$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: Ek/NPjWgGIK3HSdlbmb9K1zp2tv4MocQUWtM+byE0kM= Subject key identifier: 9E:F7:12:9C:CE:83:42:6B:A4:6C:38:12:C9:02:48:C4:73:BB:41:94 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: 0122 Signing time: Sat 23 Aug 2025 04:51:13 +0000 Manifest this update: Sat 23 Aug 2025 04:51:12 +0000 Manifest next update: Sat 30 Aug 2025 04:51:12 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: Tt6nalC7KXX6CE63AXUwgXEysCtvo1LhsbpJi5qA8Cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Aug 23 04:51:12 2025 GMT Not After : Aug 30 04:51:12 2025 GMT Subject: CN=68a948c1-0c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:76:86:d2:94:4b:5a:53:22:f6:6a:0d:68: 0d:da:8d:28:67:ec:7e:b2:63:0b:79:ac:af:18:79: 28:a9:2d:c2:8a:b3:e7:05:ed:08:86:86:80:9c:52: 76:69:96:b3:24:53:5c:59:f0:bd:c2:86:1b:eb:f7: 49:37:8d:c3:9e:2b:5e:f2:7f:c0:68:5d:ba:9f:3c: 32:58:8e:93:29:dc:41:1a:df:49:23:9c:6b:92:c9: 7f:39:fc:7e:47:95:68:f8:c4:73:14:a2:f6:66:3c: e3:1a:13:2d:aa:6e:df:5e:df:6e:69:88:25:3b:8f: 56:86:d1:49:36:58:06:a3:96:b1:31:74:61:7f:dc: 83:b0:66:af:39:05:fe:be:4f:cf:5f:04:24:3b:3f: c2:32:1a:e4:ff:ab:3a:b1:c7:fc:d8:05:e9:0a:93: 90:cf:e7:45:46:e2:60:24:30:10:bb:d6:77:db:05: 85:9d:c8:66:76:5c:41:3a:58:38:cf:2c:11:ec:e6: 2d:82:f8:ec:d2:0e:d8:7b:b6:be:79:7b:cb:94:fb: 45:2d:16:73:95:38:e9:4a:c6:1b:3b:84:d2:50:48: c4:1a:9b:ae:00:6d:4f:4d:8a:2a:3a:4f:e5:67:81: 87:71:21:81:57:5f:a0:e5:e5:be:35:c0:98:28:aa: e3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F7:12:9C:CE:83:42:6B:A4:6C:38:12:C9:02:48:C4:73:BB:41:94 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:2b:5c:bc:cb:73:4c:a8:f2:2d:1d:29:b1:5b:7b:ef:89:c2: 8b:cc:8e:d3:ce:00:f4:5b:0c:fa:1e:13:fd:25:85:fa:84:f6: 7c:72:33:d2:a3:4c:ec:14:36:d3:3a:c0:df:6d:7e:03:57:36: 3e:67:10:1f:05:2f:5a:8a:66:b7:d5:4c:37:e1:a6:9c:83:ef: c0:a8:26:a6:3a:5b:1a:a1:91:e2:52:62:7c:20:81:6b:95:93: e1:bc:72:e2:8d:c7:75:94:98:4a:6c:f0:52:ae:c2:81:86:ed: 4b:73:0d:1e:60:62:b6:96:c0:b2:f9:f4:9b:de:46:b1:c4:93: 26:e6:03:08:0a:d9:10:a1:7f:75:0b:5b:a8:ab:0b:04:09:1a: f4:9c:2f:85:30:f8:20:be:9f:f8:b2:c2:14:65:ca:1d:48:a5: e4:e6:a9:89:06:86:94:96:99:f4:02:5f:df:5c:13:a3:f6:6b: 7e:1a:91:4c:65:ef:22:4e:8c:49:b5:56:16:a5:09:c3:c9:04: a0:10:c3:fe:82:17:fe:3a:13:15:d3:eb:0d:65:5e:d4:bb:7b: 68:20:77:93:1e:f8:22:59:cb:49:17:1c:39:3c:f4:ea:fc:c6: e3:b5:51:97:de:d8:7c:ad:8e:40:0e:83:b7:b9:29:36:0e:a9: 13:f3:b6:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjUwODIzMDQ1MTEyWhcNMjUwODMwMDQ1MTEyWjAYMRYwFAYD VQQDEw02OGE5NDhjMS0wYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7t2htKUS1pTIvZqDWgN2o0oZ+x+smMLeayvGHkoqS3CirPnBe0IhoaAnFJ2 aZazJFNcWfC9woYb6/dJN43Dnite8n/AaF26nzwyWI6TKdxBGt9JI5xrksl/Ofx+ R5Vo+MRzFKL2ZjzjGhMtqm7fXt9uaYglO49WhtFJNlgGo5axMXRhf9yDsGavOQX+ vk/PXwQkOz/CMhrk/6s6scf82AXpCpOQz+dFRuJgJDAQu9Z32wWFnchmdlxBOlg4 zywR7OYtgvjs0g7Ye7a+eXvLlPtFLRZzlTjpSsYbO4TSUEjEGpuuAG1PTYoqOk/l Z4GHcSGBV1+g5eW+NcCYKKrjUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ73EpzO g0JrpGw4EskCSMRzu0GUMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1K1y8y3NMqPItHSmxW3vvicKLzI7TzgD0Wwz6HhP9JYX6hPZ8cjPS o0zsFDbTOsDfbX4DVzY+ZxAfBS9aima31Uw34aacg+/AqCamOlsaoZHiUmJ8IIFr lZPhvHLijcd1lJhKbPBSrsKBhu1Lcw0eYGK2lsCy+fSb3kaxxJMm5gMICtkQoX91 C1uoqwsECRr0nC+FMPggvp/4ssIUZcodSKXk5qmJBoaUlpn0Al/fXBOj9mt+GpFM Ze8iToxJtVYWpQnDyQSgEMP+ghf+OhMV0+sNZV7Uu3toIHeTHvgiWctJFxw5PPTq /MbjtVGX3th8rY5ADoO3uSk2DqkT87Yx -----END CERTIFICATE-----Generated at Sun Aug 24 07:15:14 2025 by rpki-client