$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json) Hash identifier: G/WkeIihfX7qkQahwtB90X0KllGuPLTftxhkVcSgb/c= Subject key identifier: 9C:76:E3:C6:CE:D6:CD:51:FD:E3:99:D2:B8:61:B8:AD:8D:9B:A0:32 Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft Manifest number: 4E Signing time: Sun 15 Jun 2025 06:26:19 +0000 Manifest this update: Sun 15 Jun 2025 06:26:18 +0000 Manifest next update: Sun 22 Jun 2025 06:26:18 +0000 Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: +NUOmRJG8tXYmUnAL1Ftsjwdt7Ao2QtivN2SKoVlLEw=) 2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: a4pNtK3CV+mQ7nJwDHXCGhAdmpO8QsQ6bTiqCpOkfws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Validity Not Before: Jun 15 06:26:18 2025 GMT Not After : Jun 22 06:26:18 2025 GMT Subject: CN=684e678b-0945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:46:ae:8a:60:3c:69:ae:b7:b5:96:0a:c9:00: 05:5f:ae:32:25:42:18:1f:ef:b3:b3:ce:48:3e:fd: 20:b3:9a:49:15:54:fd:72:f1:0c:21:08:b9:db:db: 5a:25:53:74:c1:ef:83:1c:b2:fe:d6:e7:6f:c2:ab: e8:e7:50:9f:12:5a:02:b6:bd:e7:9c:f2:6e:91:77: 08:79:35:31:91:b6:05:1e:30:1f:16:c6:0a:3c:2b: 50:d2:e6:f9:53:d4:b2:00:17:a8:52:6d:03:0d:c7: 1e:66:24:f9:7e:e0:f7:54:2b:54:12:83:60:3b:47: 6a:7d:d9:5d:30:d8:3a:1e:be:33:7b:75:07:d2:cc: 11:4b:70:ae:85:e5:36:09:22:80:53:91:80:ef:41: 98:2a:6b:5c:5c:29:ce:d4:dd:e7:dc:32:e0:02:29: 77:dc:9f:b7:5d:01:9c:b2:33:40:ce:18:e4:ba:c9: d8:62:b2:35:a6:d3:c4:39:d4:7b:4e:c9:98:d4:bf: 71:65:91:b0:58:86:48:3f:96:2d:f8:ac:50:4f:79: ea:60:d8:9d:ae:fb:d7:51:65:70:1e:c4:e0:98:53: d8:58:c7:4b:79:22:6f:0b:e2:4e:7d:ef:24:ad:fa: 63:49:ad:1c:cb:21:a2:85:fc:22:ef:90:55:d9:8c: b3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:76:E3:C6:CE:D6:CD:51:FD:E3:99:D2:B8:61:B8:AD:8D:9B:A0:32 X509v3 Authority Key Identifier: keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:39:a5:7f:f1:27:9f:ea:37:f6:8c:83:39:7e:0f:91:a6:39: d5:5f:33:36:55:aa:88:9e:8a:c5:71:3c:15:2b:e1:20:29:16: 48:ae:90:16:48:eb:ea:50:5b:2c:3e:82:48:ba:ca:ce:22:18: bb:4c:a4:d1:c8:22:65:4e:48:e5:c9:0b:2e:50:03:f4:dd:06: 70:98:4c:f7:ec:29:37:13:4f:4e:9d:84:0e:a7:e6:77:af:ec: b4:8a:ea:f6:2f:75:0f:00:ce:e9:5e:5e:a7:5a:e7:db:15:4a: 6c:fe:7e:c1:ad:78:f3:21:49:b9:5d:78:08:2d:31:77:16:34: d7:2c:5f:ad:7b:4f:3c:63:c8:db:02:98:a4:fa:29:bb:ae:83: 77:05:3b:0b:4a:fa:fe:58:78:07:66:dc:d5:97:b4:f6:4b:72: d3:98:60:41:60:36:0a:1f:7c:a5:0d:4c:1c:69:b7:85:72:3c: 9b:0c:70:8f:ee:3f:01:fd:6d:47:86:9d:1a:64:6a:37:9f:42: 6b:a3:86:25:c2:d2:c5:40:61:95:22:d8:97:67:8c:0e:c8:f9: e5:f0:ba:d0:50:bd:e3:a5:fd:ed:bf:a5:23:42:e0:94:7c:fd: 2f:34:d6:34:2a:6e:ec:8c:9f:f7:75:10:87:b2:d5:38:12:93: cd:5f:59:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUNGRjExMC8GA1UEBRMoNUVGREU5OEM0RkJGOEQxMTg3QjY4NThFQkM4MUYwNjI1 QjI5MzE2MDAeFw0yNTA2MTUwNjI2MThaFw0yNTA2MjIwNjI2MThaMBgxFjAUBgNV BAMTDTY4NGU2NzhiLTA5NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Rq6KYDxprre1lgrJAAVfrjIlQhgf77Ozzkg+/SCzmkkVVP1y8QwhCLnb21ol U3TB74Mcsv7W52/Cq+jnUJ8SWgK2veec8m6Rdwh5NTGRtgUeMB8Wxgo8K1DS5vlT 1LIAF6hSbQMNxx5mJPl+4PdUK1QSg2A7R2p92V0w2DoevjN7dQfSzBFLcK6F5TYJ IoBTkYDvQZgqa1xcKc7U3efcMuACKXfcn7ddAZyyM0DOGOS6ydhisjWm08Q51HtO yZjUv3FlkbBYhkg/li34rFBPeepg2J2u+9dRZXAexOCYU9hYx0t5Im8L4k597ySt +mNJrRzLIaKF/CLvkFXZjLNxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnHbjxs7W zVH945nSuGG4rY2boDIwHwYDVR0jBBgwFoAUXv3pjE+/jRGHtoWOvIHwYlspMWAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Q0ZGLzIwQkUxQTMwRDdF MDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1X QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHYzcGpFLV9qUkdIdG9XT3ZJSHdZbHNwTVdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Q0ZGLzIwQkUxQTMwRDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJH SHRvV092SUh3WWxzcE1XQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMg5pX/xJ5/qN/aMgzl+D5GmOdVfMzZVqoieisVxPBUr4SApFkiukBZI 6+pQWyw+gki6ys4iGLtMpNHIImVOSOXJCy5QA/TdBnCYTPfsKTcTT06dhA6n5nev 7LSK6vYvdQ8AzuleXqda59sVSmz+fsGtePMhSbldeAgtMXcWNNcsX617TzxjyNsC mKT6Kbuug3cFOwtK+v5YeAdm3NWXtPZLctOYYEFgNgoffKUNTBxpt4VyPJsMcI/u PwH9bUeGnRpkajefQmujhiXC0sVAYZUi2JdnjA7I+eXwutBQveOl/e2/pSNC4JR8 /S801jQqbuyMn/d1EIey1TgSk81fWVY= -----END CERTIFICATE-----Generated at Mon Jun 16 14:08:46 2025 by rpki-client