$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft File: xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json) Hash identifier: V0hlqte6H9G3ZTRZYreeI1FshiBqYkHGbuucNgv7SZ0= Subject key identifier: EC:10:8B:8B:0A:BB:FB:E1:1A:84:2F:5F:3A:A1:41:F8:CA:B5:3C:57 Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 Certificate issuer: /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft Manifest number: DE Signing time: Fri 13 Jun 2025 04:28:01 +0000 Manifest this update: Fri 13 Jun 2025 04:28:01 +0000 Manifest next update: Fri 20 Jun 2025 04:28:01 +0000 Files and hashes: 1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: YtmbOwzCYUF4QqCEirnmk1lfPtH0pgsWMV44tNVo8EI=) 2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: JP9Pvfyfa3vW7gxEOqKzfjawNJzZLQs3btJhigzzzxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Validity Not Before: Jun 13 04:28:01 2025 GMT Not After : Jun 20 04:28:01 2025 GMT Subject: CN=684ba8d1-f068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:eb:d5:06:99:bd:95:ad:69:3c:15:81:d1:90: 3f:bb:18:e4:82:b5:30:40:48:9e:de:50:ca:b2:b5: dd:96:b0:6e:53:89:f8:26:8f:68:87:28:a2:90:36: a3:d3:e5:e2:98:7f:f5:a7:6f:5a:3c:08:7d:09:49: b3:c9:8d:2d:8d:37:47:05:e7:1b:6d:44:8e:71:ce: 2e:12:81:0a:44:64:69:d2:b1:13:16:82:ba:a3:a8: a1:63:46:95:d5:cd:90:be:91:70:d7:76:9c:cc:b5: c9:99:56:82:e3:6f:20:90:71:d7:af:ae:3b:3f:7b: ca:55:14:04:c0:ca:e8:6c:77:d3:cd:99:f5:d7:e6: b0:10:01:13:6a:8c:04:a0:9d:5a:cf:7f:84:93:d5: 86:24:25:a1:c8:73:aa:71:7c:8a:ee:34:8c:ad:a2: 0f:65:66:0c:77:8f:f7:95:68:80:bc:b8:fa:81:92: 99:8b:77:47:bd:5a:3c:c6:dc:21:87:73:00:e3:2e: 13:1d:1b:fe:12:7d:36:7f:96:7f:9c:a1:9d:a4:20: de:ac:81:0f:1c:bc:a0:93:20:2a:4b:25:c7:ef:1f: 3d:17:5b:23:b4:5f:48:4d:e2:e5:fa:98:d4:9f:64: f5:14:a9:8a:16:a9:c3:3a:ac:01:b7:de:fb:af:76: 72:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:10:8B:8B:0A:BB:FB:E1:1A:84:2F:5F:3A:A1:41:F8:CA:B5:3C:57 X509v3 Authority Key Identifier: keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:52:28:cd:55:bb:46:ab:1a:85:a4:fe:66:9c:f9:24:be:1f: d3:86:ce:1c:50:ca:05:d4:d1:bc:d6:13:95:08:da:92:11:61: b6:90:3d:10:68:53:5d:49:57:23:76:73:31:ec:e3:37:5e:f2: f1:2e:fc:c9:ce:b2:a2:3d:c3:47:59:8d:49:72:9c:31:8a:50: 8a:ad:27:eb:c2:a8:d9:4e:31:46:7e:44:b6:4c:23:3d:45:1a: 45:d1:6f:7c:30:28:4f:6f:70:ff:1d:d2:17:8c:bb:c2:df:54: 98:0f:23:19:a6:cd:1d:7c:b6:63:8c:91:ff:b4:d1:ef:0b:6b: 99:6f:be:54:db:e2:63:c5:e6:03:24:85:c1:6e:bf:60:ee:3b: 16:de:ca:de:1c:1e:24:3f:dd:32:62:aa:a8:f8:e5:ef:b9:fa: 5c:e0:81:4d:31:7c:68:a1:ea:55:5f:36:47:e2:d6:0d:9c:bf: 55:e6:12:6a:be:8b:60:19:84:bd:d0:4a:6f:bd:f2:60:b3:4a: 6b:dd:d1:cc:8a:f6:2c:87:a1:b0:a3:e7:21:5b:17:28:3e:83: e2:2d:e5:13:8f:8b:85:58:6d:3b:75:b2:95:b7:88:70:f1:29: 4a:50:1e:b8:29:05:4f:44:78:58:53:9c:5d:7d:2e:d0:5a:43: 95:16:03:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJENTExMTAvBgNVBAUTKEM0QzY3RUJCNkIyRERDNjkyNEJCQjk2NTVFN0UwRjgy MTg1MzBDNjUwHhcNMjUwNjEzMDQyODAxWhcNMjUwNjIwMDQyODAxWjAYMRYwFAYD VQQDEw02ODRiYThkMS1mMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOvVBpm9la1pPBWB0ZA/uxjkgrUwQEie3lDKsrXdlrBuU4n4Jo9ohyiikDaj 0+XimH/1p29aPAh9CUmzyY0tjTdHBecbbUSOcc4uEoEKRGRp0rETFoK6o6ihY0aV 1c2QvpFw13aczLXJmVaC428gkHHXr647P3vKVRQEwMrobHfTzZn11+awEAETaowE oJ1az3+Ek9WGJCWhyHOqcXyK7jSMraIPZWYMd4/3lWiAvLj6gZKZi3dHvVo8xtwh h3MA4y4THRv+En02f5Z/nKGdpCDerIEPHLygkyAqSyXH7x89F1sjtF9ITeLl+pjU n2T1FKmKFqnDOqwBt977r3ZySQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwQi4sK u/vhGoQvXzqhQfjKtTxXMB8GA1UdIwQYMBaAFMTGfrtrLdxpJLu5ZV5+D4IYUwxl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ1MS9FQUU1RkNBQUYy MzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNHa2t1N2xsWG40UGdoaFRE R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNWi11MnN0M0dra3U3bGxYbjRQZ2hoVERHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ1MS9FQUU1RkNBQUYyMzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNH a2t1N2xsWG40UGdoaFRER1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8UijNVbtGqxqFpP5mnPkkvh/Ths4cUMoF1NG81hOVCNqSEWG2kD0Q aFNdSVcjdnMx7OM3XvLxLvzJzrKiPcNHWY1JcpwxilCKrSfrwqjZTjFGfkS2TCM9 RRpF0W98MChPb3D/HdIXjLvC31SYDyMZps0dfLZjjJH/tNHvC2uZb75U2+JjxeYD JIXBbr9g7jsW3sreHB4kP90yYqqo+OXvufpc4IFNMXxooepVXzZH4tYNnL9V5hJq votgGYS90EpvvfJgs0pr3dHMivYsh6Gwo+chWxcoPoPiLeUTj4uFWG07dbKVt4hw 8SlKUB64KQVPRHhYU5xdfS7QWkOVFgPC -----END CERTIFICATE-----Generated at Sat Jun 14 17:18:56 2025 by rpki-client