$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft File: XoJBeVOzWp-LWaQuyUb00CTYd2s.mft (raw, json) Hash identifier: OnnmXSvDb+EprlLjZOExgQ+/hRtUMcjxfNX6YugFCT4= Subject key identifier: A2:1B:3A:3C:6E:6B:7C:19:B0:A4:2D:F3:82:05:A6:3C:B3:F9:D1:16 Authority key identifier: 5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B Certificate issuer: /CN=A915B2F1/serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B Certificate serial: 0673 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft Manifest number: 066E Signing time: Fri 22 Aug 2025 22:38:21 +0000 Manifest this update: Fri 22 Aug 2025 22:38:21 +0000 Manifest next update: Fri 29 Aug 2025 22:38:21 +0000 Files and hashes: 1: XoJBeVOzWp-LWaQuyUb00CTYd2s.crl (hash: RJ7DR3Enc2V206bLBXyDX10ZWf94hGnViLhbVUWaDfA=) 2: 9378220A8DF211EBADEDD212C4F9AE02.roa (hash: VBf2KoYNobofH3/9baJ/IEUrVzYCh2sv0jk4TufySgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1651 (0x673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2F1, serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B Validity Not Before: Aug 22 22:38:21 2025 GMT Not After : Aug 29 22:38:21 2025 GMT Subject: CN=68a8f15d-3ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:b6:e4:d1:40:c4:04:78:1e:05:f3:47:0e: 7a:3a:d4:6c:6c:67:ca:f3:7e:83:ae:b8:37:ee:e3: 39:fb:36:aa:06:4d:08:c6:5a:2e:12:84:00:27:65: 6c:92:99:e6:15:7a:f2:b7:20:9c:11:81:ba:4a:c4: 15:3d:a7:5c:ba:98:e4:d5:c6:5e:75:b1:66:1e:b8: e0:cc:c0:a0:f3:2e:26:84:df:b7:50:0a:f5:07:18: bc:9e:2d:6c:b7:4e:4d:08:91:eb:b0:40:d6:9b:db: 6f:bb:8f:51:22:0a:a0:7c:8d:9b:49:23:90:34:e6: a0:a5:bf:e3:f2:90:a0:18:67:9b:ea:12:4d:fc:00: 05:cf:66:1e:39:ab:63:f4:68:9b:12:f9:a4:4d:24: 8f:96:38:1e:ec:c2:de:e6:e1:93:6e:d4:53:0e:e7: b8:c7:56:08:8b:81:37:41:82:a1:57:17:0f:51:25: 22:0b:a5:9f:84:91:12:b5:e1:79:12:4a:57:fe:ff: 9d:f8:23:49:64:ed:e1:30:b0:ab:ec:50:ce:74:9f: bd:a7:10:d8:f3:0f:bc:79:64:19:3d:b7:dc:d1:14: 17:f3:5c:49:f6:05:72:ab:5d:ee:66:41:79:95:62: 3e:bc:38:5d:a9:99:a5:3a:6a:57:d4:4b:ba:14:c9: 31:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1B:3A:3C:6E:6B:7C:19:B0:A4:2D:F3:82:05:A6:3C:B3:F9:D1:16 X509v3 Authority Key Identifier: keyid:5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:88:bb:37:96:64:5c:23:ce:d3:20:f1:88:0d:05:b1:03:c4: 08:80:37:22:ff:8b:ce:8a:66:60:cc:e5:a3:42:f3:b0:eb:4b: f0:af:62:4b:e0:e1:44:96:51:bd:2e:60:21:dd:25:0b:0a:0f: f2:30:6d:cb:9b:d2:c2:c1:48:ed:c4:42:7a:f3:f2:97:48:14: 7a:ff:b8:30:b5:95:4f:c2:a5:8f:43:31:6d:ff:8d:00:41:5b: b7:6b:40:90:65:49:9e:fd:b6:0a:e6:82:b8:fe:13:f0:64:67: 50:0d:04:05:09:0d:0d:b9:2a:42:46:9a:1d:43:f5:64:dd:0b: 21:23:c8:7c:8f:bc:03:b8:63:c3:d2:85:8a:78:39:a8:f9:35: 17:6b:c2:90:d7:88:ba:33:9d:44:e8:0c:5a:b4:85:fa:e9:20: 65:e5:6f:4c:f7:1b:d7:53:52:05:a6:0a:fc:60:24:c0:bb:68: cb:71:33:70:94:ff:dd:19:75:33:8e:c6:b0:b3:6e:c1:d2:17: 3b:a2:92:a5:a5:a9:76:16:39:11:31:29:12:34:96:f4:57:98: b6:86:ff:09:94:cd:c4:58:de:8a:da:66:8d:e0:f7:96:93:09: 28:ae:51:2d:67:65:02:9d:99:77:55:64:a7:27:3d:79:03:f2: d7:29:a3:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyRjExMTAvBgNVBAUTKDVFODI0MTc5NTNCMzVBOUY4QjU5QTQyRUM5NDZGNEQw MjREODc3NkIwHhcNMjUwODIyMjIzODIxWhcNMjUwODI5MjIzODIxWjAYMRYwFAYD VQQDEw02OGE4ZjE1ZC0zZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6+25NFAxAR4HgXzRw56OtRsbGfK836Drrg37uM5+zaqBk0IxlouEoQAJ2Vs kpnmFXrytyCcEYG6SsQVPadcupjk1cZedbFmHrjgzMCg8y4mhN+3UAr1Bxi8ni1s t05NCJHrsEDWm9tvu49RIgqgfI2bSSOQNOagpb/j8pCgGGeb6hJN/AAFz2YeOatj 9GibEvmkTSSPljge7MLe5uGTbtRTDue4x1YIi4E3QYKhVxcPUSUiC6WfhJESteF5 EkpX/v+d+CNJZO3hMLCr7FDOdJ+9pxDY8w+8eWQZPbfc0RQX81xJ9gVyq13uZkF5 lWI+vDhdqZmlOmpX1Eu6FMkxqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIbOjxu a3wZsKQt84IFpjyz+dEWMB8GA1UdIwQYMBaAFF6CQXlTs1qfi1mkLslG9NAk2Hdr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJGMS8yNjAwN0ZCNjhE RjExMUVCOEQwRUE1MTFDNEY5QUUwMi9Yb0pCZVZPeldwLUxXYVF1eVViMDBDVFlk MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvSkJlVk96V3AtTFdhUXV5VWIwMENUWWQycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjJGMS8yNjAwN0ZCNjhERjExMUVCOEQwRUE1MTFDNEY5QUUwMi9Yb0pCZVZPeldw LUxXYVF1eVViMDBDVFlkMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoiLs3lmRcI87TIPGIDQWxA8QIgDci/4vOimZgzOWjQvOw60vwr2JL 4OFEllG9LmAh3SULCg/yMG3Lm9LCwUjtxEJ68/KXSBR6/7gwtZVPwqWPQzFt/40A QVu3a0CQZUme/bYK5oK4/hPwZGdQDQQFCQ0NuSpCRpodQ/Vk3QshI8h8j7wDuGPD 0oWKeDmo+TUXa8KQ14i6M51E6AxatIX66SBl5W9M9xvXU1IFpgr8YCTAu2jLcTNw lP/dGXUzjsaws27B0hc7opKlpal2FjkRMSkSNJb0V5i2hv8JlM3EWN6K2maN4PeW kwkorlEtZ2UCnZl3VWSnJz15A/LXKaMY -----END CERTIFICATE-----Generated at Sat Aug 23 18:44:28 2025 by rpki-client