$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: +xPqV8c+aWTLW5/T0h3GPLV7TeDUllT+tzeVKyPhzCY= Subject key identifier: 6B:D9:8B:0E:F2:28:1E:5E:60:C9:7F:59:66:A9:FA:9F:9A:04:2E:33 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 0671 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 0638 Signing time: Mon 16 Jun 2025 22:34:59 +0000 Manifest this update: Mon 16 Jun 2025 22:34:58 +0000 Manifest next update: Mon 23 Jun 2025 22:34:58 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: t779sE688ay1+RlBXAoVj8rj9p+Wbz9918VhvPim3+A=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: oyubRpGqXRPhXUbHGDMN11nyLcbaEyRpquXs/6vcD1s=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: kmT51UeYfwldQaeBqmjE4hyTmZuSt7H0mxT17oVrkW8=) 4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: q5An5IejOkRYWLTS2K7o5KZUOm0z/1pEEu1xwJZBWV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 22:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Jun 16 22:34:58 2025 GMT Not After : Jun 23 22:34:58 2025 GMT Subject: CN=68509c12-598b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:63:db:f1:97:ca:55:4e:fb:f1:10:52:9d:8d: e6:e4:0e:10:ef:09:f5:38:3c:a9:df:f3:11:9c:69: 84:06:42:80:74:bd:5d:81:98:b3:8a:d6:5b:5b:67: 07:ef:56:e0:a6:c5:9a:40:0a:2a:78:18:32:48:d0: 0a:4d:ae:da:67:d1:9e:8e:33:f9:55:0d:23:4c:35: 9b:fe:2a:f0:16:65:8d:b8:83:d1:9a:5f:63:01:8d: 5e:8d:e9:1d:4e:a8:7c:74:6e:c0:dd:aa:17:f2:74: 22:60:aa:4b:58:f0:3f:6f:e7:14:cf:fd:1c:aa:3a: 59:89:9d:bb:e7:78:8e:3a:9b:1f:d5:bc:de:c4:95: f7:72:16:89:0c:f6:26:6d:16:c9:40:87:70:6b:9d: 1a:fd:72:7c:ab:ea:13:ef:24:88:13:b5:13:60:7e: 5a:1c:59:ae:a9:ce:78:17:93:d4:d2:f0:29:ea:32: 2b:c9:1a:dd:ec:a3:ef:ec:5d:2f:83:73:01:02:87: 40:3c:92:d8:01:0a:9a:46:d0:0d:05:49:ef:a8:9c: be:cc:84:ab:2a:19:93:37:3a:42:ce:3e:f8:9c:48: 5b:75:66:27:d8:50:cb:ec:a9:6b:3f:36:4b:b3:40: a4:2a:cd:b6:4a:97:a1:bb:b8:f3:ea:2c:89:80:54: 70:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D9:8B:0E:F2:28:1E:5E:60:C9:7F:59:66:A9:FA:9F:9A:04:2E:33 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fb:4f:5e:f3:3c:01:d6:bf:77:30:cd:af:be:3b:b1:91:c7: b1:b5:2f:c1:44:bd:8d:31:f7:90:b8:92:52:4f:58:be:a0:4a: 15:94:17:03:af:1b:6f:ea:82:49:94:47:f6:0e:bd:aa:c3:e7: 6a:44:05:d3:98:4b:4a:01:a3:98:15:c3:91:46:60:85:c9:f8: 8a:0a:16:0e:24:d3:5c:36:da:7d:f7:4d:6f:40:c8:4e:35:0b: f3:db:e6:e5:52:39:ad:13:4d:55:97:40:ff:87:9f:66:a1:a4: 46:54:1e:29:a6:2a:db:30:2d:06:3d:e0:fb:20:e2:b1:c0:1e: d4:9b:18:de:b7:d3:19:2e:ae:5e:d8:14:c6:dd:b7:04:ac:4f: d4:7e:3a:2c:98:a1:0f:22:1f:ca:73:93:6e:fd:ea:a9:4b:21: 74:6a:e0:ba:de:57:d2:ef:49:c8:fe:20:be:54:d1:89:d7:24: 9d:c6:dd:16:6f:f8:26:1f:88:68:f8:2a:91:38:5d:ba:8f:9a: d4:03:da:65:f9:61:39:40:87:52:04:78:95:e6:79:f5:91:89: b2:76:ab:7c:bd:94:81:30:8a:80:a5:98:9a:18:f5:c5:3f:68: c1:45:f1:34:fe:b7:bb:0d:8b:b6:d0:29:f2:2a:1e:de:0e:39: f8:ec:f9:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjUwNjE2MjIzNDU4WhcNMjUwNjIzMjIzNDU4WjAYMRYwFAYD VQQDEw02ODUwOWMxMi01OThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mPb8ZfKVU778RBSnY3m5A4Q7wn1ODyp3/MRnGmEBkKAdL1dgZizitZbW2cH 71bgpsWaQAoqeBgySNAKTa7aZ9GejjP5VQ0jTDWb/irwFmWNuIPRml9jAY1ejekd Tqh8dG7A3aoX8nQiYKpLWPA/b+cUz/0cqjpZiZ2753iOOpsf1bzexJX3chaJDPYm bRbJQIdwa50a/XJ8q+oT7ySIE7UTYH5aHFmuqc54F5PU0vAp6jIryRrd7KPv7F0v g3MBAodAPJLYAQqaRtANBUnvqJy+zISrKhmTNzpCzj74nEhbdWYn2FDL7KlrPzZL s0CkKs22Spehu7jz6iyJgFRw/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvZiw7y KB5eYMl/WWap+p+aBC4zMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6+09e8zwB1r93MM2vvjuxkcextS/BRL2NMfeQuJJST1i+oEoVlBcD rxtv6oJJlEf2Dr2qw+dqRAXTmEtKAaOYFcORRmCFyfiKChYOJNNcNtp9901vQMhO NQvz2+blUjmtE01Vl0D/h59moaRGVB4ppirbMC0GPeD7IOKxwB7Umxjet9MZLq5e 2BTG3bcErE/UfjosmKEPIh/Kc5Nu/eqpSyF0auC63lfS70nI/iC+VNGJ1ySdxt0W b/gmH4ho+CqROF26j5rUA9pl+WE5QIdSBHiV5nn1kYmydqt8vZSBMIqApZiaGPXF P2jBRfE0/re7DYu20CnyKh7eDjn47Pn1 -----END CERTIFICATE-----Generated at Wed Jun 18 14:48:00 2025 by rpki-client