$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft File: xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json) Hash identifier: iYL/CXmdE7bGOeZTQkZ+tI1k8HEhcA/reLHDDwnOBDU= Subject key identifier: 1E:D6:C5:1F:2D:E0:A2:25:A3:30:0E:F5:47:68:82:7F:4C:8F:0C:E2 Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D Certificate issuer: /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft Manifest number: 13 Signing time: Tue 17 Jun 2025 06:51:52 +0000 Manifest this update: Tue 17 Jun 2025 06:51:52 +0000 Manifest next update: Tue 24 Jun 2025 06:51:52 +0000 Files and hashes: 1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: eOSLwXjchdIgnbemCaWu6KIYxGz8H2KnxBDvVv67Ug0=) 2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: C2K9dK4do/Lq7H5EaXQP1EBA+uUbAkgLMeJKgVTTBgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Validity Not Before: Jun 17 06:51:52 2025 GMT Not After : Jun 24 06:51:52 2025 GMT Subject: CN=68511088-328d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:e5:97:16:51:e5:03:28:9b:62:92:0d:09: e9:3f:f8:6d:f4:1b:92:b3:ec:02:85:d7:ce:93:18: 0d:15:28:f4:8a:53:4f:40:53:fb:df:05:fd:a0:ab: aa:85:21:70:1f:dc:ee:e9:2c:fd:4c:e3:8b:bb:52: 78:88:90:eb:8a:26:ba:53:a6:43:c0:5b:b2:e8:63: 0c:b8:44:a2:30:df:ca:d7:a1:97:6e:e5:f5:e5:79: ac:c4:ec:59:c1:22:a9:3b:d0:ac:bb:76:79:4f:8f: 8e:1b:b4:b7:c7:4d:50:eb:c1:b9:4b:a8:e7:9c:f7: a0:91:55:4f:98:a6:70:0e:fa:33:53:17:fa:5e:d1: 3d:bb:17:ba:d3:bd:0e:52:f9:0f:f5:cc:92:4b:fa: d9:ff:07:c3:88:06:8d:22:70:de:2e:e6:c1:01:50: 11:0a:34:66:34:99:6f:f9:aa:03:96:4f:72:a6:86: df:58:c1:25:03:f3:c1:91:cf:f2:0d:e2:c8:ec:fc: 3e:a3:1c:c8:76:ce:48:09:2a:54:02:6d:3b:61:1d: 10:64:a5:9b:2d:e1:3a:23:77:03:a3:40:0c:d6:f1: 3c:7b:96:53:4c:04:72:ae:3d:55:00:00:a0:20:19: 25:41:a9:22:9f:9d:10:b0:9d:9f:1a:a1:0d:89:03: 0d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D6:C5:1F:2D:E0:A2:25:A3:30:0E:F5:47:68:82:7F:4C:8F:0C:E2 X509v3 Authority Key Identifier: keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:80:dd:c4:c4:78:67:39:c8:fd:9b:bb:f9:52:5c:84:3b:66: 65:0c:2e:3b:be:9f:8a:5d:9a:9e:a6:72:f7:73:b9:7f:aa:35: 29:11:ec:b7:16:e5:a1:ab:ef:cc:ec:fa:65:54:b5:ff:33:ff: 30:0d:0f:d7:2f:26:73:a4:44:2b:0e:66:c3:6c:6d:55:2d:35: c6:31:3a:44:aa:d6:91:ab:b2:e6:c1:85:e2:4e:c7:0d:4d:be: 7e:62:44:9b:ce:44:eb:a9:20:f6:c6:80:51:48:bd:bb:93:60: c7:0e:8a:8b:01:66:bd:50:dc:86:c1:f7:1d:df:c8:b6:cf:87: c9:91:0d:e6:7c:64:7c:f3:00:90:42:ff:78:15:3a:81:a9:aa: fc:09:1e:0b:04:b8:6a:d1:b7:14:8a:ae:76:02:43:c6:63:3d: d9:53:d8:3f:a2:9f:17:ce:ab:c1:a7:c7:bc:fd:89:a4:42:89: 21:87:a2:97:d3:bc:3c:58:44:6c:a9:27:7d:af:c1:be:e7:d1: 03:13:45:f3:d9:a7:1a:04:a3:c6:8c:18:4c:c3:ac:6b:ea:1c: 60:11:56:c6:c1:ab:2e:cb:a5:50:bd:11:71:2a:5f:af:68:8b: 4f:02:2d:89:57:f2:de:3b:b2:02:cd:1f:d7:23:02:af:2c:59: 54:fa:15:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzMxMTExMC8GA1UEBRMoQzZERTM2QTRFNDVFN0E5OTFGQzQ0NEY4Q0IxQjQ1NUYx NzQ2MkM4RDAeFw0yNTA2MTcwNjUxNTJaFw0yNTA2MjQwNjUxNTJaMBgxFjAUBgNV BAMTDTY4NTExMDg4LTMyOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/OOWXFlHlAyibYpINCek/+G30G5Kz7AKF186TGA0VKPSKU09AU/vfBf2gq6qF IXAf3O7pLP1M44u7UniIkOuKJrpTpkPAW7LoYwy4RKIw38rXoZdu5fXleazE7FnB Iqk70Ky7dnlPj44btLfHTVDrwblLqOec96CRVU+YpnAO+jNTF/pe0T27F7rTvQ5S +Q/1zJJL+tn/B8OIBo0icN4u5sEBUBEKNGY0mW/5qgOWT3Kmht9YwSUD88GRz/IN 4sjs/D6jHMh2zkgJKlQCbTthHRBkpZst4TojdwOjQAzW8Tx7llNMBHKuPVUAAKAg GSVBqSKfnRCwnZ8aoQ2JAw3dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHtbFHy3g oiWjMA71R2iCf0yPDOIwHwYDVR0jBBgwFoAUxt42pOReepkfxET4yxtFXxdGLI0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDMzExL0YxRjdBRjI2MkZC RjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBrZnhFVDR5eHRGWHhkR0xJ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHQ0MnBPUmVlcGtmeEVUNHl4dEZYeGRHTEkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND MzExL0YxRjdBRjI2MkZCRjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBr ZnhFVDR5eHRGWHhkR0xJMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHqA3cTEeGc5yP2bu/lSXIQ7ZmUMLju+n4pdmp6mcvdzuX+qNSkR7LcW 5aGr78zs+mVUtf8z/zAND9cvJnOkRCsOZsNsbVUtNcYxOkSq1pGrsubBheJOxw1N vn5iRJvOROupIPbGgFFIvbuTYMcOiosBZr1Q3IbB9x3fyLbPh8mRDeZ8ZHzzAJBC /3gVOoGpqvwJHgsEuGrRtxSKrnYCQ8ZjPdlT2D+inxfOq8Gnx7z9iaRCiSGHopfT vDxYRGypJ32vwb7n0QMTRfPZpxoEo8aMGEzDrGvqHGARVsbBqy7LpVC9EXEqX69o i08CLYlX8t47sgLNH9cjAq8sWVT6FU0= -----END CERTIFICATE-----Generated at Thu Jun 19 04:12:56 2025 by rpki-client