$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft File: XotdlW6b29kHcBQqxw_fm2OIxtg.mft (raw, json) Hash identifier: 7/TmtoCiIbcT/V4+xeZiw1gtUO98smSqK+H8TDOkVRQ= Subject key identifier: 83:23:4B:81:CC:90:35:5B:CE:FB:C8:17:7C:41:6D:33:37:B5:77:C2 Authority key identifier: 5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8 Certificate issuer: /CN=A919D2EE/serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8 Certificate serial: 047B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft Manifest number: 0476 Signing time: Sat 23 Aug 2025 00:19:31 +0000 Manifest this update: Sat 23 Aug 2025 00:19:30 +0000 Manifest next update: Sat 30 Aug 2025 00:19:30 +0000 Files and hashes: 1: XotdlW6b29kHcBQqxw_fm2OIxtg.crl (hash: kU8BLqt/mHTnOtAVrG+QOTPm6zrRrHu650j6tQsLM7M=) 2: 097C49CC56FC11EC8032440FC4F9AE02.roa (hash: LDObm+V0VfIIUmkFfanPpTePErVvUeuNiy33kvT6Iys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1147 (0x47b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2EE, serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8 Validity Not Before: Aug 23 00:19:30 2025 GMT Not After : Aug 30 00:19:30 2025 GMT Subject: CN=68a90912-aa74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5f:1c:3a:97:84:7e:a4:dd:ca:e8:61:f3:f4: 9b:f1:8c:83:f0:d4:24:61:9a:01:1a:a6:ba:d0:ac: 11:09:3b:1b:80:cd:fc:79:b4:bc:06:41:cc:12:11: bd:be:31:1f:8f:da:cd:90:02:83:1a:7e:34:5a:c4: ab:6e:11:a0:ea:72:a5:ac:4c:fa:d4:f6:98:61:52: 5b:ec:04:3c:55:78:a7:7a:63:3c:02:e9:8a:55:49: 66:74:58:6b:78:8a:04:b9:c3:66:1b:ed:ad:0e:cd: cd:ff:16:82:a4:5f:1b:bb:22:c5:63:6d:76:bd:be: 6a:8a:ad:23:c2:55:2b:67:d7:17:90:2a:b0:45:b8: d0:de:ca:65:08:af:36:6f:4f:f4:cd:32:31:28:b6: 5f:4b:24:7d:41:70:54:dd:bb:86:a7:02:7f:2d:37: 79:6a:ce:7f:01:50:5e:c9:f9:dd:e8:29:c5:ec:20: 77:4b:2c:d8:62:a3:06:da:1a:f1:98:56:99:9b:07: df:a3:d5:67:88:c8:ae:0c:86:37:1b:c6:44:a8:1a: bc:5d:ab:2b:f7:94:bb:d6:88:d3:bc:5e:19:a5:79: b0:7d:06:df:42:1c:5b:2d:7d:18:03:ad:9b:be:cd: d6:da:f3:c2:86:dc:69:89:cb:04:98:c9:5c:1b:29: 47:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:23:4B:81:CC:90:35:5B:CE:FB:C8:17:7C:41:6D:33:37:B5:77:C2 X509v3 Authority Key Identifier: keyid:5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:32:3c:85:7e:b2:5e:ef:49:e0:8b:94:89:c9:19:39:25:4d: b9:09:7a:bd:fd:c6:0e:1c:6a:33:61:2b:15:90:82:40:60:d5: 09:f0:4e:92:09:ff:b9:c3:28:6f:7a:18:1a:db:0e:37:5d:ed: 16:46:b5:5d:46:f5:7e:97:30:07:7f:27:15:9d:2d:54:a9:ce: db:fa:27:de:dd:9c:cd:a7:c2:a9:33:83:27:67:71:c2:3c:dd: 59:88:98:e0:ba:0a:96:0b:b2:40:30:ee:e4:79:58:bf:84:59: 8e:00:3f:12:b4:53:44:43:73:e3:5e:79:46:5d:e7:b3:71:9e: de:da:24:a3:d8:c8:7e:03:0a:62:6b:90:ee:79:dd:fb:c7:28: 43:d1:88:ae:e9:99:2a:3a:0d:17:c6:91:4d:25:a6:4e:73:0b: b4:47:6b:b9:a1:bd:a4:a9:67:c1:91:b8:52:8e:0f:cb:39:a0: 61:53:0f:6c:e7:71:6e:8a:35:92:81:86:07:9b:70:0e:35:57: af:18:bc:63:b6:fa:1f:c7:c4:6d:15:02:65:02:6f:eb:08:77: 4e:53:1c:3e:96:1b:dd:b5:a6:ae:93:68:be:33:ff:d0:4f:54: 8a:aa:6e:41:73:32:f7:1a:38:88:bc:ab:43:c4:d3:6d:62:1d: 00:0c:48:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQyRUUxMTAvBgNVBAUTKDVFOEI1RDk1NkU5QkRCRDkwNzcwMTQyQUM3MEZERjlC NjM4OEM2RDgwHhcNMjUwODIzMDAxOTMwWhcNMjUwODMwMDAxOTMwWjAYMRYwFAYD VQQDEw02OGE5MDkxMi1hYTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoV8cOpeEfqTdyuhh8/Sb8YyD8NQkYZoBGqa60KwRCTsbgM38ebS8BkHMEhG9 vjEfj9rNkAKDGn40WsSrbhGg6nKlrEz61PaYYVJb7AQ8VXinemM8AumKVUlmdFhr eIoEucNmG+2tDs3N/xaCpF8buyLFY212vb5qiq0jwlUrZ9cXkCqwRbjQ3splCK82 b0/0zTIxKLZfSyR9QXBU3buGpwJ/LTd5as5/AVBeyfnd6CnF7CB3SyzYYqMG2hrx mFaZmwffo9VniMiuDIY3G8ZEqBq8Xasr95S71ojTvF4ZpXmwfQbfQhxbLX0YA62b vs3W2vPChtxpicsEmMlcGylH8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMjS4HM kDVbzvvIF3xBbTM3tXfCMB8GA1UdIwQYMBaAFF6LXZVum9vZB3AUKscP35tjiMbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDJFRS84RDk2Njc1NDU2 RjkxMUVDQjAyMUY2MENDNEY5QUUwMi9Yb3RkbFc2YjI5a0hjQlFxeHdfZm0yT0l4 dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvdGRsVzZiMjlrSGNCUXF4d19mbTJPSXh0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDJFRS84RDk2Njc1NDU2RjkxMUVDQjAyMUY2MENDNEY5QUUwMi9Yb3RkbFc2YjI5 a0hjQlFxeHdfZm0yT0l4dGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJMjyFfrJe70ngi5SJyRk5JU25CXq9/cYOHGozYSsVkIJAYNUJ8E6S Cf+5wyhvehga2w43Xe0WRrVdRvV+lzAHfycVnS1Uqc7b+ife3ZzNp8KpM4MnZ3HC PN1ZiJjgugqWC7JAMO7keVi/hFmOAD8StFNEQ3PjXnlGXeezcZ7e2iSj2Mh+Awpi a5Dued37xyhD0Yiu6ZkqOg0XxpFNJaZOcwu0R2u5ob2kqWfBkbhSjg/LOaBhUw9s 53FuijWSgYYHm3AONVevGLxjtvofx8RtFQJlAm/rCHdOUxw+lhvdtaauk2i+M//Q T1SKqm5BczL3GjiIvKtDxNNtYh0ADEiS -----END CERTIFICATE-----Generated at Sat Aug 23 16:17:51 2025 by rpki-client