$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: +oON6rgR2qa8K21wCCAErAZbpQeRQlynBZ4RoL5mPls= Subject key identifier: 4E:4E:4E:20:24:92:86:15:6E:B7:7A:05:21:F7:B1:AF:FD:85:90:13 Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 2329 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 22F7 Signing time: Mon 16 Jun 2025 15:55:42 +0000 Manifest this update: Mon 16 Jun 2025 15:55:41 +0000 Manifest next update: Mon 23 Jun 2025 15:55:41 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: UwURjIHCpbpXtAZsf0LTO4RaM+OoBmrYey4QICRRj6I=) 2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ceQW0pBKYX0iNvGIXu+d5odgS50V86e35zycTc8Ud5M=) 3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: XQc3pF8G20Y24MbmGRMd8iGWGDKIE6b3RdlXoHLAo9o=) 4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: aAotkUpTu/+JybhkWBN3FLBD+6K9gZJwPXhnau7EH7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 15:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9001 (0x2329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Jun 16 15:55:41 2025 GMT Not After : Jun 23 15:55:41 2025 GMT Subject: CN=68503e7d-62e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cd:ec:dd:03:e2:90:42:a6:5f:7e:ac:92:63: ca:e8:22:97:c5:e9:b7:25:81:43:e5:ff:66:6c:2a: 2f:e6:7d:9e:d4:d1:3e:c4:4a:ad:bf:9a:a7:f5:4c: 90:1c:4c:1a:4b:17:b4:72:96:d6:12:e8:77:3d:30: 8a:a7:7b:f2:7e:30:68:2d:4e:aa:4e:09:c7:de:a4: e7:04:07:95:89:30:0e:bc:e8:4b:9d:54:15:2f:a9: 26:b5:43:6a:8b:29:b0:8a:b6:ab:f8:e5:ad:f8:26: e3:ee:57:94:f6:c0:9d:5d:cb:06:93:55:02:2c:23: 2f:29:34:64:eb:db:09:fd:e1:39:64:c3:29:92:81: d4:06:98:c3:63:bd:38:2b:b2:36:6e:40:53:b6:de: 36:ea:25:e7:36:37:93:61:dd:7f:6c:cc:c1:92:27: af:2c:1b:45:c4:9a:01:f6:8d:ff:e6:96:a0:de:7b: 0d:fd:b3:65:c0:da:4b:38:e1:f3:b5:6a:8b:0e:cc: 7c:69:30:4f:9b:b6:30:cf:4d:37:02:18:16:2a:bb: d6:ca:bc:f1:38:3c:16:89:84:bf:7a:38:ff:a1:f5: b7:cf:3b:83:f5:24:df:aa:60:2f:f2:65:dd:af:f7: 50:81:b6:be:71:97:d3:cb:ae:10:5e:33:d0:43:68: bd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4E:4E:20:24:92:86:15:6E:B7:7A:05:21:F7:B1:AF:FD:85:90:13 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:13:12:a3:09:b6:74:56:b9:64:ba:6e:0e:97:4b:8a:7d:a2: 99:d0:d9:4a:41:f5:9d:7d:33:16:92:71:02:c3:3f:a0:d8:aa: a6:b2:22:46:0c:c0:f4:25:eb:56:45:dc:f7:1b:bb:cf:09:56: ba:0d:b2:e4:0f:ef:52:39:dc:32:00:d8:5b:cf:e7:8a:59:47: 80:ef:47:f5:cc:5e:fe:8c:60:8c:3f:b0:da:78:06:74:11:83: 06:f8:40:92:f6:a9:ce:b8:f3:c0:1d:2c:a9:16:3c:e9:19:53: b6:fe:3b:8e:33:b5:ac:58:85:86:c0:ab:f6:d5:cb:fe:44:e2: ee:85:5e:09:5a:d0:55:4f:ee:b2:ac:66:b8:13:b0:5d:6f:1f: bc:d3:01:3a:18:fc:a0:ae:61:fc:1d:8b:84:b1:62:be:20:b5: 18:67:9e:67:52:7d:99:d0:05:db:4d:31:8f:9f:38:e5:66:a3: b7:4c:9b:51:24:5d:0d:0a:b4:0c:98:fe:22:ee:89:aa:b0:28: fd:2a:12:e5:94:35:6a:34:ba:15:41:d9:e7:03:3c:80:69:aa: 88:bd:73:2c:b0:54:ba:9e:15:3e:65:e7:df:e7:37:77:38:cf: 74:ba:92:8b:19:cc:1a:59:ec:1e:3e:81:a3:d8:2d:7e:04:c7: b5:31:1b:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjUwNjE2MTU1NTQxWhcNMjUwNjIzMTU1NTQxWjAYMRYwFAYD VQQDEw02ODUwM2U3ZC02MmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0s3s3QPikEKmX36skmPK6CKXxem3JYFD5f9mbCov5n2e1NE+xEqtv5qn9UyQ HEwaSxe0cpbWEuh3PTCKp3vyfjBoLU6qTgnH3qTnBAeViTAOvOhLnVQVL6kmtUNq iymwirar+OWt+Cbj7leU9sCdXcsGk1UCLCMvKTRk69sJ/eE5ZMMpkoHUBpjDY704 K7I2bkBTtt426iXnNjeTYd1/bMzBkievLBtFxJoB9o3/5pag3nsN/bNlwNpLOOHz tWqLDsx8aTBPm7Ywz003AhgWKrvWyrzxODwWiYS/ejj/ofW3zzuD9STfqmAv8mXd r/dQgba+cZfTy64QXjPQQ2i9AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5OTiAk koYVbrd6BSH3sa/9hZATMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFExKjCbZ0Vrlkum4Ol0uKfaKZ0NlKQfWdfTMWknECwz+g2KqmsiJG DMD0JetWRdz3G7vPCVa6DbLkD+9SOdwyANhbz+eKWUeA70f1zF7+jGCMP7DaeAZ0 EYMG+ECS9qnOuPPAHSypFjzpGVO2/juOM7WsWIWGwKv21cv+ROLuhV4JWtBVT+6y rGa4E7Bdbx+80wE6GPygrmH8HYuEsWK+ILUYZ55nUn2Z0AXbTTGPnzjlZqO3TJtR JF0NCrQMmP4i7omqsCj9KhLllDVqNLoVQdnnAzyAaaqIvXMssFS6nhU+Zeff5zd3 OM90upKLGcwaWewePoGj2C1+BMe1MRtL -----END CERTIFICATE-----Generated at Wed Jun 18 16:37:48 2025 by rpki-client