$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft File: XTwWiWSSv8hwyKALZou_6VlF-No.mft (raw, json) Hash identifier: AKbkBnwhldE4C/zX16cTDngyt9GnMPU+uSDg/0BoUcs= Subject key identifier: 9C:69:D6:66:30:9D:09:5F:BA:12:26:13:54:22:35:E6:E0:18:CA:F2 Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft Manifest number: 013E Signing time: Fri 13 Jun 2025 03:23:58 +0000 Manifest this update: Fri 13 Jun 2025 03:23:58 +0000 Manifest next update: Fri 20 Jun 2025 03:23:58 +0000 Files and hashes: 1: XTwWiWSSv8hwyKALZou_6VlF-No.crl (hash: +pzNamNbnSFZ46769zCmyPcpGCDxjByX/+Jt2vlwViA=) 2: DFE29CB669E511EE92E9E35AC4F9AE02.roa (hash: 1ZszVXnu+oof2agkcsw2N+1e9S9zcssyc5TigB7H1/w=) 3: 6821BAB4450C11F0A7A54A80C4F9AE02.roa (hash: cK+N9izYWqB7nJ2gb9CD89n2r86dl3xekNBy66q5a0Q=) 4: DF0BED1069E511EE92E9E35AC4F9AE02.roa (hash: e26WrvOpcLVtFLCEGQEyLqc/kWvK3maBfU7Yb9x41Mg=) 5: 6911C6C6450C11F0A7A54A80C4F9AE02.roa (hash: XM9Bx/2dvSebxGit5XsfhdOhtq9u4/gFe4PEE8p0hU0=) 6: 688DF576450C11F0A7A54A80C4F9AE02.roa (hash: 4F6WXMQnkc6O0hYawZzx3De82Qtz5srkx6WGHHAwdQk=) 7: 065143FAB71C11EF9C368D66C4F9AE02.roa (hash: ejDPctxuPr+08V8pahIdV3zpYnFneVGtkqcwrd8I5VM=) 8: DF7C0A6E69E511EE92E9E35AC4F9AE02.roa (hash: NbEb3oWP2ceJtb7zrqoj41m3/pXeHDptDVhijrcSdOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Validity Not Before: Jun 13 03:23:58 2025 GMT Not After : Jun 20 03:23:58 2025 GMT Subject: CN=684b99ce-8034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:34:d4:5a:33:26:7b:ff:cb:e7:fd:f0:a4:fa: f4:51:2d:22:3d:40:d3:cd:3b:f4:c3:6d:26:e7:a6: 16:76:1f:73:b7:35:4e:ad:41:00:af:71:e2:b2:3a: d5:31:c8:7c:d1:8c:ad:37:b7:08:ca:f3:47:57:cb: 12:ad:9b:46:ee:bd:f2:a9:57:25:d6:49:23:fa:b1: 4b:64:03:96:79:30:6a:b8:96:63:c1:3a:86:ff:77: 3f:af:f0:d7:df:6e:c0:35:4b:1d:27:92:29:8f:57: a4:f9:7c:2c:b2:43:4d:bc:d5:c2:76:16:b4:a9:2c: 4a:eb:d3:16:8b:87:33:f0:de:ce:40:8e:af:ef:8c: c9:b5:79:6d:cc:3d:9d:5d:15:7d:18:b0:f5:63:72: 0b:6c:da:95:40:50:e5:b4:a4:65:15:ba:41:ca:4b: 68:7b:bd:6f:f0:09:21:f5:6d:32:d3:12:c2:ad:b2: e3:cc:00:aa:10:57:ba:f5:74:39:a7:1a:a1:82:f3: 90:37:9e:38:79:2f:17:90:49:21:5a:95:98:93:9d: 5c:94:5e:94:b7:09:5a:73:e6:54:66:3e:60:15:83: a1:41:a6:bb:4f:b8:c8:88:d3:f3:e8:2b:08:8c:b9: 43:81:02:7a:7b:b0:7f:be:30:2a:6d:c7:2d:6e:66: 70:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:69:D6:66:30:9D:09:5F:BA:12:26:13:54:22:35:E6:E0:18:CA:F2 X509v3 Authority Key Identifier: keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:99:b5:1a:11:12:53:8a:6b:b9:52:14:8a:15:1f:1a:fc:93: cd:5c:88:8f:20:69:08:88:42:b5:3c:cc:ef:f0:df:1e:88:99: 2a:e7:13:27:cb:90:89:c8:f4:4a:23:a6:7c:d3:b0:37:ac:45: 21:0e:c1:0b:ba:2a:de:e6:35:8e:47:23:98:e6:18:fd:cd:00: 5b:1a:cb:8d:19:f8:01:e1:78:d8:e5:6d:34:d8:73:26:61:6b: d8:c8:a2:b2:4b:ed:36:fd:95:6e:d6:fa:90:70:b9:cd:61:51: 19:cc:84:38:d6:bb:86:94:0b:f6:30:27:4f:9e:7e:1b:6a:ec: 39:d2:a9:9d:50:0c:5a:5c:ff:45:f4:c6:2e:84:f4:42:8d:92: 0c:00:9a:e4:74:30:15:76:09:6c:e1:dc:17:ed:f6:1b:45:73: c2:54:79:ef:45:5a:d8:0c:10:95:67:1b:98:5f:d3:dc:4c:30: f8:b9:8a:92:f7:64:b0:b8:22:5a:7e:78:d7:fb:92:07:4a:1e: d3:9c:b0:d1:3b:be:a3:1a:87:eb:1e:eb:61:f3:8f:23:98:7a: 00:6d:fd:b3:03:fe:d8:6b:4b:9b:38:91:77:f3:65:ae:d2:3d: 38:36:63:dc:6f:75:a6:77:b7:42:f4:76:a9:af:d9:0e:b0:f2: e7:10:48:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDN0MxMTAvBgNVBAUTKDVEM0MxNjg5NjQ5MkJGQzg3MEM4QTAwQjY2OEJCRkU5 NTk0NUY4REEwHhcNMjUwNjEzMDMyMzU4WhcNMjUwNjIwMDMyMzU4WjAYMRYwFAYD VQQDEw02ODRiOTljZS04MDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTTUWjMme//L5/3wpPr0US0iPUDTzTv0w20m56YWdh9ztzVOrUEAr3HisjrV Mch80YytN7cIyvNHV8sSrZtG7r3yqVcl1kkj+rFLZAOWeTBquJZjwTqG/3c/r/DX 327ANUsdJ5Ipj1ek+XwsskNNvNXCdha0qSxK69MWi4cz8N7OQI6v74zJtXltzD2d XRV9GLD1Y3ILbNqVQFDltKRlFbpByktoe71v8Akh9W0y0xLCrbLjzACqEFe69XQ5 pxqhgvOQN544eS8XkEkhWpWYk51clF6Utwlac+ZUZj5gFYOhQaa7T7jIiNPz6CsI jLlDgQJ6e7B/vjAqbcctbmZwJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxp1mYw nQlfuhImE1QiNebgGMryMB8GA1UdIwQYMBaAFF08Folkkr/IcMigC2aLv+lZRfja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM3Qy8yQjVDQUFFODY5 RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4aHd5S0FMWm91XzZWbEYt Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hUd1dpV1NTdjhod3lLQUxab3VfNlZsRi1Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM3Qy8yQjVDQUFFODY5RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4 aHd5S0FMWm91XzZWbEYtTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfmbUaERJTimu5UhSKFR8a/JPNXIiPIGkIiEK1PMzv8N8eiJkq5xMn y5CJyPRKI6Z807A3rEUhDsELuire5jWORyOY5hj9zQBbGsuNGfgB4XjY5W002HMm YWvYyKKyS+02/ZVu1vqQcLnNYVEZzIQ41ruGlAv2MCdPnn4bauw50qmdUAxaXP9F 9MYuhPRCjZIMAJrkdDAVdgls4dwX7fYbRXPCVHnvRVrYDBCVZxuYX9PcTDD4uYqS 92SwuCJafnjX+5IHSh7TnLDRO76jGofrHuth848jmHoAbf2zA/7Ya0ubOJF382Wu 0j04NmPcb3Wmd7dC9Hapr9kOsPLnEEju -----END CERTIFICATE-----Generated at Sun Jun 15 05:04:44 2025 by rpki-client