$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft File: XOvYaFsXSV2z4edFmXn-hPBDg_I.mft (raw, json) Hash identifier: +1mNcUReV/Liidq/k5d2UauNfu+njXsA0GBbKcb6nmk= Subject key identifier: B7:61:36:12:C7:22:D8:3C:62:C2:AC:88:08:CD:0B:CC:94:91:5F:19 Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 Certificate issuer: /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft Manifest number: 03AD Signing time: Sat 23 Aug 2025 01:51:59 +0000 Manifest this update: Sat 23 Aug 2025 01:51:59 +0000 Manifest next update: Sat 30 Aug 2025 01:51:59 +0000 Files and hashes: 1: XOvYaFsXSV2z4edFmXn-hPBDg_I.crl (hash: m5SHzU7UXTcrtOuGyw6/ZHKxiNXuxf8Bvi+tx0iwqTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Validity Not Before: Aug 23 01:51:59 2025 GMT Not After : Aug 30 01:51:59 2025 GMT Subject: CN=68a91ebf-cb5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:16:3e:47:d5:36:ed:53:8e:68:4b:2f:ed: f9:56:6f:18:24:4a:23:b9:85:d1:75:35:48:f9:7e: 2a:5f:d2:63:10:af:05:91:e5:0a:0f:df:7d:83:91: 5f:6d:98:e4:f7:20:63:d4:27:cb:53:24:97:98:0a: 18:2e:d7:bd:c5:7f:bd:be:8f:5f:5b:10:50:21:08: fa:47:46:f8:95:d0:b6:d0:a3:32:bf:3a:98:49:6a: 04:fe:07:47:74:79:e1:5c:c8:f2:29:f0:d1:1a:70: 15:05:5b:b6:89:92:06:9f:2f:ff:d7:0b:cb:dd:4a: 93:19:db:85:49:e0:bc:e9:62:ba:68:28:87:fe:1c: f2:66:a7:8b:64:36:fc:40:0c:0d:14:cc:2d:78:ba: 5f:e1:ca:6d:a1:2f:ed:e5:b7:f3:86:7f:09:0c:a0: 75:4e:9c:0d:d2:bf:6f:b8:4a:4e:5d:35:fb:19:4f: 3c:82:ee:31:7d:58:c3:29:d1:2f:15:84:d4:3e:49: 05:6e:c0:67:58:f7:d6:e6:93:37:b9:d5:b2:26:65: c5:54:a7:86:59:a9:ab:4d:ff:77:3f:4f:78:c0:76: 55:da:16:ac:53:c9:d9:d4:8f:c1:b3:9b:ba:a7:a5: 05:dd:d5:c5:94:21:d3:83:c3:76:b7:65:d4:80:7e: ea:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:61:36:12:C7:22:D8:3C:62:C2:AC:88:08:CD:0B:CC:94:91:5F:19 X509v3 Authority Key Identifier: keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:0d:bc:82:5d:dc:04:1f:46:42:81:50:2a:c2:22:ba:41:93: 2d:15:2f:cf:7d:b2:8e:51:97:99:d2:58:70:c3:9e:5d:1b:21: f7:a0:f0:1a:b7:f9:1e:ab:35:5a:00:69:35:d4:b5:ed:67:03: d0:36:7c:a7:14:ae:cc:93:bf:89:9d:27:e9:03:5c:6f:63:e6: 23:f0:d9:f3:08:2f:e8:ed:96:0f:c2:3a:82:ce:8f:6a:bc:aa: ac:51:63:8b:5a:31:29:3b:9b:07:a5:a0:8d:ab:32:12:b0:20: cb:41:a4:e0:2b:2d:e7:7b:c1:62:89:e7:12:13:f2:33:f7:b6: f3:ba:ea:99:50:da:32:62:77:ed:53:fd:e2:88:e7:da:6b:1c: 55:68:bb:ad:28:21:0b:f5:4c:29:97:3b:a4:6d:4d:42:de:c9: 55:d8:fd:a3:be:38:f6:fd:89:95:61:e7:7e:a3:c8:36:41:09: 84:b1:2b:f8:19:ce:85:8f:cd:19:14:87:c7:2b:9c:be:cb:1c: 94:bb:8b:55:f4:de:1d:d2:47:8c:b9:b6:4c:d9:ea:b1:2e:15: bf:c2:e3:ce:fe:68:0d:01:5e:50:f5:ff:e3:b9:7e:7c:16:66: 42:21:6d:8e:66:00:52:9d:06:64:cd:52:65:dd:b0:a9:a2:8d: d1:74:6d:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDVDRUJEODY4NUIxNzQ5NURCM0UxRTc0NTk5NzlGRTg0 RjA0MzgzRjIwHhcNMjUwODIzMDE1MTU5WhcNMjUwODMwMDE1MTU5WjAYMRYwFAYD VQQDEw02OGE5MWViZi1jYjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQoWPkfVNu1TjmhLL+35Vm8YJEojuYXRdTVI+X4qX9JjEK8FkeUKD999g5Ff bZjk9yBj1CfLUySXmAoYLte9xX+9vo9fWxBQIQj6R0b4ldC20KMyvzqYSWoE/gdH dHnhXMjyKfDRGnAVBVu2iZIGny//1wvL3UqTGduFSeC86WK6aCiH/hzyZqeLZDb8 QAwNFMwteLpf4cptoS/t5bfzhn8JDKB1TpwN0r9vuEpOXTX7GU88gu4xfVjDKdEv FYTUPkkFbsBnWPfW5pM3udWyJmXFVKeGWamrTf93P094wHZV2hasU8nZ1I/Bs5u6 p6UF3dXFlCHTg8N2t2XUgH7qxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdhNhLH Itg8YsKsiAjNC8yUkV8ZMB8GA1UdIwQYMBaAFFzr2GhbF0lds+HnRZl5/oTwQ4Py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNWMno0ZWRGbVhuLWhQQkRn X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPdllhRnNYU1YyejRlZEZtWG4taFBCRGdfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNW Mno0ZWRGbVhuLWhQQkRnX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGDbyCXdwEH0ZCgVAqwiK6QZMtFS/PfbKOUZeZ0lhww55dGyH3oPAa t/keqzVaAGk11LXtZwPQNnynFK7Mk7+JnSfpA1xvY+Yj8NnzCC/o7ZYPwjqCzo9q vKqsUWOLWjEpO5sHpaCNqzISsCDLQaTgKy3ne8FiiecSE/Iz97bzuuqZUNoyYnft U/3iiOfaaxxVaLutKCEL9UwplzukbU1C3slV2P2jvjj2/YmVYed+o8g2QQmEsSv4 Gc6Fj80ZFIfHK5y+yxyUu4tV9N4d0keMubZM2eqxLhW/wuPO/mgNAV5Q9f/juX58 FmZCIW2OZgBSnQZkzVJl3bCpoo3RdG3g -----END CERTIFICATE-----Generated at Sat Aug 23 18:07:01 2025 by rpki-client