$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json) Hash identifier: UCHrIAuAqcH56SQJbaSs+5NAfOMvQ47NTn0/cEezJB8= Subject key identifier: 5D:18:23:8E:48:8E:88:EE:C9:09:41:E4:00:D1:FA:C8:29:97:6F:BF Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft Manifest number: 0183 Signing time: Thu 19 Jun 2025 03:03:14 +0000 Manifest this update: Thu 19 Jun 2025 03:03:13 +0000 Manifest next update: Thu 26 Jun 2025 03:03:13 +0000 Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: ukiZwwIaQYNGdgzOJ7m8v3IYk/d9InKBUy5iYa4z0Dc=) 2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: JQglPoDIL3Eq1y2JiUK8F3q2nUek/I2P1c153lPMYTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Validity Not Before: Jun 19 03:03:13 2025 GMT Not After : Jun 26 03:03:13 2025 GMT Subject: CN=68537df2-941e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:84:0e:76:f9:fd:70:9e:ed:6c:72:e1:79:5a: 29:71:55:38:5a:03:e8:73:3a:ce:7c:30:c2:ec:92: 20:91:c0:24:c6:9c:c1:bf:3d:7a:e3:98:02:c9:d0: f8:a3:3a:54:11:07:75:af:67:8c:02:a8:e2:5c:e9: 24:f4:1e:67:a1:35:4e:76:05:db:db:33:2a:36:c4: 06:fb:b6:ff:7c:8c:23:5d:5d:70:b6:7f:32:cc:cc: 68:0e:f2:13:3b:6f:e3:63:98:50:b3:7f:7a:79:61: b6:ab:ac:ea:b0:21:c7:5b:da:21:91:8c:c3:4d:ac: ee:00:a2:e7:f2:c2:c2:4c:2a:8f:30:0e:c5:af:da: 21:84:05:b3:6f:26:f2:24:1d:e5:d7:8e:bd:ee:f1: 37:20:b1:7f:50:80:4b:3b:d4:9f:01:e6:f0:bd:0c: 5b:60:75:35:62:93:98:6e:3f:f9:2f:2a:46:e7:d6: 38:df:34:b1:c1:70:56:a2:97:71:19:cc:15:bd:a6: 66:38:fd:fd:f3:dd:b9:76:53:26:92:32:89:d5:b8: ad:5b:f7:a4:43:cb:57:05:fb:04:ac:bf:56:e3:d9: bd:72:6b:9a:27:ac:2d:89:d0:c0:a5:4c:e4:d6:38: 54:3a:f7:04:d2:32:41:fc:db:fd:1f:1f:02:66:ba: 06:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:18:23:8E:48:8E:88:EE:C9:09:41:E4:00:D1:FA:C8:29:97:6F:BF X509v3 Authority Key Identifier: keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:02:71:4b:57:e0:99:bb:2b:4b:9f:7d:cb:ab:15:1e:b1:51: e2:0e:63:a1:21:22:79:66:e9:d3:bc:4a:2b:31:68:75:2b:74: df:82:10:ff:de:3a:73:8e:a2:3e:11:af:f3:61:6b:17:2d:4c: 50:14:98:98:bd:eb:08:65:7d:c1:42:fd:1f:ee:fa:65:5f:99: 04:6e:2d:d3:1e:28:3f:b7:17:ba:21:50:5e:bf:8e:30:56:0a: 0d:9b:ff:fb:67:f0:bd:79:aa:2f:04:65:9f:d6:c2:14:f9:cc: 86:b0:30:da:79:25:fa:88:c1:69:89:08:ee:1e:1b:34:6d:6b: fe:1e:44:82:fb:64:eb:21:94:e7:55:6e:30:fc:b5:87:8b:0a: a3:ac:49:fb:a5:9c:47:a8:22:64:da:93:6a:98:fc:01:90:20: 65:63:94:b5:24:e9:42:26:d9:ff:16:ef:ad:d5:0e:d7:9d:ef: 1a:0c:10:e3:a2:75:27:ba:98:20:a8:23:c7:0f:59:35:64:23: c4:1b:64:68:ab:ad:27:c3:90:cf:3e:4b:b2:78:1a:44:7d:b3: cf:af:eb:c3:85:e6:49:a8:a9:f7:21:84:38:d8:8d:cf:e2:af: e8:99:16:07:03:57:e2:c1:58:a7:fb:f6:8b:d7:7a:46:5f:0d: 01:49:d5:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDQjQxMTAvBgNVBAUTKEZCMTZCMTlERkJGN0NBNkFDNDBBNkI2QTM1M0Y3ODU3 ODkxN0UwRkQwHhcNMjUwNjE5MDMwMzEzWhcNMjUwNjI2MDMwMzEzWjAYMRYwFAYD VQQDEw02ODUzN2RmMi05NDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9oQOdvn9cJ7tbHLheVopcVU4WgPoczrOfDDC7JIgkcAkxpzBvz1645gCydD4 ozpUEQd1r2eMAqjiXOkk9B5noTVOdgXb2zMqNsQG+7b/fIwjXV1wtn8yzMxoDvIT O2/jY5hQs396eWG2q6zqsCHHW9ohkYzDTazuAKLn8sLCTCqPMA7Fr9ohhAWzbyby JB3l14697vE3ILF/UIBLO9SfAebwvQxbYHU1YpOYbj/5LypG59Y43zSxwXBWopdx GcwVvaZmOP398925dlMmkjKJ1bitW/ekQ8tXBfsErL9W49m9cmuaJ6wtidDApUzk 1jhUOvcE0jJB/Nv9Hx8CZroGYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0YI45I jojuyQlB5ADR+sgpl2+/MB8GA1UdIwQYMBaAFPsWsZ3798pqxAprajU/eFeJF+D9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkNCNC8yQTg0RDFEOEZE QzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3ltckVDbXRxTlQ5NFY0a1g0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14YXhuZnYzeW1yRUNtdHFOVDk0VjRrWDRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkNCNC8yQTg0RDFEOEZEQzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3lt ckVDbXRxTlQ5NFY0a1g0UDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmAnFLV+CZuytLn33LqxUesVHiDmOhISJ5ZunTvEorMWh1K3TfghD/ 3jpzjqI+Ea/zYWsXLUxQFJiYvesIZX3BQv0f7vplX5kEbi3THig/txe6IVBev44w VgoNm//7Z/C9eaovBGWf1sIU+cyGsDDaeSX6iMFpiQjuHhs0bWv+HkSC+2TrIZTn VW4w/LWHiwqjrEn7pZxHqCJk2pNqmPwBkCBlY5S1JOlCJtn/Fu+t1Q7Xne8aDBDj onUnupggqCPHD1k1ZCPEG2Roq60nw5DPPkuyeBpEfbPPr+vDheZJqKn3IYQ42I3P 4q/omRYHA1fiwVin+/aL13pGXw0BSdUC -----END CERTIFICATE-----Generated at Fri Jun 20 07:16:42 2025 by rpki-client