$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: ZqRU9EfNFLGrrwKmrVZGs3iZv+ggHtdr0GlkoHd4Vj4= Subject key identifier: DF:74:D7:89:A4:33:A1:E7:D2:99:F2:87:D7:69:89:7D:DB:0F:D1:76 Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 0A13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 0A09 Signing time: Sat 14 Jun 2025 19:39:09 +0000 Manifest this update: Sat 14 Jun 2025 19:39:08 +0000 Manifest next update: Sat 21 Jun 2025 19:39:08 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: j/sZzamfWDcrBTstEoKqDnHgZChD6ncxAARzQL9kQd0=) 2: CA67185A02E511EF8ED1355CC4F9AE02.roa (hash: dM/bkocbrskLUTOMClpNK4FPOQXtlGaqmRxFxTWilMw=) 3: C98E616802E511EF8ED1355CC4F9AE02.roa (hash: gcadtXqsvUpMiAzq36zy8qMAKjIAq2N8zE6RS42bGR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2579 (0xa13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Jun 14 19:39:08 2025 GMT Not After : Jun 21 19:39:08 2025 GMT Subject: CN=684dcfdd-3997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:75:cc:a1:56:78:83:88:3c:ea:b5:f1:9c:9b: ae:a5:d8:8c:46:da:28:d4:f3:cd:9a:7e:6f:6b:91: 31:d2:08:95:a1:24:43:39:70:2f:7b:ac:ab:70:65: 52:49:60:50:f6:6a:7e:6a:5f:1d:2a:75:51:2a:11: 1f:25:cf:35:c3:c8:b3:4b:a0:99:32:bc:5c:09:79: eb:23:27:0a:07:0f:7c:e5:99:40:f7:73:7b:10:6c: a6:d9:3d:2e:6a:7d:a8:76:e5:be:ec:25:60:c4:98: 4e:dc:ac:9f:c8:50:22:a9:c3:e1:15:11:ba:02:ef: a2:13:3c:1a:7c:d9:92:c8:45:8e:d9:9a:32:d3:54: f8:e5:85:6a:b2:62:b2:15:3c:31:72:e0:f8:b3:eb: cd:d0:56:52:27:be:0b:8b:3b:0f:ea:3f:fa:7e:db: f7:b7:49:53:6a:e7:05:76:47:1a:de:2f:2e:cf:b5: 14:cb:bd:4d:2c:f4:7c:2f:84:23:b9:3a:cb:a8:a8: df:91:4a:a3:9b:1c:41:4f:b2:6b:fa:39:af:5a:4f: e4:f8:70:cd:1e:a4:c3:e1:34:69:30:fc:01:07:f7: 8f:0e:f3:64:57:0e:0b:29:38:96:9b:0a:59:ef:4c: ab:0d:fb:cb:40:05:cd:fe:b8:68:7a:65:ca:fc:d5: 57:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:74:D7:89:A4:33:A1:E7:D2:99:F2:87:D7:69:89:7D:DB:0F:D1:76 X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:86:3b:81:f1:ef:6a:b5:01:19:a0:98:50:2a:37:70:b1:f8: 81:dd:99:2f:3a:93:90:4d:e2:03:3a:cf:c4:7a:d9:94:15:b2: b9:eb:86:70:27:0b:1c:6e:60:43:c9:94:50:54:ef:35:f0:e0: 15:13:c4:34:cb:3e:97:b8:f1:f8:66:15:e7:1d:04:89:e2:1e: cc:e9:e3:12:bf:cf:c6:85:d4:cd:97:c8:88:67:36:89:36:63: cc:3e:92:22:c9:0d:76:1c:7d:f3:e7:6f:74:43:06:75:5c:53: 3b:de:24:49:75:75:04:fc:50:02:38:a7:65:3c:18:3d:bd:3f: 77:00:af:c9:36:d6:ff:e9:14:a4:8c:dc:a6:55:31:ca:35:13: 8f:9a:bf:02:53:16:89:ec:32:66:93:7b:89:61:81:f6:c3:a3: 13:9b:3f:93:ff:43:d3:33:3d:23:90:0a:84:60:1c:fd:07:7d: 4c:58:bb:74:78:ca:da:60:b4:06:00:7e:af:44:70:6a:e2:18: 96:66:50:0c:2e:b3:5a:cb:3a:68:4d:c2:b3:18:19:db:df:fb: 31:a2:18:6e:f9:3f:5d:d8:ab:bd:8a:64:e9:2d:02:10:d4:d0: d9:18:0e:b8:c4:b6:7f:4d:90:a3:35:74:a1:f1:30:9f:3f:47: cb:e1:e4:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjUwNjE0MTkzOTA4WhcNMjUwNjIxMTkzOTA4WjAYMRYwFAYD VQQDEw02ODRkY2ZkZC0zOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5XXMoVZ4g4g86rXxnJuupdiMRtoo1PPNmn5va5Ex0giVoSRDOXAve6yrcGVS SWBQ9mp+al8dKnVRKhEfJc81w8izS6CZMrxcCXnrIycKBw985ZlA93N7EGym2T0u an2oduW+7CVgxJhO3KyfyFAiqcPhFRG6Au+iEzwafNmSyEWO2Zoy01T45YVqsmKy FTwxcuD4s+vN0FZSJ74LizsP6j/6ftv3t0lTaucFdkca3i8uz7UUy71NLPR8L4Qj uTrLqKjfkUqjmxxBT7Jr+jmvWk/k+HDNHqTD4TRpMPwBB/ePDvNkVw4LKTiWmwpZ 70yrDfvLQAXN/rhoemXK/NVXNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9014mk M6Hn0pnyh9dpiX3bD9F2MB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAihjuB8e9qtQEZoJhQKjdwsfiB3ZkvOpOQTeIDOs/EetmUFbK564Zw JwscbmBDyZRQVO818OAVE8Q0yz6XuPH4ZhXnHQSJ4h7M6eMSv8/GhdTNl8iIZzaJ NmPMPpIiyQ12HH3z5290QwZ1XFM73iRJdXUE/FACOKdlPBg9vT93AK/JNtb/6RSk jNymVTHKNROPmr8CUxaJ7DJmk3uJYYH2w6MTmz+T/0PTMz0jkAqEYBz9B31MWLt0 eMraYLQGAH6vRHBq4hiWZlAMLrNayzpoTcKzGBnb3/sxohhu+T9d2Ku9imTpLQIQ 1NDZGA64xLZ/TZCjNXSh8TCfP0fL4eQa -----END CERTIFICATE-----Generated at Mon Jun 16 14:48:48 2025 by rpki-client