$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json) Hash identifier: gkJqMS9MJBea4z6To4SApvdrJQeH9OGeXYBRaz/HxiY= Subject key identifier: D1:7C:CE:07:F4:1E:A5:2B:1B:63:F3:C1:5E:13:5D:3E:95:8D:21:C6 Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C Certificate issuer: /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft Manifest number: 1A Signing time: Mon 16 Jun 2025 17:42:55 +0000 Manifest this update: Mon 16 Jun 2025 17:42:54 +0000 Manifest next update: Mon 23 Jun 2025 17:42:54 +0000 Files and hashes: 1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: RnSFTyxS5EeAGKC4hQqZZozdq2I8UhJQbiGmeAv29QI=) 2: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: Je+up3kY6qu1B3So3Vnq/xOYjMIPNymqMCzCxvb8aL4=) 3: 87087F00267E11F09183092AC4F9AE02.roa (hash: vPD3MBlV+VYxtTk5npGCIsRmwvlSAFp0uTh8dXUbHV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Validity Not Before: Jun 16 17:42:54 2025 GMT Not After : Jun 23 17:42:54 2025 GMT Subject: CN=6850579f-20f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:30:52:42:4f:5f:cc:38:51:c5:ae:e2:17: 8d:2c:e8:59:ce:27:57:07:05:82:af:d7:4d:e4:bd: 47:5b:32:3f:ee:31:ce:df:29:25:f7:dc:a2:f0:93: fc:03:57:6a:2b:50:73:aa:b7:7b:f4:fd:80:aa:a2: 43:5d:b7:eb:a4:76:c3:cb:6a:45:48:9e:81:2e:76: bd:48:5a:fc:16:14:16:0e:4d:d9:86:e3:95:31:8d: 30:c7:b5:48:1c:9b:db:23:da:38:b7:67:d2:82:f6: 04:ce:79:0d:d2:51:3b:d9:2d:7c:92:80:64:c7:53: ec:8f:35:9a:ce:c5:d2:86:62:f7:95:6d:79:54:02: a5:5f:ec:c8:8f:0e:c7:da:61:6c:3e:5c:4b:f7:78: 4d:02:e7:95:6d:62:b8:ec:39:92:cf:35:22:fc:52: 7a:bd:f4:aa:f4:c9:fa:e4:17:c0:f6:39:dc:c8:9c: de:7b:1f:45:9b:61:9e:21:6f:f6:b1:04:10:10:d2: 8e:03:43:27:9e:33:77:f5:e3:bd:7b:c9:71:e7:51: 4d:19:41:c3:12:fa:72:03:90:46:06:34:67:b7:82: 02:70:92:c4:64:18:c2:76:a2:c6:6c:b6:be:e9:09: 7b:9c:54:66:0d:1f:21:94:15:83:a9:e9:40:31:82: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7C:CE:07:F4:1E:A5:2B:1B:63:F3:C1:5E:13:5D:3E:95:8D:21:C6 X509v3 Authority Key Identifier: keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ee:3a:03:a4:f4:e2:95:69:02:6f:3b:b7:6b:69:0a:cb:ac: b0:c5:b2:4f:76:f0:d9:87:8d:af:ea:e2:cc:77:e4:90:1d:68: 62:c0:a6:93:89:21:b3:e4:47:5f:26:5a:0a:a0:a2:74:c1:85: e6:2b:1b:d3:9e:b4:a1:88:df:3b:6b:66:15:4c:47:2b:9f:6c: 27:b3:44:ad:3a:6b:f7:a5:f5:4e:8a:0b:41:da:77:4f:d0:a8: ef:89:44:00:fe:dc:59:7a:d2:17:35:4d:a1:24:99:2e:3b:9f: 42:56:06:c1:ea:72:0c:09:68:6f:74:3c:ee:65:71:07:2e:a9: b6:bf:24:71:23:c3:e1:16:79:8f:18:07:4a:c2:a8:33:59:46: a8:da:85:e5:15:e8:63:bf:5b:38:c2:cf:42:9e:76:3b:50:ff: 0a:d1:26:83:7a:95:53:e9:13:80:13:35:93:a5:d0:27:b1:e8: b6:20:ed:94:ff:54:d6:b8:63:90:b9:d6:cd:07:80:54:05:dc: 4b:5c:75:da:8d:33:fb:aa:b9:52:5c:66:4c:44:b7:cb:55:e6: 6a:40:e6:4d:ff:6f:95:4e:4f:18:05:7b:1b:f3:51:d3:76:6d: 95:f3:8a:ff:b0:22:47:97:4f:95:6b:db:57:a5:ab:e8:0c:e5: fd:df:a2:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Njk4RTExMC8GA1UEBRMoNURCNzVCMkRGOTREMDQ0NzRBNkU1RTJENEI3OENDMDg0 QkZDMkE2QzAeFw0yNTA2MTYxNzQyNTRaFw0yNTA2MjMxNzQyNTRaMBgxFjAUBgNV BAMTDTY4NTA1NzlmLTIwZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCscTBSQk9fzDhRxa7iF40s6FnOJ1cHBYKv103kvUdbMj/uMc7fKSX33KLwk/wD V2orUHOqt3v0/YCqokNdt+ukdsPLakVInoEudr1IWvwWFBYOTdmG45UxjTDHtUgc m9sj2ji3Z9KC9gTOeQ3SUTvZLXySgGTHU+yPNZrOxdKGYveVbXlUAqVf7MiPDsfa YWw+XEv3eE0C55VtYrjsOZLPNSL8Unq99Kr0yfrkF8D2OdzInN57H0WbYZ4hb/ax BBAQ0o4DQyeeM3f14717yXHnUU0ZQcMS+nIDkEYGNGe3ggJwksRkGMJ2osZstr7p CXucVGYNHyGUFYOp6UAxgk0TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0XzOB/Qe pSsbY/PBXhNdPpWNIcYwHwYDVR0jBBgwFoAUXbdbLflNBEdKbl4tS3jMCEv8Kmww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2OThFLzA5NUY2QzhDMjY3 QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEtt dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGJkYkxmbE5CRWRLYmw0dFMzak1DRXY4S213LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 OThFLzA5NUY2QzhDMjY3QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVk S2JsNHRTM2pNQ0V2OEttdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKPuOgOk9OKVaQJvO7draQrLrLDFsk928NmHja/q4sx35JAdaGLAppOJ IbPkR18mWgqgonTBheYrG9OetKGI3ztrZhVMRyufbCezRK06a/el9U6KC0Had0/Q qO+JRAD+3Fl60hc1TaEkmS47n0JWBsHqcgwJaG90PO5lcQcuqba/JHEjw+EWeY8Y B0rCqDNZRqjaheUV6GO/WzjCz0KedjtQ/wrRJoN6lVPpE4ATNZOl0Cex6LYg7ZT/ VNa4Y5C51s0HgFQF3EtcddqNM/uquVJcZkxEt8tV5mpA5k3/b5VOTxgFexvzUdN2 bZXziv+wIkeXT5Vr21elq+gM5f3fomk= -----END CERTIFICATE-----Generated at Tue Jun 17 07:24:29 2025 by rpki-client