$ rpki-client -vvf rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft File: xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft (raw, json) Hash identifier: gMSsP3dwlyIly963Siuk/JwojgVPvKfZiCqy4PtTeH8= Subject key identifier: E8:64:9A:F0:03:BF:E7:E0:EE:94:91:4D:B9:EE:40:5B:96:9A:A5:A0 Authority key identifier: C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 Certificate issuer: /CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Certificate serial: 043C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft Manifest number: 043C Signing time: Sat 23 Aug 2025 00:30:08 +0000 Manifest this update: Sat 23 Aug 2025 00:30:08 +0000 Manifest next update: Sat 30 Aug 2025 00:30:08 +0000 Files and hashes: 1: xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl (hash: voSChelMtIdjWLOH7iG5ouXCv5f6Jv3Myedf2HaGkH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1084 (0x43c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918767B, serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Validity Not Before: Aug 23 00:30:08 2025 GMT Not After : Aug 30 00:30:08 2025 GMT Subject: CN=68a90b90-dc77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e3:60:69:1f:03:79:0c:b7:fa:63:fd:bd:f4: b0:64:ae:06:41:26:f4:66:f5:21:dc:e7:2b:0e:f2: bd:b6:ef:b6:84:16:81:c9:9a:ab:af:80:c9:59:31: 0c:7e:c8:8a:62:28:57:05:2f:42:25:67:35:a4:3f: 88:8e:e4:63:e5:71:af:2c:ec:de:b7:94:d5:0a:7c: 7d:80:ec:2d:16:6f:4b:00:3a:e7:37:db:08:ad:0d: b0:ff:10:5b:73:2d:35:89:44:a2:6c:a4:72:32:36: 70:c4:4f:ff:81:db:76:c6:fc:de:2d:02:c1:d8:22: 74:2b:df:ba:1e:28:5a:0e:d6:f8:94:ef:b8:5e:5f: 3c:01:88:b6:2c:f4:53:d1:f1:35:55:79:01:82:75: 8a:ca:7e:cd:74:0e:c4:0e:14:b7:da:eb:cd:a4:61: 80:2f:46:cc:62:95:6b:76:ff:9c:67:7f:b9:23:20: f6:16:ea:ce:41:0a:be:97:39:f9:23:51:e7:88:80: b8:9e:45:f5:a1:f1:40:90:74:a7:27:78:6a:c4:40: 56:e7:12:c2:a3:c6:0c:82:c3:34:e1:cc:8f:d1:89: 85:42:6f:ae:30:31:6b:d5:49:58:fc:9a:71:22:2e: 0b:43:e4:7b:69:e2:44:9d:81:ea:32:e0:22:93:e0: 03:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:64:9A:F0:03:BF:E7:E0:EE:94:91:4D:B9:EE:40:5B:96:9A:A5:A0 X509v3 Authority Key Identifier: keyid:C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:1e:e0:be:f5:43:e9:93:9e:da:5e:d4:1d:37:b7:cc:c9:9f: 1a:a9:ae:cc:0e:c7:35:5c:71:c8:3d:26:93:71:ea:8f:26:8f: fc:d6:a8:ad:b6:0e:c6:4e:73:fe:ee:20:78:ec:0b:ee:09:05: 62:30:59:a1:24:fb:36:bb:61:36:ce:21:84:16:61:dc:44:fd: b2:35:8f:1d:47:b3:5b:2c:2d:43:af:19:e4:41:6c:10:ec:bf: ab:63:3f:1b:01:2b:bf:ca:2d:85:c9:3d:a2:d4:49:22:86:a8: 2a:4e:ad:6f:e6:c5:36:d5:4b:07:b8:f1:27:7f:da:14:02:e2: ff:18:71:e0:d6:ed:12:89:d7:33:b9:22:74:44:44:43:dc:87: c2:37:8c:83:19:62:db:25:90:21:9e:25:43:fa:ae:6b:1d:5e: b2:c5:fe:47:27:f4:7d:cc:8c:6a:6f:2c:f9:7f:5e:d0:a1:ba: 1e:16:c4:8a:63:28:4d:ca:3e:47:a4:00:a6:db:40:20:cd:41: 27:64:cd:72:49:5d:58:15:56:97:8e:19:91:a2:04:ef:b1:49: df:36:4b:98:b0:72:66:31:f5:0e:fa:a6:ff:82:4c:da:5a:de: 15:32:dd:f5:18:f1:6b:a3:b0:0f:37:a2:d4:07:76:93:7b:ca: 1f:1e:ea:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2N0IxMTAvBgNVBAUTKEM1MzQyMzI4OEY5RkZDMTAwNDg0MkJDQzQwQTUxOTIz ODkzNEFBNzcwHhcNMjUwODIzMDAzMDA4WhcNMjUwODMwMDAzMDA4WjAYMRYwFAYD VQQDEw02OGE5MGI5MC1kYzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsONgaR8DeQy3+mP9vfSwZK4GQSb0ZvUh3OcrDvK9tu+2hBaByZqrr4DJWTEM fsiKYihXBS9CJWc1pD+IjuRj5XGvLOzet5TVCnx9gOwtFm9LADrnN9sIrQ2w/xBb cy01iUSibKRyMjZwxE//gdt2xvzeLQLB2CJ0K9+6HihaDtb4lO+4Xl88AYi2LPRT 0fE1VXkBgnWKyn7NdA7EDhS32uvNpGGAL0bMYpVrdv+cZ3+5IyD2FurOQQq+lzn5 I1HniIC4nkX1ofFAkHSnJ3hqxEBW5xLCo8YMgsM04cyP0YmFQm+uMDFr1UlY/Jpx Ii4LQ+R7aeJEnYHqMuAik+AD7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhkmvAD v+fg7pSRTbnuQFuWmqWgMB8GA1UdIwQYMBaAFMU0IyiPn/wQBIQrzEClGSOJNKp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY3Qi9GODdGQUQ5MjZB QzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9CQUVoQ3ZNUUtVWkk0azBx bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUUWpLSS1mX0JBRWhDdk1RS1VaSTRrMHFuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY3Qi9GODdGQUQ5MjZBQzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9C QUVoQ3ZNUUtVWkk0azBxbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4HuC+9UPpk57aXtQdN7fMyZ8aqa7MDsc1XHHIPSaTceqPJo/81qit tg7GTnP+7iB47AvuCQViMFmhJPs2u2E2ziGEFmHcRP2yNY8dR7NbLC1DrxnkQWwQ 7L+rYz8bASu/yi2FyT2i1EkihqgqTq1v5sU21UsHuPEnf9oUAuL/GHHg1u0Sidcz uSJ0RERD3IfCN4yDGWLbJZAhniVD+q5rHV6yxf5HJ/R9zIxqbyz5f17QoboeFsSK YyhNyj5HpACm20AgzUEnZM1ySV1YFVaXjhmRogTvsUnfNkuYsHJmMfUO+qb/gkza Wt4VMt31GPFro7APN6LUB3aTe8ofHurb -----END CERTIFICATE-----Generated at Sat Aug 23 18:59:52 2025 by rpki-client