$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json) Hash identifier: yL22pt010/VKq4fSLKXRq8LIHuZ+lIDbYsi8RYbP12w= Subject key identifier: 8D:08:01:E0:18:93:52:6C:96:E5:38:18:15:A8:01:98:8D:1B:40:A0 Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft Manifest number: 01DD Signing time: Tue 17 Jun 2025 01:57:07 +0000 Manifest this update: Tue 17 Jun 2025 01:57:07 +0000 Manifest next update: Tue 24 Jun 2025 01:57:06 +0000 Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: PTiN1/jZUXQsYLSFTy8e7DRyLdKZ7WyXwTIcuiaRL1g=) 2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: ziWoAY2hbvtxePvnZWAtSB5jp5zkw3S8bF9M6H2eX84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 01:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EC0, serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Validity Not Before: Jun 17 01:57:07 2025 GMT Not After : Jun 24 01:57:06 2025 GMT Subject: CN=6850cb73-b94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:59:93:fe:12:12:31:00:8a:aa:18:6f:e6:6c: b6:24:26:06:f8:ed:69:95:0a:0d:74:4d:3c:4e:fe: b8:0b:30:94:9f:33:8c:d4:de:b3:aa:70:6f:90:e4: 85:e7:1b:49:62:b9:5c:f0:8f:4f:d3:2d:5f:29:b9: ae:ac:2d:0b:67:4e:d6:78:68:9f:16:2f:c5:75:e1: b3:e2:ec:99:9f:ff:53:43:53:f3:b1:98:9f:69:b8: 8a:d4:4c:7d:2e:20:f9:84:25:e7:c7:81:64:d2:83: d7:e0:bf:a8:7e:6d:54:5d:5e:a0:69:05:76:0c:d3: bd:f2:cf:7a:be:3e:eb:04:f0:fb:42:5b:e5:b4:ee: 77:bc:7f:b6:87:8a:ca:da:b2:e8:24:80:17:54:d0: ae:08:b2:a3:e6:40:b4:aa:84:2c:54:44:8e:64:53: bc:ce:fb:89:86:bb:75:c3:ae:00:b6:fb:c2:35:4b: a8:c2:d4:e5:62:7c:24:0a:fb:f2:d2:46:0f:d5:ea: 0e:5e:50:99:bc:af:53:6d:7e:17:a7:be:9a:24:c9: d7:35:df:55:f4:ee:0f:ea:87:bc:45:b1:94:b3:20: 2d:d4:01:ae:1b:be:6a:ea:da:fb:96:86:01:8b:54: 31:a7:59:8f:31:50:ef:ff:7f:62:bf:07:ab:06:90: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:08:01:E0:18:93:52:6C:96:E5:38:18:15:A8:01:98:8D:1B:40:A0 X509v3 Authority Key Identifier: keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:40:07:48:84:c1:e8:62:0f:50:aa:60:a6:ff:53:0d:cf:15: 07:81:df:69:bd:f8:71:4f:af:fd:15:e0:f4:e2:3c:0c:b1:7c: a6:66:db:23:ed:22:f3:ac:c8:fa:1a:c2:02:b5:5f:e8:3f:86: 7e:eb:de:1c:77:4d:78:51:09:8a:51:99:dd:e1:fa:4d:07:d8: 77:b5:f8:9b:8c:2c:c9:86:07:18:f2:3a:09:8d:8f:dc:bc:1c: f2:9b:01:44:f4:2c:30:30:df:b4:da:b4:41:8c:39:4a:24:be: 0a:00:b4:c8:74:01:24:6c:c0:82:c7:ee:c4:0b:bc:c9:93:ae: 8f:0b:17:cf:7a:d6:f8:20:2a:d8:f3:34:48:ea:62:ff:7f:00: ab:53:a3:65:ef:08:9e:17:94:44:34:86:aa:15:fd:e3:d3:7a: 92:82:9b:55:3f:d0:03:f9:e9:70:94:b9:b4:4b:b9:3c:d0:4f: 9b:08:28:c6:6c:d1:62:c6:f3:72:8f:72:5c:32:9e:23:00:f4: 96:42:a8:4e:bd:f8:a3:35:e6:ce:11:76:2e:68:ad:76:8a:c6: 26:a7:40:e6:25:7c:fe:a2:ea:9c:ad:d1:eb:28:33:41:db:99: 85:2d:34:41:7f:6a:26:d2:87:74:72:56:da:f3:65:ca:1d:61: e0:4f:14:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0 N0E1Qzc0NzEwHhcNMjUwNjE3MDE1NzA3WhcNMjUwNjI0MDE1NzA2WjAYMRYwFAYD VQQDEw02ODUwY2I3My1iOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1mT/hISMQCKqhhv5my2JCYG+O1plQoNdE08Tv64CzCUnzOM1N6zqnBvkOSF 5xtJYrlc8I9P0y1fKbmurC0LZ07WeGifFi/FdeGz4uyZn/9TQ1PzsZifabiK1Ex9 LiD5hCXnx4Fk0oPX4L+ofm1UXV6gaQV2DNO98s96vj7rBPD7QlvltO53vH+2h4rK 2rLoJIAXVNCuCLKj5kC0qoQsVESOZFO8zvuJhrt1w64AtvvCNUuowtTlYnwkCvvy 0kYP1eoOXlCZvK9TbX4Xp76aJMnXNd9V9O4P6oe8RbGUsyAt1AGuG75q6tr7loYB i1Qxp1mPMVDv/39ivwerBpBNcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0IAeAY k1JsluU4GBWoAZiNG0CgMB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEVDMC9EQUU2NzQwQzdGM0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBS aWNlZURuU294N2hIcGNkSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChQAdIhMHoYg9QqmCm/1MNzxUHgd9pvfhxT6/9FeD04jwMsXymZtsj 7SLzrMj6GsICtV/oP4Z+694cd014UQmKUZnd4fpNB9h3tfibjCzJhgcY8joJjY/c vBzymwFE9CwwMN+02rRBjDlKJL4KALTIdAEkbMCCx+7EC7zJk66PCxfPetb4ICrY 8zRI6mL/fwCrU6Nl7wieF5RENIaqFf3j03qSgptVP9AD+elwlLm0S7k80E+bCCjG bNFixvNyj3JcMp4jAPSWQqhOvfijNebOEXYuaK12isYmp0DmJXz+ouqcrdHrKDNB 25mFLTRBf2om0od0clba82XKHWHgTxRu -----END CERTIFICATE-----Generated at Thu Jun 19 01:28:09 2025 by rpki-client