$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json) Hash identifier: MK/37rI7C1eIaH1HVjclH4oZE+JrT/x/g8QqV33lOdg= Subject key identifier: 4E:1A:20:A7:39:5D:D8:28:89:58:BB:DC:A1:22:4E:6B:4C:CB:63:6E Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Certificate serial: 07D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft Manifest number: 07C5 Signing time: Sat 14 Jun 2025 20:54:31 +0000 Manifest this update: Sat 14 Jun 2025 20:54:30 +0000 Manifest next update: Sat 21 Jun 2025 20:54:30 +0000 Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: AptNdP8HTEzm+RbwGN50AdlLZpEqbwP/5H6H12XCVrg=) 2: FC4EA8D8918511EDB3CBB378C4F9AE02.roa (hash: 4bMonkEILF31i3rwXcmiWVxlZY8L3ObeZ0NQ0u78bEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Validity Not Before: Jun 14 20:54:30 2025 GMT Not After : Jun 21 20:54:30 2025 GMT Subject: CN=684de187-9168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:da:8b:40:a4:fe:92:2c:53:08:be:9b:27:8a: ef:7e:57:f5:71:19:3e:74:fb:11:4c:48:4b:b5:fa: a7:f3:b9:db:16:18:8f:5d:45:2e:19:3e:4e:07:30: 08:1a:17:44:2e:52:af:37:b4:f5:71:82:1a:7c:2e: 19:57:d3:b0:64:9c:7f:08:b4:27:32:56:7c:e7:50: 31:52:e8:af:eb:ef:9e:83:53:90:bb:85:51:4c:76: 67:94:e3:03:36:ac:34:b6:cc:e2:6c:13:9c:5f:bc: 33:36:d2:e9:aa:19:f0:1e:23:47:f6:23:40:f8:1f: 9a:d1:16:de:1e:a4:55:44:12:35:99:a4:74:83:ad: e4:6a:d8:bf:01:cf:fe:0d:93:fa:79:68:a1:ff:a0: af:e8:56:f2:57:2f:84:96:f2:c9:cf:a3:ca:5a:b6: bb:f2:39:69:3e:b3:2f:ed:f2:be:b8:77:0a:37:b9: 43:78:39:a6:dc:39:9f:79:f3:6d:83:70:6e:bf:1c: 00:e8:1f:e0:2b:ae:b7:fe:3a:46:ca:ae:40:50:95: 37:b4:25:94:64:00:8a:20:0c:88:c6:62:06:60:d1: eb:51:d0:db:c5:e0:56:73:da:69:9f:8f:55:e2:eb: 21:7a:6b:26:9a:ac:1e:67:a7:65:e2:be:a5:f0:0c: a1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1A:20:A7:39:5D:D8:28:89:58:BB:DC:A1:22:4E:6B:4C:CB:63:6E X509v3 Authority Key Identifier: keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:19:72:ad:b0:7e:8a:4b:aa:ad:a7:13:f1:f1:63:59:3d:e4: 3a:e6:af:94:f0:c4:e8:ff:7e:76:8b:35:a4:ae:12:15:8f:a9: b3:c0:cd:24:11:b3:41:c5:f8:1b:8b:ff:1d:82:1f:59:95:33: f0:bf:bd:98:5b:b5:01:6f:9d:30:6f:c7:65:6f:fa:4f:79:62: f3:0c:ed:39:f1:9a:ed:9a:90:b2:66:ab:20:ad:ef:3e:8b:80: 39:48:be:ed:ce:af:69:cb:12:37:2f:bd:f0:b6:eb:57:2b:d5: 32:38:27:ff:ac:62:32:a8:0f:15:c6:b7:97:c8:92:72:27:ee: d8:a6:8b:50:0e:46:54:21:f0:b6:ff:b2:fc:f3:9e:d6:bd:4c: a6:c7:3e:d8:9f:83:40:cd:9a:d1:62:b9:a5:0a:58:1f:2e:d6: c9:27:44:03:fc:bd:89:a7:11:a1:f2:15:a5:ea:a2:f6:19:5b: 1f:21:d9:79:77:47:5c:13:ce:b3:91:4e:44:e2:68:93:94:f5: 81:a5:33:38:20:ff:97:f0:4b:16:6b:21:78:b6:57:17:10:93: aa:cb:5c:09:52:70:18:8d:28:ce:c8:3d:a3:16:5b:7d:7a:c3: 45:6f:aa:a8:9b:c9:56:3d:b3:49:6a:8e:f3:e4:39:3c:8c:66: 48:8a:02:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE RUE1MjU0OEEwHhcNMjUwNjE0MjA1NDMwWhcNMjUwNjIxMjA1NDMwWjAYMRYwFAYD VQQDEw02ODRkZTE4Ny05MTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9qLQKT+kixTCL6bJ4rvflf1cRk+dPsRTEhLtfqn87nbFhiPXUUuGT5OBzAI GhdELlKvN7T1cYIafC4ZV9OwZJx/CLQnMlZ851AxUuiv6++eg1OQu4VRTHZnlOMD Nqw0tszibBOcX7wzNtLpqhnwHiNH9iNA+B+a0RbeHqRVRBI1maR0g63kati/Ac/+ DZP6eWih/6Cv6FbyVy+ElvLJz6PKWra78jlpPrMv7fK+uHcKN7lDeDmm3DmfefNt g3BuvxwA6B/gK663/jpGyq5AUJU3tCWUZACKIAyIxmIGYNHrUdDbxeBWc9ppn49V 4ushemsmmqweZ6dl4r6l8Ayh4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4aIKc5 XdgoiVi73KEiTmtMy2NuMB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXGXKtsH6KS6qtpxPx8WNZPeQ65q+U8MTo/352izWkrhIVj6mzwM0k EbNBxfgbi/8dgh9ZlTPwv72YW7UBb50wb8dlb/pPeWLzDO058ZrtmpCyZqsgre8+ i4A5SL7tzq9pyxI3L73wtutXK9UyOCf/rGIyqA8VxreXyJJyJ+7YpotQDkZUIfC2 /7L8857WvUymxz7Yn4NAzZrRYrmlClgfLtbJJ0QD/L2JpxGh8hWl6qL2GVsfIdl5 d0dcE86zkU5E4miTlPWBpTM4IP+X8EsWayF4tlcXEJOqy1wJUnAYjSjOyD2jFlt9 esNFb6qom8lWPbNJao7z5Dk8jGZIigIe -----END CERTIFICATE-----Generated at Sun Jun 15 05:50:29 2025 by rpki-client