$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft File: XiM50eqvU0mhOKR5fagtDrTfqew.mft (raw, json) Hash identifier: vbdeSAw95QdvY0h6Jw7vvzYbzNL5w/liFr6ME8V6cC8= Subject key identifier: 7B:59:C6:C5:FE:9A:2E:E3:E3:7C:8F:22:FB:8F:71:FE:65:32:A1:61 Authority key identifier: 5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC Certificate issuer: /CN=A918CFAD/serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft Manifest number: 0107 Signing time: Sat 23 Aug 2025 05:10:14 +0000 Manifest this update: Sat 23 Aug 2025 05:10:14 +0000 Manifest next update: Sat 30 Aug 2025 05:10:14 +0000 Files and hashes: 1: XiM50eqvU0mhOKR5fagtDrTfqew.crl (hash: IQWbZO6fMFj/R3nFt7GG6cbAjwRjfFSTW//qLPAea4Q=) 2: D161B1F0EA0411EE98A86A13C4F9AE02.roa (hash: +NOhwE6m6lpwH5XuFy8HqU1ULWBp+YrGh21v4UoRt+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD, serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC Validity Not Before: Aug 23 05:10:14 2025 GMT Not After : Aug 30 05:10:14 2025 GMT Subject: CN=68a94d36-67ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:26:ec:2f:1e:df:eb:f1:b1:e0:49:f7:93:60: 6f:bc:c4:6e:b6:7a:1e:43:39:c8:e8:59:d2:64:57: 93:3f:b1:8b:dd:02:a8:5d:a4:3e:54:75:83:8a:4e: 0d:2e:55:8c:80:34:e4:dd:29:05:11:8e:77:aa:17: 1c:63:d3:0f:5a:84:ed:49:0d:d9:31:f8:52:62:d8: bd:8d:3a:cb:46:48:56:7f:22:e8:c5:df:9b:d5:d9: 31:f8:5e:2e:36:75:b3:2d:68:27:3f:4e:c8:2b:67: 4b:89:9c:99:65:ad:f8:26:51:24:e7:59:ce:4f:8c: 01:2b:f8:32:b1:e6:4f:8a:44:e9:40:77:e2:9c:39: 54:c9:db:45:51:00:95:e0:0f:fc:f2:82:cc:cc:ac: d3:ef:fc:02:d9:da:a0:79:53:54:c6:65:93:d2:dc: 48:a9:b5:0b:67:22:0f:ac:97:3f:1a:73:05:75:53: f5:0d:29:10:ea:02:15:81:0d:90:21:0f:dd:bf:b4: f0:a5:ac:d9:1a:7f:cd:d1:c5:6f:f3:85:a6:32:9f: 3e:35:50:09:e6:3a:9f:e6:b7:7d:4a:f1:8d:5d:1d: dd:f8:d4:e5:6a:10:25:09:3b:09:f9:3f:4f:b9:04: 5a:d3:41:6d:69:6a:c4:73:ae:9b:85:9b:42:aa:29: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:59:C6:C5:FE:9A:2E:E3:E3:7C:8F:22:FB:8F:71:FE:65:32:A1:61 X509v3 Authority Key Identifier: keyid:5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:50:d8:5f:91:17:8c:9d:78:5a:9d:ac:fa:35:ca:08:5b:f3: a7:ee:3b:c0:78:50:60:19:f1:89:65:fe:74:af:45:21:39:b1: fb:99:f5:c4:bf:8f:f5:9f:4e:ed:d1:ed:92:6f:9d:75:eb:9c: 4d:92:08:20:7e:38:93:81:8f:48:03:24:a1:9a:e4:9f:df:01: 9e:aa:9f:a8:89:c1:5e:0f:cc:25:14:c3:e2:ae:29:aa:4b:1c: 41:f2:1e:77:77:0c:49:26:f1:76:c4:81:54:6d:bd:cf:21:6f: 9c:34:77:28:d6:81:d4:08:4e:79:4d:82:25:a0:77:00:ee:24: 86:ae:34:dd:f6:90:06:55:55:7c:37:cd:da:90:8e:64:4f:7a: e0:ee:48:30:bb:8b:e7:82:56:76:06:1c:ce:9c:ae:b3:1b:ed: 17:b5:c8:13:ac:74:ae:e0:a6:24:b9:a1:cd:4f:f7:07:00:0b: 40:fe:0b:f2:5d:3e:45:88:51:9b:fa:67:75:f5:78:ca:b5:a3: 03:33:3e:9e:9c:52:01:c9:ca:48:de:0f:d2:f7:0c:a1:2d:38: 10:42:69:b6:ac:69:65:11:d1:a2:b7:27:f4:a7:7a:d8:e1:a5: b6:05:36:4f:b4:bb:5a:79:f7:f8:37:ac:7e:1f:58:12:21:a6: 8f:fb:2c:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENGQUQxMTAvBgNVBAUTKDVFMjMzOUQxRUFBRjUzNDlBMTM4QTQ3OTdEQTgyRDBF QjRERkE5RUMwHhcNMjUwODIzMDUxMDE0WhcNMjUwODMwMDUxMDE0WjAYMRYwFAYD VQQDEw02OGE5NGQzNi02N2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzybsLx7f6/Gx4En3k2BvvMRutnoeQznI6FnSZFeTP7GL3QKoXaQ+VHWDik4N LlWMgDTk3SkFEY53qhccY9MPWoTtSQ3ZMfhSYti9jTrLRkhWfyLoxd+b1dkx+F4u NnWzLWgnP07IK2dLiZyZZa34JlEk51nOT4wBK/gyseZPikTpQHfinDlUydtFUQCV 4A/88oLMzKzT7/wC2dqgeVNUxmWT0txIqbULZyIPrJc/GnMFdVP1DSkQ6gIVgQ2Q IQ/dv7TwpazZGn/N0cVv84WmMp8+NVAJ5jqf5rd9SvGNXR3d+NTlahAlCTsJ+T9P uQRa00FtaWrEc66bhZtCqilBAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtZxsX+ mi7j43yPIvuPcf5lMqFhMB8GA1UdIwQYMBaAFF4jOdHqr1NJoTikeX2oLQ6036ns MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC80QzkwMEYxQ0VB MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUwbWhPS1I1ZmFndERyVGZx ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hpTTUwZXF2VTBtaE9LUjVmYWd0RHJUZnFldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ZBRC80QzkwMEYxQ0VBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUw bWhPS1I1ZmFndERyVGZxZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkUNhfkReMnXhanaz6NcoIW/On7jvAeFBgGfGJZf50r0UhObH7mfXE v4/1n07t0e2Sb51165xNkgggfjiTgY9IAyShmuSf3wGeqp+oicFeD8wlFMPirimq SxxB8h53dwxJJvF2xIFUbb3PIW+cNHco1oHUCE55TYIloHcA7iSGrjTd9pAGVVV8 N83akI5kT3rg7kgwu4vnglZ2BhzOnK6zG+0XtcgTrHSu4KYkuaHNT/cHAAtA/gvy XT5FiFGb+md19XjKtaMDMz6enFIBycpI3g/S9wyhLTgQQmm2rGllEdGityf0p3rY 4aW2BTZPtLtaeff4N6x+H1gSIaaP+yxU -----END CERTIFICATE-----Generated at Sat Aug 23 20:34:31 2025 by rpki-client