$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json) Hash identifier: YdQuY05+UTI7KELEPW3+1lQpq3dER+TJukIclaZk+xY= Subject key identifier: FC:07:87:4E:81:76:C2:71:14:66:34:BF:42:BF:88:12:06:83:B5:19 Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Certificate serial: 0415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft Manifest number: 03F8 Signing time: Sun 15 Jun 2025 00:15:07 +0000 Manifest this update: Sun 15 Jun 2025 00:15:07 +0000 Manifest next update: Sun 22 Jun 2025 00:15:07 +0000 Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: j9XnGSAHcWP1ZHrCXIMpHYvIeWy/XhXVa+29XdI0J04=) 2: 07C047B28BE911EF9DF25F0BC4F9AE02.roa (hash: AN4hBiZx1+tVHoaN/LazZ9dbBGKvWOUI1wRt7z4HbB0=) 3: 50F671067CC411EF8589DF32C4F9AE02.roa (hash: 2ORnkhzshra5gFpyLproOPD3/repbchwTxkXJLvaYUk=) 4: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: wgX+EMzgoKfrAVdDz/48mCSLSDU8m2MWUYcABpMkNSU=) 5: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: Hb+mhjOnUiRcLYwNjTfwnpK/Ky2Nkaju8DZXLfXW14s=) 6: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: Cfsk+t84ibLo+fkUEG7hLT0dawrjqPaFJly7xspE4TQ=) 7: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: PGtYjaqkpIprbzlxtBJWh83LZS83/aciT2SXNSejhqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1045 (0x415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Validity Not Before: Jun 15 00:15:07 2025 GMT Not After : Jun 22 00:15:07 2025 GMT Subject: CN=684e108b-023a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cf:97:2f:be:d2:df:0e:5a:3a:9b:0b:b2:69: 4a:1a:dd:23:f7:41:70:00:ba:fe:ae:f5:b2:31:9a: be:d2:29:75:52:c9:8b:9d:1a:44:2e:4f:62:b4:50: f9:fc:9f:d2:74:b5:b1:23:85:51:e5:9b:ae:9a:34: c1:cb:e1:dc:ef:29:f4:f1:35:2f:c2:77:58:9e:78: fa:4a:a7:9d:b2:a3:e8:9e:67:a7:3c:6f:ed:c8:b0: 92:8e:9e:a0:b9:e6:a3:04:99:29:58:44:1a:b6:03: 69:2b:f2:2c:13:c7:e1:d0:72:65:ae:3b:a0:97:6e: 20:69:e6:39:94:d7:4a:b0:3a:85:84:36:2c:23:d3: 59:68:27:e1:c1:f0:87:29:e5:65:0a:b1:6e:00:9e: 5b:e0:cf:6d:a7:df:88:2e:cd:85:f1:e1:38:1e:8d: bb:4b:4a:85:af:28:34:ae:41:2c:0c:1d:27:df:a5: 62:46:f8:86:39:c0:c0:72:b3:9e:a1:08:d1:f3:f7: c0:16:81:f7:10:76:9c:e7:1d:5a:6d:4c:cc:f7:85: 37:01:22:a9:eb:7e:9b:8b:6e:a0:65:1a:ff:2c:4e: ff:f9:fc:96:66:9a:b4:ec:1a:1c:b8:c6:4d:0f:80: 46:18:b7:47:fc:97:ac:c0:c9:50:eb:71:1c:61:2f: 64:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:07:87:4E:81:76:C2:71:14:66:34:BF:42:BF:88:12:06:83:B5:19 X509v3 Authority Key Identifier: keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d8:0c:fd:48:f3:9a:98:a3:51:ad:22:e9:84:08:b1:44:68: 40:53:f5:03:82:76:75:09:c7:0c:a9:e9:0c:f3:bc:44:b3:12: dc:36:61:8a:46:43:92:9e:85:0d:ea:6c:b4:46:56:98:de:3d: c2:9d:5d:f7:96:b1:c4:36:84:b4:b0:40:98:c7:bf:c2:59:95: f1:18:ad:b8:f3:04:e9:b3:0a:5e:0b:e2:cc:20:19:ce:1a:23: aa:90:0d:cb:fe:78:05:b5:df:c9:f3:8e:3a:57:d7:18:05:65: d8:1f:23:64:8d:d1:74:66:94:5c:77:dd:ad:6e:f7:1a:4c:58: 99:48:8f:92:99:7a:1e:9c:0c:2d:19:83:ae:0b:32:49:ca:56: ea:8b:a7:3e:d8:45:f0:2c:f3:46:11:54:c4:86:f9:64:f9:21: c3:d8:aa:ad:44:0b:66:d0:63:0e:61:9f:d3:da:08:e3:12:01: ce:17:06:6e:f5:0f:6b:c4:0d:16:b7:ea:f2:60:9e:58:61:80: d6:3e:18:1c:1a:e4:98:ee:20:e3:a0:19:a4:ed:20:d5:dc:88: 41:16:5d:b8:97:c2:3e:f9:1b:26:dd:98:c3:d8:88:ee:cb:1e: 64:c4:e5:4a:87:66:c4:88:3f:83:6d:0e:ae:f3:a4:34:60:d3: 24:ef:91:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTQxMTAvBgNVBAUTKEM0RDRGQjBGRjAyNzc5NkU5REFBMTdCNzU1NTFGRDBC NzdGMTk4MkYwHhcNMjUwNjE1MDAxNTA3WhcNMjUwNjIyMDAxNTA3WjAYMRYwFAYD VQQDEw02ODRlMTA4Yi0wMjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArM+XL77S3w5aOpsLsmlKGt0j90FwALr+rvWyMZq+0il1UsmLnRpELk9itFD5 /J/SdLWxI4VR5ZuumjTBy+Hc7yn08TUvwndYnnj6SqedsqPonmenPG/tyLCSjp6g ueajBJkpWEQatgNpK/IsE8fh0HJlrjugl24gaeY5lNdKsDqFhDYsI9NZaCfhwfCH KeVlCrFuAJ5b4M9tp9+ILs2F8eE4Ho27S0qFryg0rkEsDB0n36ViRviGOcDAcrOe oQjR8/fAFoH3EHac5x1abUzM94U3ASKp636bi26gZRr/LE7/+fyWZpq07BocuMZN D4BGGLdH/JeswMlQ63EcYS9k1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwHh06B dsJxFGY0v0K/iBIGg7UZMB8GA1UdIwQYMBaAFMTU+w/wJ3lunaoXt1VR/Qt38Zgv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5NC9FM0NDMjVEODgx MUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVXNmRxaGUzVlZIOUMzZnht QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOVDdEX0FuZVc2ZHFoZTNWVkg5QzNmeG1DOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI5NC9FM0NDMjVEODgxMUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVX NmRxaGUzVlZIOUMzZnhtQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL2Az9SPOamKNRrSLphAixRGhAU/UDgnZ1CccMqekM87xEsxLcNmGK RkOSnoUN6my0RlaY3j3CnV33lrHENoS0sECYx7/CWZXxGK248wTpswpeC+LMIBnO GiOqkA3L/ngFtd/J8446V9cYBWXYHyNkjdF0ZpRcd92tbvcaTFiZSI+SmXoenAwt GYOuCzJJylbqi6c+2EXwLPNGEVTEhvlk+SHD2KqtRAtm0GMOYZ/T2gjjEgHOFwZu 9Q9rxA0Wt+ryYJ5YYYDWPhgcGuSY7iDjoBmk7SDV3IhBFl24l8I++Rsm3ZjD2Iju yx5kxOVKh2bEiD+DbQ6u86Q0YNMk75EG -----END CERTIFICATE-----Generated at Mon Jun 16 15:58:40 2025 by rpki-client