$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json) Hash identifier: XxsiOuIRMvB0N6XxAx4Qbwq/b7Lw5v7wMsEyE/kCsg8= Subject key identifier: AA:F1:8E:46:CC:B1:00:9C:6F:48:46:25:65:31:AC:5F:8E:B4:02:3E Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Certificate serial: 04DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft Manifest number: 04DA Signing time: Fri 22 Aug 2025 23:57:55 +0000 Manifest this update: Fri 22 Aug 2025 23:57:55 +0000 Manifest next update: Fri 29 Aug 2025 23:57:55 +0000 Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: kXixumMKs4pVgkNCYp2l/h6CQtHdbib7cZeuV53CAD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1242 (0x4da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Validity Not Before: Aug 22 23:57:55 2025 GMT Not After : Aug 29 23:57:55 2025 GMT Subject: CN=68a90403-9746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:ba:48:6c:ce:f2:e4:be:03:53:c4:29:f5: 51:e7:1b:2d:b9:48:49:e2:73:c1:67:81:7d:db:4f: 02:2a:82:e6:e4:b8:32:1e:5e:1d:c0:01:16:f7:af: a9:2d:c7:fc:ca:0d:0a:25:94:8e:53:61:41:e6:10: 62:54:38:ed:f4:89:64:1f:62:ce:17:84:1b:4f:73: 1b:d7:b7:5e:07:26:94:dc:81:f2:18:d3:0b:3a:a9: c6:17:38:54:7d:1d:76:b2:19:09:4e:9e:6b:a8:51: b7:b7:2d:ae:28:35:26:80:a1:be:17:c0:d1:bd:d1: 44:cb:36:26:42:9c:5c:fb:2d:25:5a:da:3d:fa:df: 71:ee:87:e8:73:6c:b9:3a:73:30:d1:4d:41:68:8b: 0a:b1:ea:89:02:70:41:f3:d9:6d:aa:30:d1:97:6f: 7a:31:37:61:fa:00:6d:c0:e2:b2:b3:a7:7f:4c:fb: b4:0c:69:89:42:6c:27:d3:67:09:cc:67:2d:5e:cd: 10:10:81:4d:36:4b:22:10:1e:80:a1:0c:43:02:c7: 90:bb:2d:89:4b:8f:7f:a3:3b:91:67:16:83:5f:3d: bb:d7:f9:41:c0:22:8b:d6:cf:8f:f6:ce:b0:2d:c9: f0:3e:4c:85:03:ef:e4:d1:7e:77:87:a4:b4:78:f2: d2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F1:8E:46:CC:B1:00:9C:6F:48:46:25:65:31:AC:5F:8E:B4:02:3E X509v3 Authority Key Identifier: keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:cc:38:ee:55:a1:7a:29:33:bd:f5:56:12:75:fc:e0:be:60: d2:cf:fd:d0:2e:6f:0d:e0:80:01:8a:fa:fc:49:0e:86:51:6c: 81:8c:76:4f:07:31:aa:c4:3c:d9:00:15:d3:30:22:44:1a:7e: 47:c7:ec:22:d2:53:aa:9e:b9:4c:8b:87:a9:22:01:c6:60:3d: 09:28:8f:90:07:46:74:07:1b:04:71:f3:f9:5d:d5:61:c4:d1: 6c:a5:5e:15:2c:76:bc:74:0d:8a:62:62:4e:a1:f8:17:7e:03: ff:7b:28:23:31:54:c1:c9:c6:81:de:8e:a3:c9:39:e6:c1:30: 97:57:0a:44:9d:20:7d:90:c2:3f:44:77:f2:8f:20:bd:14:68: 04:21:5f:d5:62:38:e6:63:1d:b6:d1:24:99:d1:3d:fa:87:c5: 64:cb:87:c0:94:a3:5a:b3:79:ce:70:5f:c1:25:75:6f:8e:4c: cf:9c:19:c1:44:95:e8:bb:57:a3:17:c9:3f:98:6f:32:74:cb: 06:b0:17:3b:3e:67:fc:44:e3:e9:63:76:22:6e:91:1a:6d:69: 8c:3a:b0:b3:36:56:cb:e6:b2:30:a7:93:23:7e:0d:d8:c3:e5: 63:01:5a:7d:9a:45:e8:75:ab:fd:01:f1:dd:c7:b3:91:68:7c: 47:de:de:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MEYxMTAvBgNVBAUTKDVGN0RCNjUwQ0FDNDM0NTE3NkFDM0YwN0RFRkM5OTFB RDRGRURFQjgwHhcNMjUwODIyMjM1NzU1WhcNMjUwODI5MjM1NzU1WjAYMRYwFAYD VQQDEw02OGE5MDQwMy05NzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspW6SGzO8uS+A1PEKfVR5xstuUhJ4nPBZ4F9208CKoLm5LgyHl4dwAEW96+p Lcf8yg0KJZSOU2FB5hBiVDjt9IlkH2LOF4QbT3Mb17deByaU3IHyGNMLOqnGFzhU fR12shkJTp5rqFG3ty2uKDUmgKG+F8DRvdFEyzYmQpxc+y0lWto9+t9x7ofoc2y5 OnMw0U1BaIsKseqJAnBB89ltqjDRl296MTdh+gBtwOKys6d/TPu0DGmJQmwn02cJ zGctXs0QEIFNNksiEB6AoQxDAseQuy2JS49/ozuRZxaDXz271/lBwCKL1s+P9s6w LcnwPkyFA+/k0X53h6S0ePLSTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrxjkbM sQCcb0hGJWUxrF+OtAI+MB8GA1UdIwQYMBaAFF99tlDKxDRRdqw/B978mRrU/t64 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcwRi9ENTVFQjVGMDJE MEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5GRjJyRDhIM3Z5Wkd0VC0z cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gzMjJVTXJFTkZGMnJEOEgzdnlaR3RULTNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcwRi9ENTVFQjVGMDJEMEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5G RjJyRDhIM3Z5Wkd0VC0zcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+zDjuVaF6KTO99VYSdfzgvmDSz/3QLm8N4IABivr8SQ6GUWyBjHZP BzGqxDzZABXTMCJEGn5Hx+wi0lOqnrlMi4epIgHGYD0JKI+QB0Z0BxsEcfP5XdVh xNFspV4VLHa8dA2KYmJOofgXfgP/eygjMVTBycaB3o6jyTnmwTCXVwpEnSB9kMI/ RHfyjyC9FGgEIV/VYjjmYx220SSZ0T36h8Vky4fAlKNas3nOcF/BJXVvjkzPnBnB RJXou1ejF8k/mG8ydMsGsBc7Pmf8ROPpY3YibpEabWmMOrCzNlbL5rIwp5Mjfg3Y w+VjAVp9mkXodav9AfHdx7ORaHxH3t66 -----END CERTIFICATE-----Generated at Sun Aug 24 08:26:57 2025 by rpki-client