$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft File: XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json) Hash identifier: AC3rXJx/f3ZY+BII0/nN8IJGKz9VSVLSLGHjvkcUxog= Subject key identifier: A9:47:8A:46:C4:83:1F:8A:38:40:2E:84:FE:6B:15:C7:59:34:89:63 Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC Certificate issuer: /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft Manifest number: 4D Signing time: Thu 19 Jun 2025 06:41:38 +0000 Manifest this update: Thu 19 Jun 2025 06:41:37 +0000 Manifest next update: Thu 26 Jun 2025 06:41:37 +0000 Files and hashes: 1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: cXiI7NcvHMMa806erIsjodpr8EsUCGQ3j/xF3onmJhk=) 2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: OADH0Zf3ANJ0fVSGo4++5SGmG3UFA33H5Jy/cHOt0/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC Validity Not Before: Jun 19 06:41:37 2025 GMT Not After : Jun 26 06:41:37 2025 GMT Subject: CN=6853b122-2092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:dd:2f:d4:4a:8a:6e:d8:9c:03:26:55:7e:87: 2c:07:f9:54:29:13:dd:82:6a:f0:ee:81:af:29:9d: aa:ea:5c:aa:87:b5:18:94:8b:62:84:1b:31:ca:16: 2c:8c:e3:0c:11:0f:f9:bc:83:52:e8:d9:c3:f3:e0: ff:56:67:a4:e9:40:ec:85:c3:c2:a2:9f:30:f3:47: c1:06:14:60:c8:a9:d8:4e:68:b7:c8:ef:64:cf:1a: 90:52:96:9d:ab:84:d4:8d:d1:9e:37:03:c8:bf:22: eb:fd:ab:e5:4a:94:8f:35:ee:7b:80:fb:48:d7:49: a0:b2:6f:45:2c:6d:93:de:e8:87:2f:16:0e:c6:c0: e5:dc:8b:e3:b7:ce:3b:b1:1e:ad:37:a8:81:bc:63: a2:9e:8c:59:f7:e1:a4:81:6e:8f:b3:40:7a:65:50: d4:15:9d:91:ff:f0:02:03:77:96:0a:15:b1:f2:5c: c5:0b:de:51:fb:f1:8b:5a:23:11:0c:d2:95:ff:06: 94:51:73:ef:35:f1:a3:6a:4a:0c:07:d7:8b:cd:49: d4:58:5a:8d:2c:95:08:38:fe:56:bb:7e:ed:d9:45: 8d:10:1c:fc:3c:01:72:37:ac:3d:6f:6b:d9:72:f0: c4:bf:4e:e6:06:18:cb:5e:81:62:d4:a8:b5:4a:f2: e9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:47:8A:46:C4:83:1F:8A:38:40:2E:84:FE:6B:15:C7:59:34:89:63 X509v3 Authority Key Identifier: keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:0c:6d:8b:39:a4:69:94:07:cf:11:22:d0:d3:4d:d5:2b:e1: 8d:9a:e2:31:e2:3e:52:6a:a8:0a:dd:2d:60:36:b5:66:bb:b1: 58:93:17:dc:b7:d0:ec:29:35:7f:c0:79:26:68:a6:55:a5:a6: b5:37:7e:94:83:89:1f:c0:77:55:5a:0e:27:aa:97:cd:a7:00: e6:e8:bb:87:49:9d:29:f3:82:99:a9:bf:db:05:9a:6d:90:50: e3:42:8e:b1:22:75:d7:6a:6d:c4:e1:4a:8d:b0:a2:f5:37:2a: ed:1f:6c:85:19:8e:4d:ad:43:52:a1:a1:dc:94:b7:c3:94:2c: 96:0b:a1:7b:9f:7f:dc:ec:d1:49:34:e8:cb:1c:e8:7d:ef:ce: 1c:0a:ab:72:41:3b:2f:04:ae:70:02:b3:b5:02:94:fe:f1:84: 8a:46:48:48:79:7e:6e:bc:0d:d1:e5:85:e0:93:a0:f0:86:b4: 58:53:1b:ab:4c:ae:52:e1:cc:76:91:39:15:6c:89:bd:bb:be: e5:cf:85:aa:13:69:42:2e:6d:05:0d:7d:27:0e:e4:f9:77:34: d4:d9:8f:3a:94:cd:0f:4f:98:39:31:72:f1:f0:21:01:3e:2d: d3:1a:c3:0d:bf:39:4b:05:61:5a:e2:86:df:95:e1:2b:ae:94: 65:0d:43:93 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Rjg3MDExMC8GA1UEBRMoNUQ1NUYxNTA5QjZGMDM0MjREMjk0NEY4MTFGODY5OTM4 MDk5QkJCQzAeFw0yNTA2MTkwNjQxMzdaFw0yNTA2MjYwNjQxMzdaMBgxFjAUBgNV BAMTDTY4NTNiMTIyLTIwOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDt3S/USopu2JwDJlV+hywH+VQpE92CavDuga8pnarqXKqHtRiUi2KEGzHKFiyM 4wwRD/m8g1Lo2cPz4P9WZ6TpQOyFw8KinzDzR8EGFGDIqdhOaLfI72TPGpBSlp2r hNSN0Z43A8i/Iuv9q+VKlI817nuA+0jXSaCyb0UsbZPe6IcvFg7GwOXci+O3zjux Hq03qIG8Y6KejFn34aSBbo+zQHplUNQVnZH/8AIDd5YKFbHyXMUL3lH78YtaIxEM 0pX/BpRRc+818aNqSgwH14vNSdRYWo0slQg4/la7fu3ZRY0QHPw8AXI3rD1va9ly 8MS/TuYGGMtegWLUqLVK8ulTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqUeKRsSD H4o4QC6E/msVx1k0iWMwHwYDVR0jBBgwFoAUXVXxUJtvA0JNKUT4Efhpk4CZu7ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGODcwL0M5MjQyNDZBRDdF MjExRUZBRjBCM0I3REM0RjlBRTAyL1hWWHhVSnR2QTBKTktVVDRFZmhwazRDWnU3 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFZYeFVKdHZBMEpOS1VUNEVmaHBrNENadTd3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG ODcwL0M5MjQyNDZBRDdFMjExRUZBRjBCM0I3REM0RjlBRTAyL1hWWHhVSnR2QTBK TktVVDRFZmhwazRDWnU3dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEUMbYs5pGmUB88RItDTTdUr4Y2a4jHiPlJqqArdLWA2tWa7sViTF9y3 0OwpNX/AeSZoplWlprU3fpSDiR/Ad1VaDieql82nAObou4dJnSnzgpmpv9sFmm2Q UONCjrEidddqbcThSo2wovU3Ku0fbIUZjk2tQ1KhodyUt8OULJYLoXuff9zs0Uk0 6Msc6H3vzhwKq3JBOy8ErnACs7UClP7xhIpGSEh5fm68DdHlheCToPCGtFhTG6tM rlLhzHaRORVsib27vuXPhaoTaUIubQUNfScO5Pl3NNTZjzqUzQ9PmDkxcvHwIQE+ LdMaww2/OUsFYVriht+V4SuulGUNQ5M= -----END CERTIFICATE-----Generated at Fri Jun 20 16:29:43 2025 by rpki-client