$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: nN3T3hWmbpN7OdMZeKDGzsp7+RqhvahB6VqRHOAIHAY= Subject key identifier: 52:D7:C5:5C:FF:52:65:A5:BC:B3:8E:96:47:44:23:DD:D1:04:26:D9 Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: 0D Signing time: Tue 17 Jun 2025 06:58:42 +0000 Manifest this update: Tue 17 Jun 2025 06:58:42 +0000 Manifest next update: Tue 24 Jun 2025 06:58:42 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: zyyn4jaVmWLIXKxWFQPou8t3fAtpPA0Tmne+zYCyH/k=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: rIKd0p3e0QLGiCh3oOuC0PziP82slPgSfQtsZGWJI0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Jun 17 06:58:42 2025 GMT Not After : Jun 24 06:58:42 2025 GMT Subject: CN=68511222-9bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d1:a8:ec:09:ff:47:8f:21:e6:0e:a8:dc:10: 80:91:69:5e:76:a1:5c:f0:de:9f:ce:d2:60:32:ec: 46:76:35:7c:b1:4b:49:fa:68:a0:d9:e2:6f:43:19: 7f:85:b5:d7:8d:81:a9:ae:d2:d8:ec:64:87:02:42: e5:c9:9c:bf:b9:3f:14:dd:0c:da:a6:07:ca:1f:45: ed:dc:53:a3:ae:a1:58:b9:e2:e4:63:a6:59:4f:b3: e3:6f:9d:49:30:43:ba:49:65:85:86:f9:dd:87:7c: 89:e2:19:26:ce:63:b9:f2:8c:03:ec:c2:59:ad:e0: bb:4a:3b:f8:03:7a:55:f5:ca:fa:1a:d5:dd:cf:e6: 44:da:f4:56:30:7f:11:0b:70:44:a5:3b:43:56:56: 69:6a:f9:ef:77:29:66:1c:40:cc:b4:43:f9:66:c0: 08:50:0b:9a:a5:3a:61:be:32:b6:f9:7f:93:e6:ad: 56:b8:a4:a7:cc:1f:70:26:3c:1d:71:02:8b:38:70: 9d:da:b8:78:fe:5b:31:d6:06:69:bb:39:db:56:3d: bd:01:29:85:dd:ab:1c:97:92:32:4b:20:18:8e:10: 07:ef:43:ba:df:cf:db:41:f3:33:d3:8b:0f:3c:c2: 62:39:b9:e8:47:8a:04:25:1d:63:84:17:25:b5:ef: af:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D7:C5:5C:FF:52:65:A5:BC:B3:8E:96:47:44:23:DD:D1:04:26:D9 X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:b0:34:9e:c7:5b:fd:eb:dd:96:65:e2:3b:97:33:41:a4:07: 3c:13:33:e5:b5:b1:28:3d:49:4a:eb:80:02:9f:1d:c5:50:7c: 8b:4b:6d:75:99:0d:03:5a:73:9d:88:c0:ed:a3:9b:cb:e1:e1: b7:ff:c9:44:ef:f7:c7:a1:af:9e:1f:02:51:16:2e:08:02:bd: 0c:cd:c7:3e:f7:ed:38:e0:66:be:e1:bb:c6:4d:c5:2b:9b:19: d9:d9:c8:6b:3e:c7:35:4a:53:0b:0b:2e:76:e5:51:d5:ae:c2: 7f:83:b8:2d:20:ef:1a:0f:ae:22:1e:e6:0b:96:3c:ff:c1:7f: 70:4d:a1:b5:61:1c:4b:54:97:ea:e9:f9:4b:cb:3e:27:a5:43: 05:5d:47:a3:a5:4c:ce:f9:10:77:61:61:cb:aa:35:66:c1:da: af:6d:57:dd:a9:0b:1d:55:7c:6c:59:47:14:80:41:34:00:2b: 51:ab:b1:b1:a4:e4:05:8f:d7:d2:df:c1:9f:9c:a7:85:98:35: 25:3d:ab:08:27:f5:00:2d:d4:1f:89:84:c2:78:8c:34:26:71: 28:d3:c6:3f:d1:b0:bb:e9:f2:11:49:2e:75:f3:ef:9f:6c:97: bd:07:23:61:75:5b:66:97:76:87:68:2d:07:e7:00:1d:15:8a: ce:09:d0:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTg1NzExMC8GA1UEBRMoQzQyNkQ0MjY0MDA2NzY1NTU5NzNERkVERTRFQjI2NDRC RUVEMjg3MzAeFw0yNTA2MTcwNjU4NDJaFw0yNTA2MjQwNjU4NDJaMBgxFjAUBgNV BAMTDTY4NTExMjIyLTliZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV0ajsCf9HjyHmDqjcEICRaV52oVzw3p/O0mAy7EZ2NXyxS0n6aKDZ4m9DGX+F tdeNgamu0tjsZIcCQuXJnL+5PxTdDNqmB8ofRe3cU6OuoVi54uRjpllPs+NvnUkw Q7pJZYWG+d2HfIniGSbOY7nyjAPswlmt4LtKO/gDelX1yvoa1d3P5kTa9FYwfxEL cESlO0NWVmlq+e93KWYcQMy0Q/lmwAhQC5qlOmG+Mrb5f5PmrVa4pKfMH3AmPB1x Aos4cJ3auHj+WzHWBmm7OdtWPb0BKYXdqxyXkjJLIBiOEAfvQ7rfz9tB8zPTiw88 wmI5uehHigQlHWOEFyW176/ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUtfFXP9S ZaW8s46WR0Qj3dEEJtkwHwYDVR0jBBgwFoAUxCbUJkAGdlVZc9/t5OsmRL7tKHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxODU3L0MxRjczMDcyM0M5 ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveENiVUprQUdkbFZaYzlfdDVPc21STDd0S0hNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx ODU3L0MxRjczMDcyM0M5ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxW WmM5X3Q1T3NtUkw3dEtITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOWwNJ7HW/3r3ZZl4juXM0GkBzwTM+W1sSg9SUrrgAKfHcVQfItLbXWZ DQNac52IwO2jm8vh4bf/yUTv98ehr54fAlEWLggCvQzNxz737TjgZr7hu8ZNxSub GdnZyGs+xzVKUwsLLnblUdWuwn+DuC0g7xoPriIe5guWPP/Bf3BNobVhHEtUl+rp +UvLPielQwVdR6OlTM75EHdhYcuqNWbB2q9tV92pCx1VfGxZRxSAQTQAK1GrsbGk 5AWP19LfwZ+cp4WYNSU9qwgn9QAt1B+JhMJ4jDQmcSjTxj/RsLvp8hFJLnXz759s l70HI2F1W2aXdodoLQfnAB0Vis4J0FA= -----END CERTIFICATE-----Generated at Wed Jun 18 02:53:53 2025 by rpki-client