$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft File: XrCY701WVcxmtq-Bw83kBi2ALzs.mft (raw, json) Hash identifier: /rkzDlxgw0dJAgk8jNdGmYT0B1PoJUrG24umiPTkuGE= Subject key identifier: 2D:7C:84:10:95:13:CC:0E:D8:27:D9:5A:1E:C8:3C:FF:86:73:7C:1B Authority key identifier: 5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B Certificate issuer: /CN=A919E3FB/serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B Certificate serial: 04D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft Manifest number: 04CD Signing time: Sat 14 Jun 2025 23:32:02 +0000 Manifest this update: Sat 14 Jun 2025 23:32:02 +0000 Manifest next update: Sat 21 Jun 2025 23:32:02 +0000 Files and hashes: 1: XrCY701WVcxmtq-Bw83kBi2ALzs.crl (hash: pCVfEvr3KXftIP2yKU9i1WYpMEylg0lStS5R62T0ptU=) 2: B4D8E692267111ECA0546981C4F9AE02.roa (hash: APl5b4vCPo52FjFgWioqB5D0vfXVOhLUTwuTuf6xSiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1234 (0x4d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E3FB, serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B Validity Not Before: Jun 14 23:32:02 2025 GMT Not After : Jun 21 23:32:02 2025 GMT Subject: CN=684e0672-8b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ca:3b:c2:cd:48:b6:ca:a4:b2:0d:4c:26:13: 05:31:87:f7:e6:51:51:f8:cb:27:90:1b:77:39:a4: c4:57:64:54:4e:9d:3f:ed:ca:74:b3:aa:82:b7:18: 4b:f6:13:1a:94:42:87:23:d7:17:14:32:e9:f9:a1: f7:7d:6e:6a:05:0d:40:41:9e:60:59:51:bb:15:19: 7c:ed:b0:80:d6:58:57:c2:a0:8a:7f:94:15:00:2b: 0f:e9:9f:41:d9:83:a4:77:dc:24:3f:ec:64:9c:15: 9f:79:7f:13:d1:c2:b5:16:a5:6d:c4:3f:6c:22:e4: f6:db:35:e5:b5:3a:a9:74:08:92:77:eb:e9:b0:4b: eb:ad:8e:94:e2:b0:a7:2f:e1:82:b9:9f:78:28:4e: 22:ff:ac:8a:0b:b1:77:3e:99:bc:c9:c4:00:35:07: f9:48:af:5b:5c:31:76:ce:ea:34:35:58:1a:59:f4: 11:01:9c:69:35:08:cd:9c:80:2a:b4:2e:c0:62:1d: 1d:81:fc:e5:02:91:c3:6b:25:6e:0b:cd:ab:fb:57: 0e:0a:8c:83:bb:bd:3d:c2:dc:99:d1:dd:18:61:a6: 66:f6:93:5f:bf:8e:c9:d7:b5:f8:af:14:0c:ca:9f: 0e:ab:00:41:c3:37:6b:0c:d7:71:7e:17:70:8e:9e: 01:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7C:84:10:95:13:CC:0E:D8:27:D9:5A:1E:C8:3C:FF:86:73:7C:1B X509v3 Authority Key Identifier: keyid:5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:66:96:ad:37:42:1f:2d:ca:7b:96:35:0a:8f:9a:14:da:25: 92:36:be:7a:4f:74:66:7d:58:e1:9a:3d:ef:37:30:d4:6d:54: 68:87:72:f4:f5:3f:40:45:b5:3f:ef:da:31:72:97:73:6c:f3: c5:6e:e4:0f:66:26:a4:35:1d:27:79:69:d3:7d:13:c0:cd:42: b3:fd:ab:7c:6e:34:61:2d:1e:da:41:ac:54:26:71:5d:b6:37: 25:ef:64:9b:03:06:6e:6a:20:aa:78:36:e2:9b:40:84:65:fe: ac:23:9f:78:e4:9f:3c:de:03:ab:6a:b9:dc:c8:ca:2c:1d:73: 5b:cf:28:90:85:3b:4a:af:84:89:0c:50:19:eb:9b:e6:3f:9c: 18:fc:03:90:0f:5e:fa:bd:9c:e8:4b:9e:2f:76:62:b2:36:40: df:ce:0a:0e:0b:34:69:7c:47:b1:9f:04:b2:9e:8a:51:dd:66: d7:27:42:03:24:ab:57:70:01:22:e9:a4:dc:fc:44:5f:9a:6b: d2:54:8f:5e:ee:c9:83:f7:f5:d2:d8:df:ba:e4:a2:cd:fe:66: e0:c7:e6:aa:f6:9a:79:e0:82:d8:69:6e:2b:b3:7a:42:2e:12: 1b:fe:da:cc:bc:26:13:64:0b:57:ff:6e:f5:63:18:3f:22:38: b0:27:cc:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUzRkIxMTAvBgNVBAUTKDVFQjA5OEVGNEQ1NjU1Q0M2NkI2QUY4MUMzQ0RFNDA2 MkQ4MDJGM0IwHhcNMjUwNjE0MjMzMjAyWhcNMjUwNjIxMjMzMjAyWjAYMRYwFAYD VQQDEw02ODRlMDY3Mi04YjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4co7ws1Itsqksg1MJhMFMYf35lFR+MsnkBt3OaTEV2RUTp0/7cp0s6qCtxhL 9hMalEKHI9cXFDLp+aH3fW5qBQ1AQZ5gWVG7FRl87bCA1lhXwqCKf5QVACsP6Z9B 2YOkd9wkP+xknBWfeX8T0cK1FqVtxD9sIuT22zXltTqpdAiSd+vpsEvrrY6U4rCn L+GCuZ94KE4i/6yKC7F3Ppm8ycQANQf5SK9bXDF2zuo0NVgaWfQRAZxpNQjNnIAq tC7AYh0dgfzlApHDayVuC82r+1cOCoyDu709wtyZ0d0YYaZm9pNfv47J17X4rxQM yp8OqwBBwzdrDNdxfhdwjp4BbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC18hBCV E8wO2CfZWh7IPP+Gc3wbMB8GA1UdIwQYMBaAFF6wmO9NVlXMZravgcPN5AYtgC87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTNGQi9GREQ0NEMyMjI2 NkUxMUVDQUMwOTdDN0JDNEY5QUUwMi9YckNZNzAxV1ZjeG10cS1Cdzgza0JpMkFM enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hyQ1k3MDFXVmN4bXRxLUJ3ODNrQmkyQUx6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTNGQi9GREQ0NEMyMjI2NkUxMUVDQUMwOTdDN0JDNEY5QUUwMi9YckNZNzAxV1Zj eG10cS1Cdzgza0JpMkFMenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBZpatN0IfLcp7ljUKj5oU2iWSNr56T3RmfVjhmj3vNzDUbVRoh3L0 9T9ARbU/79oxcpdzbPPFbuQPZiakNR0neWnTfRPAzUKz/at8bjRhLR7aQaxUJnFd tjcl72SbAwZuaiCqeDbim0CEZf6sI5945J883gOrarncyMosHXNbzyiQhTtKr4SJ DFAZ65vmP5wY/AOQD176vZzoS54vdmKyNkDfzgoOCzRpfEexnwSynopR3WbXJ0ID JKtXcAEi6aTc/ERfmmvSVI9e7smD9/XS2N+65KLN/mbgx+aq9pp54ILYaW4rs3pC LhIb/trMvCYTZAtX/271Yxg/IjiwJ8xY -----END CERTIFICATE-----Generated at Sun Jun 15 09:49:41 2025 by rpki-client