$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json) Hash identifier: QdZFH87e9JZQLCv2fKPjmQa1FQX+HxSU6FUBJDO4ZO0= Subject key identifier: 15:63:11:6C:47:BB:79:48:6E:A9:53:73:09:17:E5:27:6E:65:D3:51 Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Certificate serial: 12DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft Manifest number: 12DC Signing time: Fri 22 Aug 2025 17:10:31 +0000 Manifest this update: Fri 22 Aug 2025 17:10:30 +0000 Manifest next update: Fri 29 Aug 2025 17:10:30 +0000 Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: Uoc2sjlPHfq3Z74IqifGlAt1cBoeGCo674u5bGoe9nY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4830 (0x12de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Validity Not Before: Aug 22 17:10:30 2025 GMT Not After : Aug 29 17:10:30 2025 GMT Subject: CN=68a8a487-0b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e9:11:bc:6e:c3:5c:67:88:e1:49:b2:ba:df: 8e:86:bf:24:69:d8:5e:6c:c0:23:b7:e2:26:70:c4: cf:80:3a:3b:10:4e:c7:71:ed:c4:70:1a:b0:f6:be: bc:aa:df:40:90:3d:c9:a4:fa:0a:43:c4:6a:74:62: 41:36:5f:1b:05:5b:15:e9:0a:e9:9f:f9:70:41:e7: e4:05:4c:d4:94:04:d2:99:4d:23:97:86:23:29:26: 6d:f6:37:b1:87:0f:b1:3b:40:2b:2e:66:3f:45:3b: a5:8e:d8:09:9a:34:62:2f:1c:91:fb:a2:74:d9:60: 5a:bb:75:70:72:f3:d4:48:00:0d:01:f7:cb:7f:df: 48:bc:df:1e:10:79:85:a0:16:e6:03:d0:05:89:8a: d5:c7:b8:9b:9d:17:32:fc:f4:83:8d:f8:98:2d:fd: 57:2e:0b:26:70:3c:16:ca:d4:69:7f:62:72:06:c2: a2:aa:ef:be:68:b1:ac:1a:f4:43:5b:a6:8d:b3:3d: 6d:c3:52:87:19:47:0c:6f:2a:db:8e:f1:2c:1d:9d: 9d:64:b8:af:2f:db:2d:23:d0:ad:17:10:2d:85:23: f1:13:82:81:31:a5:94:f7:87:6d:5a:c6:7a:ac:d6: 82:19:b5:77:de:10:6d:68:ce:f3:c2:9a:c8:fe:c6: 26:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:63:11:6C:47:BB:79:48:6E:A9:53:73:09:17:E5:27:6E:65:D3:51 X509v3 Authority Key Identifier: keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:e7:7b:f5:51:ef:bd:1e:2b:1f:b5:2a:26:ae:ca:1b:68:fc: c5:18:4c:de:95:e3:d0:d4:41:55:86:48:c0:ff:42:e1:c3:e0: 42:af:e8:74:a1:86:87:4f:90:ed:ab:26:17:fb:3f:65:94:ab: 8c:54:4b:43:26:4a:56:5e:45:ba:37:ff:12:49:31:cd:a9:48: 5c:56:68:d4:dd:61:2d:2f:51:cd:61:50:81:4c:a5:cb:19:e4: 68:3e:17:10:08:55:73:0f:16:65:16:fe:3b:b8:f5:43:10:31: 40:34:cb:7f:84:3c:50:b6:76:5c:d7:5d:0f:c0:f0:99:e7:cf: af:bb:98:16:04:43:cc:bd:79:fa:f7:02:82:ef:19:30:fc:50: df:b7:3d:d8:d1:14:47:be:31:5d:09:70:f9:6f:6c:78:63:fc: d4:a3:ed:21:b8:e8:20:f0:c3:c6:16:ad:ff:f0:e8:0a:9d:6c: cd:c6:d4:96:84:d9:db:ac:a2:ec:fa:4a:88:fe:6c:f3:a3:05: 12:61:44:7e:8d:d4:ce:a0:5e:8d:6f:ec:d0:e5:b6:02:7a:47: c7:2f:c6:39:3d:6c:af:50:07:ab:c7:5e:9b:50:34:c5:37:72: ab:a6:f3:04:51:f7:58:19:4f:b9:12:94:67:1e:74:96:38:bc: b0:1a:c4:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMzAxMTAvBgNVBAUTKDVDMjI1MDE3Q0NDOTYyQjBFNzM5MEIzMENGMEE1NjIy RjdDREZBRUQwHhcNMjUwODIyMTcxMDMwWhcNMjUwODI5MTcxMDMwWjAYMRYwFAYD VQQDEw02OGE4YTQ4Ny0wYjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOkRvG7DXGeI4Umyut+Ohr8kadhebMAjt+ImcMTPgDo7EE7Hce3EcBqw9r68 qt9AkD3JpPoKQ8RqdGJBNl8bBVsV6Qrpn/lwQefkBUzUlATSmU0jl4YjKSZt9jex hw+xO0ArLmY/RTuljtgJmjRiLxyR+6J02WBau3VwcvPUSAANAffLf99IvN8eEHmF oBbmA9AFiYrVx7ibnRcy/PSDjfiYLf1XLgsmcDwWytRpf2JyBsKiqu++aLGsGvRD W6aNsz1tw1KHGUcMbyrbjvEsHZ2dZLivL9stI9CtFxAthSPxE4KBMaWU94dtWsZ6 rNaCGbV33hBtaM7zwprI/sYmmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVjEWxH u3lIbqlTcwkX5SduZdNRMB8GA1UdIwQYMBaAFFwiUBfMyWKw5zkLMM8KViL3zfrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMzMC9FQUQ4NzYzQ0Mw OTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6SllyRG5PUXN3endwV0l2Zk4t dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDSlFGOHpKWXJEbk9Rc3d6d3BXSXZmTi11MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMzMC9FQUQ4NzYzQ0MwOTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6Slly RG5PUXN3endwV0l2Zk4tdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz53v1Ue+9HisftSomrsobaPzFGEzelePQ1EFVhkjA/0Lhw+BCr+h0 oYaHT5DtqyYX+z9llKuMVEtDJkpWXkW6N/8SSTHNqUhcVmjU3WEtL1HNYVCBTKXL GeRoPhcQCFVzDxZlFv47uPVDEDFANMt/hDxQtnZc110PwPCZ58+vu5gWBEPMvXn6 9wKC7xkw/FDftz3Y0RRHvjFdCXD5b2x4Y/zUo+0huOgg8MPGFq3/8OgKnWzNxtSW hNnbrKLs+kqI/mzzowUSYUR+jdTOoF6Nb+zQ5bYCekfHL8Y5PWyvUAerx16bUDTF N3KrpvMEUfdYGU+5EpRnHnSWOLywGsTz -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:46 2025 by rpki-client