$ rpki-client -vvf rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft File: xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft (raw, json) Hash identifier: 3JhhjSKyOkqo5Y6juL6cXKNM2Duz+JFDr20zGvbynNU= Subject key identifier: 33:F2:8A:0C:E7:E1:5F:F5:87:A3:03:4E:B5:CC:42:A0:4F:09:A1:74 Authority key identifier: C4:D2:6A:C0:6C:8A:65:25:8A:D4:49:1B:69:DF:83:29:0B:E1:83:7B Certificate issuer: /CN=A9132DC8/serialNumber=C4D26AC06C8A65258AD4491B69DF83290BE1837B Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNJqwGyKZSWK1Ekbad-DKQvhg3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft Manifest number: 018B Signing time: Fri 13 Jun 2025 04:13:12 +0000 Manifest this update: Fri 13 Jun 2025 04:13:12 +0000 Manifest next update: Fri 20 Jun 2025 04:13:12 +0000 Files and hashes: 1: xNJqwGyKZSWK1Ekbad-DKQvhg3s.crl (hash: +a9K2JTcSd8lL8/Pw/CbGzJPNV3V3doPSzUMZgpPGSo=) 2: 59AFB718ECB911ED99732649C4F9AE02.roa (hash: +N1Z+YRZBmqUzAg48fb4th5gmmSesIwu/VfApSVKW6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.crl rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNJqwGyKZSWK1Ekbad-DKQvhg3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132DC8, serialNumber=C4D26AC06C8A65258AD4491B69DF83290BE1837B Validity Not Before: Jun 13 04:13:12 2025 GMT Not After : Jun 20 04:13:12 2025 GMT Subject: CN=684ba558-7165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b1:5c:e7:ec:38:24:82:f2:fa:cc:d6:bb:3e: 92:90:74:38:06:f5:0c:10:5e:98:17:ce:e2:a0:ff: f1:7c:42:5b:24:d8:26:31:66:07:33:c6:b5:0d:d2: 65:a8:16:e6:15:36:de:e2:41:87:77:01:21:46:96: 10:f0:40:3b:6a:25:f9:59:27:40:b8:af:32:74:35: 1e:49:f3:e6:fc:c8:03:bd:36:59:66:f1:33:db:d5: 07:c6:ee:ca:2f:9f:59:e9:03:fd:8a:ee:ae:fd:32: b0:b9:c3:dc:8b:ba:7a:12:75:7c:78:07:c0:48:52: 70:13:06:8a:72:06:66:e1:cc:30:71:ac:93:ba:6e: 1c:33:49:43:e9:36:a3:7f:67:08:e4:55:05:8c:80: 84:e0:9e:8c:02:da:78:2d:10:53:47:2a:51:cd:19: 9c:28:6a:8b:0d:34:be:05:6d:1f:d1:ac:16:a9:b5: e7:30:e0:99:e5:48:10:ff:c9:55:c3:cd:ab:33:db: d4:b0:0d:48:4a:a8:39:b8:32:44:a4:ed:10:c5:1f: 64:53:87:80:5a:ca:1a:0b:22:b2:09:6a:36:38:54: 76:20:07:b5:35:44:e6:c1:01:41:b9:0e:94:80:b1: b9:f6:65:0a:ae:a5:2f:d6:ad:95:66:36:5f:e7:ab: 8f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F2:8A:0C:E7:E1:5F:F5:87:A3:03:4E:B5:CC:42:A0:4F:09:A1:74 X509v3 Authority Key Identifier: keyid:C4:D2:6A:C0:6C:8A:65:25:8A:D4:49:1B:69:DF:83:29:0B:E1:83:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNJqwGyKZSWK1Ekbad-DKQvhg3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:b6:95:4a:41:f3:32:ca:1a:5d:07:c4:31:85:57:e8:36:3c: c1:a2:83:31:2c:20:73:8d:de:cf:45:14:89:a2:b6:e1:ab:ca: 2f:47:53:23:ce:4b:3d:a8:5b:99:d3:56:ff:77:95:c8:ca:de: 16:7e:90:55:55:61:b9:9e:b5:e9:0c:12:6f:22:87:89:e0:c6: d3:51:6e:69:c1:9e:ce:68:08:b2:3b:2c:12:d7:8e:3e:3d:ad: ea:2c:af:60:33:8c:44:69:cb:c5:8b:b3:a5:1e:7a:58:a1:88: 6c:3f:2c:66:7b:b6:d1:a0:d5:8f:61:68:20:a1:93:39:c2:f7: 54:5e:03:f0:75:e1:1f:85:1a:07:77:66:cf:24:fb:00:86:30: ec:7b:da:89:ab:42:b2:26:bc:13:0e:3e:9d:bf:4f:55:39:03: 14:d4:25:3c:ed:75:99:d8:59:0d:b5:17:93:ad:74:cf:fe:13: 8e:98:94:d0:e4:6b:9f:f8:83:f5:89:cb:0e:66:21:cf:cd:7a: dd:a7:e6:94:ab:40:d6:74:b3:dc:61:ac:8b:c3:f5:82:7d:1f: 94:9e:d1:8e:91:bc:e6:ea:0c:dd:d3:a3:cf:40:d3:58:d5:20: 32:85:97:3b:2e:51:e5:bc:ec:03:1e:0d:52:df:a5:92:67:d5: 57:db:1e:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJEQzgxMTAvBgNVBAUTKEM0RDI2QUMwNkM4QTY1MjU4QUQ0NDkxQjY5REY4MzI5 MEJFMTgzN0IwHhcNMjUwNjEzMDQxMzEyWhcNMjUwNjIwMDQxMzEyWjAYMRYwFAYD VQQDEw02ODRiYTU1OC03MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrFc5+w4JILy+szWuz6SkHQ4BvUMEF6YF87ioP/xfEJbJNgmMWYHM8a1DdJl qBbmFTbe4kGHdwEhRpYQ8EA7aiX5WSdAuK8ydDUeSfPm/MgDvTZZZvEz29UHxu7K L59Z6QP9iu6u/TKwucPci7p6EnV8eAfASFJwEwaKcgZm4cwwcayTum4cM0lD6Taj f2cI5FUFjICE4J6MAtp4LRBTRypRzRmcKGqLDTS+BW0f0awWqbXnMOCZ5UgQ/8lV w82rM9vUsA1ISqg5uDJEpO0QxR9kU4eAWsoaCyKyCWo2OFR2IAe1NUTmwQFBuQ6U gLG59mUKrqUv1q2VZjZf56uPvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPyigzn 4V/1h6MDTrXMQqBPCaF0MB8GA1UdIwQYMBaAFMTSasBsimUlitRJG2nfgykL4YN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkRDOC80NDRDNkYxNEVD QjUxMUVEOUQ2OEM0NTBDNEY5QUUwMi94Tkpxd0d5S1pTV0sxRWtiYWQtREtRdmhn M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOSnF3R3lLWlNXSzFFa2JhZC1ES1F2aGczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkRDOC80NDRDNkYxNEVDQjUxMUVEOUQ2OEM0NTBDNEY5QUUwMi94Tkpxd0d5S1pT V0sxRWtiYWQtREtRdmhnM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAptpVKQfMyyhpdB8QxhVfoNjzBooMxLCBzjd7PRRSJorbhq8ovR1Mj zks9qFuZ01b/d5XIyt4WfpBVVWG5nrXpDBJvIoeJ4MbTUW5pwZ7OaAiyOywS144+ Pa3qLK9gM4xEacvFi7OlHnpYoYhsPyxme7bRoNWPYWggoZM5wvdUXgPwdeEfhRoH d2bPJPsAhjDse9qJq0KyJrwTDj6dv09VOQMU1CU87XWZ2FkNtReTrXTP/hOOmJTQ 5Guf+IP1icsOZiHPzXrdp+aUq0DWdLPcYayLw/WCfR+UntGOkbzm6gzd06PPQNNY 1SAyhZc7LlHlvOwDHg1S36WSZ9VX2x7E -----END CERTIFICATE-----Generated at Sat Jun 14 17:35:23 2025 by rpki-client