$ rpki-client -vvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft File: XctT6r5qkI7KhlLekkgHxQnFLTA.mft (raw, json) Hash identifier: vlIShnWaNiZPsyYuo3btkAp1AFaLJX0rBRl7IM6VARM= Subject key identifier: 05:FF:04:7A:D4:A3:71:18:16:B9:0E:73:63:A6:F4:AA:6E:EF:9E:B4 Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Certificate serial: 0CF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft Manifest number: 0CEA Signing time: Sat 14 Jun 2025 17:59:46 +0000 Manifest this update: Sat 14 Jun 2025 17:59:45 +0000 Manifest next update: Sat 21 Jun 2025 17:59:45 +0000 Files and hashes: 1: XctT6r5qkI7KhlLekkgHxQnFLTA.crl (hash: onwyfAxvm5ogvjCXpknuIZGi+Mf37AWwKewYTosoJoM=) 2: 41A8E738045111EA9C7DF516C4F9AE02.roa (hash: 549cEJi0czWRyHHS6o5u4NQ6YCs80VKq9MH5xptp8mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3315 (0xcf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918560D, serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Validity Not Before: Jun 14 17:59:45 2025 GMT Not After : Jun 21 17:59:45 2025 GMT Subject: CN=684db891-efc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a5:62:10:4e:a7:1c:b5:a2:24:56:78:00:5b: 1b:ca:7a:bd:a9:57:61:d8:2c:1f:6d:c6:9d:18:71: 65:d3:fb:85:ec:cb:59:17:58:e9:ab:75:1a:be:5f: a6:37:6f:5f:5b:fa:ac:db:20:9b:74:9f:bf:0f:1a: 02:76:f3:1b:de:d4:4a:78:08:74:e6:f4:f3:5f:bb: fd:1e:dc:74:2c:20:4c:81:e5:92:a1:ab:13:80:2d: ae:bf:03:15:40:1a:15:d6:ca:12:2a:62:4f:12:1c: 53:89:57:3d:fc:3d:63:50:1b:c0:15:14:cf:b2:d0: 91:bd:5c:c1:72:fc:9c:1c:5c:80:70:80:83:71:ed: 84:04:f4:19:1d:2f:e4:d7:70:30:2c:f3:c2:f8:2b: 4b:d6:a1:67:60:62:08:c5:d2:50:97:b0:18:79:39: 40:6c:47:71:4f:81:0e:f0:4f:d6:c4:51:f2:53:3a: b5:f1:05:f8:0d:7f:72:5b:6f:a5:e1:56:83:d9:2c: fb:48:ef:48:52:a4:84:ca:71:42:86:c8:8e:f1:f2: 07:92:37:9d:be:a4:a5:bb:ed:4f:ec:ad:61:6a:74: 52:33:21:2c:2d:00:b3:1c:7c:40:a0:ff:93:89:ec: 5d:c4:8e:5d:b9:b6:13:e9:1a:20:5b:70:2c:cb:95: b8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FF:04:7A:D4:A3:71:18:16:B9:0E:73:63:A6:F4:AA:6E:EF:9E:B4 X509v3 Authority Key Identifier: keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:84:d9:27:1f:59:0b:69:c3:b4:19:cd:b6:5e:77:1c:8f:f4: 7a:25:a3:18:7f:38:ed:57:4e:03:83:c1:a8:c7:58:5f:e8:c7: 6e:95:f4:41:29:e9:8f:93:9e:fa:75:7c:73:5e:09:9a:da:a9: d8:12:92:82:7b:3e:fa:bb:3f:53:89:b5:9d:db:76:97:7c:55: 7a:29:c9:d0:c6:20:48:43:9e:7d:71:b8:ac:18:30:0a:21:71: 05:12:85:0e:a6:23:61:ac:cc:bc:7a:0d:4b:a6:c3:5a:da:a9: 48:e0:1f:1b:cc:a6:9c:d1:ef:aa:d4:cd:d4:e7:8f:1d:a1:b9: 2d:f3:c4:11:3f:b5:bb:23:98:70:16:16:42:26:58:46:89:6b: 06:6a:4f:53:69:96:60:6c:ee:b9:b1:f5:ce:8f:f0:21:69:f8: 41:a3:00:9e:4e:75:8e:1e:6a:57:c2:28:e2:7c:40:f0:10:92: 3a:71:87:84:72:ac:c9:c1:f4:6c:e9:c1:c0:f4:11:81:90:d9: 0e:57:c0:be:4f:8d:81:c6:22:3b:fc:8c:96:9c:b3:e2:db:97: 52:7b:4c:fb:f3:42:6d:4f:5c:ea:ff:2f:17:91:e2:57:3a:aa: a7:a3:5e:34:e3:c6:dc:26:be:d8:a0:e0:52:d4:7d:c7:80:1e: 8b:d9:65:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2MEQxMTAvBgNVBAUTKDVEQ0I1M0VBQkU2QTkwOEVDQTg2NTJERTkyNDgwN0M1 MDlDNTJEMzAwHhcNMjUwNjE0MTc1OTQ1WhcNMjUwNjIxMTc1OTQ1WjAYMRYwFAYD VQQDEw02ODRkYjg5MS1lZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aViEE6nHLWiJFZ4AFsbynq9qVdh2CwfbcadGHFl0/uF7MtZF1jpq3Uavl+m N29fW/qs2yCbdJ+/DxoCdvMb3tRKeAh05vTzX7v9Htx0LCBMgeWSoasTgC2uvwMV QBoV1soSKmJPEhxTiVc9/D1jUBvAFRTPstCRvVzBcvycHFyAcICDce2EBPQZHS/k 13AwLPPC+CtL1qFnYGIIxdJQl7AYeTlAbEdxT4EO8E/WxFHyUzq18QX4DX9yW2+l 4VaD2Sz7SO9IUqSEynFChsiO8fIHkjedvqSlu+1P7K1hanRSMyEsLQCzHHxAoP+T iexdxI5dubYT6RogW3Asy5W4GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAX/BHrU o3EYFrkOc2Om9Kpu7560MB8GA1UdIwQYMBaAFF3LU+q+apCOyoZS3pJIB8UJxS0w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTYwRC9GNURDQTZENEU1 QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJN0tobExla2tnSHhRbkZM VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjdFQ2cjVxa0k3S2hsTGVra2dIeFFuRkxUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTYwRC9GNURDQTZENEU1QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJ N0tobExla2tnSHhRbkZMVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBghNknH1kLacO0Gc22Xnccj/R6JaMYfzjtV04Dg8Gox1hf6MdulfRB KemPk576dXxzXgma2qnYEpKCez76uz9TibWd23aXfFV6KcnQxiBIQ559cbisGDAK IXEFEoUOpiNhrMy8eg1LpsNa2qlI4B8bzKac0e+q1M3U548dobkt88QRP7W7I5hw FhZCJlhGiWsGak9TaZZgbO65sfXOj/AhafhBowCeTnWOHmpXwijifEDwEJI6cYeE cqzJwfRs6cHA9BGBkNkOV8C+T42BxiI7/IyWnLPi25dSe0z780JtT1zq/y8XkeJX Oqqno14048bcJr7YoOBS1H3HgB6L2WVd -----END CERTIFICATE-----Generated at Sat Jun 14 19:29:35 2025 by rpki-client