$ rpki-client -vvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft File: X2mHOU7ukmatexkjRBv29RNP-VA.mft (raw, json) Hash identifier: xWKTppskMguYelrt4rxiKhsLWLaSQ2dtQWmkRJToKtA= Subject key identifier: D7:DB:AE:29:EC:5E:C8:05:4F:F0:B8:C7:A2:69:57:D8:88:48:5C:79 Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 Certificate issuer: /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft Manifest number: 07EA Signing time: Sat 14 Jun 2025 20:45:55 +0000 Manifest this update: Sat 14 Jun 2025 20:45:54 +0000 Manifest next update: Sat 21 Jun 2025 20:45:54 +0000 Files and hashes: 1: X2mHOU7ukmatexkjRBv29RNP-VA.crl (hash: VNDF4ipQLp5bl9A8yVU6t3cIx1tPqSh5GVDBcp0JQpc=) 2: F69648C2ECF211EABBFDDD24C4F9AE02.roa (hash: 90ekW1pDIqXWRjwU9tVaYqCrzXTRiG8h8pa7XJ3ojS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Validity Not Before: Jun 14 20:45:54 2025 GMT Not After : Jun 21 20:45:54 2025 GMT Subject: CN=684ddf82-3847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f5:f0:9a:86:e9:37:42:7a:b7:4e:b2:32:d5: 07:2a:02:98:b9:dd:8d:6a:b5:93:9a:2b:e4:d9:2c: a5:34:6c:2a:73:b5:ce:7e:d2:21:b4:87:8a:81:3a: 06:6d:76:43:c2:7e:a6:c5:5f:b0:c5:dc:02:04:be: 99:99:59:07:c0:47:55:9e:ed:6e:74:36:0d:42:53: e6:6a:2f:32:fa:a8:b3:ef:a2:d8:a0:54:73:dc:3d: f1:97:cd:77:61:59:19:93:03:34:ed:2a:72:82:d9: 9b:7a:2f:4a:64:95:25:2e:cd:3d:93:fe:af:97:58: c3:26:b0:17:6c:6f:f6:09:84:16:75:d1:fa:0e:f1: 67:03:9e:7d:e6:00:ce:78:06:68:d5:b9:13:0e:2d: 14:b2:1a:f2:cd:c4:9c:f5:0d:56:90:7e:bf:5b:7e: a1:54:27:26:c6:74:5c:30:c5:a6:cb:f0:af:0a:28: 4b:b5:ab:92:78:1a:2a:3e:2d:64:6e:52:c0:11:f1: 60:fc:55:52:19:e2:03:62:1e:96:34:a5:d5:da:4b: 70:32:f0:f2:c3:76:a3:f8:65:06:c7:01:3d:73:7e: 30:3b:57:b9:b5:ac:6e:f1:cc:cb:19:65:fc:cb:dd: 50:e4:f7:bc:f8:ae:21:45:7a:1d:6d:fc:fa:3a:4a: 25:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DB:AE:29:EC:5E:C8:05:4F:F0:B8:C7:A2:69:57:D8:88:48:5C:79 X509v3 Authority Key Identifier: keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:47:9c:4d:31:19:05:36:9e:96:c0:79:5a:9a:7f:23:81:29: 4f:08:cd:12:b9:96:51:f2:ad:1c:a5:a4:1d:3a:96:c5:96:c2: dd:d4:bb:fc:aa:b9:0b:a0:f2:b4:7a:8c:fe:ca:b5:1b:50:42: 37:ff:ce:f8:0c:63:44:82:e0:61:26:b8:91:a6:1e:a2:24:1f: 9d:94:21:b8:72:90:58:c7:09:9a:cd:b6:bc:c6:a7:fa:29:20: 54:bb:27:0b:0f:02:fb:4f:c5:2f:c5:d0:72:ae:7e:e0:bf:30: 64:46:4b:18:d6:d3:8b:8c:f7:1f:71:30:c8:75:01:f9:15:e1: 94:4b:e4:e7:fb:55:15:cf:a8:74:f8:a9:d3:62:52:80:ac:be: 8c:4d:04:bb:02:0c:09:1b:d5:77:4e:a4:96:3b:ac:f1:76:3c: c7:1a:9b:4b:0a:8b:53:de:d1:9a:9c:ea:6d:26:a5:a3:61:03: 64:09:49:36:27:28:fc:bc:d3:1c:b9:81:42:e5:b8:1d:2a:60: e5:3f:f6:ee:21:f8:4e:69:a4:84:ee:7a:dd:56:79:8b:cd:82: ff:21:4c:e2:c9:e4:5c:d0:ad:8e:03:92:d8:f3:d7:37:89:6f: 5b:81:b5:d9:51:eb:1b:6f:16:27:d0:63:9a:e3:70:69:45:11: 07:5d:6e:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNDExMTAvBgNVBAUTKDVGNjk4NzM5NEVFRTkyNjZBRDdCMTkyMzQ0MUJGNkY1 MTM0RkY5NTAwHhcNMjUwNjE0MjA0NTU0WhcNMjUwNjIxMjA0NTU0WjAYMRYwFAYD VQQDEw02ODRkZGY4Mi0zODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvXwmobpN0J6t06yMtUHKgKYud2NarWTmivk2SylNGwqc7XOftIhtIeKgToG bXZDwn6mxV+wxdwCBL6ZmVkHwEdVnu1udDYNQlPmai8y+qiz76LYoFRz3D3xl813 YVkZkwM07Spygtmbei9KZJUlLs09k/6vl1jDJrAXbG/2CYQWddH6DvFnA5595gDO eAZo1bkTDi0UshryzcSc9Q1WkH6/W36hVCcmxnRcMMWmy/CvCihLtauSeBoqPi1k blLAEfFg/FVSGeIDYh6WNKXV2ktwMvDyw3aj+GUGxwE9c34wO1e5taxu8czLGWX8 y91Q5Pe8+K4hRXodbfz6OkolTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfbrins XsgFT/C4x6JpV9iISFx5MB8GA1UdIwQYMBaAFF9phzlO7pJmrXsZI0Qb9vUTT/lQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI0MS82MkJCNUM3NEVD RjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWttYXRleGtqUkJ2MjlSTlAt VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybUhPVTd1a21hdGV4a2pSQnYyOVJOUC1WQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI0MS82MkJCNUM3NEVDRjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWtt YXRleGtqUkJ2MjlSTlAtVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVR5xNMRkFNp6WwHlamn8jgSlPCM0SuZZR8q0cpaQdOpbFlsLd1Lv8 qrkLoPK0eoz+yrUbUEI3/874DGNEguBhJriRph6iJB+dlCG4cpBYxwmazba8xqf6 KSBUuycLDwL7T8UvxdByrn7gvzBkRksY1tOLjPcfcTDIdQH5FeGUS+Tn+1UVz6h0 +KnTYlKArL6MTQS7AgwJG9V3TqSWO6zxdjzHGptLCotT3tGanOptJqWjYQNkCUk2 Jyj8vNMcuYFC5bgdKmDlP/buIfhOaaSE7nrdVnmLzYL/IUziyeRc0K2OA5LY89c3 iW9bgbXZUesbbxYn0GOa43BpRREHXW65 -----END CERTIFICATE-----Generated at Sun Jun 15 09:45:05 2025 by rpki-client