$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: Urxjm6wj8hVymqXNxOWjBsbdrghhTjr2Ab7VVELZ0g4= Subject key identifier: 4A:56:5D:88:0E:1A:57:CC:42:6B:1A:17:32:2C:57:CB:1A:77:48:FB Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0C42 Signing time: Sat 14 Jun 2025 18:21:19 +0000 Manifest this update: Sat 14 Jun 2025 18:21:19 +0000 Manifest next update: Sat 21 Jun 2025 18:21:19 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: s24U8NWEYWOUGjv746ZA3DqZDHDvwvn4vNYfcYnAL9o=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: jepyyGmhyczAJbapeZ5nuaRxeukad7rFEbIHfvNySKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: Jun 14 18:21:19 2025 GMT Not After : Jun 21 18:21:19 2025 GMT Subject: CN=684dbd9f-df3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:19:8f:53:fa:3a:fd:b4:ca:fe:ce:15:2f: e6:fc:dd:b1:76:9a:77:0a:aa:2b:b8:1b:4e:f7:46: a5:1d:7b:2c:3c:5f:c8:ba:59:29:58:a9:e4:32:75: 61:99:f0:d0:f5:90:3e:5b:8d:08:e6:7f:a0:6b:af: ab:3e:90:e1:77:03:77:80:5a:ef:54:82:d0:d6:f3: 06:dc:e2:26:96:71:df:33:63:bd:35:ac:61:e2:d8: 70:c6:c1:23:2c:86:0c:7f:1b:15:a0:33:96:3c:8c: e9:84:78:4e:41:20:d6:28:6c:6e:8c:cf:b0:28:1c: 92:2e:1a:37:75:18:60:4e:83:00:47:72:f2:1d:b7: 49:7b:2d:08:26:4d:9a:c3:f3:f7:81:35:73:91:02: 5e:39:38:c3:6d:38:5e:60:34:f5:ae:ed:4a:3e:64: fd:28:92:0b:9a:39:18:ff:53:4a:ef:35:cd:8d:7e: 80:b4:7f:52:d7:9a:63:04:68:85:ac:75:e3:37:30: 23:45:e5:78:d1:fc:4d:1d:fb:f8:5c:ee:ac:b5:97: ee:cc:82:20:ca:f8:b4:ca:67:64:6e:41:d5:c1:ed: 38:36:aa:3d:9b:67:15:27:76:e1:d7:7d:31:01:66: 99:2d:37:e4:7c:93:60:b7:98:56:83:ee:f3:81:ca: e5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:56:5D:88:0E:1A:57:CC:42:6B:1A:17:32:2C:57:CB:1A:77:48:FB X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:7d:7e:86:af:1f:51:0f:0d:5c:d6:c9:9b:63:66:ad:91:4f: ea:1f:60:87:2b:b6:57:cc:e5:e9:80:a5:f7:dd:26:98:ec:18: 56:07:26:8c:44:c6:00:20:85:59:99:93:2d:bb:a7:11:bd:6d: 20:c9:10:d9:e6:98:31:82:b1:14:f7:c7:83:e8:2d:2b:c8:a5: 62:83:a1:42:c6:7f:ca:f7:3d:10:72:04:33:c7:c8:13:77:d2: 07:d1:a9:f6:66:fa:57:3f:4c:8f:5b:8a:ad:1b:72:57:cc:fb: 8b:0e:3f:89:bc:46:a0:f4:ab:20:11:07:2f:24:16:ed:45:c8: 9b:d5:60:e3:6d:82:ed:ed:79:41:8e:36:df:3b:69:b8:d2:34: 41:cd:85:9d:58:bf:4d:91:48:04:59:a5:d9:d1:94:02:8c:92: 86:5b:c5:73:c1:82:68:62:16:14:07:a1:5f:4d:32:78:74:ca: 04:26:8b:88:ec:52:82:89:4a:6a:63:8b:48:c7:6e:45:9f:43: 6d:ae:10:48:f4:40:73:e3:30:ca:d9:02:c8:d8:59:09:c8:1a: 61:04:06:b4:90:3a:79:66:36:4d:37:7c:8d:b0:c2:23:e9:a5: 8f:9c:33:bd:36:5e:ae:86:fd:ef:68:e4:a5:c5:14:1b:18:e9: 40:b8:e7:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjUwNjE0MTgyMTE5WhcNMjUwNjIxMTgyMTE5WjAYMRYwFAYD VQQDEw02ODRkYmQ5Zi1kZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7IZj1P6Ov20yv7OFS/m/N2xdpp3CqoruBtO90alHXssPF/IulkpWKnkMnVh mfDQ9ZA+W40I5n+ga6+rPpDhdwN3gFrvVILQ1vMG3OImlnHfM2O9Naxh4thwxsEj LIYMfxsVoDOWPIzphHhOQSDWKGxujM+wKBySLho3dRhgToMAR3LyHbdJey0IJk2a w/P3gTVzkQJeOTjDbTheYDT1ru1KPmT9KJILmjkY/1NK7zXNjX6AtH9S15pjBGiF rHXjNzAjReV40fxNHfv4XO6stZfuzIIgyvi0ymdkbkHVwe04Nqo9m2cVJ3bh130x AWaZLTfkfJNgt5hWg+7zgcrlkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpWXYgO GlfMQmsaFzIsV8sad0j7MB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgfX6Grx9RDw1c1smbY2atkU/qH2CHK7ZXzOXpgKX33SaY7BhWByaM RMYAIIVZmZMtu6cRvW0gyRDZ5pgxgrEU98eD6C0ryKVig6FCxn/K9z0QcgQzx8gT d9IH0an2ZvpXP0yPW4qtG3JXzPuLDj+JvEag9KsgEQcvJBbtRcib1WDjbYLt7XlB jjbfO2m40jRBzYWdWL9NkUgEWaXZ0ZQCjJKGW8VzwYJoYhYUB6FfTTJ4dMoEJouI 7FKCiUpqY4tIx25Fn0NtrhBI9EBz4zDK2QLI2FkJyBphBAa0kDp5ZjZNN3yNsMIj 6aWPnDO9Nl6uhv3vaOSlxRQbGOlAuOdW -----END CERTIFICATE-----Generated at Sun Jun 15 10:01:28 2025 by rpki-client