$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft File: Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json) Hash identifier: QA6zmCfuAaWU1f429awSsVaPVsTJPmg3QUHF1eAzE/4= Subject key identifier: 43:49:6A:23:C2:4A:73:B4:07:65:F3:C7:B9:C7:F7:07:80:E9:04:CC Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 Certificate issuer: /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft Manifest number: 0623 Signing time: Sat 14 Jun 2025 23:33:39 +0000 Manifest this update: Sat 14 Jun 2025 23:33:38 +0000 Manifest next update: Sat 21 Jun 2025 23:33:38 +0000 Files and hashes: 1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: /CiYOl7ZGZuxkic9lTQmfpSB5dtCRCjkNiMJNgKt2BE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Validity Not Before: Jun 14 23:33:38 2025 GMT Not After : Jun 21 23:33:38 2025 GMT Subject: CN=684e06d3-d484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:30:2d:97:5f:e8:da:44:18:20:50:b1:8a:09: 1a:64:57:b0:b4:d2:3e:5a:22:ec:9e:6a:97:52:a7: 66:e9:67:2a:d8:31:38:d8:d5:b3:39:79:98:01:0e: 69:e7:e9:2f:74:38:ee:25:40:a1:cc:db:e9:85:85: 41:e3:1b:4a:08:c8:d5:b4:c3:73:8c:f9:d4:03:e5: da:88:57:db:ea:0b:6f:d2:a3:c0:b9:12:dd:c4:e6: ed:1a:c2:8c:97:6b:88:7c:96:ec:b1:ca:03:8d:47: 2b:f4:af:b8:3a:1d:57:09:bd:d7:da:d9:4a:7f:b5: d0:c2:5d:51:01:08:f7:4e:5d:df:e0:0a:04:20:fb: 33:2f:09:91:99:71:8f:f1:0e:52:83:0e:e7:65:06: 09:6e:43:cc:20:9f:31:a0:60:99:b1:22:23:cd:e5: 10:22:30:92:40:67:24:38:01:78:8c:5b:10:5c:29: 97:82:e6:d0:9e:98:79:7e:7a:ba:05:41:5c:35:69: ea:31:6a:38:6a:e7:e7:bc:22:ce:45:09:1d:f2:87: c5:82:42:05:a2:a2:9c:ca:0a:2e:42:20:69:f3:27: 84:d1:d2:5f:74:81:d8:f5:85:2f:73:ae:fc:23:d5: 9d:c3:3e:f5:12:8f:f6:e5:0f:f0:16:40:a8:a9:1d: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:49:6A:23:C2:4A:73:B4:07:65:F3:C7:B9:C7:F7:07:80:E9:04:CC X509v3 Authority Key Identifier: keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:74:78:78:b9:49:3c:98:71:f5:a8:51:fb:bd:11:00:ac:23: b6:30:54:7e:1a:83:9f:3b:77:3f:6a:84:e1:7b:2b:e1:1a:53: f7:e1:b6:22:59:60:a1:e6:a1:17:a2:9f:cc:f4:58:cf:ae:d3: de:76:de:0b:16:23:b6:b0:c5:b4:a1:9e:4a:51:02:e1:9f:8d: f3:d9:74:89:d6:08:2a:c0:1b:d6:c4:fa:0b:9f:45:f9:9f:0d: 06:6f:05:d0:2d:2f:4c:2f:ce:bb:df:ab:83:4c:17:fb:11:10: e8:32:82:66:4a:ec:47:f8:85:9d:7d:0d:cc:f8:37:3c:99:ec: 64:35:24:97:3b:6c:9d:f5:9d:8f:fb:3e:0c:bc:96:5f:a1:79: fb:45:32:fb:43:0b:97:b5:dd:e9:e9:fd:27:48:4b:15:91:c5: a3:db:d9:02:5d:fc:17:03:ba:46:38:04:47:39:4b:55:48:09: 66:02:c4:1c:f3:a0:31:f4:d5:6e:21:11:ab:d4:3b:96:c8:16: 4a:eb:64:ad:d9:d3:4c:c4:97:22:b1:14:f8:66:6c:30:69:be: 69:4b:d3:6a:47:2a:73:9d:eb:d7:46:83:9c:d1:e1:2d:ca:49: 3f:47:c8:53:3e:38:b3:42:c1:30:09:64:3d:da:3c:e5:23:dc: 3e:bd:f8:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKDBBQkZENzdBNjg2OTJFRkVCNDMyNDAwRkZEREREN0FF MUIyM0JDMjcwHhcNMjUwNjE0MjMzMzM4WhcNMjUwNjIxMjMzMzM4WjAYMRYwFAYD VQQDEw02ODRlMDZkMy1kNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjAtl1/o2kQYIFCxigkaZFewtNI+WiLsnmqXUqdm6Wcq2DE42NWzOXmYAQ5p 5+kvdDjuJUChzNvphYVB4xtKCMjVtMNzjPnUA+XaiFfb6gtv0qPAuRLdxObtGsKM l2uIfJbsscoDjUcr9K+4Oh1XCb3X2tlKf7XQwl1RAQj3Tl3f4AoEIPszLwmRmXGP 8Q5Sgw7nZQYJbkPMIJ8xoGCZsSIjzeUQIjCSQGckOAF4jFsQXCmXgubQnph5fnq6 BUFcNWnqMWo4aufnvCLORQkd8ofFgkIFoqKcygouQiBp8yeE0dJfdIHY9YUvc678 I9Wdwz71Eo/25Q/wFkCoqR2beQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENJaiPC SnO0B2Xzx7nH9weA6QTMMB8GA1UdIwQYMBaAFAq/13poaS7+tDJAD/3d164bI7wn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2NjBNa0FQX2QzWHJoc2p2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyX1hlbWhwTHY2ME1rQVBfZDNYcmhzanZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2 NjBNa0FQX2QzWHJoc2p2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEdHh4uUk8mHH1qFH7vREArCO2MFR+GoOfO3c/aoTheyvhGlP34bYi WWCh5qEXop/M9FjPrtPedt4LFiO2sMW0oZ5KUQLhn43z2XSJ1ggqwBvWxPoLn0X5 nw0GbwXQLS9ML86736uDTBf7ERDoMoJmSuxH+IWdfQ3M+Dc8mexkNSSXO2yd9Z2P +z4MvJZfoXn7RTL7QwuXtd3p6f0nSEsVkcWj29kCXfwXA7pGOARHOUtVSAlmAsQc 86Ax9NVuIRGr1DuWyBZK62St2dNMxJcisRT4Zmwwab5pS9NqRypznevXRoOc0eEt ykk/R8hTPjizQsEwCWQ92jzlI9w+vfi2 -----END CERTIFICATE-----Generated at Sun Jun 15 08:41:18 2025 by rpki-client