$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json) Hash identifier: MpSMW0iZlpUeifE+o+kDZc4OAVSnEPGZmCK2fHspeDc= Subject key identifier: 4A:AB:26:7D:E0:F0:52:13:F4:BE:2C:C5:04:12:9A:2A:02:D8:A9:89 Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Certificate serial: 0862 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft Manifest number: 1762 Signing time: Thu 12 Jun 2025 17:31:45 +0000 Manifest this update: Thu 12 Jun 2025 17:31:44 +0000 Manifest next update: Thu 19 Jun 2025 17:31:44 +0000 Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: oFiPnerLxg86vJplflsjpA1LmfBF7pQLvLQ8ew+Eus4=) 2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: t2aB2zeGB7GLVJUFKuYwNrlRUrrBiilMq9C3DO3eLYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2146 (0x862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68, serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Validity Not Before: Jun 12 17:31:44 2025 GMT Not After : Jun 19 17:31:44 2025 GMT Subject: CN=684b0f01-d82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:be:2b:18:d9:72:ec:ef:ab:d5:d6:52:db: 9f:cc:5c:9f:e8:5f:95:8c:bd:ee:9f:bd:93:f4:a4: d3:fd:63:5e:b0:9d:73:7e:d5:53:de:61:22:1a:c7: 59:11:0c:49:32:a8:39:f7:ee:e3:bd:c0:bc:8b:12: 70:92:13:e6:80:40:95:81:00:f2:f9:1b:e9:22:15: 0b:c2:d3:e6:1b:1a:e2:15:ac:6c:29:5f:5f:23:5c: d1:5d:38:5b:b6:2a:b9:f8:91:f7:91:72:6d:c9:c8: 77:73:e1:84:e5:77:23:43:99:27:a1:e6:9c:fe:48: ee:99:b0:ed:85:b0:a1:7b:eb:f9:b3:2b:5e:6a:3b: a8:6f:5f:4f:d7:6b:00:b0:2c:fd:9a:40:7c:f8:bd: 5d:d8:92:8e:51:ab:9c:24:94:08:d3:19:ae:73:5b: 2a:a9:bf:33:e7:77:14:27:83:fe:a5:d1:88:8d:6c: 55:20:1e:16:27:93:1d:82:e9:91:fb:2f:96:6e:23: a7:42:f2:47:61:14:d2:31:53:b0:b3:f0:c9:13:6e: 59:3b:15:97:24:c5:c5:c7:5d:61:38:c9:5b:59:45: ea:76:e6:85:5d:f3:b8:d8:1e:9c:f2:66:8f:f0:6c: ab:33:c5:a2:61:e5:eb:09:f0:e2:e4:73:2e:5d:9b: 0d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AB:26:7D:E0:F0:52:13:F4:BE:2C:C5:04:12:9A:2A:02:D8:A9:89 X509v3 Authority Key Identifier: keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:28:5a:68:5d:c6:26:23:08:3c:19:31:0f:07:7b:85:01:a3: 4d:de:24:ee:08:c9:bc:d6:ea:21:9b:1a:01:45:be:dd:74:2b: d0:eb:43:60:a9:bb:06:65:e2:aa:bf:6f:7d:8d:e7:cd:37:91: c0:67:91:3f:ef:b3:b1:25:9a:93:ef:60:19:05:f4:6a:b9:70: d7:f0:c7:8a:16:22:37:79:a1:9c:4c:4c:72:34:1f:19:3d:4e: 02:08:68:63:55:fa:72:00:d0:9a:5b:3d:56:9d:78:ad:86:4c: be:c0:ea:a7:58:0e:66:e4:48:0d:05:cd:36:cf:c4:46:6a:71: 31:45:56:18:25:cf:bf:b7:c5:72:d6:ff:e8:43:8f:23:2a:09: f2:fa:ef:a1:ea:54:9e:24:cf:01:42:37:3c:2d:5c:21:cf:b3: b5:07:68:cc:e0:48:64:b6:3c:80:79:06:10:21:b7:eb:5e:18: e2:00:80:00:9a:48:ce:be:27:e1:e0:80:7e:3f:79:97:ed:4c: 99:72:e6:83:42:41:1e:28:6b:56:33:b1:a2:12:05:80:cf:0a: 46:7a:74:1c:32:c4:4d:b4:63:e6:4f:9e:b6:1b:4d:90:30:e7: 8e:fc:5a:09:cf:17:5d:09:b2:b1:72:1c:9d:db:46:0f:09:9a: 8c:db:90:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKDVDRTU5QkVBNDA0OTNGQ0M1NzQ2NzE2OTIyRjE5ODhE OTYyOTFGQkUwHhcNMjUwNjEyMTczMTQ0WhcNMjUwNjE5MTczMTQ0WjAYMRYwFAYD VQQDEw02ODRiMGYwMS1kODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+q+KxjZcuzvq9XWUtufzFyf6F+VjL3un72T9KTT/WNesJ1zftVT3mEiGsdZ EQxJMqg59+7jvcC8ixJwkhPmgECVgQDy+RvpIhULwtPmGxriFaxsKV9fI1zRXThb tiq5+JH3kXJtych3c+GE5XcjQ5knoeac/kjumbDthbChe+v5syteajuob19P12sA sCz9mkB8+L1d2JKOUaucJJQI0xmuc1sqqb8z53cUJ4P+pdGIjWxVIB4WJ5MdgumR +y+WbiOnQvJHYRTSMVOws/DJE25ZOxWXJMXFx11hOMlbWUXqduaFXfO42B6c8maP 8GyrM8WiYeXrCfDi5HMuXZsNQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqrJn3g 8FIT9L4sxQQSmioC2KmJMB8GA1UdIwQYMBaAFFzlm+pAST/MV0ZxaSLxmI2WKR++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4eFhSbkZwSXZHWWpaWXBI NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPV2I2a0JKUDh4WFJuRnBJdkdZalpZcEg3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4 eFhSbkZwSXZHWWpaWXBINzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxKFpoXcYmIwg8GTEPB3uFAaNN3iTuCMm81uohmxoBRb7ddCvQ60Ng qbsGZeKqv299jefNN5HAZ5E/77OxJZqT72AZBfRquXDX8MeKFiI3eaGcTExyNB8Z PU4CCGhjVfpyANCaWz1WnXithky+wOqnWA5m5EgNBc02z8RGanExRVYYJc+/t8Vy 1v/oQ48jKgny+u+h6lSeJM8BQjc8LVwhz7O1B2jM4EhktjyAeQYQIbfrXhjiAIAA mkjOvifh4IB+P3mX7UyZcuaDQkEeKGtWM7GiEgWAzwpGenQcMsRNtGPmT562G02Q MOeO/FoJzxddCbKxchyd20YPCZqM25BJ -----END CERTIFICATE-----Generated at Sat Jun 14 19:06:58 2025 by rpki-client