$ rpki-client -vvf rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft File: XQ11AElW7cyrm4QnGnNA5jhV_4o.mft (raw, json) Hash identifier: hQ+i/CLLKe9S4rsfYFRrldLn8jqp9vJ1Ret1v23HDzk= Subject key identifier: DF:4F:BA:82:4F:F2:55:55:D7:8C:28:89:E2:8A:78:8B:19:67:C3:E4 Authority key identifier: 5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A Certificate issuer: /CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A Certificate serial: 0722 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft Manifest number: 0716 Signing time: Thu 12 Jun 2025 21:33:02 +0000 Manifest this update: Thu 12 Jun 2025 21:33:01 +0000 Manifest next update: Thu 19 Jun 2025 21:33:01 +0000 Files and hashes: 1: XQ11AElW7cyrm4QnGnNA5jhV_4o.crl (hash: c9TvYTNTq9rRBcnn6VNP0O4XBGZkv0ObUee/rs0VzIs=) 2: 8EBA772E3F2B11EB87759716C4F9AE02.roa (hash: IwbM0qanfV+e3+145YunmnHjT+laZw+y8+B4ZLa5xus=) 3: 688EAE1E8A1911EC94921D85C4F9AE02.roa (hash: l86iuU4A1knmyjZ3msJqjoeK6VLpJ7MZC8Ec9/M8Wvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1826 (0x722) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BC39, serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A Validity Not Before: Jun 12 21:33:01 2025 GMT Not After : Jun 19 21:33:01 2025 GMT Subject: CN=684b478e-bc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ad:e7:e2:b6:d5:10:f0:47:3d:75:bf:a2:90: 3b:42:c9:3a:6e:63:46:39:74:ae:10:e3:90:a3:dc: a7:3b:64:16:ca:cd:80:81:ca:45:8d:e1:b5:33:f4: c4:c0:dd:bf:d4:8e:0f:dc:de:ff:31:a6:2a:32:3e: 81:6a:db:81:dc:c9:2c:04:6d:19:01:b7:8d:ea:87: 56:d4:1d:14:50:64:96:1f:6c:7d:92:34:50:34:db: c1:9d:d3:72:31:8f:b8:d8:18:b5:6f:70:22:72:90: 68:e6:d7:88:65:b4:c8:9f:e1:a1:ff:39:65:bb:3f: ff:3a:a7:d9:a3:e9:d9:f0:cb:2e:a2:35:31:d0:05: 23:5a:fb:ca:bf:af:7b:40:ec:57:ce:a9:0a:b5:58: ca:bc:ae:93:8c:4e:d2:3a:3e:ba:88:a4:eb:b8:7b: b0:cc:99:e2:74:01:23:da:c0:96:d7:d9:63:8a:01: 5c:8b:e8:72:d7:16:c1:6e:fd:6a:57:90:b7:08:52: 15:fe:ea:74:59:4f:47:0a:fa:28:48:5d:1a:a5:21: bc:41:a4:83:ae:80:c0:4a:07:6d:2f:44:8c:4a:b0: df:47:d5:23:b1:3c:92:25:3e:d0:d7:8d:50:1a:77: 57:38:49:b5:f0:59:47:51:ed:0e:f7:4f:6a:a5:c8: 51:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4F:BA:82:4F:F2:55:55:D7:8C:28:89:E2:8A:78:8B:19:67:C3:E4 X509v3 Authority Key Identifier: keyid:5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:51:c3:60:5a:35:82:3b:62:06:80:29:80:02:ee:ba:b0:b0: 64:db:ef:5f:35:58:c0:ae:bb:6e:11:fb:c0:68:30:9f:0b:b1: fe:65:1c:6c:e9:d3:f5:f4:1a:09:06:1a:65:00:75:9e:3d:35: e8:c6:d3:b9:73:c6:c2:23:a5:e5:4b:ae:38:44:64:34:8b:cd: 09:40:88:19:00:1a:59:b3:74:fb:39:76:92:13:a3:95:ca:86: 61:bd:c7:41:83:ed:14:11:fc:04:f3:c5:00:b9:02:79:9e:99: 2c:a6:b3:d9:81:ca:f4:dd:9b:6d:75:75:aa:f3:a2:e8:2b:5b: c8:7f:dc:fb:e2:d7:d0:d9:ba:d8:6b:32:6b:a1:13:f5:35:08: 16:7f:5c:f6:80:40:53:6a:50:44:fb:dd:6a:8d:b7:79:66:c3: c4:fa:b0:bb:42:33:19:af:ba:2e:a5:e2:cd:df:12:99:c6:b5: 1c:91:51:5e:97:97:fd:03:f4:b0:c5:e6:17:b8:6a:3d:1d:42: d6:5a:e2:e5:4b:c4:e3:03:7a:a8:c9:ca:c0:3c:cc:bb:bc:b0: 28:e1:9f:f4:ce:e0:ff:bc:fc:ba:71:56:0e:0b:28:fd:b6:3b: b6:68:cb:35:12:0c:42:ad:68:42:b6:4e:9a:9f:c0:bb:0a:61: a9:48:42:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDMzkxMTAvBgNVBAUTKDVEMEQ3NTAwNDk1NkVEQ0NBQjlCODQyNzFBNzM0MEU2 Mzg1NUZGOEEwHhcNMjUwNjEyMjEzMzAxWhcNMjUwNjE5MjEzMzAxWjAYMRYwFAYD VQQDEw02ODRiNDc4ZS1iYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxK3n4rbVEPBHPXW/opA7Qsk6bmNGOXSuEOOQo9ynO2QWys2AgcpFjeG1M/TE wN2/1I4P3N7/MaYqMj6BatuB3MksBG0ZAbeN6odW1B0UUGSWH2x9kjRQNNvBndNy MY+42Bi1b3AicpBo5teIZbTIn+Gh/zlluz//OqfZo+nZ8MsuojUx0AUjWvvKv697 QOxXzqkKtVjKvK6TjE7SOj66iKTruHuwzJnidAEj2sCW19ljigFci+hy1xbBbv1q V5C3CFIV/up0WU9HCvooSF0apSG8QaSDroDASgdtL0SMSrDfR9UjsTySJT7Q141Q GndXOEm18FlHUe0O909qpchR9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9PuoJP 8lVV14woieKKeIsZZ8PkMB8GA1UdIwQYMBaAFF0NdQBJVu3Mq5uEJxpzQOY4Vf+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkMzOS9CMzdCMTU4RTNG MjkxMUVCOUI5QTIzMTRDNEY5QUUwMi9YUTExQUVsVzdjeXJtNFFuR25OQTVqaFZf NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hRMTFBRWxXN2N5cm00UW5Hbk5BNWpoVl80by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkMzOS9CMzdCMTU4RTNGMjkxMUVCOUI5QTIzMTRDNEY5QUUwMi9YUTExQUVsVzdj eXJtNFFuR25OQTVqaFZfNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMUcNgWjWCO2IGgCmAAu66sLBk2+9fNVjArrtuEfvAaDCfC7H+ZRxs 6dP19BoJBhplAHWePTXoxtO5c8bCI6XlS644RGQ0i80JQIgZABpZs3T7OXaSE6OV yoZhvcdBg+0UEfwE88UAuQJ5npksprPZgcr03ZttdXWq86LoK1vIf9z74tfQ2brY azJroRP1NQgWf1z2gEBTalBE+91qjbd5ZsPE+rC7QjMZr7oupeLN3xKZxrUckVFe l5f9A/SwxeYXuGo9HULWWuLlS8TjA3qoycrAPMy7vLAo4Z/0zuD/vPy6cVYOCyj9 tju2aMs1EgxCrWhCtk6an8C7CmGpSEJP -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:18 2025 by rpki-client