$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: cJANb/esDu5SBPElPJ+F0X4IC54hbvM4ON+bjUXg2/c= Subject key identifier: 41:89:C8:DF:8E:3B:ED:12:43:AE:A8:A0:B8:BA:AD:EB:93:50:8C:3A Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0C52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0C4A Signing time: Thu 12 Jun 2025 18:17:15 +0000 Manifest this update: Thu 12 Jun 2025 18:17:14 +0000 Manifest next update: Thu 19 Jun 2025 18:17:14 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: kIHRvgbKxcqQfOB9nA/uMK2rUWDTfPpINvh83P0fC0o=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: FqEN/utj0qRJF2RShIO0hvD2R+VumfpS5SKeV7adKGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: Jun 12 18:17:14 2025 GMT Not After : Jun 19 18:17:14 2025 GMT Subject: CN=684b19aa-7dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:62:6e:e7:49:b7:4a:b2:24:30:8c:de:b3:22: aa:e0:18:e6:a0:2c:41:53:be:52:0f:48:b9:79:c8: 5c:ca:81:c9:e7:db:c0:09:ea:fa:0e:40:bb:58:54: 3f:db:c7:26:c2:ff:4c:ee:bb:0e:94:39:63:17:20: 9e:67:b6:d5:c3:7f:99:9e:be:5a:0e:7a:44:a1:a4: 2c:8d:08:a4:a6:08:77:59:10:7f:83:fc:45:0b:67: 1a:73:a4:6c:33:fe:22:28:85:0d:1a:45:0c:1e:2f: 58:86:7e:db:2a:9e:cb:5e:25:52:a0:93:a2:cb:8e: b3:02:8d:93:3e:27:21:fe:f7:70:aa:93:0a:bd:92: ed:c3:be:8c:0a:da:4e:38:38:f9:2f:89:0c:ad:4d: 78:b8:67:a2:3e:8a:f8:da:8d:17:9f:26:13:9f:f4: 7b:92:f7:49:54:59:28:a4:24:bb:c5:fd:2c:72:ca: 47:3b:92:81:6e:1e:56:87:7c:f1:86:dc:6a:3f:89: dd:d1:c7:72:78:42:5c:ad:6a:fb:b1:fb:5f:81:00: 8e:79:df:b9:54:dc:ac:20:a9:ff:91:8b:d3:f2:b9: 59:7b:16:01:1d:55:c2:22:ba:b2:25:db:62:f0:71: 6e:c2:da:0b:c0:c1:8c:bc:43:4b:e7:c3:9c:bc:20: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:89:C8:DF:8E:3B:ED:12:43:AE:A8:A0:B8:BA:AD:EB:93:50:8C:3A X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:7f:d7:98:79:50:ba:ef:a1:01:46:e1:df:a9:a8:6b:4f:f6: 91:2c:9b:85:e0:fe:a0:1c:06:3b:a2:b7:9a:33:b1:33:c2:8d: 54:84:22:2d:b3:1c:1f:d4:16:3a:39:a2:5d:1a:47:5e:74:ad: 90:c2:dd:5c:e3:7c:53:73:a5:6c:f3:25:e8:ea:e2:4d:9b:27: 43:a3:0d:c6:88:62:b0:91:1f:94:3f:54:1c:37:19:20:f3:89: 78:b1:c8:6d:b6:e0:2c:d1:c2:c1:01:07:55:b2:89:b2:11:b2: 0b:a2:e5:2d:a3:eb:30:d2:91:02:65:3e:4d:23:99:d3:4f:92: ae:2f:c6:1d:e1:6b:50:da:96:2b:9e:92:9d:76:56:91:e2:ce: a2:b9:d7:d8:c9:66:bd:f9:2b:77:4f:78:58:f9:d9:d6:f8:0e: 9d:d0:67:89:57:e7:1d:ef:9c:7b:b1:c8:4c:f1:ab:d6:ac:d2: fd:e0:39:ec:d4:04:29:25:92:92:5e:2e:6e:c5:38:b8:a0:e4: d9:fd:48:a1:e0:58:8b:ef:9c:19:b2:3b:c1:ce:dd:68:86:4c: 81:f3:de:36:74:db:1a:1b:51:ad:1c:c8:9b:d5:5f:23:4e:19: 45:f6:9c:a8:a6:ec:f1:f7:3a:6c:0b:88:1e:a2:07:57:cf:b9: 83:40:ae:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjUwNjEyMTgxNzE0WhcNMjUwNjE5MTgxNzE0WjAYMRYwFAYD VQQDEw02ODRiMTlhYS03ZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGJu50m3SrIkMIzesyKq4BjmoCxBU75SD0i5echcyoHJ59vACer6DkC7WFQ/ 28cmwv9M7rsOlDljFyCeZ7bVw3+Znr5aDnpEoaQsjQikpgh3WRB/g/xFC2cac6Rs M/4iKIUNGkUMHi9Yhn7bKp7LXiVSoJOiy46zAo2TPich/vdwqpMKvZLtw76MCtpO ODj5L4kMrU14uGeiPor42o0XnyYTn/R7kvdJVFkopCS7xf0scspHO5KBbh5Wh3zx htxqP4nd0cdyeEJcrWr7sftfgQCOed+5VNysIKn/kYvT8rlZexYBHVXCIrqyJdti 8HFuwtoLwMGMvENL58OcvCA1owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGJyN+O O+0SQ66ooLi6reuTUIw6MB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuf9eYeVC676EBRuHfqahrT/aRLJuF4P6gHAY7oreaM7Ezwo1UhCIt sxwf1BY6OaJdGkdedK2Qwt1c43xTc6Vs8yXo6uJNmydDow3GiGKwkR+UP1QcNxkg 84l4schttuAs0cLBAQdVsomyEbILouUto+sw0pECZT5NI5nTT5KuL8Yd4WtQ2pYr npKddlaR4s6iudfYyWa9+St3T3hY+dnW+A6d0GeJV+cd75x7schM8avWrNL94Dns 1AQpJZKSXi5uxTi4oOTZ/Uih4FiL75wZsjvBzt1ohkyB8942dNsaG1GtHMib1V8j ThlF9pyopuzx9zpsC4geogdXz7mDQK7n -----END CERTIFICATE-----Generated at Sat Jun 14 19:11:56 2025 by rpki-client