$ rpki-client -vvf rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft File: xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft (raw, json) Hash identifier: tshQSdlpJuidbuwVxRtZ2aBGgHPmhJ3amSjrfu+O17s= Subject key identifier: 42:AD:49:E5:55:7D:10:50:55:EC:0A:84:4A:C8:6B:C7:79:F9:39:37 Authority key identifier: C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 Certificate issuer: /CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft Manifest number: 041A Signing time: Mon 16 Jun 2025 23:59:01 +0000 Manifest this update: Mon 16 Jun 2025 23:59:00 +0000 Manifest next update: Mon 23 Jun 2025 23:59:00 +0000 Files and hashes: 1: xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl (hash: UuNWpMCDNp82mkCSCF8ROdMDEucXs4O22QlToeMnJrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918767B, serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Validity Not Before: Jun 16 23:59:00 2025 GMT Not After : Jun 23 23:59:00 2025 GMT Subject: CN=6850afc4-95ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:15:a0:10:4a:59:94:fc:4d:14:f9:db:d5:ea: 51:0a:d2:6b:e6:c0:61:19:cf:60:01:f5:b7:58:03: ef:43:35:aa:a1:81:2e:34:00:b2:a2:78:ca:86:ab: 4e:62:96:ec:13:14:f1:7a:2e:07:8d:f2:8d:20:42: 0d:f9:05:f1:89:a0:bb:d2:57:4b:da:73:b9:eb:af: a9:05:d6:55:e6:76:80:f9:5a:a5:22:d5:5e:ef:b0: a3:1b:bf:4b:af:a6:9d:d7:d4:6b:da:3a:38:09:31: b0:37:63:0c:e6:6c:cd:f1:3a:c5:03:5e:80:2c:f5: d7:e6:51:b4:cc:1d:64:5e:be:b4:a4:de:ad:ff:bf: 2e:e3:79:79:cf:f8:77:91:61:bf:89:6a:2a:31:78: cf:3e:75:a7:f7:d0:3a:23:ea:40:6a:e7:d8:9f:68: 8a:00:a7:18:ff:c3:5c:0c:1f:0b:60:b9:af:07:05: 94:18:1e:69:4a:d9:70:a7:cf:8f:a9:fa:96:6f:7c: f4:19:a4:aa:8d:6a:ce:cd:81:f2:ec:a5:ba:8d:be: 79:79:f4:fe:38:f6:bd:ee:3a:b4:03:a3:84:1e:1d: fc:91:0b:18:db:4c:71:8b:2e:f2:69:ab:08:a6:61: 34:a0:13:42:77:33:1b:87:dd:a1:8c:55:2b:a6:80: a2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AD:49:E5:55:7D:10:50:55:EC:0A:84:4A:C8:6B:C7:79:F9:39:37 X509v3 Authority Key Identifier: keyid:C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:01:4b:81:74:36:3e:08:24:fc:9c:f7:0a:68:f9:dc:e7:90: 2a:d1:84:12:1f:35:f7:f7:a2:d9:7b:ae:c7:34:69:a9:46:93: fa:9d:12:61:72:3e:63:3d:d7:54:8f:12:0b:fa:a2:e4:be:fd: a1:c8:37:d6:dc:cc:72:7f:a5:1c:cd:db:d0:83:fa:0f:de:eb: 43:18:ec:1e:d6:b0:09:60:fe:cc:35:b5:41:9b:86:44:1d:a4: 45:e8:ee:4f:fe:df:b6:2d:08:ff:94:54:74:5a:43:19:bf:4b: c5:db:76:00:52:18:c0:64:49:2d:3d:49:65:10:50:a4:4d:5f: 41:a6:7e:48:e0:8d:d7:d9:31:6b:e6:de:32:5d:53:19:c6:87: f4:42:6a:bc:05:67:7d:7b:2a:24:1c:58:97:68:34:f7:9b:10: 76:45:9a:81:2d:c7:04:05:f2:d5:25:a4:8c:65:42:0c:72:36: d9:3d:e4:91:84:14:10:ef:28:2e:90:51:87:0b:c2:2b:dc:97: ae:c0:68:5b:88:06:cd:f7:1e:70:a9:3f:80:19:6f:1f:0a:3c: f7:0b:d9:dc:f4:6c:66:1a:76:9a:8f:eb:5f:7d:ba:b3:71:38: cd:29:2c:6c:e0:c9:d7:e5:de:51:74:9d:5f:f7:6d:06:cb:15: ac:b3:83:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2N0IxMTAvBgNVBAUTKEM1MzQyMzI4OEY5RkZDMTAwNDg0MkJDQzQwQTUxOTIz ODkzNEFBNzcwHhcNMjUwNjE2MjM1OTAwWhcNMjUwNjIzMjM1OTAwWjAYMRYwFAYD VQQDEw02ODUwYWZjNC05NWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRWgEEpZlPxNFPnb1epRCtJr5sBhGc9gAfW3WAPvQzWqoYEuNACyonjKhqtO YpbsExTxei4HjfKNIEIN+QXxiaC70ldL2nO566+pBdZV5naA+VqlItVe77CjG79L r6ad19Rr2jo4CTGwN2MM5mzN8TrFA16ALPXX5lG0zB1kXr60pN6t/78u43l5z/h3 kWG/iWoqMXjPPnWn99A6I+pAaufYn2iKAKcY/8NcDB8LYLmvBwWUGB5pStlwp8+P qfqWb3z0GaSqjWrOzYHy7KW6jb55efT+OPa97jq0A6OEHh38kQsY20xxiy7yaasI pmE0oBNCdzMbh92hjFUrpoCizwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKtSeVV fRBQVewKhErIa8d5+Tk3MB8GA1UdIwQYMBaAFMU0IyiPn/wQBIQrzEClGSOJNKp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY3Qi9GODdGQUQ5MjZB QzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9CQUVoQ3ZNUUtVWkk0azBx bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUUWpLSS1mX0JBRWhDdk1RS1VaSTRrMHFuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY3Qi9GODdGQUQ5MjZBQzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9C QUVoQ3ZNUUtVWkk0azBxbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlAUuBdDY+CCT8nPcKaPnc55Aq0YQSHzX396LZe67HNGmpRpP6nRJh cj5jPddUjxIL+qLkvv2hyDfW3Mxyf6UczdvQg/oP3utDGOwe1rAJYP7MNbVBm4ZE HaRF6O5P/t+2LQj/lFR0WkMZv0vF23YAUhjAZEktPUllEFCkTV9Bpn5I4I3X2TFr 5t4yXVMZxof0Qmq8BWd9eyokHFiXaDT3mxB2RZqBLccEBfLVJaSMZUIMcjbZPeSR hBQQ7ygukFGHC8Ir3JeuwGhbiAbN9x5wqT+AGW8fCjz3C9nc9GxmGnaaj+tffbqz cTjNKSxs4MnX5d5RdJ1f920GyxWss4PH -----END CERTIFICATE-----Generated at Tue Jun 17 20:14:58 2025 by rpki-client