=A9148E62/serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft Manifest number: 02C3 Signing time: Sat 23 Aug 2025 01:40:34 +0000 Manifest this update: Sat 23 Aug 2025 01:40:34 +0000 Manifest next update: Sat 30 Aug 2025 01:40:34 +0000 Files and hashes: 1: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl (hash: d/3SJ1fDZ7UY2rHak8FKZANt/stQfkjw5DK7Egi0hyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E62, serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Validity Not Before: Aug 23 01:40:34 2025 GMT Not After : Aug 30 01:40:34 2025 GMT Subject: CN=68a91c12-fc14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:25:2d:02:62:85:8c:e1:96:5e:dd:e2:26:22: 6b:a6:82:eb:9e:7b:16:e0:8b:2a:30:64:b4:33:df: 96:3f:c4:50:ab:1f:b9:a2:39:79:8a:a3:1d:d4:2b: 4e:d8:eb:41:72:cc:0a:37:a4:5e:a5:40:d5:72:db: bd:9d:f5:5e:0a:76:cd:01:b8:ce:18:75:06:32:f5: 9e:a6:64:9f:f9:a1:03:a5:26:9f:01:cb:83:52:91: 14:c1:07:f7:d0:c2:18:11:8a:1a:98:27:12:42:6e: 3f:3d:f7:a9:88:40:a2:15:fc:28:fa:f2:ce:30:c0: 6a:ae:b1:2c:3c:0c:14:39:87:3c:69:f6:87:9c:86: e0:f4:b8:83:e4:b9:71:48:40:57:04:36:53:34:32: 5c:4a:c0:59:a4:e5:b6:c5:7f:63:de:e7:de:d2:91: c0:64:b3:21:c0:99:2b:5c:78:3e:6c:87:e1:97:48: 71:9a:f6:5a:97:e6:6b:3d:be:70:4d:d3:f5:a0:01: 41:85:f3:52:e7:17:d9:b9:23:90:9c:0b:65:01:d8: ae:95:ca:7d:31:42:e5:4c:61:25:73:51:a8:47:3f: 74:20:52:2d:aa:f4:c1:f0:ba:53:3b:ab:b2:1c:13: 51:b0:db:a4:bc:16:59:21:b8:87:2d:ac:a0:68:a4: fb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F1:D3:4B:A5:C2:03:69:5D:4F:34:98:9B:BA:AA:95:BB:D6:9E:AE X509v3 Authority Key Identifier: keyid:C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:70:2e:4b:a0:fc:1a:63:09:cd:3d:92:84:97:59:92:c2:8b: 0e:bc:0a:5f:fc:13:3b:37:44:3d:06:e0:4e:07:15:cb:0f:0c: 93:bc:40:0f:1d:5f:3d:a8:f2:bc:a8:c2:48:c1:87:e1:ec:0e: 41:5c:e4:e0:51:59:9e:fc:cb:d1:f1:15:57:37:26:76:63:00: 0f:3b:8a:13:ac:00:79:4d:aa:7d:6f:eb:61:6d:c0:c6:af:e2: ef:27:c1:49:be:ae:d5:68:de:32:4f:d0:e3:71:02:d6:6d:22: 09:2d:e0:4e:3d:27:08:9b:47:8b:49:87:1a:0d:e7:a3:37:c5: 89:ee:4e:c5:83:1d:d5:e1:1b:4d:0a:b9:29:ab:d3:74:fe:0d: 75:5d:a5:be:df:71:af:70:2f:a3:1d:18:d8:00:21:38:78:cd: 7c:ec:af:22:d5:14:0c:c5:d9:1e:91:75:5b:fb:f5:d1:de:ca: 43:1e:ab:f2:06:4f:51:86:ef:c4:39:77:81:7e:0d:c4:1c:b0: d2:97:d1:ad:a3:21:17:bb:f7:f9:1e:73:06:44:97:4a:9d:6d: 78:cf:b3:95:99:17:dc:4e:b8:3b:e3:9e:f4:ea:4a:0a:da:4a: 6c:53:68:6c:89:5e:4d:ad:71:43:34:30:43:f8:8e:f9:26:b5: d6:a7:ee:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFNjIxMTAvBgNVBAUTKEM2MzA1NjA0MUMwRjkwQjkyQjJCODdEQkZGQTk3RTNF OURBMDI4RDQwHhcNMjUwODIzMDE0MDM0WhcNMjUwODMwMDE0MDM0WjAYMRYwFAYD VQQDEw02OGE5MWMxMi1mYzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6CUtAmKFjOGWXt3iJiJrpoLrnnsW4IsqMGS0M9+WP8RQqx+5ojl5iqMd1CtO 2OtBcswKN6RepUDVctu9nfVeCnbNAbjOGHUGMvWepmSf+aEDpSafAcuDUpEUwQf3 0MIYEYoamCcSQm4/PfepiECiFfwo+vLOMMBqrrEsPAwUOYc8afaHnIbg9LiD5Llx SEBXBDZTNDJcSsBZpOW2xX9j3ufe0pHAZLMhwJkrXHg+bIfhl0hxmvZal+ZrPb5w TdP1oAFBhfNS5xfZuSOQnAtlAdiulcp9MULlTGElc1GoRz90IFItqvTB8LpTO6uy HBNRsNukvBZZIbiHLaygaKT78QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/x00ul wgNpXU80mJu6qpW71p6uMB8GA1UdIwQYMBaAFMYwVgQcD5C5KyuH2/+pfj6doCjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU2Mi9ENkI5Nzk2MjAy QTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtMa3JLNGZiXzZsLVBwMmdL TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqQldCQndQa0xrcks0ZmJfNmwtUHAyZ0tOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU2Mi9ENkI5Nzk2MjAyQTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtM a3JLNGZiXzZsLVBwMmdLTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmcC5LoPwaYwnNPZKEl1mSwosOvApf/BM7N0Q9BuBOBxXLDwyTvEAP HV89qPK8qMJIwYfh7A5BXOTgUVme/MvR8RVXNyZ2YwAPO4oTrAB5Tap9b+thbcDG r+LvJ8FJvq7VaN4yT9DjcQLWbSIJLeBOPScIm0eLSYcaDeejN8WJ7k7Fgx3V4RtN Crkpq9N0/g11XaW+33GvcC+jHRjYACE4eM187K8i1RQMxdkekXVb+/XR3spDHqvy Bk9Rhu/EOXeBfg3EHLDSl9GtoyEXu/f5HnMGRJdKnW14z7OVmRfcTrg745706koK 2kpsU2hsiV5NrXFDNDBD+I75JrXWp+74 -----END CERTIFICATE-----Generated at Sun Aug 24 01:00:33 2025 by rpki-client