$ rpki-client -vvf rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft File: X9vV31MtLFYgb3sRLnu7MFejmZA.mft (raw, json) Hash identifier: qutFUXYg5aYkw4e2yPz5oo1qv0KEswp5cRGy0py+G+M= Subject key identifier: 58:80:A8:83:07:22:05:BE:1B:0D:72:50:C5:CC:24:78:0B:74:29:AD Authority key identifier: 5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90 Certificate issuer: /CN=A9196296/serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft Manifest number: 010B Signing time: Fri 13 Jun 2025 03:55:32 +0000 Manifest this update: Fri 13 Jun 2025 03:55:31 +0000 Manifest next update: Fri 20 Jun 2025 03:55:31 +0000 Files and hashes: 1: X9vV31MtLFYgb3sRLnu7MFejmZA.crl (hash: ju6OQJanbcOMuExvlUk+EIW1mRi6OHvyQua5T6mAwEQ=) 2: 9A28A416AF5B11EE9B50AD27C4F9AE02.roa (hash: ZtCY4of0oNZSmT+bU0NNMOI3a0wB7P9BZQfRH7MJK3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196296, serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990 Validity Not Before: Jun 13 03:55:31 2025 GMT Not After : Jun 20 03:55:31 2025 GMT Subject: CN=684ba134-d354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:07:8a:d5:c7:49:72:7b:4e:04:22:de:8f:88: cf:8a:a8:90:86:11:fb:e9:5f:d3:9f:e8:de:e4:34: 17:7f:96:16:e6:bc:b7:47:42:3d:c7:75:c7:3c:ed: 33:ae:08:64:27:f1:8b:7d:27:8d:47:4b:20:7b:0a: 0a:83:b3:0c:a3:14:15:31:e8:a2:5b:ee:db:dc:0e: 93:00:c1:ad:9f:18:8d:93:74:99:ad:9c:76:02:15: 7c:a7:39:b3:bb:98:b2:b8:50:90:aa:65:62:f5:ae: 69:c4:ea:dd:88:7d:aa:c9:84:41:c4:bc:59:0d:27: 20:f6:5d:99:cc:33:f1:d3:8f:bc:cd:8f:35:f8:34: 6a:42:b5:ee:9f:20:73:ca:7d:8a:eb:78:a9:a3:0d: d8:da:48:91:f8:7d:db:8e:70:d0:01:05:92:a2:40: 07:d6:6e:4d:12:ce:0e:2e:f4:f0:33:3b:aa:8b:a8: eb:a3:f4:ab:3d:e7:b0:a1:29:5d:06:13:74:98:b4: 80:12:9b:e5:08:f3:18:c6:98:df:ba:20:69:48:dd: dd:13:66:cb:cc:c4:57:08:e7:ef:dc:16:6c:29:40: 79:9e:85:63:ba:f4:40:96:61:02:b5:db:b7:96:99: ae:e8:69:16:12:80:f1:63:cf:71:ba:0e:dd:b4:2b: 54:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:80:A8:83:07:22:05:BE:1B:0D:72:50:C5:CC:24:78:0B:74:29:AD X509v3 Authority Key Identifier: keyid:5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3f:7f:87:f2:39:0f:13:42:6a:c8:a7:19:43:18:86:09:16: 4f:95:14:69:56:30:0f:74:64:47:55:88:8a:3b:91:8f:76:cc: 83:e0:04:b6:47:7b:c8:6c:26:9a:5b:6a:dc:01:0f:55:e4:11: fd:0f:c3:51:89:b1:75:0a:95:df:55:a9:80:df:91:f9:15:33: 7a:cd:4e:86:0b:0b:0f:b4:41:e5:8e:be:db:18:1c:f8:1f:1f: c6:f7:5d:2a:0f:26:a4:62:9a:ba:e3:d3:e8:ec:83:a5:97:87: f1:a2:d3:16:62:4a:8e:b6:a8:61:5e:4e:a7:17:5b:c5:2c:8e: 7f:60:cc:c4:ab:54:61:f2:4a:4e:bd:6c:af:a8:0d:88:af:39: 8b:87:ba:3c:8b:10:fe:e8:d4:04:8e:85:98:46:24:e4:a0:fb: 9a:54:3d:5c:ed:7b:4f:e6:75:94:f9:ed:05:82:a6:f3:e8:52: 77:0c:9f:8a:2c:f3:f4:a1:4d:f1:ae:3d:7e:be:ee:c6:f5:c5: b8:d3:7c:0c:a6:56:29:09:3f:bd:10:a5:aa:d4:06:2f:a7:b2: 0f:f3:06:51:0e:f2:b8:34:d3:df:99:a0:3c:89:d9:6c:fe:db: 9a:2f:99:c5:7a:f1:68:24:48:9d:a7:74:08:24:06:3a:33:54: 73:f4:1a:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYyOTYxMTAvBgNVBAUTKDVGREJENURGNTMyRDJDNTYyMDZGN0IxMTJFN0JCQjMw NTdBMzk5OTAwHhcNMjUwNjEzMDM1NTMxWhcNMjUwNjIwMDM1NTMxWjAYMRYwFAYD VQQDEw02ODRiYTEzNC1kMzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1weK1cdJcntOBCLej4jPiqiQhhH76V/Tn+je5DQXf5YW5ry3R0I9x3XHPO0z rghkJ/GLfSeNR0sgewoKg7MMoxQVMeiiW+7b3A6TAMGtnxiNk3SZrZx2AhV8pzmz u5iyuFCQqmVi9a5pxOrdiH2qyYRBxLxZDScg9l2ZzDPx04+8zY81+DRqQrXunyBz yn2K63ipow3Y2kiR+H3bjnDQAQWSokAH1m5NEs4OLvTwMzuqi6jro/SrPeewoSld BhN0mLSAEpvlCPMYxpjfuiBpSN3dE2bLzMRXCOfv3BZsKUB5noVjuvRAlmECtdu3 lpmu6GkWEoDxY89xug7dtCtUnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiAqIMH IgW+Gw1yUMXMJHgLdCmtMB8GA1UdIwQYMBaAFF/b1d9TLSxWIG97ES57uzBXo5mQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjI5Ni80MkEwQjcxQUFG NUIxMUVFQjYwRDA1MjdDNEY5QUUwMi9YOXZWMzFNdExGWWdiM3NSTG51N01GZWpt WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g5dlYzMU10TEZZZ2Izc1JMbnU3TUZlam1aQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjI5Ni80MkEwQjcxQUFGNUIxMUVFQjYwRDA1MjdDNEY5QUUwMi9YOXZWMzFNdExG WWdiM3NSTG51N01GZWptWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/P3+H8jkPE0JqyKcZQxiGCRZPlRRpVjAPdGRHVYiKO5GPdsyD4AS2 R3vIbCaaW2rcAQ9V5BH9D8NRibF1CpXfVamA35H5FTN6zU6GCwsPtEHljr7bGBz4 Hx/G910qDyakYpq649Po7IOll4fxotMWYkqOtqhhXk6nF1vFLI5/YMzEq1Rh8kpO vWyvqA2IrzmLh7o8ixD+6NQEjoWYRiTkoPuaVD1c7XtP5nWU+e0Fgqbz6FJ3DJ+K LPP0oU3xrj1+vu7G9cW403wMplYpCT+9EKWq1AYvp7IP8wZRDvK4NNPfmaA8idls /tuaL5nFevFoJEidp3QIJAY6M1Rz9Bp4 -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:21 2025 by rpki-client