$ rpki-client -vvf rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft File: XJzBFCqQdWDNmfBuXdAt5OIulEU.mft (raw, json) Hash identifier: zq31W1AxH+h2f0O2GxV7j9+PXy5JGimcTdAlOsqAqUw= Subject key identifier: D7:EF:A0:3C:3B:41:80:BD:75:E6:03:94:F6:D0:2F:B0:0D:85:26:D6 Authority key identifier: 5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 Certificate issuer: /CN=A911636A/serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft Manifest number: 01EC Signing time: Sun 15 Jun 2025 01:56:20 +0000 Manifest this update: Sun 15 Jun 2025 01:56:20 +0000 Manifest next update: Sun 22 Jun 2025 01:56:20 +0000 Files and hashes: 1: XJzBFCqQdWDNmfBuXdAt5OIulEU.crl (hash: GWHy+XiMBMpWKOpJskhRH7njRlFw6tq3EjTD8YxvGLo=) 2: A3A7ADEAB19711EF8A23BC39C4F9AE02.roa (hash: Xxhg1IOUnWIosjBDDjlaAvNnXCEgOL/Rukp1auAELC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911636A, serialNumber=5C9CC1142A907560CD99F06E5DD02DE4E22E9445 Validity Not Before: Jun 15 01:56:20 2025 GMT Not After : Jun 22 01:56:20 2025 GMT Subject: CN=684e2844-f64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:32:fb:6c:93:4e:2b:a5:10:8d:78:35:03: 37:b5:23:59:fa:94:52:a1:b8:ed:e8:ad:22:63:55: 27:17:81:75:a8:55:41:a3:08:4b:63:93:50:c2:92: 95:69:bb:64:22:c2:0c:88:b5:d7:53:5d:b1:68:38: c4:04:c1:8d:00:59:44:fb:91:ee:7a:b3:9a:8e:ef: 0f:da:4e:89:6c:b2:0f:b9:ff:a6:48:12:d9:b0:4e: 76:ae:a6:e8:13:d1:fb:9f:ef:2a:85:9a:c6:05:d7: 38:b8:61:50:1a:d2:0f:3e:b6:f0:b1:c2:f6:78:58: 40:86:13:db:90:e1:05:73:d8:0d:75:6a:f4:60:04: e5:9c:70:ff:0c:5c:72:07:8c:1e:31:55:e7:49:2a: e3:ad:65:b6:e1:ea:8e:84:9e:c8:40:84:bd:d6:71: a1:d2:23:b3:65:32:d1:9f:c2:c8:80:c7:e3:2b:b2: 66:25:d3:71:14:b0:57:27:9f:fe:57:18:b5:31:20: e1:40:08:42:7b:85:dd:4e:82:2a:3d:ef:6a:09:c2: 89:bb:1a:1d:b0:aa:34:3a:d0:3c:9c:08:c2:4d:d9: bc:d3:f0:11:cb:27:6d:72:96:f7:7a:aa:b8:9a:d4: 01:2d:48:e5:8f:ea:08:ea:85:42:03:3c:28:7b:76: 9b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EF:A0:3C:3B:41:80:BD:75:E6:03:94:F6:D0:2F:B0:0D:85:26:D6 X509v3 Authority Key Identifier: keyid:5C:9C:C1:14:2A:90:75:60:CD:99:F0:6E:5D:D0:2D:E4:E2:2E:94:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJzBFCqQdWDNmfBuXdAt5OIulEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911636A/B0F33D2A66EE11EDB3B41A5DC4F9AE02/XJzBFCqQdWDNmfBuXdAt5OIulEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8d:ad:cf:16:19:4d:2f:14:18:bc:ce:df:07:55:50:9c:03: 5c:21:ea:cd:a3:32:c9:7c:45:3e:97:59:27:80:2d:9d:33:be: 1a:b5:f9:b8:43:41:d1:fe:82:1c:9f:d7:f8:6f:f5:cd:e2:d0: 00:60:4b:48:ea:c8:61:f6:ad:25:c5:19:7b:26:c8:ab:fc:c6: 4e:15:98:e7:85:85:34:0c:ff:43:8b:22:46:8a:27:e0:d3:fb: a0:52:25:e9:78:82:d1:6a:64:05:d0:1f:fd:21:cb:bf:bf:dd: 56:8b:e0:f7:1b:25:ad:de:8d:f3:9e:11:15:e6:42:e8:a5:bf: 21:e8:6e:39:e8:f8:5c:5a:21:9f:49:ea:43:14:61:3e:85:12: fe:68:c6:5c:01:db:6a:e0:b6:61:ab:0f:f8:53:5d:ea:9a:5b: bb:5e:6f:2f:85:a2:d5:7a:30:66:1e:fd:42:d9:87:cb:90:ff: 3d:10:eb:fd:d4:a0:d5:8d:d6:35:52:f6:95:c4:bd:ba:04:37: e9:05:db:cf:ba:dd:e4:d0:70:d2:64:30:ac:de:f4:d1:88:64: 14:26:a2:03:6f:19:3c:50:f1:43:a2:87:c2:0a:c6:96:cf:99: 5d:3f:ea:54:a0:12:97:d6:85:89:e3:14:fa:ce:2c:9c:01:ad: 67:54:be:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYzNkExMTAvBgNVBAUTKDVDOUNDMTE0MkE5MDc1NjBDRDk5RjA2RTVERDAyREU0 RTIyRTk0NDUwHhcNMjUwNjE1MDE1NjIwWhcNMjUwNjIyMDE1NjIwWjAYMRYwFAYD VQQDEw02ODRlMjg0NC1mNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtI4y+2yTTiulEI14NQM3tSNZ+pRSobjt6K0iY1UnF4F1qFVBowhLY5NQwpKV abtkIsIMiLXXU12xaDjEBMGNAFlE+5HuerOaju8P2k6JbLIPuf+mSBLZsE52rqbo E9H7n+8qhZrGBdc4uGFQGtIPPrbwscL2eFhAhhPbkOEFc9gNdWr0YATlnHD/DFxy B4weMVXnSSrjrWW24eqOhJ7IQIS91nGh0iOzZTLRn8LIgMfjK7JmJdNxFLBXJ5/+ Vxi1MSDhQAhCe4XdToIqPe9qCcKJuxodsKo0OtA8nAjCTdm80/ARyydtcpb3eqq4 mtQBLUjlj+oI6oVCAzwoe3ab2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfvoDw7 QYC9deYDlPbQL7ANhSbWMB8GA1UdIwQYMBaAFFycwRQqkHVgzZnwbl3QLeTiLpRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM2QS9CMEYzM0QyQTY2 RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRXRE5tZkJ1WGRBdDVPSXVs RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKekJGQ3FRZFdETm1mQnVYZEF0NU9JdWxFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjM2QS9CMEYzM0QyQTY2RUUxMUVEQjNCNDFBNURDNEY5QUUwMi9YSnpCRkNxUWRX RE5tZkJ1WGRBdDVPSXVsRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbja3PFhlNLxQYvM7fB1VQnANcIerNozLJfEU+l1kngC2dM74atfm4 Q0HR/oIcn9f4b/XN4tAAYEtI6shh9q0lxRl7Jsir/MZOFZjnhYU0DP9DiyJGiifg 0/ugUiXpeILRamQF0B/9Icu/v91Wi+D3GyWt3o3znhEV5kLopb8h6G456PhcWiGf SepDFGE+hRL+aMZcAdtq4LZhqw/4U13qmlu7Xm8vhaLVejBmHv1C2YfLkP89EOv9 1KDVjdY1UvaVxL26BDfpBdvPut3k0HDSZDCs3vTRiGQUJqIDbxk8UPFDoofCCsaW z5ldP+pUoBKX1oWJ4xT6ziycAa1nVL6T -----END CERTIFICATE-----Generated at Sun Jun 15 09:37:08 2025 by rpki-client