$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: VkBDdKI0srlLiX9KfbDB5rhZn6/n2h6db4bzRXKdIwY= Subject key identifier: 9A:9F:56:7B:9B:5D:4C:A0:4C:3A:EE:F8:B0:0C:4B:34:91:90:F2:8B Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: A1 Signing time: Fri 13 Jun 2025 05:07:43 +0000 Manifest this update: Fri 13 Jun 2025 05:07:42 +0000 Manifest next update: Fri 20 Jun 2025 05:07:42 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: 0LOv2VdD5CQFjgE+LvOHnB6lsw/YqgsOKmG9sIx+c+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: Jun 13 05:07:42 2025 GMT Not After : Jun 20 05:07:42 2025 GMT Subject: CN=684bb21e-a469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8b:86:18:0f:0e:7d:d2:0c:6d:01:2a:6a:3d: 74:cd:05:e4:64:e0:d6:35:49:f3:ba:b1:89:a0:e1: 5e:1b:2a:15:da:93:8f:fc:ab:79:18:93:5a:71:1e: 2e:17:ed:36:af:79:df:68:15:0b:72:00:19:0e:8b: c6:77:2a:f3:6d:58:bd:9e:62:6a:1f:54:b6:8c:58: 41:df:70:85:f3:d2:78:b2:da:f1:18:d2:64:1d:b0: 40:8a:9d:bc:a5:53:9c:62:6f:d1:31:f0:bf:ce:b4: ea:bb:31:40:3a:b1:12:6d:1c:d7:a6:18:c9:ae:b4: 5c:e5:94:40:c3:94:45:ac:3e:99:ca:73:3c:b0:e6: 97:64:42:d1:59:b1:14:d7:1c:61:8c:46:fc:07:5f: 2b:2f:f8:10:e0:8b:8a:bc:57:e1:19:a0:be:e5:1b: 88:20:ef:f0:4a:af:83:dd:a9:84:bc:f8:9a:c2:dd: 3a:66:67:84:4e:e6:71:a2:a3:ee:c7:af:f9:9b:25: 56:7f:4b:d6:21:06:bd:86:36:02:2f:d0:62:3b:a0: 20:3b:a2:72:7d:46:08:c6:03:5a:a8:1a:02:e9:30: 1c:c1:b9:4e:3f:14:b9:63:17:14:8a:3e:29:e8:d5: ab:e9:fb:47:63:4a:c0:00:80:e9:74:1a:c0:5a:30: d5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9F:56:7B:9B:5D:4C:A0:4C:3A:EE:F8:B0:0C:4B:34:91:90:F2:8B X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:1b:6c:6d:39:05:f4:b8:e1:f9:aa:90:c1:ac:c0:ba:41:2b: 1e:50:75:33:17:00:06:cf:46:1e:44:da:b2:85:11:c7:e1:a5: 00:ae:71:1b:59:9d:04:6f:0d:d0:ff:e9:4c:0e:78:31:79:ca: a5:c4:66:83:f4:5e:51:6f:1b:70:08:5f:74:ce:f7:24:43:0f: fd:ee:93:87:64:2c:fb:98:64:77:f6:99:8a:32:0e:a5:6d:4b: 2d:c5:95:62:43:70:bb:82:07:1c:8f:e4:5f:66:cb:31:ce:23: 41:59:a7:19:6e:60:ae:9d:0b:ca:a3:74:d2:82:af:38:8c:c7: 27:cd:04:c0:ce:80:7a:e5:ec:7f:c9:d6:f4:4d:79:b1:a9:ac: 0a:d4:bb:48:e2:8a:02:d9:71:e0:ec:16:d3:78:ce:d0:64:be: c2:2a:a9:9c:4c:fd:99:7a:00:61:5e:cd:2b:5d:06:6e:82:a0: f5:da:3e:b3:97:2c:37:79:b4:07:5f:52:e7:d7:04:21:d6:c1: 56:89:a4:42:92:f2:b3:e9:bf:9b:98:09:0a:b6:3f:fc:a2:2a: b6:8f:de:1e:dc:3d:7d:14:67:e1:ad:a7:85:ac:fb:eb:6b:9c: 5a:4c:ac:d7:3b:91:0d:cc:57:ef:72:87:5c:1f:2e:2b:80:90: de:72:27:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG QUE4OENEODQwHhcNMjUwNjEzMDUwNzQyWhcNMjUwNjIwMDUwNzQyWjAYMRYwFAYD VQQDEw02ODRiYjIxZS1hNDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsouGGA8OfdIMbQEqaj10zQXkZODWNUnzurGJoOFeGyoV2pOP/Kt5GJNacR4u F+02r3nfaBULcgAZDovGdyrzbVi9nmJqH1S2jFhB33CF89J4strxGNJkHbBAip28 pVOcYm/RMfC/zrTquzFAOrESbRzXphjJrrRc5ZRAw5RFrD6ZynM8sOaXZELRWbEU 1xxhjEb8B18rL/gQ4IuKvFfhGaC+5RuIIO/wSq+D3amEvPiawt06ZmeETuZxoqPu x6/5myVWf0vWIQa9hjYCL9BiO6AgO6JyfUYIxgNaqBoC6TAcwblOPxS5YxcUij4p 6NWr6ftHY0rAAIDpdBrAWjDV2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqfVnub XUygTDru+LAMSzSRkPKLMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6 WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1 RkdwQU92cFZmRno2cUl6WVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1G2xtOQX0uOH5qpDBrMC6QSseUHUzFwAGz0YeRNqyhRHH4aUArnEb WZ0Ebw3Q/+lMDngxecqlxGaD9F5RbxtwCF90zvckQw/97pOHZCz7mGR39pmKMg6l bUstxZViQ3C7ggccj+RfZssxziNBWacZbmCunQvKo3TSgq84jMcnzQTAzoB65ex/ ydb0TXmxqawK1LtI4ooC2XHg7BbTeM7QZL7CKqmcTP2ZegBhXs0rXQZugqD12j6z lyw3ebQHX1Ln1wQh1sFWiaRCkvKz6b+bmAkKtj/8oiq2j94e3D19FGfhraeFrPvr a5xaTKzXO5ENzFfvcodcHy4rgJDecifo -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:19 2025 by rpki-client