$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json) Hash identifier: hWnx/ls1gIEDnVhTpS5AAR8DnubIEo9cpc4QUC0n9Bs= Subject key identifier: 1C:D8:93:B7:06:94:50:20:5B:75:EF:C1:8E:E4:D3:97:4D:C9:B2:CA Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Certificate serial: 067A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft Manifest number: 066E Signing time: Sat 14 Jun 2025 22:07:51 +0000 Manifest this update: Sat 14 Jun 2025 22:07:50 +0000 Manifest next update: Sat 21 Jun 2025 22:07:50 +0000 Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: b26abRNyh6nQA928/6hSVXcSIDhTCl6zFSM3LTZSQYQ=) 2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: Ode9C1rjZZ48xy/QuIzg9S8zoYsoG2CKnN/yX25u2gs=) 3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: p4MgzG+OXWtv9vZOtFXE4K9GjNanwMoHoivstYkkSaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1658 (0x67a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Validity Not Before: Jun 14 22:07:50 2025 GMT Not After : Jun 21 22:07:50 2025 GMT Subject: CN=684df2b7-b128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0c:09:c9:24:56:29:aa:69:36:24:e8:d5:f4: 13:2a:6e:b8:9b:75:79:f0:9f:56:05:03:fb:28:22: 42:b3:b8:79:43:5d:30:3c:a7:50:e9:4e:1d:7f:ce: ed:93:a9:72:eb:f6:5e:54:53:97:ab:0c:b3:21:ff: 11:d1:fa:2a:32:2b:34:af:34:5a:7a:42:33:45:af: 9f:7f:0c:1a:c4:21:4a:91:7c:f1:03:f5:4e:40:db: cc:cc:a6:7d:d3:98:72:43:32:00:98:2d:a9:4f:ce: 61:a2:cb:58:5b:d5:00:f0:d8:32:c4:ad:e2:8c:03: 2e:bc:34:58:43:32:1d:87:91:33:b9:ff:9c:ad:65: f3:ec:1e:15:7e:8f:e8:44:27:0a:a7:a7:ad:5d:22: 28:81:f3:e6:3c:a2:c8:d5:dd:a6:6e:b5:a3:e6:ca: 39:62:33:92:1c:58:b0:09:41:19:25:39:87:45:cd: 6c:ad:8b:bb:d2:66:72:52:c2:48:ef:a4:ea:fd:d7: 33:5e:37:c0:54:87:9d:ee:d7:8f:40:3e:4e:48:65: fe:fb:5b:4c:f7:26:92:0b:7c:28:1f:47:41:ad:9f: be:1e:41:51:37:19:77:c0:b7:eb:1f:69:03:30:69: 7e:bf:c1:8e:a0:5f:fe:87:e2:04:79:23:fe:66:86: 07:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D8:93:B7:06:94:50:20:5B:75:EF:C1:8E:E4:D3:97:4D:C9:B2:CA X509v3 Authority Key Identifier: keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:3a:20:17:49:ea:39:61:c6:e8:08:39:72:70:ea:01:62:94: 27:7f:fd:81:3f:9a:ef:0d:c3:19:ef:f5:30:2d:36:06:e4:34: 04:44:22:69:2c:54:6a:04:3e:c0:ff:22:a6:d9:7d:5b:61:26: d3:df:9c:35:ec:c6:bf:66:95:67:ff:7d:d7:a6:75:8e:43:41: 43:cc:40:33:4c:bf:d5:01:2a:d8:e2:42:29:c2:89:b9:0b:60: 08:c8:7c:f7:ff:33:81:c9:8e:ad:ab:5b:08:46:25:f4:12:ab: 07:a4:1c:62:9f:d1:e4:ce:2e:19:f3:9a:2f:f9:52:76:5c:96: 69:df:b4:ff:03:96:be:16:e9:6e:a1:4d:2d:65:6f:80:1b:8d: e1:60:b5:af:82:5b:ad:6a:3b:b7:4f:59:21:54:44:9c:1f:1d: f9:0e:a4:cd:de:df:f0:00:3c:c6:96:a5:b9:fd:b8:f6:14:b6: 29:c8:1d:1b:da:30:b0:e7:27:e2:b9:ea:cd:7a:f8:54:3e:12: 91:9a:c0:6a:7b:d1:f3:68:ba:d5:4e:c1:ab:1c:95:0c:bb:45: 55:04:7d:1f:2b:fe:1a:b9:69:23:80:39:7b:e4:dd:81:bb:f2: 62:6a:8f:60:48:9d:91:22:2a:fc:33:8c:0f:a7:b4:38:45:8a: a1:e5:1e:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw QTUyOEVEQzAwHhcNMjUwNjE0MjIwNzUwWhcNMjUwNjIxMjIwNzUwWjAYMRYwFAYD VQQDEw02ODRkZjJiNy1iMTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4QwJySRWKappNiTo1fQTKm64m3V58J9WBQP7KCJCs7h5Q10wPKdQ6U4df87t k6ly6/ZeVFOXqwyzIf8R0foqMis0rzRaekIzRa+ffwwaxCFKkXzxA/VOQNvMzKZ9 05hyQzIAmC2pT85hostYW9UA8NgyxK3ijAMuvDRYQzIdh5Ezuf+crWXz7B4Vfo/o RCcKp6etXSIogfPmPKLI1d2mbrWj5so5YjOSHFiwCUEZJTmHRc1srYu70mZyUsJI 76Tq/dczXjfAVIed7tePQD5OSGX++1tM9yaSC3woH0dBrZ++HkFRNxl3wLfrH2kD MGl+v8GOoF/+h+IEeSP+ZoYHhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzYk7cG lFAgW3XvwY7k05dNybLKMB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL Y1BrNlhMY0xabWdLVW83Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZOiAXSeo5YcboCDlycOoBYpQnf/2BP5rvDcMZ7/UwLTYG5DQERCJp LFRqBD7A/yKm2X1bYSbT35w17Ma/ZpVn/33XpnWOQ0FDzEAzTL/VASrY4kIpwom5 C2AIyHz3/zOByY6tq1sIRiX0EqsHpBxin9Hkzi4Z85ov+VJ2XJZp37T/A5a+Fulu oU0tZW+AG43hYLWvglutaju3T1khVEScHx35DqTN3t/wADzGlqW5/bj2FLYpyB0b 2jCw5yfiuerNevhUPhKRmsBqe9HzaLrVTsGrHJUMu0VVBH0fK/4auWkjgDl75N2B u/Jiao9gSJ2RIir8M4wPp7Q4RYqh5R6h -----END CERTIFICATE-----Generated at Sun Jun 15 09:37:01 2025 by rpki-client