$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft File: xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json) Hash identifier: Xn9MTzGJG/yE8B638NtEwMeEfp0vIFtbAite9qlOimA= Subject key identifier: 0A:51:0E:4B:09:D7:49:27:55:72:06:22:56:28:EF:43:83:81:21:97 Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Certificate serial: 1CCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft Manifest number: 1C8E Signing time: Sat 14 Jun 2025 16:08:41 +0000 Manifest this update: Sat 14 Jun 2025 16:08:40 +0000 Manifest next update: Sat 21 Jun 2025 16:08:40 +0000 Files and hashes: 1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: qs6fcnlLQ/sDdv9vV2SAR8kjHsukjiigwAmjylBj7oE=) 2: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: Lk2qEHSCNbYOjvU+PcwacX3VW6CH6qyKSanfWEzTYmU=) 3: A149F286EFD311EFB37AB53EC4F9AE02.roa (hash: 7lOYsVaaqHqx4pgPOBBbAkvs7oMzJU4VOgvj6HMpoQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:08:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7370 (0x1cca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Validity Not Before: Jun 14 16:08:40 2025 GMT Not After : Jun 21 16:08:40 2025 GMT Subject: CN=684d9e88-97c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:9e:11:f2:c6:38:32:6b:63:13:6b:d8:dc: 04:69:ac:16:d6:fc:1f:54:f8:36:02:ba:b4:b3:d0: 14:9e:dd:f3:ef:3a:ad:9c:4a:e2:05:f4:d6:40:bc: e3:c5:6b:87:58:87:dc:41:c5:67:d6:d1:30:e0:63: 95:56:8a:d2:15:ff:81:5c:38:a7:19:01:6b:0a:c1: be:7e:0d:a2:6c:47:44:f2:a3:e4:f3:75:18:7a:54: 0b:3e:3e:23:7a:ce:7c:45:5a:e1:e7:87:c7:ac:5b: 25:cb:4c:32:5d:13:2b:f3:60:da:38:1a:32:a1:8a: aa:f1:b5:b2:c0:58:86:60:80:40:c0:cc:9e:45:d3: f4:40:aa:2a:73:32:50:a1:4b:b6:61:bd:67:8b:86: a0:99:e8:23:07:ad:69:81:c8:67:dc:e5:23:13:32: 0a:a1:dc:4e:e4:17:62:8e:e1:17:0a:0b:ad:f4:78: e9:8d:f4:de:30:9f:c9:ac:5a:35:90:db:19:36:cb: 0d:fe:db:ba:21:7d:52:d1:7f:cd:e1:d5:4a:29:3a: 15:1f:c1:54:6e:71:ea:e4:47:cd:14:64:55:5d:fc: fb:4b:82:f0:08:3d:7d:ed:0c:8a:4e:e4:69:45:da: 2a:1a:25:ae:6f:fe:67:5f:13:61:c6:8b:60:c4:ab: 68:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:51:0E:4B:09:D7:49:27:55:72:06:22:56:28:EF:43:83:81:21:97 X509v3 Authority Key Identifier: keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:a3:86:5f:6d:ac:67:aa:88:10:1d:48:e0:3d:2e:03:5a:05: 5a:5e:b0:b1:53:9d:68:7d:96:5e:d9:dc:2b:c1:ac:c6:8e:f8: 3a:17:95:ce:e1:47:e6:62:f1:69:24:43:17:4c:b1:94:69:32: 68:43:da:f0:88:22:fb:b4:b3:cb:32:f5:46:de:69:cb:f4:dd: 30:2f:53:9b:f3:4f:98:22:97:22:3a:8b:a9:83:9b:67:d2:45: d6:90:4e:1f:5b:c3:75:5c:95:66:91:c5:75:95:a8:8f:8d:b2: c1:5f:52:ac:fb:47:7e:e3:3b:da:c9:b4:2d:03:cb:f2:67:9c: 38:73:99:91:fb:be:11:0b:a7:e8:79:d1:f7:a4:90:50:7b:26: 99:e1:6f:f6:46:2e:c8:ac:ee:41:04:c0:9b:e6:24:0c:b9:5d: 95:37:64:80:a7:e5:82:6e:27:0d:2c:93:b1:31:11:9c:ad:5c: 8c:e8:15:96:79:92:d0:f7:32:b2:f0:e5:c6:18:d5:ed:d7:95: 54:24:37:3d:c5:d1:9b:dd:42:64:d6:69:77:a0:25:6b:85:31: d5:44:80:88:11:fd:7b:48:ba:36:77:d7:43:c8:2a:b7:14:57: 02:93:de:d4:e7:8c:17:b3:5e:0f:4f:fe:2e:5b:4f:da:cc:60: 3d:2e:f0:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzOTAxMTAvBgNVBAUTKEM2NDMzQzQ5RTYzQ0Q5MjAzNUIzMDdFOEY3OTYzNzYw OEZFQURCRjUwHhcNMjUwNjE0MTYwODQwWhcNMjUwNjIxMTYwODQwWjAYMRYwFAYD VQQDEw02ODRkOWU4OC05N2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCueEfLGODJrYxNr2NwEaawW1vwfVPg2Arq0s9AUnt3z7zqtnEriBfTWQLzj xWuHWIfcQcVn1tEw4GOVVorSFf+BXDinGQFrCsG+fg2ibEdE8qPk83UYelQLPj4j es58RVrh54fHrFsly0wyXRMr82DaOBoyoYqq8bWywFiGYIBAwMyeRdP0QKoqczJQ oUu2Yb1ni4agmegjB61pgchn3OUjEzIKodxO5BdijuEXCgut9HjpjfTeMJ/JrFo1 kNsZNssN/tu6IX1S0X/N4dVKKToVH8FUbnHq5EfNFGRVXfz7S4LwCD197QyKTuRp RdoqGiWub/5nXxNhxotgxKtoLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApRDksJ 10knVXIGIlYo70ODgSGXMB8GA1UdIwQYMBaAFMZDPEnmPNkgNbMH6PeWN2CP6tv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDM5MC8wRTkzNTRGQ0RD NUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJTQTFzd2ZvOTVZM1lJX3Ey X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrTThTZVk4MlNBMXN3Zm85NVkzWUlfcTJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDM5MC8wRTkzNTRGQ0RDNUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJT QTFzd2ZvOTVZM1lJX3EyX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAo4ZfbaxnqogQHUjgPS4DWgVaXrCxU51ofZZe2dwrwazGjvg6F5XO 4UfmYvFpJEMXTLGUaTJoQ9rwiCL7tLPLMvVG3mnL9N0wL1Ob80+YIpciOoupg5tn 0kXWkE4fW8N1XJVmkcV1laiPjbLBX1Ks+0d+4zvaybQtA8vyZ5w4c5mR+74RC6fo edH3pJBQeyaZ4W/2Ri7IrO5BBMCb5iQMuV2VN2SAp+WCbicNLJOxMRGcrVyM6BWW eZLQ9zKy8OXGGNXt15VUJDc9xdGb3UJk1ml3oCVrhTHVRICIEf17SLo2d9dDyCq3 FFcCk97U54wXs14PT/4uW0/azGA9LvCU -----END CERTIFICATE-----Generated at Sun Jun 15 09:44:06 2025 by rpki-client