$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft File: xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json) Hash identifier: 7IFwYbB7l9jRHZXlYLvWOdiHTWR7iKmvzkv/mgiFMdM= Subject key identifier: AE:0B:14:09:F6:C6:00:44:77:4C:F7:20:8F:99:8E:E1:8F:67:E3:2E Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D Certificate issuer: /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft Manifest number: 75 Signing time: Fri 13 Jun 2025 05:42:59 +0000 Manifest this update: Fri 13 Jun 2025 05:42:59 +0000 Manifest next update: Fri 20 Jun 2025 05:42:59 +0000 Files and hashes: 1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: MVMOJJWcCO4oHcfgTg3m1y7h5aWy4JZY/6BKqT7GLao=) 2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: uh0RsXXXDr4A3r/l+n4K/1lemqOiMBSx6tfsdjRL1A4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D Validity Not Before: Jun 13 05:42:59 2025 GMT Not After : Jun 20 05:42:59 2025 GMT Subject: CN=684bba63-bcb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:06:40:07:25:78:99:7c:c3:d5:d2:bc:45:2d: b0:ab:17:b1:45:23:0e:b3:f7:4a:11:1a:b1:fc:9b: 83:7b:8f:b3:da:40:7b:08:5f:1e:8b:b5:9c:91:bc: 37:ee:c4:3f:31:0f:2e:b2:5f:be:ee:58:40:f0:44: 35:58:63:92:ae:17:b9:0f:d0:a1:e2:ef:07:66:13: 78:97:b5:82:b6:12:8c:6b:7f:f0:2e:32:3e:c1:39: eb:83:70:3c:b7:0b:75:44:ee:ec:b2:40:87:14:64: 2d:37:31:1d:2c:dc:62:76:1e:b9:12:73:15:b3:e9: 31:b9:42:5c:4a:3a:5b:8c:da:a0:7d:43:78:de:ec: af:6a:3e:6e:ee:be:06:55:1c:af:64:37:e5:0e:db: 31:55:5b:f5:ae:2a:78:fe:4f:19:52:c3:a2:45:df: f6:97:a6:87:a3:56:cb:b3:3e:df:13:9c:ae:94:2d: 64:9b:80:75:1a:51:be:da:fe:90:48:5e:1a:87:80: 9c:77:e0:1f:36:47:58:0e:6a:e0:81:2b:9c:2b:d8: 33:ea:4c:57:a3:d6:8d:73:16:3d:6b:e5:e0:f2:19: a1:51:8a:a0:87:81:ea:57:cb:74:f1:c0:43:fc:d4: b9:be:09:6d:3d:dd:99:8e:92:7b:6d:c0:41:71:a7: 1b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0B:14:09:F6:C6:00:44:77:4C:F7:20:8F:99:8E:E1:8F:67:E3:2E X509v3 Authority Key Identifier: keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:a7:16:7f:48:1a:2d:94:08:a0:7a:04:12:12:0b:eb:70:12: 79:34:88:60:89:f9:cd:e4:27:ab:1c:1c:ed:55:18:6d:56:6b: 96:69:df:3b:91:bc:ae:57:a3:2a:c2:27:1f:90:7d:7b:bd:7a: 1f:d5:1e:61:d1:d7:3d:45:0b:d8:e1:80:a6:98:ff:38:9d:07: bf:b4:83:3d:67:96:6d:83:32:6b:fb:0b:22:f7:1d:f4:f4:0a: 7e:ac:18:e6:b2:d3:fd:c6:e0:16:e2:87:a2:cf:ac:c4:1c:ec: 54:4f:07:9a:64:22:04:7e:40:50:7b:a4:64:ba:53:a5:6e:39: 10:ba:99:c5:74:6e:d4:27:74:3f:57:8d:64:47:a0:a4:65:22: ce:e2:8f:14:d2:16:23:4a:f2:5c:d1:86:69:31:02:dc:1b:35: 39:67:5a:d5:6f:a5:f5:1a:00:4d:b1:98:b6:97:c4:92:46:c7: 5b:c3:c1:f8:8d:e6:0f:7d:5e:71:de:66:64:f2:f7:bf:88:bd: e1:0d:e3:e8:a7:e4:31:b1:57:3d:11:eb:aa:3f:38:83:21:a4: 46:25:60:27:a6:cd:b9:02:e2:46:e8:89:83:b2:71:cc:5f:c1: 83:eb:51:7d:2b:5e:d1:44:c7:4d:cf:0c:a0:ae:62:32:67:2a: 5d:28:48:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjM4QTExMC8GA1UEBRMoQzQ2QzQzQkEyNzdEMkMxMEVFN0QxRUZGM0RGMEUyRUZD ODg1MUExRDAeFw0yNTA2MTMwNTQyNTlaFw0yNTA2MjAwNTQyNTlaMBgxFjAUBgNV BAMTDTY4NGJiYTYzLWJjYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXBkAHJXiZfMPV0rxFLbCrF7FFIw6z90oRGrH8m4N7j7PaQHsIXx6LtZyRvDfu xD8xDy6yX77uWEDwRDVYY5KuF7kP0KHi7wdmE3iXtYK2Eoxrf/AuMj7BOeuDcDy3 C3VE7uyyQIcUZC03MR0s3GJ2HrkScxWz6TG5QlxKOluM2qB9Q3je7K9qPm7uvgZV HK9kN+UO2zFVW/WuKnj+TxlSw6JF3/aXpoejVsuzPt8TnK6ULWSbgHUaUb7a/pBI XhqHgJx34B82R1gOauCBK5wr2DPqTFej1o1zFj1r5eDyGaFRiqCHgepXy3TxwEP8 1Lm+CW093ZmOknttwEFxpxuTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrgsUCfbG AER3TPcgj5mO4Y9n4y4wHwYDVR0jBBgwFoAUxGxDuid9LBDufR7/PfDi78iFGh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MzhBLzVCREQyQ0FFOTU0 NzExRUY5NjgwOEYyQ0M0RjlBRTAyL3hHeER1aWQ5TEJEdWZSN19QZkRpNzhpRkdo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEd4RHVpZDlMQkR1ZlI3X1BmRGk3OGlGR2gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MzhBLzVCREQyQ0FFOTU0NzExRUY5NjgwOEYyQ0M0RjlBRTAyL3hHeER1aWQ5TEJE dWZSN19QZkRpNzhpRkdoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAWnFn9IGi2UCKB6BBISC+twEnk0iGCJ+c3kJ6scHO1VGG1Wa5Zp3zuR vK5XoyrCJx+QfXu9eh/VHmHR1z1FC9jhgKaY/zidB7+0gz1nlm2DMmv7CyL3HfT0 Cn6sGOay0/3G4Bbih6LPrMQc7FRPB5pkIgR+QFB7pGS6U6VuORC6mcV0btQndD9X jWRHoKRlIs7ijxTSFiNK8lzRhmkxAtwbNTlnWtVvpfUaAE2xmLaXxJJGx1vDwfiN 5g99XnHeZmTy97+IveEN4+in5DGxVz0R66o/OIMhpEYlYCemzbkC4kboiYOyccxf wYPrUX0rXtFEx03PDKCuYjJnKl0oSPw= -----END CERTIFICATE-----Generated at Sat Jun 14 19:23:26 2025 by rpki-client