$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft File: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft (raw, json) Hash identifier: zVap/xr1OY1dEoma9eS6LlPaDUOzEBf4pFr7Kwyq5Os= Subject key identifier: 5A:27:B5:02:8A:17:8A:D6:6F:B5:46:4A:2A:96:F8:A4:1E:A0:84:7E Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 Certificate issuer: /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft Manifest number: 0121 Signing time: Tue 17 Jun 2025 03:49:17 +0000 Manifest this update: Tue 17 Jun 2025 03:49:17 +0000 Manifest next update: Tue 24 Jun 2025 03:49:17 +0000 Files and hashes: 1: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl (hash: rWlat1vit2jVTm2ElYk3lFKUrBoJD12ZNBpHCNqICkU=) 2: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (hash: oApvSZT8Sv3uSmM9SxIKbWqw6D6WWZsa1SWpMmDS0a4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Validity Not Before: Jun 17 03:49:17 2025 GMT Not After : Jun 24 03:49:17 2025 GMT Subject: CN=6850e5bd-db05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:71:ae:aa:3d:9f:b8:35:c4:6f:db:aa:52: e5:f1:39:56:d4:d6:d3:70:cb:86:e9:be:08:44:54: 8c:3a:0e:05:75:6c:be:0d:58:02:10:61:20:f3:ce: 64:f5:54:1a:25:6b:b1:66:0c:b5:b3:95:01:99:75: 53:6b:e6:d5:4a:7e:da:74:fc:f1:7d:a7:29:27:e4: ec:4f:52:10:a9:ea:a2:d6:cc:03:6c:56:a1:7f:a3: 43:53:1a:07:17:21:43:37:f4:7d:70:3e:e6:9b:02: 24:3b:0e:d6:fe:71:b3:fd:dc:d8:04:36:33:c5:2c: 7a:d3:00:16:53:6e:3c:ae:bb:6a:e1:d2:be:a9:7d: 00:c2:13:51:e4:8f:32:0a:95:c3:f3:a5:2f:df:b7: 78:fa:4f:02:f5:b8:06:34:1f:d5:4e:31:b3:5d:b1: 26:8e:35:73:2d:ae:43:7d:a8:dc:fa:b3:99:ee:79: e2:39:71:42:0a:54:01:6c:cd:6c:55:0e:79:a7:78: 52:83:47:b7:2a:47:41:f9:c7:8b:1b:6d:17:8f:f0: 2c:54:36:89:61:89:9f:98:ee:30:d7:75:78:3d:13: e7:12:d2:d3:91:22:d6:84:1f:8e:dc:09:6b:a3:94: d5:f0:5e:a9:18:c4:6a:0e:0b:bf:41:18:b5:3a:0e: 22:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:27:B5:02:8A:17:8A:D6:6F:B5:46:4A:2A:96:F8:A4:1E:A0:84:7E X509v3 Authority Key Identifier: keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c8:77:a6:3f:fd:16:e6:f1:f5:40:a8:c5:34:c2:4a:8d:9c: d4:ea:38:46:c5:7f:33:af:a7:ab:ac:2b:86:86:08:84:0e:c9: 8c:d1:30:af:fe:62:c2:ae:9b:90:e6:39:0b:70:2c:f2:fd:e8: 30:7d:84:09:8f:96:32:1f:eb:6b:75:6c:c4:5b:58:64:7f:c8: 59:c3:b5:ae:0d:c4:e5:39:df:83:ce:67:0f:3d:f2:d8:da:e2: b0:69:2b:99:12:28:c2:ce:e6:8b:0b:8e:23:8c:d6:ca:b0:40: 65:d0:a2:8c:fe:b5:28:88:af:ff:5a:4b:1e:92:bb:db:fa:7e: 59:40:f1:73:21:99:ec:c4:56:b2:5e:49:8f:c6:81:a5:15:3b: e9:61:0d:28:5f:98:b9:94:72:96:00:43:a3:60:9c:52:b2:2f: 0b:0d:7c:b0:58:94:d7:c2:1a:f7:bd:7e:d6:df:63:f6:ad:da: 5b:83:d9:4d:c2:f9:fe:98:ba:99:3b:4e:6f:7e:2f:3d:de:8d: e1:f4:e2:d5:b7:06:45:8e:c8:21:da:99:25:67:64:de:8c:cb: e2:b8:6e:38:5d:92:b1:a1:be:33:c0:ce:8e:6c:b6:fc:93:80: c9:db:46:04:e5:db:fa:18:c3:2f:d9:d4:ab:f5:ef:a5:ad:d5: b9:9b:9d:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRjIxMTAvBgNVBAUTKDVDQzkxQUZENUI4QjM3RUQ4QzUwOUY2MTE4OUY0NDhF NzMxMjFGOTcwHhcNMjUwNjE3MDM0OTE3WhcNMjUwNjI0MDM0OTE3WjAYMRYwFAYD VQQDEw02ODUwZTViZC1kYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4pxrqo9n7g1xG/bqlLl8TlW1NbTcMuG6b4IRFSMOg4FdWy+DVgCEGEg885k 9VQaJWuxZgy1s5UBmXVTa+bVSn7adPzxfacpJ+TsT1IQqeqi1swDbFahf6NDUxoH FyFDN/R9cD7mmwIkOw7W/nGz/dzYBDYzxSx60wAWU248rrtq4dK+qX0AwhNR5I8y CpXD86Uv37d4+k8C9bgGNB/VTjGzXbEmjjVzLa5Dfajc+rOZ7nniOXFCClQBbM1s VQ55p3hSg0e3KkdB+ceLG20Xj/AsVDaJYYmfmO4w13V4PRPnEtLTkSLWhB+O3Alr o5TV8F6pGMRqDgu/QRi1Og4ijwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFontQKK F4rWb7VGSiqW+KQeoIR+MB8GA1UdIwQYMBaAFFzJGv1bizftjFCfYRifRI5zEh+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNGMi8wMDUxREJDQzk3 RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4tMk1VSjloR0o5RWpuTVNI NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hNa2FfVnVMTi0yTVVKOWhHSjlFam5NU0g1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNGMi8wMDUxREJDQzk3RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4t Mk1VSjloR0o5RWpuTVNINWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAayHemP/0W5vH1QKjFNMJKjZzU6jhGxX8zr6errCuGhgiEDsmM0TCv /mLCrpuQ5jkLcCzy/egwfYQJj5YyH+trdWzEW1hkf8hZw7WuDcTlOd+DzmcPPfLY 2uKwaSuZEijCzuaLC44jjNbKsEBl0KKM/rUoiK//Wksekrvb+n5ZQPFzIZnsxFay XkmPxoGlFTvpYQ0oX5i5lHKWAEOjYJxSsi8LDXywWJTXwhr3vX7W32P2rdpbg9lN wvn+mLqZO05vfi893o3h9OLVtwZFjsgh2pklZ2TejMviuG44XZKxob4zwM6ObLb8 k4DJ20YE5dv6GMMv2dSr9e+lrdW5m539 -----END CERTIFICATE-----Generated at Thu Jun 19 05:13:45 2025 by rpki-client