$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: Te/0Yu1lSerWKGU/5vFuuV3eqwlCtClRPjER84tvN28= Subject key identifier: CD:23:61:85:9B:AD:38:1D:30:FF:37:F5:48:02:B7:D1:EA:BC:4E:C4 Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 34AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 34AE Signing time: Fri 22 Aug 2025 15:14:09 +0000 Manifest this update: Fri 22 Aug 2025 15:14:09 +0000 Manifest next update: Fri 29 Aug 2025 15:14:09 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: /wpji4jZ1VsK6O7HPyDIUIZzxo/tV7TLoyefLkLBT0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: Aug 22 15:14:09 2025 GMT Not After : Aug 29 15:14:09 2025 GMT Subject: CN=68a88941-6c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ab:b1:ee:58:73:65:5e:24:8e:9b:ca:eb:9c: cb:1e:b0:dc:09:67:fd:62:d8:62:c0:89:0c:d7:1e: 0a:ab:b0:07:8b:a1:8c:d3:9b:b9:2d:ac:16:cd:d1: 64:08:02:2d:96:e8:49:3c:ec:58:47:1d:91:33:e4: e0:70:a5:41:62:93:ab:f8:c1:62:51:44:ee:3f:1f: 08:9b:56:cf:57:56:4b:c2:7c:32:80:36:f0:bb:95: 34:ca:cf:8c:f7:5b:63:1f:98:db:68:e3:36:d8:98: ea:26:0d:5e:b4:ea:8d:4f:97:df:ac:14:b8:c0:9a: 1a:7e:71:8c:66:93:ff:98:e4:de:07:f0:e9:50:8d: 92:de:0d:e4:0c:2f:08:3b:f3:8f:ae:17:cb:b4:ff: 4f:b7:f5:dd:41:88:b9:7d:53:24:3d:1f:be:2b:a4: 6a:2d:09:1e:51:89:c0:45:a6:fd:57:65:ff:e7:24: aa:df:2e:3b:fe:f3:f3:e7:a1:5d:9a:06:b6:d7:21: 73:70:16:67:b9:d4:e5:2f:bd:2d:e1:8e:3d:3e:34: 1e:7c:d2:af:fc:fa:eb:14:23:72:c2:5e:c2:d4:b8: 59:32:76:37:78:6a:de:90:66:80:41:c8:cf:17:93: d2:9f:66:9d:99:76:30:97:5d:26:9c:6c:c2:3f:c3: 36:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:23:61:85:9B:AD:38:1D:30:FF:37:F5:48:02:B7:D1:EA:BC:4E:C4 X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:24:5b:c9:01:8b:2f:dc:2c:84:f9:f7:ce:07:f4:6d:f5:9c: 1e:5d:eb:90:09:c3:23:eb:bd:61:30:f6:d0:87:e0:ef:e8:37: d9:ff:ff:d4:f9:76:21:23:2d:5a:46:10:10:55:ec:b4:fa:5c: 51:d7:e8:83:55:9d:42:45:e0:d6:f0:d4:9d:1d:9a:50:d9:e1: 90:fc:cd:67:e7:d5:4f:50:4a:f5:bd:0f:68:3c:48:4d:fe:73: 70:18:77:82:88:6b:7e:13:05:eb:65:da:17:9c:1d:2a:d2:70: 15:4a:44:5c:e9:1f:25:3b:a0:d9:a1:8c:4b:46:ad:d4:f2:9a: f8:89:7b:2a:5d:94:ec:48:fa:bf:a0:8b:ea:48:0e:da:74:f7: e7:b4:1f:68:17:d6:b1:b3:3e:2c:a1:29:0f:9d:18:8f:11:77: ba:bf:81:73:ee:58:fe:bf:13:91:4f:84:10:79:d5:23:b3:54: 6d:6e:77:6f:15:e0:82:6d:84:b0:90:67:10:a5:e8:c3:aa:e0: 38:98:34:60:3a:f2:9b:08:74:3a:bc:1e:e4:74:ea:49:51:f4: d6:81:c1:c1:30:e1:bd:cb:79:c9:3e:3e:da:b3:64:b1:be:39: a1:d6:1f:8d:b5:43:fb:1b:79:90:84:c5:fb:c4:33:5d:1e:54: 7f:ca:86:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjUwODIyMTUxNDA5WhcNMjUwODI5MTUxNDA5WjAYMRYwFAYD VQQDEw02OGE4ODk0MS02YzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8qux7lhzZV4kjpvK65zLHrDcCWf9YthiwIkM1x4Kq7AHi6GM05u5LawWzdFk CAItluhJPOxYRx2RM+TgcKVBYpOr+MFiUUTuPx8Im1bPV1ZLwnwygDbwu5U0ys+M 91tjH5jbaOM22JjqJg1etOqNT5ffrBS4wJoafnGMZpP/mOTeB/DpUI2S3g3kDC8I O/OPrhfLtP9Pt/XdQYi5fVMkPR++K6RqLQkeUYnARab9V2X/5ySq3y47/vPz56Fd mga21yFzcBZnudTlL70t4Y49PjQefNKv/PrrFCNywl7C1LhZMnY3eGrekGaAQcjP F5PSn2admXYwl10mnGzCP8M2twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0jYYWb rTgdMP839UgCt9HqvE7EMB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaJFvJAYsv3CyE+ffOB/Rt9ZweXeuQCcMj671hMPbQh+Dv6DfZ///U +XYhIy1aRhAQVey0+lxR1+iDVZ1CReDW8NSdHZpQ2eGQ/M1n59VPUEr1vQ9oPEhN /nNwGHeCiGt+EwXrZdoXnB0q0nAVSkRc6R8lO6DZoYxLRq3U8pr4iXsqXZTsSPq/ oIvqSA7adPfntB9oF9axsz4soSkPnRiPEXe6v4Fz7lj+vxORT4QQedUjs1Rtbndv FeCCbYSwkGcQpejDquA4mDRgOvKbCHQ6vB7kdOpJUfTWgcHBMOG9y3nJPj7as2Sx vjmh1h+NtUP7G3mQhMX7xDNdHlR/yoap -----END CERTIFICATE-----Generated at Sat Aug 23 11:01:12 2025 by rpki-client