$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json) Hash identifier: lYoZlWvuYVQxR1JSxefbVRFYJR4agld5VFlnK6wiiQg= Subject key identifier: 9A:16:07:12:51:37:E7:F1:84:C1:99:A3:52:B2:6B:A2:80:FB:42:84 Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Certificate serial: 04B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft Manifest number: 04B7 Signing time: Sat 14 Jun 2025 23:35:42 +0000 Manifest this update: Sat 14 Jun 2025 23:35:41 +0000 Manifest next update: Sat 21 Jun 2025 23:35:41 +0000 Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: +K0TW9FIogDouC3MvQMGn1cPBjQ0nhzbdfM7ORzvO+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Validity Not Before: Jun 14 23:35:41 2025 GMT Not After : Jun 21 23:35:41 2025 GMT Subject: CN=684e074d-f89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:92:6a:af:51:03:0f:e2:a0:e0:1c:fc:e2: 7e:9a:6d:77:24:26:1a:1e:ee:c4:7f:83:c1:23:c3: 94:6d:f8:4c:ad:15:4b:76:92:c8:d0:55:16:63:f0: 93:a5:db:33:0a:06:18:35:39:40:b2:1a:f8:d7:31: 97:a0:2b:61:76:e7:ea:da:5a:70:87:ac:24:0c:f3: a7:43:5c:4d:18:20:00:d7:7d:a2:c8:ec:1d:35:8c: b0:a5:61:02:9e:77:42:d4:ce:e9:0c:36:79:ab:a2: 54:3b:24:0a:d9:23:24:fe:98:ac:26:f1:d9:07:6c: 0d:dc:f0:46:a0:d2:73:84:17:7b:71:c2:51:2d:fc: 67:db:99:c2:28:7a:db:d3:16:4d:54:f7:37:e1:43: d5:2a:04:1e:21:52:fc:55:a0:c3:7c:bc:44:90:2c: db:6e:12:08:72:3c:23:72:ac:a6:06:21:02:16:33: fa:2b:f5:40:22:92:b7:20:60:ab:d3:c4:31:49:bb: a6:ea:23:6e:a2:72:35:62:68:b7:a9:e1:67:60:9c: 3a:c2:23:7b:67:a9:e2:29:95:5b:d1:16:ae:58:bf: 50:97:9a:b6:c2:c7:c9:37:9f:0c:11:58:16:29:b5: 4a:3e:7e:ac:1d:96:fa:04:6e:4b:81:dd:ef:7b:82: fc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:16:07:12:51:37:E7:F1:84:C1:99:A3:52:B2:6B:A2:80:FB:42:84 X509v3 Authority Key Identifier: keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:b2:08:51:c6:c1:c3:27:fd:22:87:4e:92:ff:42:76:d0:5d: 9e:73:5b:91:68:ef:be:7e:85:bc:58:73:7a:b5:54:7d:87:fb: 6f:de:b3:5e:05:ab:3a:80:23:d1:41:4e:03:71:a8:3d:95:2f: 8e:ac:dc:96:ac:90:10:81:68:ce:f0:33:74:27:99:b9:69:bc: 86:08:75:16:5d:05:67:a3:1e:c3:89:c4:ec:c7:d5:e1:47:6c: f5:8b:b6:d7:fc:06:cd:76:e1:5b:27:26:b2:2c:f5:ae:5e:42: f6:88:51:19:14:4e:ba:8e:4a:d1:d8:7b:bc:bf:e6:05:e1:fd: 62:53:80:87:ab:b1:aa:e7:88:cd:ab:a2:62:15:ca:39:ba:9a: 3e:e3:e5:81:8d:cf:4c:9f:5e:4c:e3:bb:00:0a:d4:25:4e:ac: 1f:48:02:1d:a9:d8:8a:69:c8:51:20:72:e0:82:90:ee:14:27: 9e:b7:8d:9b:fb:d8:47:5c:e7:bd:c8:f9:6b:7c:76:69:78:66: fd:e1:4d:c0:ae:7d:41:4f:e8:f6:de:67:35:69:d9:1c:b5:3c: f9:a1:28:cd:fb:a3:0e:d2:f3:68:5f:32:6e:0a:da:22:07:79: 83:48:02:c7:96:fc:29:3f:c6:b6:12:19:ba:e4:6b:11:2e:11: b8:15:95:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MEYxMTAvBgNVBAUTKDVGN0RCNjUwQ0FDNDM0NTE3NkFDM0YwN0RFRkM5OTFB RDRGRURFQjgwHhcNMjUwNjE0MjMzNTQxWhcNMjUwNjIxMjMzNTQxWjAYMRYwFAYD VQQDEw02ODRlMDc0ZC1mODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0KSaq9RAw/ioOAc/OJ+mm13JCYaHu7Ef4PBI8OUbfhMrRVLdpLI0FUWY/CT pdszCgYYNTlAshr41zGXoCthdufq2lpwh6wkDPOnQ1xNGCAA132iyOwdNYywpWEC nndC1M7pDDZ5q6JUOyQK2SMk/pisJvHZB2wN3PBGoNJzhBd7ccJRLfxn25nCKHrb 0xZNVPc34UPVKgQeIVL8VaDDfLxEkCzbbhIIcjwjcqymBiECFjP6K/VAIpK3IGCr 08QxSbum6iNuonI1Ymi3qeFnYJw6wiN7Z6niKZVb0RauWL9Ql5q2wsfJN58MEVgW KbVKPn6sHZb6BG5Lgd3ve4L8vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJoWBxJR N+fxhMGZo1Kya6KA+0KEMB8GA1UdIwQYMBaAFF99tlDKxDRRdqw/B978mRrU/t64 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcwRi9ENTVFQjVGMDJE MEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5GRjJyRDhIM3Z5Wkd0VC0z cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gzMjJVTXJFTkZGMnJEOEgzdnlaR3RULTNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcwRi9ENTVFQjVGMDJEMEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5G RjJyRDhIM3Z5Wkd0VC0zcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmsghRxsHDJ/0ih06S/0J20F2ec1uRaO++foW8WHN6tVR9h/tv3rNe Bas6gCPRQU4Dcag9lS+OrNyWrJAQgWjO8DN0J5m5abyGCHUWXQVnox7DicTsx9Xh R2z1i7bX/AbNduFbJyayLPWuXkL2iFEZFE66jkrR2Hu8v+YF4f1iU4CHq7Gq54jN q6JiFco5upo+4+WBjc9Mn15M47sACtQlTqwfSAIdqdiKachRIHLggpDuFCeet42b +9hHXOe9yPlrfHZpeGb94U3Arn1BT+j23mc1adkctTz5oSjN+6MO0vNoXzJuCtoi B3mDSALHlvwpP8a2Ehm65GsRLhG4FZU/ -----END CERTIFICATE-----Generated at Sun Jun 15 09:47:46 2025 by rpki-client