$ rpki-client -vvf rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft File: XEFCLE7PHfpomnDePAORsdR-Vew.mft (raw, json) Hash identifier: KCchVWTE1bGnqdIN4NlH1HaWjzstTIuK8lIrFayCex0= Subject key identifier: B2:D1:CC:6E:1A:5D:F9:00:8A:3A:12:2F:99:38:FC:BB:6E:E4:4F:38 Authority key identifier: 5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC Certificate issuer: /CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC Certificate serial: 02A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft Manifest number: 029B Signing time: Sat 23 Aug 2025 01:50:38 +0000 Manifest this update: Sat 23 Aug 2025 01:50:37 +0000 Manifest next update: Sat 30 Aug 2025 01:50:37 +0000 Files and hashes: 1: XEFCLE7PHfpomnDePAORsdR-Vew.crl (hash: 9+vA2M3oqYIJhHHzfPpVKNw+TyCMbM68iR4V2ciMcx8=) 2: D11B9044112011EDAC1D3B15C4F9AE02.roa (hash: jBBbANmuNZVxVrVIl9nOmJTDHehO/z/tNRNLXj+1oS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 672 (0x2a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B19D, serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC Validity Not Before: Aug 23 01:50:37 2025 GMT Not After : Aug 30 01:50:37 2025 GMT Subject: CN=68a91e6d-cdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c0:57:f0:9f:91:3e:33:1b:d9:55:93:c0:78: 21:5d:66:9f:d2:8b:1b:c4:12:5e:0a:c6:f0:86:fa: e6:27:67:65:69:ee:e4:e6:2e:36:e1:a1:c7:d4:61: 94:e6:ba:d0:87:4e:09:74:c7:24:24:f9:37:d0:72: 78:49:65:f8:8f:74:e8:61:7f:63:5b:9a:92:69:4f: 28:17:23:77:98:4a:95:93:88:0f:3b:97:c7:44:7a: 8d:3c:31:1e:1a:89:46:79:bf:ac:b1:b9:c8:04:fc: b2:3c:17:4d:e0:f7:f1:70:81:89:49:6a:26:17:c2: 58:81:cb:4e:b4:2a:e9:ab:e9:71:56:9a:01:09:07: cd:06:f2:0a:49:34:75:85:d3:65:b9:c3:7b:4e:68: e9:f2:a6:09:a4:75:a8:c0:47:9f:4c:cd:62:68:51: f1:c3:e8:89:87:1e:c1:e3:61:95:55:d9:d1:0f:e2: aa:72:a6:5c:e3:5f:ce:f3:ef:4f:9c:97:a9:63:df: 01:ab:f7:5b:0b:81:2d:03:05:6b:4e:ff:de:9e:63: 72:18:55:f2:6c:9c:d0:56:03:a9:e6:dd:4e:1e:4f: e6:c2:af:5d:25:6e:29:56:c7:a1:b0:49:be:9a:cd: a2:1a:f8:01:89:6f:e2:f4:22:2f:f3:99:c6:11:ab: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D1:CC:6E:1A:5D:F9:00:8A:3A:12:2F:99:38:FC:BB:6E:E4:4F:38 X509v3 Authority Key Identifier: keyid:5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a0:e7:18:65:9a:53:e5:77:aa:a3:b3:5b:c2:11:37:71:37: 4e:e9:9b:3b:73:36:96:a6:46:a3:e8:59:cc:98:f1:fb:e5:6c: 22:a8:1f:10:66:2a:a0:67:f8:40:60:40:b8:e9:fa:99:b3:e0: 1a:58:14:51:18:c1:e8:46:c2:bc:37:41:d4:1f:8e:41:20:76: fc:43:3c:95:a7:ce:f2:b7:3d:c5:4a:d5:df:01:ac:ae:95:42: 38:a7:23:de:85:a9:65:4c:1b:87:a7:8e:d5:b5:30:fb:94:34: bc:67:48:a0:4a:a9:9f:79:61:63:91:e6:c7:78:f6:9b:75:f3: 61:2c:91:c9:cd:79:37:49:e1:58:85:ef:c4:69:a2:6a:1c:00: 55:7d:9f:d8:0e:70:62:32:21:03:1b:05:66:0d:7a:f9:47:30: 91:8e:3b:0f:3f:dd:a9:aa:89:14:fe:02:5b:ce:31:31:aa:3f: 33:41:1d:c4:1e:4b:aa:82:7d:15:11:b7:4e:d8:8b:bc:d3:d7: 6b:55:18:00:0e:b0:89:ad:f5:ad:61:14:61:4a:6e:66:ed:8e: bb:8d:db:29:44:6c:4e:49:cd:d1:46:d1:07:60:34:88:27:97: 03:f3:da:5f:15:53:d7:d1:d1:13:0a:49:b8:d4:d3:80:f1:37: 0d:f6:b3:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOUQxMTAvBgNVBAUTKDVDNDE0MjJDNEVDRjFERkE2ODlBNzBERTNDMDM5MUIx RDQ3RTU1RUMwHhcNMjUwODIzMDE1MDM3WhcNMjUwODMwMDE1MDM3WjAYMRYwFAYD VQQDEw02OGE5MWU2ZC1jZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMBX8J+RPjMb2VWTwHghXWaf0osbxBJeCsbwhvrmJ2dlae7k5i424aHH1GGU 5rrQh04JdMckJPk30HJ4SWX4j3ToYX9jW5qSaU8oFyN3mEqVk4gPO5fHRHqNPDEe GolGeb+ssbnIBPyyPBdN4PfxcIGJSWomF8JYgctOtCrpq+lxVpoBCQfNBvIKSTR1 hdNlucN7Tmjp8qYJpHWowEefTM1iaFHxw+iJhx7B42GVVdnRD+KqcqZc41/O8+9P nJepY98Bq/dbC4EtAwVrTv/enmNyGFXybJzQVgOp5t1OHk/mwq9dJW4pVsehsEm+ ms2iGvgBiW/i9CIv85nGEastHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLRzG4a XfkAijoSL5k4/Ltu5E84MB8GA1UdIwQYMBaAFFxBQixOzx36aJpw3jwDkbHUflXs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE5RC9EMjY5NURERTEx MUUxMUVEOUI1OEZEMTRDNEY5QUUwMi9YRUZDTEU3UEhmcG9tbkRlUEFPUnNkUi1W ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFRkNMRTdQSGZwb21uRGVQQU9Sc2RSLVZldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE5RC9EMjY5NURERTExMUUxMUVEOUI1OEZEMTRDNEY5QUUwMi9YRUZDTEU3UEhm cG9tbkRlUEFPUnNkUi1WZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANoOcYZZpT5Xeqo7NbwhE3cTdO6Zs7czaWpkaj6FnMmPH75WwiqB8Q ZiqgZ/hAYEC46fqZs+AaWBRRGMHoRsK8N0HUH45BIHb8QzyVp87ytz3FStXfAayu lUI4pyPehallTBuHp47VtTD7lDS8Z0igSqmfeWFjkebHePabdfNhLJHJzXk3SeFY he/EaaJqHABVfZ/YDnBiMiEDGwVmDXr5RzCRjjsPP92pqokU/gJbzjExqj8zQR3E Hkuqgn0VEbdO2Iu809drVRgADrCJrfWtYRRhSm5m7Y67jdspRGxOSc3RRtEHYDSI J5cD89pfFVPX0dETCkm41NOA8TcN9rMh -----END CERTIFICATE-----Generated at Sat Aug 23 16:11:14 2025 by rpki-client