$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: TflgHEMoMEMp6CACMSWk2eWw3dGfAq6HbGRbB0v/gmw= Subject key identifier: 4C:41:B7:59:F9:DA:9F:00:61:10:CB:19:39:B4:58:2B:BB:0E:35:E6 Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 07B9 Signing time: Thu 12 Jun 2025 20:52:31 +0000 Manifest this update: Thu 12 Jun 2025 20:52:30 +0000 Manifest next update: Thu 19 Jun 2025 20:52:30 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: fndj38x1MCWYtSzdkGI1EQgineHleXEUHc0K0iUC23E=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: pS3E0icAhyYawyxkXSLUFbWuAzA0NV/jlalvE1DTh1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:52:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Jun 12 20:52:30 2025 GMT Not After : Jun 19 20:52:30 2025 GMT Subject: CN=684b3e0f-ee73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:05:35:9c:1e:b9:34:36:87:de:08:0d:c8:93: f6:97:46:2c:25:49:94:f1:56:51:c8:7b:0d:a0:5b: db:d6:ac:77:40:ca:78:b2:7e:30:c5:59:d2:3a:55: d9:23:bd:7f:a1:43:ae:fe:8c:b1:5f:6d:82:c2:4e: e7:44:6c:9c:8a:22:1b:78:2c:97:e9:bf:d3:6a:8f: e6:39:8a:45:8c:ed:8d:92:a7:5b:43:14:c7:e5:73: 22:f2:1f:c5:4f:54:cf:29:91:38:de:f2:78:fb:10: 1c:08:88:05:03:4a:39:54:62:a5:40:e8:03:5c:ab: 99:a9:c9:86:4f:b1:d5:03:38:17:bd:22:44:f2:db: f4:7c:14:a9:ba:72:c6:b6:94:93:f1:2e:ed:59:b5: b4:a2:8b:40:f1:ca:fc:61:79:90:3c:02:1b:ee:2f: e6:ed:3b:bf:e4:8c:2a:de:42:74:0d:03:65:cf:a0: a5:d0:16:d6:64:2a:6f:5e:bf:35:87:58:cd:5c:62: c2:c6:bb:7a:df:26:6d:7a:8b:8b:61:d4:8c:5a:58: cc:c8:9b:67:2c:19:3e:b8:85:78:57:7f:e0:99:13: d1:c5:3c:62:2a:40:b1:a5:7a:d4:c9:2d:7c:31:b4: e2:ab:b3:23:7f:bd:dc:43:48:b5:b5:80:c0:60:0a: c0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:41:B7:59:F9:DA:9F:00:61:10:CB:19:39:B4:58:2B:BB:0E:35:E6 X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:74:60:cd:85:93:52:fe:38:d6:24:37:c5:d7:6b:43:a9:e1: 9a:77:44:82:40:12:ab:bc:2f:10:03:8f:72:7c:60:67:dd:b6: 9b:fd:f1:7a:22:bc:f0:a6:cc:85:ad:f4:93:5b:4d:fb:e0:0f: 4d:5c:03:0e:54:ce:cc:d6:43:59:44:4c:a9:8d:5b:99:35:01: d7:d5:33:ea:64:f0:d1:5d:30:61:fb:29:fa:d8:ac:41:0d:ab: 76:ea:08:1e:70:ba:b5:8e:15:12:e3:7b:15:7d:97:4f:25:f2: 7e:e3:31:2b:f3:8e:af:00:5b:3e:ba:3c:22:b1:08:cb:87:16: 2f:2a:26:2a:94:2d:0a:1e:cb:a1:b5:da:4c:a5:ea:07:53:90: c0:79:1d:e7:72:00:52:56:88:43:62:6e:5c:65:5d:31:00:14: d8:bb:f8:65:ba:f4:fa:2c:60:2d:33:15:5f:dd:d3:98:51:e2: f5:6c:0e:32:d6:9d:67:f7:3a:a2:b8:71:43:23:fc:4f:d8:d4: 33:aa:f4:d1:6c:29:75:8e:bc:eb:48:d5:e8:f4:63:60:e4:d0: 43:9a:51:25:28:9e:81:aa:83:3c:77:7b:f4:42:23:fc:c3:eb: 4d:a5:00:0f:21:ba:78:87:81:27:3a:e6:ec:9b:4f:af:33:e9: 46:95:95:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjUwNjEyMjA1MjMwWhcNMjUwNjE5MjA1MjMwWjAYMRYwFAYD VQQDEw02ODRiM2UwZi1lZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QU1nB65NDaH3ggNyJP2l0YsJUmU8VZRyHsNoFvb1qx3QMp4sn4wxVnSOlXZ I71/oUOu/oyxX22Cwk7nRGyciiIbeCyX6b/Tao/mOYpFjO2NkqdbQxTH5XMi8h/F T1TPKZE43vJ4+xAcCIgFA0o5VGKlQOgDXKuZqcmGT7HVAzgXvSJE8tv0fBSpunLG tpST8S7tWbW0ootA8cr8YXmQPAIb7i/m7Tu/5Iwq3kJ0DQNlz6Cl0BbWZCpvXr81 h1jNXGLCxrt63yZteouLYdSMWljMyJtnLBk+uIV4V3/gmRPRxTxiKkCxpXrUyS18 MbTiq7Mjf73cQ0i1tYDAYArAEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExBt1n5 2p8AYRDLGTm0WCu7DjXmMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYdGDNhZNS/jjWJDfF12tDqeGad0SCQBKrvC8QA49yfGBn3bab/fF6 IrzwpsyFrfSTW0374A9NXAMOVM7M1kNZREypjVuZNQHX1TPqZPDRXTBh+yn62KxB Dat26ggecLq1jhUS43sVfZdPJfJ+4zEr846vAFs+ujwisQjLhxYvKiYqlC0KHsuh tdpMpeoHU5DAeR3ncgBSVohDYm5cZV0xABTYu/hluvT6LGAtMxVf3dOYUeL1bA4y 1p1n9zqiuHFDI/xP2NQzqvTRbCl1jrzrSNXo9GNg5NBDmlElKJ6BqoM8d3v0QiP8 w+tNpQAPIbp4h4EnOubsm0+vM+lGlZU7 -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:06 2025 by rpki-client