$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json) Hash identifier: zK8Ss0CwK9WfHb+rF+Z3GFJLcdyCEmemideBNPmnNug= Subject key identifier: 8F:C3:4E:4E:AB:4F:78:52:EC:73:82:90:90:18:78:C2:96:C7:76:43 Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0E54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft Manifest number: 0E36 Signing time: Sat 14 Jun 2025 17:42:13 +0000 Manifest this update: Sat 14 Jun 2025 17:42:13 +0000 Manifest next update: Sat 21 Jun 2025 17:42:13 +0000 Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: uKeVKgSa6twRy3Mq9xwokAIi/9Ew9ZA9h5wt8oHW+ss=) 2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: K0BpqfADIAgpRrVb5VAxiR5k6a1N4eJk58+OYvAmefI=) 3: AF573166309511EABE9B5934C4F9AE02.roa (hash: wBVLudr4r1jyDPH+Ghnt4yYJmAXvAyl8ooTj+H1Y8oI=) 4: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: JffyrCPpCuKQ4JV9hKAHpBOYaMhGWQal4zN+8n2snKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3668 (0xe54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: Jun 14 17:42:13 2025 GMT Not After : Jun 21 17:42:13 2025 GMT Subject: CN=684db475-e681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3a:ce:3c:e6:8d:17:01:70:9c:5e:a6:bc:10: 72:c3:d2:33:c7:2e:aa:aa:6b:ae:e0:d2:14:95:62: 04:42:d4:32:23:cb:0c:47:e2:08:f7:a4:48:29:e2: 08:01:91:5a:25:68:c1:6b:24:5d:69:e7:91:53:3f: fc:76:22:d4:c7:24:ad:aa:dd:f4:fc:55:38:78:79: 54:23:02:d1:19:b4:95:95:46:32:09:ff:af:9f:1a: b0:51:9b:4d:36:1a:a4:dc:0f:29:77:b1:82:f1:37: 28:e7:09:96:49:c4:00:9e:94:3c:66:ad:d0:2e:f8: 49:62:cf:48:ab:1d:2d:ba:56:e7:44:eb:1d:26:8e: c6:ab:e1:ef:1d:5c:d9:ef:83:a1:9c:82:fa:4f:9f: df:61:44:2f:f0:47:35:c8:5e:aa:35:ed:d5:0f:1f: 30:d0:9f:74:0b:db:1d:b0:6f:39:7e:68:31:77:86: cf:d4:b3:d1:14:19:ed:68:69:0c:c2:0f:90:33:9a: 69:c5:af:c6:97:7e:68:cd:0e:ce:3f:05:df:7c:9b: 11:c7:3e:03:dc:0f:63:cd:7b:26:7f:9b:da:a1:86: be:4b:23:5d:bf:bb:00:f3:f6:68:b4:20:54:0e:ae: 94:a1:80:f4:8c:40:16:f5:1b:07:0d:5d:49:80:7f: bb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C3:4E:4E:AB:4F:78:52:EC:73:82:90:90:18:78:C2:96:C7:76:43 X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:dd:ca:44:5d:1e:da:e8:40:12:3d:eb:b9:62:06:c2:8f:2b: c1:58:1b:b6:a5:6d:7b:b0:f3:b1:61:7e:01:25:3c:63:22:6e: 67:df:9b:e9:90:72:ff:01:71:d7:64:c4:2b:44:a6:dc:66:f3: 11:67:77:22:ce:8f:85:e6:30:f2:47:00:59:c9:84:aa:5e:4f: 36:64:d6:a3:e5:ed:3f:d1:fa:b2:fa:71:00:98:6c:75:6c:19: c7:37:80:b9:18:83:ad:43:74:ef:d3:ce:28:90:2c:39:c8:3c: 53:62:60:20:09:bc:7f:bc:6b:52:c4:fd:71:9e:9a:bf:22:9e: ca:6e:e4:d1:2e:60:d7:25:9c:f5:3d:ac:d1:1b:7a:09:6e:1a: 8b:dd:37:3a:b9:86:9d:71:12:46:17:ba:f8:c7:59:0e:c6:98: 69:47:4c:56:32:95:82:d5:d6:a1:65:e6:00:96:a3:4e:05:92: 37:3b:01:c8:b9:cb:72:6f:24:7f:d0:cd:f6:79:58:76:2d:d9: 6e:81:85:cd:37:92:71:2d:82:fc:65:90:14:cc:06:ad:8e:75: 69:a6:88:13:70:e6:bb:17:7b:c1:5e:2b:22:75:34:84:1b:30: f1:69:c2:ab:15:00:86:b8:69:50:17:ba:29:f1:61:05:d0:38: c4:81:45:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjUwNjE0MTc0MjEzWhcNMjUwNjIxMTc0MjEzWjAYMRYwFAYD VQQDEw02ODRkYjQ3NS1lNjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDrOPOaNFwFwnF6mvBByw9Izxy6qqmuu4NIUlWIEQtQyI8sMR+II96RIKeII AZFaJWjBayRdaeeRUz/8diLUxyStqt30/FU4eHlUIwLRGbSVlUYyCf+vnxqwUZtN Nhqk3A8pd7GC8Tco5wmWScQAnpQ8Zq3QLvhJYs9Iqx0tulbnROsdJo7Gq+HvHVzZ 74OhnIL6T5/fYUQv8Ec1yF6qNe3VDx8w0J90C9sdsG85fmgxd4bP1LPRFBntaGkM wg+QM5ppxa/Gl35ozQ7OPwXffJsRxz4D3A9jzXsmf5vaoYa+SyNdv7sA8/ZotCBU Dq6UoYD0jEAW9RsHDV1JgH+7LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/DTk6r T3hS7HOCkJAYeMKWx3ZDMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6 MlJJeVVQdTJVeDZJcEttZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA3cpEXR7a6EASPeu5YgbCjyvBWBu2pW17sPOxYX4BJTxjIm5n35vp kHL/AXHXZMQrRKbcZvMRZ3cizo+F5jDyRwBZyYSqXk82ZNaj5e0/0fqy+nEAmGx1 bBnHN4C5GIOtQ3Tv084okCw5yDxTYmAgCbx/vGtSxP1xnpq/Ip7KbuTRLmDXJZz1 PazRG3oJbhqL3Tc6uYadcRJGF7r4x1kOxphpR0xWMpWC1dahZeYAlqNOBZI3OwHI uctybyR/0M32eVh2LdlugYXNN5JxLYL8ZZAUzAatjnVppogTcOa7F3vBXisidTSE GzDxacKrFQCGuGlQF7op8WEF0DjEgUVV -----END CERTIFICATE-----Generated at Sun Jun 15 09:40:32 2025 by rpki-client