$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft File: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json) Hash identifier: S3Z4iJw0xCa2TV9+l/az/+KF1IezM+1ACojqWYcpEzY= Subject key identifier: 3F:F6:79:75:C0:74:90:9A:CA:1B:CE:F6:2D:68:AE:41:CB:3E:F9:4D Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft Manifest number: 01EB Signing time: Sat 23 Aug 2025 02:40:15 +0000 Manifest this update: Sat 23 Aug 2025 02:40:15 +0000 Manifest next update: Sat 30 Aug 2025 02:40:15 +0000 Files and hashes: 1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: H51N0GmWydOQYsARi5hBRk348tHq4x+4UsqCw7aOQqk=) 2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: RmJtDMkcxfQ3eQrKn0Yy1kaaLYDY2h9Y7DjrNYqUSm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA19, serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Validity Not Before: Aug 23 02:40:15 2025 GMT Not After : Aug 30 02:40:15 2025 GMT Subject: CN=68a92a0f-598f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:aa:4a:84:78:50:3d:84:2e:f7:80:ba:3c: 05:a9:2b:6b:1c:88:15:a7:16:3e:6a:51:ea:75:f3: 23:90:26:b0:b7:31:b0:0d:cc:bc:4b:09:be:45:7c: 6c:af:11:45:41:b3:87:bb:50:0a:c2:ac:78:31:73: d4:cd:a7:99:19:9e:4d:52:21:1e:63:d8:53:74:c2: 8f:fb:f7:12:af:6e:34:b0:e5:f1:b2:98:f8:41:64: 96:3f:91:61:6a:f7:70:73:3c:d3:1b:bf:6d:fd:38: fc:2d:61:da:1d:23:d3:69:2b:6c:3a:dd:0f:60:2d: 0d:c5:d8:a3:27:12:99:b9:80:d0:80:b8:1b:8c:3c: ed:87:82:12:ef:71:76:7b:a1:1b:0e:1a:c2:95:e7: e1:fc:da:e1:09:50:0d:b6:58:02:17:1d:0d:9c:c5: 91:72:60:b0:0b:8f:d8:c2:ea:e9:b8:e1:1e:94:df: 42:a1:89:4a:53:14:e6:a2:90:f4:81:58:93:4c:11: 4d:56:84:18:3f:a3:c2:31:d6:eb:ba:94:b8:e5:11: d6:0f:76:e6:16:93:5d:ec:05:0e:da:53:e6:91:53: ef:f0:9d:ab:08:57:01:98:50:45:e5:21:43:61:c4: 9e:52:ef:a9:17:f8:41:0b:ef:a4:d7:d2:8a:3a:10: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F6:79:75:C0:74:90:9A:CA:1B:CE:F6:2D:68:AE:41:CB:3E:F9:4D X509v3 Authority Key Identifier: keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:49:4b:b0:f5:65:1c:23:16:09:ca:d7:85:7b:7a:5c:a0:34: 79:ce:64:6e:27:84:81:c4:13:8d:94:fb:fb:a0:3a:63:57:c3: a7:70:a8:46:0d:16:c8:f0:ac:be:82:5a:a9:ba:2e:44:f6:6a: 03:44:2f:d3:0f:35:97:04:b4:21:87:8c:ff:f0:5a:90:40:f1: b2:9e:d8:f7:45:5d:1f:27:1f:8b:61:47:b2:ab:b1:92:2d:21: 32:31:b1:25:6a:a9:b9:c5:6b:7f:9b:20:36:56:55:4b:0d:e2: 1f:68:7d:4b:34:65:21:b6:3e:34:66:15:6c:e8:c1:7a:b7:81: ed:bf:34:55:98:85:1f:5a:76:90:18:ce:4b:cb:fa:6f:8e:07: 98:a2:5a:88:1f:09:42:f7:57:8d:a8:cb:73:95:75:13:17:7f: d8:bd:0b:5c:da:74:2b:08:a7:1d:fb:8f:0e:c8:0b:86:36:51: 59:e6:f2:4e:d6:36:28:86:c3:56:51:40:6f:71:d4:a8:7f:22: 54:c1:63:25:49:26:14:c9:12:f9:3f:24:de:4b:61:b1:3c:95: 17:5f:94:ba:a7:ca:7b:4b:2a:19:2f:46:de:a2:b0:28:be:9f: 6e:0e:1f:39:77:c6:ec:c7:c1:ed:0e:77:71:03:1e:1f:bd:35: af:7c:48:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMTkxMTAvBgNVBAUTKEM0RjkzMjJFRUU5NjcwOUU0MjIxQzZERDNDRUNCODQw Mzg0RjAyMDEwHhcNMjUwODIzMDI0MDE1WhcNMjUwODMwMDI0MDE1WjAYMRYwFAYD VQQDEw02OGE5MmEwZi01OThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6WqSoR4UD2ELveAujwFqStrHIgVpxY+alHqdfMjkCawtzGwDcy8Swm+RXxs rxFFQbOHu1AKwqx4MXPUzaeZGZ5NUiEeY9hTdMKP+/cSr240sOXxspj4QWSWP5Fh avdwczzTG79t/Tj8LWHaHSPTaStsOt0PYC0NxdijJxKZuYDQgLgbjDzth4IS73F2 e6EbDhrClefh/NrhCVANtlgCFx0NnMWRcmCwC4/YwurpuOEelN9CoYlKUxTmopD0 gViTTBFNVoQYP6PCMdbrupS45RHWD3bmFpNd7AUO2lPmkVPv8J2rCFcBmFBF5SFD YcSeUu+pF/hBC++k19KKOhD1mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/2eXXA dJCayhvO9i1orkHLPvlNMB8GA1UdIwQYMBaAFMT5Mi7ulnCeQiHG3TzsuEA4TwIB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ExOS9GODAyQTQyNDhD RDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NKNUNJY2JkUE95NFFEaFBB Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQa3lMdTZXY0o1Q0ljYmRQT3k0UURoUEFnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ExOS9GODAyQTQyNDhDRDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NK NUNJY2JkUE95NFFEaFBBZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHSUuw9WUcIxYJyteFe3pcoDR5zmRuJ4SBxBONlPv7oDpjV8OncKhG DRbI8Ky+glqpui5E9moDRC/TDzWXBLQhh4z/8FqQQPGyntj3RV0fJx+LYUeyq7GS LSEyMbElaqm5xWt/myA2VlVLDeIfaH1LNGUhtj40ZhVs6MF6t4HtvzRVmIUfWnaQ GM5Ly/pvjgeYolqIHwlC91eNqMtzlXUTF3/YvQtc2nQrCKcd+48OyAuGNlFZ5vJO 1jYohsNWUUBvcdSofyJUwWMlSSYUyRL5PyTeS2GxPJUXX5S6p8p7SyoZL0beorAo vp9uDh85d8bsx8HtDndxAx4fvTWvfEiN -----END CERTIFICATE-----Generated at Sun Aug 24 04:36:17 2025 by rpki-client