$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft File: XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft (raw, json) Hash identifier: rAHs94tePgsI1mWfQRgeZIZ4P6tSU4Q2c3sV/C7aSfI= Subject key identifier: 75:AF:5F:7C:9A:B2:17:66:0E:3D:56:20:6B:E6:D6:FC:6D:A9:F9:FC Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 Certificate issuer: /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft Manifest number: 011B Signing time: Tue 17 Jun 2025 03:51:51 +0000 Manifest this update: Tue 17 Jun 2025 03:51:51 +0000 Manifest next update: Tue 24 Jun 2025 03:51:51 +0000 Files and hashes: 1: XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl (hash: AgOlPfVGdPh91ooFxQ3ZGZ8+5j8p95gAAwGyk2YCuFY=) 2: 262FD0CEFE5C11EFA373D67EC4F9AE02.roa (hash: VFctWPQwbtoig1M0ZyXvaaJ8FzDcDhRRe13XKfb+93w=) 3: 55D387BCFE5C11EFAC82C181C4F9AE02.roa (hash: BXDB9E72EwnR8CUZxXbSk5J1hAgTnGg/I9qirr0mHEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F54, serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Validity Not Before: Jun 17 03:51:51 2025 GMT Not After : Jun 24 03:51:51 2025 GMT Subject: CN=6850e657-7fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:39:87:76:02:49:40:03:f8:2a:d2:c7:40: 0c:9b:d0:e8:61:34:b7:41:78:a8:7e:43:cc:af:59: b6:b6:ee:13:a2:4e:26:96:df:dd:93:30:1c:b5:71: e9:b6:8c:d0:33:07:49:ed:bb:21:28:e6:64:1d:93: bb:8f:61:66:3c:94:cf:99:18:1c:26:dc:09:08:e4: f6:a6:fa:5a:90:09:cd:46:6d:79:3f:51:ab:b7:5e: 9d:db:4e:2d:7c:51:c1:6a:63:29:83:d0:7b:7c:d1: b5:e5:9a:91:0f:77:70:bf:82:dd:b7:13:d6:96:cd: 45:fe:1e:c4:19:fb:c7:3a:08:bd:55:6d:3d:81:a2: 7a:db:07:18:b0:c7:20:ad:99:a3:9c:de:01:51:72: f9:25:4c:e2:13:54:04:1a:4a:ad:e3:8c:6b:d0:5a: a0:45:06:5f:38:fe:f4:d9:f5:c3:39:fd:6f:60:a0: c8:89:fb:22:3f:28:42:7e:73:ce:6d:b3:32:a0:a5: f6:b0:85:78:73:3c:1f:5b:8f:84:a4:70:b2:f7:77: 9b:b8:1a:89:05:bb:ad:2f:ec:7b:fc:39:f8:df:1c: 6c:5a:1e:3e:84:4a:21:d6:99:bc:12:85:ad:b1:ab: 87:de:bb:98:98:1f:26:e6:f9:c7:80:11:07:73:33: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AF:5F:7C:9A:B2:17:66:0E:3D:56:20:6B:E6:D6:FC:6D:A9:F9:FC X509v3 Authority Key Identifier: keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1d:6f:04:87:3b:96:26:6c:62:0d:b6:db:6c:bf:7d:54:96: c9:4b:0a:d6:c7:ac:42:ca:95:98:8f:e1:4b:56:6b:cd:92:15: a6:85:e3:3b:f6:d5:ba:0e:de:db:fe:18:fe:b4:3e:05:a6:f8: 4c:17:ee:bc:66:71:23:cc:3c:38:e1:67:91:d8:92:93:25:eb: 4e:f1:90:51:c8:9e:48:df:06:2a:e3:87:11:d8:70:e5:df:a1: 25:f5:98:c5:c0:02:e2:d8:cc:35:ce:67:ab:82:0a:36:4d:72: c8:9a:87:e5:69:91:b8:53:98:6f:64:ae:87:18:f6:e8:28:57: 21:d2:1d:87:9d:c5:d1:d8:07:dd:b3:cd:d1:ac:5f:ac:6e:85: 81:d4:5e:30:8d:67:a1:41:60:fa:9b:6e:75:ae:09:21:b8:2f: 2a:4c:72:46:38:85:39:1f:d4:59:34:f0:af:ad:03:e9:04:36: b5:70:c7:94:d5:95:9f:34:9b:2a:89:65:43:44:48:f1:93:c0: 30:87:60:1d:ad:82:34:6a:a3:e3:95:d4:ff:a7:c0:e1:cd:4a: 8f:2d:08:ed:b0:24:41:b0:9a:6d:e1:cd:89:f9:8b:1e:7a:a5: c9:b2:bd:79:30:75:f7:b7:70:17:1f:90:ee:e6:1a:6a:eb:75: b4:00:09:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNTQxMTAvBgNVBAUTKDVEQjU3RUQzODYwMzlFQTY2NEQxRUZGNzU3MDczNkQ2 RjlGMDRDNDQwHhcNMjUwNjE3MDM1MTUxWhcNMjUwNjI0MDM1MTUxWjAYMRYwFAYD VQQDEw02ODUwZTY1Ny03ZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFE5h3YCSUAD+CrSx0AMm9DoYTS3QXiofkPMr1m2tu4Tok4mlt/dkzActXHp tozQMwdJ7bshKOZkHZO7j2FmPJTPmRgcJtwJCOT2pvpakAnNRm15P1Grt16d204t fFHBamMpg9B7fNG15ZqRD3dwv4LdtxPWls1F/h7EGfvHOgi9VW09gaJ62wcYsMcg rZmjnN4BUXL5JUziE1QEGkqt44xr0FqgRQZfOP702fXDOf1vYKDIifsiPyhCfnPO bbMyoKX2sIV4czwfW4+EpHCy93ebuBqJBbutL+x7/Dn43xxsWh4+hEoh1pm8EoWt sauH3ruYmB8m5vnHgBEHczNipwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWvX3ya shdmDj1WIGvm1vxtqfn8MB8GA1UdIwQYMBaAFF21ftOGA56mZNHv91cHNtb58ExE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1NC81MUI2RUNFNDlG MjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5xWmswZV8zVndjMjF2bndU RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hiVi0wNFlEbnFaazBlXzNWd2MyMXZud1RFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1NC81MUI2RUNFNDlGMjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5x WmswZV8zVndjMjF2bndURVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2HW8EhzuWJmxiDbbbbL99VJbJSwrWx6xCypWYj+FLVmvNkhWmheM7 9tW6Dt7b/hj+tD4FpvhMF+68ZnEjzDw44WeR2JKTJetO8ZBRyJ5I3wYq44cR2HDl 36El9ZjFwALi2Mw1zmerggo2TXLImoflaZG4U5hvZK6HGPboKFch0h2HncXR2Afd s83RrF+sboWB1F4wjWehQWD6m251rgkhuC8qTHJGOIU5H9RZNPCvrQPpBDa1cMeU 1ZWfNJsqiWVDREjxk8Awh2AdrYI0aqPjldT/p8DhzUqPLQjtsCRBsJpt4c2J+Yse eqXJsr15MHX3t3AXH5Du5hpq63W0AAlW -----END CERTIFICATE-----Generated at Tue Jun 17 16:20:26 2025 by rpki-client