$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft File: xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json) Hash identifier: KCubSg1Tje9D0deqpiv5tJ5/ssuwlTQCMH1jLFpmBzI= Subject key identifier: B2:CE:0A:6C:D9:CF:D6:73:06:7F:27:AB:4A:D0:A0:86:D1:A6:66:1B Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft Manifest number: 014B Signing time: Fri 13 Jun 2025 03:10:40 +0000 Manifest this update: Fri 13 Jun 2025 03:10:39 +0000 Manifest next update: Fri 20 Jun 2025 03:10:39 +0000 Files and hashes: 1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: mogSyYcymdrBfdX7ZH36IE2DA1rANgrtQm+OA5Z6E0w=) 2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: ocnHIom5bfqYmJrUux5YVIb0Vcn2/L2ylLJbcgISr0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Validity Not Before: Jun 13 03:10:39 2025 GMT Not After : Jun 20 03:10:39 2025 GMT Subject: CN=684b96af-c74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1b:66:65:c0:25:ce:ec:4b:bc:f8:68:4f:c3: a8:ee:50:bc:19:8c:61:39:29:ea:f1:46:c1:97:f7: 47:cb:88:0c:ca:db:21:83:e0:53:cd:a0:89:aa:c9: 09:f0:c7:bd:7a:cb:f3:3c:6b:9b:08:a1:c9:37:d8: 41:82:4f:53:8b:e7:34:da:31:4e:e0:ba:e6:f2:40: 27:e8:d2:74:24:ef:78:35:77:1d:c6:b1:8a:f6:fc: 5f:15:81:3b:40:7d:72:71:e1:4d:ba:58:f7:0c:d1: 77:4f:e0:5d:75:f3:27:e3:ba:64:41:9b:ce:df:39: 25:fa:9b:82:ec:13:4f:12:22:d6:47:9f:f9:f2:14: ee:35:64:ee:9a:89:c9:19:59:38:b5:b7:08:c4:59: 3e:69:7a:3b:5b:b4:5f:f5:eb:c6:94:fe:d5:6f:2a: cb:f2:86:4e:67:72:67:91:4a:fd:b8:33:1f:be:1f: 38:be:57:5f:4d:66:7b:64:e0:95:da:b0:a7:75:cd: b9:1b:93:d0:53:8c:4e:04:c3:30:4b:cf:f0:40:ac: 44:3c:14:52:26:21:ff:d2:97:0d:67:08:9f:b4:77: a9:aa:03:b9:0e:dd:df:72:5a:90:d2:99:5d:12:93: f4:63:e5:7f:d4:30:c9:fa:9a:2e:b7:5f:3e:95:d9: d2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CE:0A:6C:D9:CF:D6:73:06:7F:27:AB:4A:D0:A0:86:D1:A6:66:1B X509v3 Authority Key Identifier: keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:64:46:27:c1:3d:11:eb:e0:98:b7:b0:cc:51:93:f4:f5:1e: d3:3a:62:b6:de:38:fb:0f:7f:98:01:1d:af:fc:22:2e:a8:fe: 68:10:d3:ec:48:0b:9a:0f:98:4e:85:1e:b2:c7:be:2a:25:36: e6:1b:51:4d:32:b2:47:8d:a7:53:db:87:cb:85:da:e8:07:a6: 1a:a3:96:58:8c:ef:d4:05:63:ff:6b:70:61:49:0c:3c:74:0b: d7:8c:78:09:48:8c:6f:6c:b3:28:2e:1e:af:54:da:1d:33:89: fe:a8:32:c3:17:4d:d0:fe:7a:4e:f0:13:3c:02:4a:a3:78:21: 00:ae:c7:fb:89:d7:dc:ac:4d:df:53:77:af:52:42:8f:7c:28: d1:21:18:93:78:bd:19:55:96:86:a5:cc:ea:f0:24:b2:e2:09: e8:41:45:a5:7c:32:82:e1:96:8e:bb:66:05:79:5f:4d:ba:3a: 51:cc:9d:7d:04:00:55:a1:7c:4a:2b:06:b3:61:95:fd:29:19: 6f:e8:7c:a7:16:54:59:ef:8e:25:df:96:91:02:4e:62:ad:4d: fd:81:0f:aa:ae:7e:54:ea:91:7f:41:17:25:ca:55:0b:0b:da: 14:d7:1d:c3:f1:3d:35:cf:23:29:98:0c:11:4c:df:db:8a:c7: 5c:57:a9:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzRkYxMTAvBgNVBAUTKEM2QTU3NkYwOENENEE3M0VBOUREOTc1MDNCQzlEMjhC MDU5MTFCOUMwHhcNMjUwNjEzMDMxMDM5WhcNMjUwNjIwMDMxMDM5WjAYMRYwFAYD VQQDEw02ODRiOTZhZi1jNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRtmZcAlzuxLvPhoT8Oo7lC8GYxhOSnq8UbBl/dHy4gMytshg+BTzaCJqskJ 8Me9esvzPGubCKHJN9hBgk9Ti+c02jFO4Lrm8kAn6NJ0JO94NXcdxrGK9vxfFYE7 QH1yceFNulj3DNF3T+BddfMn47pkQZvO3zkl+puC7BNPEiLWR5/58hTuNWTumonJ GVk4tbcIxFk+aXo7W7Rf9evGlP7VbyrL8oZOZ3JnkUr9uDMfvh84vldfTWZ7ZOCV 2rCndc25G5PQU4xOBMMwS8/wQKxEPBRSJiH/0pcNZwiftHepqgO5Dt3fclqQ0pld EpP0Y+V/1DDJ+pout18+ldnSrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLOCmzZ z9ZzBn8nq0rQoIbRpmYbMB8GA1UdIwQYMBaAFMaldvCM1Kc+qd2XUDvJ0osFkRuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNGRi9EODVBMEI3QzRE RjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6NnAzWmRRTzhuU2l3V1JH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxVjI4SXpVcHo2cDNaZFFPOG5TaXdXUkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNGRi9EODVBMEI3QzRERjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6 NnAzWmRRTzhuU2l3V1JHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpZEYnwT0R6+CYt7DMUZP09R7TOmK23jj7D3+YAR2v/CIuqP5oENPs SAuaD5hOhR6yx74qJTbmG1FNMrJHjadT24fLhdroB6Yao5ZYjO/UBWP/a3BhSQw8 dAvXjHgJSIxvbLMoLh6vVNodM4n+qDLDF03Q/npO8BM8AkqjeCEArsf7idfcrE3f U3evUkKPfCjRIRiTeL0ZVZaGpczq8CSy4gnoQUWlfDKC4ZaOu2YFeV9NujpRzJ19 BABVoXxKKwazYZX9KRlv6HynFlRZ744l35aRAk5irU39gQ+qrn5U6pF/QRclylUL C9oU1x3D8T01zyMpmAwRTN/bisdcV6k3 -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:35 2025 by rpki-client