$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: WoX6wVTwQxfT4uwvm4UBM6ya7PTgFJmDFGGOABNhSBw= Subject key identifier: 90:96:1B:A3:FD:48:83:C9:CA:50:81:F3:68:0D:11:97:61:18:53:E5 Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 064D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 0644 Signing time: Sat 14 Jun 2025 22:23:16 +0000 Manifest this update: Sat 14 Jun 2025 22:23:16 +0000 Manifest next update: Sat 21 Jun 2025 22:23:16 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: H0tR+8G9fABEaxJIurU4HOXuFv91AvddfepqvH/t1q8=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: xnj1+DqNRGp1sU91Z+zGlbx4vpo9U2+YWkznSk4BLXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1613 (0x64d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: Jun 14 22:23:16 2025 GMT Not After : Jun 21 22:23:16 2025 GMT Subject: CN=684df654-183c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:68:a8:30:db:2a:17:9a:fd:2c:c2:aa:4d: 14:4e:f4:c3:53:f7:dd:47:52:8c:d6:21:f6:3d:3e: 3e:38:8c:d4:f7:76:9c:8f:3f:bf:74:b6:70:77:70: 3f:43:35:b1:b2:98:78:88:cc:66:2a:6b:9a:16:fd: 75:87:3c:9f:d7:63:98:8a:dd:d3:41:9d:92:cb:d7: 92:95:74:9c:a2:7d:5c:02:be:3b:79:00:33:b1:da: 74:9c:4b:f8:b6:cb:2a:9d:74:86:83:75:d5:03:a6: 88:8f:d3:da:c0:85:57:5f:df:e2:f1:26:0d:ec:a2: e3:a4:26:9e:04:09:bb:0c:81:82:e9:05:0a:0a:59: 10:3d:e9:3b:64:78:c5:bc:cd:23:ed:ac:28:f6:51: 99:1d:64:f1:84:b2:33:4d:a7:b5:e4:7a:58:4f:80: 60:e9:56:a5:06:73:86:ae:ce:94:45:af:6d:1d:34: c9:fb:9a:c3:d9:fa:84:13:5d:62:b5:d5:b2:d4:2e: f9:6e:6a:30:4e:54:1a:7a:e2:89:c8:82:63:49:1e: ab:8d:c1:38:88:4a:1c:36:84:af:f6:87:0e:4d:f7: 33:b4:d5:cb:02:9c:f1:8e:46:d9:12:e9:99:7a:03: 10:41:74:2e:f0:02:42:c3:21:df:06:98:18:9d:ae: 9b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:96:1B:A3:FD:48:83:C9:CA:50:81:F3:68:0D:11:97:61:18:53:E5 X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:68:a5:fd:0a:61:9f:61:e8:69:cb:bc:ae:9d:f1:c7:9d:de: 5c:a3:e8:8b:f7:9a:c4:19:7b:8b:3d:49:f7:48:8a:f7:6b:3e: 34:fe:c6:93:6d:87:7d:85:cf:7b:28:fb:c8:34:2a:fc:51:41: 0a:c1:90:d7:d1:1e:76:e7:06:ac:ba:72:10:9b:88:6c:20:87: 42:80:48:6b:be:b6:e6:33:d4:0b:a6:87:ff:2d:0e:af:4d:a6: a7:3f:d5:1a:1f:cc:74:ca:b4:55:18:07:39:4f:4c:92:a1:1a: 91:20:72:ba:bb:67:6b:13:7a:68:b4:ab:4f:03:ac:9a:e6:a5: f4:90:21:1d:4d:c4:e3:8a:90:54:70:66:38:3e:a9:18:9e:b4: e2:08:ca:89:85:f1:8b:0a:f5:2c:9f:15:a0:1d:cd:eb:95:48: 2d:11:87:0f:5a:0b:5c:62:da:86:2c:27:69:c6:03:85:82:79: ea:f1:5f:3e:5b:17:f7:24:f1:75:42:b8:1d:f7:f4:46:3a:29: 4f:bc:c1:f1:5b:1d:94:c9:b5:b0:1d:ee:a6:f2:d4:28:5a:4b: 76:5c:8a:69:77:6b:44:9b:fe:49:e4:6f:b1:84:6b:96:ae:b6: c1:3c:ae:e9:4a:5b:7c:c1:50:fd:eb:01:4a:66:3e:98:e6:e6: 2e:a7:1c:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjUwNjE0MjIyMzE2WhcNMjUwNjIxMjIyMzE2WjAYMRYwFAYD VQQDEw02ODRkZjY1NC0xODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzloqDDbKhea/SzCqk0UTvTDU/fdR1KM1iH2PT4+OIzU93acjz+/dLZwd3A/ QzWxsph4iMxmKmuaFv11hzyf12OYit3TQZ2Sy9eSlXScon1cAr47eQAzsdp0nEv4 tssqnXSGg3XVA6aIj9PawIVXX9/i8SYN7KLjpCaeBAm7DIGC6QUKClkQPek7ZHjF vM0j7awo9lGZHWTxhLIzTae15HpYT4Bg6ValBnOGrs6URa9tHTTJ+5rD2fqEE11i tdWy1C75bmowTlQaeuKJyIJjSR6rjcE4iEocNoSv9ocOTfcztNXLApzxjkbZEumZ egMQQXQu8AJCwyHfBpgYna6bWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCWG6P9 SIPJylCB82gNEZdhGFPlMB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaaKX9CmGfYehpy7yunfHHnd5co+iL95rEGXuLPUn3SIr3az40/saT bYd9hc97KPvINCr8UUEKwZDX0R525wasunIQm4hsIIdCgEhrvrbmM9QLpof/LQ6v TaanP9UaH8x0yrRVGAc5T0ySoRqRIHK6u2drE3potKtPA6ya5qX0kCEdTcTjipBU cGY4PqkYnrTiCMqJhfGLCvUsnxWgHc3rlUgtEYcPWgtcYtqGLCdpxgOFgnnq8V8+ Wxf3JPF1Qrgd9/RGOilPvMHxWx2UybWwHe6m8tQoWkt2XIppd2tEm/5J5G+xhGuW rrbBPK7pSlt8wVD96wFKZj6Y5uYupxyl -----END CERTIFICATE-----Generated at Sun Jun 15 06:01:43 2025 by rpki-client