$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: UISq6w+6VriI9JgfEFv0DJoZHr7CxgVlz6+fxbEzvHk= Subject key identifier: 3E:7A:2C:54:49:27:42:D6:BA:8B:09:C5:E9:E0:88:3F:3A:9E:F9:3E Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0C6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0C65 Signing time: Fri 22 Aug 2025 18:33:23 +0000 Manifest this update: Fri 22 Aug 2025 18:33:22 +0000 Manifest next update: Fri 29 Aug 2025 18:33:22 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: 3fPY5bhTbNWfF1Olu7Ssv9DPcLiB9WRseK/BJo2zph0=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: jepyyGmhyczAJbapeZ5nuaRxeukad7rFEbIHfvNySKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3180 (0xc6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: Aug 22 18:33:22 2025 GMT Not After : Aug 29 18:33:22 2025 GMT Subject: CN=68a8b7f3-5195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:18:13:87:f3:e5:99:2d:3b:16:fe:fd:01:a1: 49:b6:90:7b:a9:cb:f3:71:7d:15:0c:31:58:4a:9a: c4:01:03:37:6e:70:5a:cc:74:c6:34:04:16:76:ad: 86:a6:6f:58:59:c4:28:a0:5f:0e:ad:68:44:51:58: 14:fd:ca:5c:c1:37:de:6c:75:5c:4f:d6:13:c2:81: 64:2d:fb:54:f8:69:01:aa:62:31:6d:1a:23:44:fd: e5:d6:61:7b:51:d7:62:2c:0a:48:5d:45:dd:0b:03: ba:5b:5a:9b:61:ae:0e:6b:73:8a:ca:f7:0b:b8:c1: 32:03:9b:ab:8e:12:88:0f:19:08:17:73:1c:1f:d9: bd:35:87:9c:8c:52:7c:40:80:d3:37:16:a2:a9:dc: 31:f2:85:a7:6b:38:76:37:a8:b2:29:19:79:ce:de: 89:2c:24:cb:62:64:60:97:23:ff:ba:f5:d8:aa:5a: db:40:5e:dc:5c:49:82:37:60:b9:2f:95:49:44:69: b8:63:b2:f9:2f:c8:cb:db:3b:9f:fa:4f:6c:d3:48: 6e:58:6d:07:7c:f3:e0:56:87:92:f6:49:2e:ef:c2: 0f:a5:71:8f:8a:ce:d3:a7:f1:e8:c9:1e:c2:08:d5: eb:c4:02:4f:9b:a3:c0:14:74:8f:62:ae:28:66:ec: 14:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7A:2C:54:49:27:42:D6:BA:8B:09:C5:E9:E0:88:3F:3A:9E:F9:3E X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:d7:18:ed:0d:58:26:45:39:12:fb:f1:a1:eb:36:5d:19:b0: 32:0a:50:d2:3a:d5:d5:e5:94:f4:d8:ef:c8:9e:cd:64:9c:ce: cf:e5:84:79:0d:61:8e:f2:8b:b4:c0:b2:c2:8a:7c:ea:46:b3: 70:d3:7a:ff:fd:e0:d3:af:d4:37:8e:7d:f1:86:b4:b4:91:c7: 13:c1:57:e3:09:e0:67:9f:54:bd:91:26:6a:14:61:fc:f9:f5: 68:09:15:07:7c:9e:18:0d:24:4d:a4:51:98:6e:7d:9c:6c:fe: a7:10:04:23:dc:c3:b4:1c:2f:88:82:46:09:18:a3:df:96:85: 16:ad:fc:5c:59:fa:da:24:16:6f:76:75:44:cb:bc:a9:93:42: 21:9d:e6:1c:cc:17:8c:3a:4d:20:c2:bc:c3:01:d5:08:a9:3f: e9:32:64:3a:92:16:e9:5e:76:ac:1d:30:02:20:7e:93:f0:80: 37:1b:21:24:4e:e6:b4:bd:06:f3:73:cc:af:92:3a:4c:5a:7f: c0:ed:3b:3e:dd:ed:9b:3c:e5:5f:a6:f4:c8:a0:54:f1:f2:d9: b4:c9:6b:f3:cf:36:67:75:fe:a7:ec:08:a5:b8:d3:97:67:3a: 6b:96:cd:f7:3d:8f:07:0a:1b:43:41:7e:b9:7e:57:18:67:cc: 42:82:10:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjUwODIyMTgzMzIyWhcNMjUwODI5MTgzMzIyWjAYMRYwFAYD VQQDEw02OGE4YjdmMy01MTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBgTh/PlmS07Fv79AaFJtpB7qcvzcX0VDDFYSprEAQM3bnBazHTGNAQWdq2G pm9YWcQooF8OrWhEUVgU/cpcwTfebHVcT9YTwoFkLftU+GkBqmIxbRojRP3l1mF7 UddiLApIXUXdCwO6W1qbYa4Oa3OKyvcLuMEyA5urjhKIDxkIF3McH9m9NYecjFJ8 QIDTNxaiqdwx8oWnazh2N6iyKRl5zt6JLCTLYmRglyP/uvXYqlrbQF7cXEmCN2C5 L5VJRGm4Y7L5L8jL2zuf+k9s00huWG0HfPPgVoeS9kku78IPpXGPis7Tp/HoyR7C CNXrxAJPm6PAFHSPYq4oZuwUkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD56LFRJ J0LWuosJxengiD86nvk+MB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW1xjtDVgmRTkS+/Gh6zZdGbAyClDSOtXV5ZT02O/Ins1knM7P5YR5 DWGO8ou0wLLCinzqRrNw03r//eDTr9Q3jn3xhrS0kccTwVfjCeBnn1S9kSZqFGH8 +fVoCRUHfJ4YDSRNpFGYbn2cbP6nEAQj3MO0HC+IgkYJGKPfloUWrfxcWfraJBZv dnVEy7ypk0IhneYczBeMOk0gwrzDAdUIqT/pMmQ6khbpXnasHTACIH6T8IA3GyEk Tua0vQbzc8yvkjpMWn/A7Ts+3e2bPOVfpvTIoFTx8tm0yWvzzzZndf6n7AiluNOX Zzprls33PY8HChtDQX65flcYZ8xCghDa -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:43 2025 by rpki-client