$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: h8oh13ZgVu5l5DVecLjAt5eCqH/cjE4gjirgQYPyA5Y= Subject key identifier: BC:E1:65:CD:FC:8F:A9:8F:AE:DD:B5:6A:1A:F7:A4:34:1B:CD:98:F7 Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 348E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 348E Signing time: Fri 20 Jun 2025 15:12:29 +0000 Manifest this update: Fri 20 Jun 2025 15:12:28 +0000 Manifest next update: Fri 27 Jun 2025 15:12:28 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: cGcQEglQl+++/KtNGFaaJp69nPaoqZ6UpV8P4BB2HhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13454 (0x348e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: Jun 20 15:12:28 2025 GMT Not After : Jun 27 15:12:28 2025 GMT Subject: CN=68557a5c-270b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d3:06:80:fd:ad:be:10:4d:d3:0c:83:68:f8: 40:15:38:60:73:f8:d9:b8:11:8c:c3:6a:a0:80:d3: aa:58:d4:10:a1:21:fd:7e:62:a5:d8:1d:97:d3:87: 42:12:2e:d4:24:40:56:3e:cb:0e:24:31:05:68:c8: cc:f0:4c:77:ca:7c:12:dc:7e:3b:f5:5f:e8:60:d2: c1:b4:a6:94:1e:ef:62:cc:6b:5e:d0:63:cf:31:36: cc:1e:ab:80:1f:3f:c2:79:92:76:1c:5c:02:3b:2a: cf:21:27:15:41:78:0a:a7:f3:a6:02:87:75:fd:56: 31:4d:c6:fe:49:33:4a:ec:d2:31:1d:86:db:6b:22: f9:58:2d:f1:e3:b1:ff:72:82:5b:4c:4c:89:12:bb: 44:6a:e0:2e:7d:74:50:12:6c:0d:c7:65:62:a3:ad: f3:95:13:6f:17:f0:4b:2a:7d:d9:b4:35:86:63:82: 6f:da:22:5a:fb:16:5f:cc:6f:78:a8:8b:d4:97:d0: c2:48:86:0e:16:a6:e2:81:56:c2:94:c9:b3:50:e1: 28:5b:c0:83:b2:b7:a5:c3:ba:96:67:3f:b4:b1:62: 3d:eb:4f:51:eb:7e:a9:07:17:a9:c4:78:1b:24:19: de:29:37:5f:8a:54:8f:91:5d:6b:6c:7c:cd:67:be: 79:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E1:65:CD:FC:8F:A9:8F:AE:DD:B5:6A:1A:F7:A4:34:1B:CD:98:F7 X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:85:1e:c7:4c:5d:0f:a3:66:d3:48:55:3b:6a:8f:ac:86:c5: ab:97:fd:5b:8a:ce:b0:c3:36:a9:9d:59:71:25:a9:c7:75:ed: 01:66:5e:0b:07:2c:54:7b:db:fa:01:4f:2e:03:ae:13:61:ab: 9b:72:ca:db:a8:86:78:02:0d:a4:b1:dc:dc:07:94:23:05:12: 05:01:7b:f0:7b:97:d3:6b:20:04:95:b1:69:8c:0e:02:4c:63: dc:83:ca:23:4e:14:8e:26:5b:24:04:2f:1d:f2:87:8e:55:bd: 8c:6d:34:f8:db:61:ea:44:07:fa:26:db:83:44:c3:94:38:88: 98:95:ed:06:d0:af:fa:65:99:74:71:34:f2:57:61:2e:4a:d3: 66:dc:7f:6f:50:22:62:74:cd:89:00:b8:e6:a7:02:5f:b7:ec: 1b:23:87:aa:9a:70:00:dd:59:06:e7:6b:b6:b6:02:27:98:01: bd:47:ca:15:85:bb:30:3d:14:f3:51:d7:fb:ee:c3:03:41:f7: 78:ba:aa:75:80:2b:78:59:d4:a4:84:61:9c:17:4c:c8:fe:0a: 31:99:1d:91:b4:75:6a:e9:63:5e:43:03:1b:57:da:20:1a:76: 25:ea:35:f7:2b:84:db:93:a4:f8:43:f0:ae:8e:be:31:41:53: 99:56:e5:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjUwNjIwMTUxMjI4WhcNMjUwNjI3MTUxMjI4WjAYMRYwFAYD VQQDEw02ODU1N2E1Yy0yNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNMGgP2tvhBN0wyDaPhAFThgc/jZuBGMw2qggNOqWNQQoSH9fmKl2B2X04dC Ei7UJEBWPssOJDEFaMjM8Ex3ynwS3H479V/oYNLBtKaUHu9izGte0GPPMTbMHquA Hz/CeZJ2HFwCOyrPIScVQXgKp/OmAod1/VYxTcb+STNK7NIxHYbbayL5WC3x47H/ coJbTEyJErtEauAufXRQEmwNx2Vio63zlRNvF/BLKn3ZtDWGY4Jv2iJa+xZfzG94 qIvUl9DCSIYOFqbigVbClMmzUOEoW8CDsrelw7qWZz+0sWI9609R636pBxepxHgb JBneKTdfilSPkV1rbHzNZ755NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzhZc38 j6mPrt21ahr3pDQbzZj3MB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWhR7HTF0Po2bTSFU7ao+shsWrl/1bis6wwzapnVlxJanHde0BZl4L ByxUe9v6AU8uA64TYaubcsrbqIZ4Ag2ksdzcB5QjBRIFAXvwe5fTayAElbFpjA4C TGPcg8ojThSOJlskBC8d8oeOVb2MbTT422HqRAf6JtuDRMOUOIiYle0G0K/6ZZl0 cTTyV2EuStNm3H9vUCJidM2JALjmpwJft+wbI4eqmnAA3VkG52u2tgInmAG9R8oV hbswPRTzUdf77sMDQfd4uqp1gCt4WdSkhGGcF0zI/goxmR2RtHVq6WNeQwMbV9og GnYl6jX3K4Tbk6T4Q/Cujr4xQVOZVuVP -----END CERTIFICATE-----Generated at Sun Jun 22 01:55:06 2025 by rpki-client