$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: Lkvth53PwAIv2n9CInCg4cO2lmlnhLtrxKwnsHcpeII= Subject key identifier: 63:0F:2C:E3:FB:4D:31:EE:51:F7:88:5F:18:88:CD:27:B7:10:7A:92 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0D08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0CE0 Signing time: Fri 20 Jun 2025 18:06:41 +0000 Manifest this update: Fri 20 Jun 2025 18:06:40 +0000 Manifest next update: Fri 27 Jun 2025 18:06:40 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: v9m9wxcxX7uc6dT8V0YWklowrCHKRXLg7PbQn8224b8=) 2: 6EA46446646511EFA9435879C4F9AE02.roa (hash: wKDEdStmrZZfi1N+sozcMYpUpj9M6UZTKjL7qa1uJ/0=) 3: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: gaKPScXkAxsuY8VAZ/bdwS1+gAnXATdqGjlvtSNl84I=) 4: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: 9VMgA4YRxMIjWK/lK97cgRReFAG7X/1dXoRMnmEvJtU=) 5: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (hash: Xs7PI8yOiwfltHePVx4QJDu9U0Lph/VszEHjm+alpiE=) 6: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: OIcrwBZfO0r9AZzqec0EZieuFLydO0IeQ37B1ozdZjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 18:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Jun 20 18:06:40 2025 GMT Not After : Jun 27 18:06:40 2025 GMT Subject: CN=6855a331-d949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:57:8d:c4:79:14:40:36:0e:6e:1a:2f:71:ab: 2a:7a:e0:91:f0:ef:d4:08:ad:0b:2e:08:6c:30:30: 18:53:93:e2:75:ed:4d:fc:e4:92:4b:80:fd:15:5d: 18:06:1d:3b:6a:d7:ff:4e:80:0c:5a:f1:bf:7c:65: fe:97:af:8f:8f:ef:88:a3:b0:18:b5:33:65:3c:ea: 70:79:83:cd:36:55:0c:e2:14:59:50:42:0b:bf:c4: 3d:03:5d:07:5f:8a:3f:9f:16:47:06:b2:01:34:d8: c5:10:71:3b:4d:ad:ce:4b:42:5a:26:8e:f0:d5:e9: 00:fc:d6:68:4e:cc:ae:5d:b2:5e:a0:a5:af:70:fc: 80:8b:09:5a:59:26:6d:a2:58:22:e7:ad:a9:55:0d: f5:33:e8:36:ef:3f:6d:b3:aa:8e:89:c0:0c:6b:9a: 44:fa:4e:9c:73:f4:51:d0:00:7d:50:a4:b8:e2:f6: 28:71:0a:d6:8c:d4:86:e6:97:03:39:c8:43:46:1d: a6:0b:4d:08:60:5e:d1:5f:a0:38:e9:e5:23:78:ad: ec:dc:25:bb:80:06:88:41:73:69:01:c2:66:8c:06: 57:ae:8b:d5:2c:cc:37:4a:75:4e:d5:a3:a5:86:60: 60:8f:75:38:5a:34:44:7c:d9:b3:ec:4e:58:57:5a: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0F:2C:E3:FB:4D:31:EE:51:F7:88:5F:18:88:CD:27:B7:10:7A:92 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:23:c0:b5:be:f9:01:20:67:7f:8e:aa:1d:88:39:e6:15:c3: 22:d5:fe:bf:aa:43:8d:de:64:61:5b:aa:f0:2d:4a:6a:c1:d0: 82:7d:d6:76:96:e9:5f:22:40:a1:7c:71:78:43:04:ce:0f:91: e0:7a:6b:48:5f:8f:b4:08:4c:0d:7b:67:c2:cc:ec:d5:d4:ec: 5b:3f:c4:a0:56:ef:fc:90:66:0f:6a:04:95:7b:ce:40:0d:7c: 3f:7e:9d:71:a1:58:bb:af:2d:c9:36:8d:cb:a5:6e:37:8b:a9: fa:be:15:dd:2a:2e:28:42:36:7e:08:72:2f:de:75:92:80:18: 5b:2d:2e:35:a8:9d:1d:72:e2:f1:3e:9b:46:21:0a:c4:96:e9: 49:0c:18:91:83:6d:6f:2a:28:fc:a9:7c:23:95:cc:04:f4:10: 61:5d:e8:63:d3:f1:d2:99:50:6b:31:17:a3:7e:d0:a5:55:2f: 4c:d8:3d:5c:2a:cf:15:29:05:4d:1b:86:61:07:26:85:62:a3: c8:e2:6b:84:0c:2b:d8:da:b8:d3:90:f1:ee:63:25:4e:7e:46: db:86:78:50:f1:31:3a:d7:3c:bc:e2:d6:a0:1d:3d:5a:79:5d: 7d:ee:bb:e0:c9:86:94:88:85:d9:dd:d5:33:8b:0c:04:ef:8e: fd:c1:ab:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjUwNjIwMTgwNjQwWhcNMjUwNjI3MTgwNjQwWjAYMRYwFAYD VQQDEw02ODU1YTMzMS1kOTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01eNxHkUQDYObhovcasqeuCR8O/UCK0LLghsMDAYU5Pide1N/OSSS4D9FV0Y Bh07atf/ToAMWvG/fGX+l6+Pj++Io7AYtTNlPOpweYPNNlUM4hRZUEILv8Q9A10H X4o/nxZHBrIBNNjFEHE7Ta3OS0JaJo7w1ekA/NZoTsyuXbJeoKWvcPyAiwlaWSZt olgi562pVQ31M+g27z9ts6qOicAMa5pE+k6cc/RR0AB9UKS44vYocQrWjNSG5pcD OchDRh2mC00IYF7RX6A46eUjeK3s3CW7gAaIQXNpAcJmjAZXrovVLMw3SnVO1aOl hmBgj3U4WjREfNmz7E5YV1qtNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMPLOP7 TTHuUfeIXxiIzSe3EHqSMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEI8C1vvkBIGd/jqodiDnmFcMi1f6/qkON3mRhW6rwLUpqwdCCfdZ2 lulfIkChfHF4QwTOD5HgemtIX4+0CEwNe2fCzOzV1OxbP8SgVu/8kGYPagSVe85A DXw/fp1xoVi7ry3JNo3LpW43i6n6vhXdKi4oQjZ+CHIv3nWSgBhbLS41qJ0dcuLx PptGIQrElulJDBiRg21vKij8qXwjlcwE9BBhXehj0/HSmVBrMRejftClVS9M2D1c Ks8VKQVNG4ZhByaFYqPI4muEDCvY2rjTkPHuYyVOfkbbhnhQ8TE61zy84tagHT1a eV197rvgyYaUiIXZ3dUziwwE7479wav3 -----END CERTIFICATE-----Generated at Sat Jun 21 09:32:34 2025 by rpki-client