$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: 8TBPbMtOZ018471oHLLIy9sqDCZzxdo5gldYla5i0DU= Subject key identifier: 7F:E0:F4:6D:33:CE:4E:D1:B8:20:9D:45:57:86:1F:31:9C:34:0D:34 Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 0215 Signing time: Sat 23 Aug 2025 02:17:08 +0000 Manifest this update: Sat 23 Aug 2025 02:17:07 +0000 Manifest next update: Sat 30 Aug 2025 02:17:07 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: 1IGvYx6VS/OQ9jYQ06rBMcdVdfJBE5XbwfAnbVmTeXg=) 2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: /pTedztaSiCOyPS1HOnaWKUVCcU322igmimIyTxJJbg=) 3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: HWKUOlRf26vXVLrvzxoCBARsK7RmPl1k0ABbjAs3vlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: Aug 23 02:17:07 2025 GMT Not After : Aug 30 02:17:07 2025 GMT Subject: CN=68a924a4-280c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c4:62:f3:eb:67:d7:c2:cd:c7:0c:2c:8c:97: 57:43:4e:84:66:51:04:33:c9:7e:99:28:52:3d:01: 54:f9:b7:b5:42:bf:0e:2c:8f:e5:d9:55:1a:07:1f: b7:a9:74:fe:34:76:b7:db:e3:9f:27:e8:b0:e4:d4: d0:89:73:58:3a:62:c0:71:32:f8:43:eb:bd:46:70: c2:b9:cf:6d:b6:9b:ce:5d:f8:ba:05:83:d4:ae:52: 95:4b:af:ae:8c:dc:3f:7f:4c:8e:39:a7:17:c6:71: 18:ae:3b:dc:fc:5c:08:02:ae:84:20:6c:88:ee:24: aa:1b:ab:d0:c8:f6:d7:06:5e:04:46:32:ce:09:ea: 7a:55:b9:3e:f2:2c:53:32:3c:62:72:51:c0:25:b7: fe:9c:c8:05:09:36:b5:fe:17:e2:15:05:93:e8:b1: 37:21:91:fe:5a:3c:e7:4f:1a:e1:03:5f:30:ca:b4: 16:a6:e6:3b:99:f0:3a:5d:e9:59:60:d9:0c:aa:f3: 8e:46:77:11:25:16:92:c7:16:af:ea:1d:e0:c6:f9: e7:0b:a1:a5:7a:fe:ec:ca:92:f5:b4:de:89:7f:99: bc:db:5f:71:6a:6f:88:86:57:53:39:d5:94:60:0e: be:b3:94:4a:60:e8:67:61:84:64:38:ea:cc:c9:2b: c9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E0:F4:6D:33:CE:4E:D1:B8:20:9D:45:57:86:1F:31:9C:34:0D:34 X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:e4:17:b7:85:6d:99:c2:fc:46:3c:ef:fc:cf:0e:8e:a1:41: ee:83:04:1f:29:44:db:c3:de:93:e5:cd:62:ae:ce:36:29:57: d9:4b:70:15:36:eb:7b:1f:4c:61:60:5c:42:b5:e2:47:be:53: 25:b5:23:d9:65:cd:d8:7b:1f:ee:2d:25:86:bd:c3:1d:09:5e: 7d:4f:6b:b7:7b:e6:2c:17:b7:6b:07:0e:64:56:7f:9a:68:e1: da:e4:0a:17:ac:02:07:30:21:09:e8:6c:28:3b:0f:d5:b7:26: 20:31:a2:98:15:4b:68:70:2d:38:e0:a5:a0:d9:27:f6:d9:24: f8:ec:2a:8c:d1:8d:2c:ed:32:bb:4f:44:aa:fc:60:64:9b:3e: 2d:33:db:da:e6:59:5e:f4:df:e2:67:37:59:f0:71:50:47:6d: 4b:70:44:6e:6c:b0:12:d7:05:8c:f7:ed:10:4b:8f:92:1f:be: ae:e6:a1:06:02:b4:1f:33:e5:e6:e8:fe:7a:fd:0f:a3:5d:e0: a0:f7:1d:ae:0c:23:ee:07:80:31:4f:c9:d6:cb:06:fb:09:85: 12:26:d5:e1:a2:ba:4c:42:29:dd:c7:c9:e4:3f:58:70:53:8d: a7:40:45:c8:20:65:25:2b:01:83:84:76:c0:8f:65:96:30:f3: 3c:42:2d:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjUwODIzMDIxNzA3WhcNMjUwODMwMDIxNzA3WjAYMRYwFAYD VQQDEw02OGE5MjRhNC0yODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7MRi8+tn18LNxwwsjJdXQ06EZlEEM8l+mShSPQFU+be1Qr8OLI/l2VUaBx+3 qXT+NHa32+OfJ+iw5NTQiXNYOmLAcTL4Q+u9RnDCuc9ttpvOXfi6BYPUrlKVS6+u jNw/f0yOOacXxnEYrjvc/FwIAq6EIGyI7iSqG6vQyPbXBl4ERjLOCep6Vbk+8ixT MjxiclHAJbf+nMgFCTa1/hfiFQWT6LE3IZH+WjznTxrhA18wyrQWpuY7mfA6XelZ YNkMqvOORncRJRaSxxav6h3gxvnnC6Glev7sypL1tN6Jf5m8219xam+IhldTOdWU YA6+s5RKYOhnYYRkOOrMySvJ7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/g9G0z zk7RuCCdRVeGHzGcNA00MB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh5Be3hW2ZwvxGPO/8zw6OoUHugwQfKUTbw96T5c1irs42KVfZS3AV Nut7H0xhYFxCteJHvlMltSPZZc3Yex/uLSWGvcMdCV59T2u3e+YsF7drBw5kVn+a aOHa5AoXrAIHMCEJ6GwoOw/VtyYgMaKYFUtocC044KWg2Sf22ST47CqM0Y0s7TK7 T0Sq/GBkmz4tM9va5lle9N/iZzdZ8HFQR21LcERubLAS1wWM9+0QS4+SH76u5qEG ArQfM+Xm6P56/Q+jXeCg9x2uDCPuB4AxT8nWywb7CYUSJtXhorpMQindx8nkP1hw U42nQEXIIGUlKwGDhHbAj2WWMPM8Qi3P -----END CERTIFICATE-----Generated at Sat Aug 23 23:58:59 2025 by rpki-client