$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json) Hash identifier: qrRSFY+DUpZwIl1VNiPSmy+AX8TOMCtaEwzyi2ETXto= Subject key identifier: 64:B1:47:48:F0:E8:7F:B2:32:F7:9D:3A:32:83:1D:6E:25:06:0A:46 Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Certificate serial: 233A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft Manifest number: 230C Signing time: Sat 14 Jun 2025 15:49:11 +0000 Manifest this update: Sat 14 Jun 2025 15:49:10 +0000 Manifest next update: Sat 21 Jun 2025 15:49:10 +0000 Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: o1DjNgbbbpwsKEQr3St+8fBy1qJO2DOFK2XMhDmckik=) 2: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: lXOFb0YJQZdFFX90oDPgUqBGFkT5p8wJoFtkhJ/Uo9A=) 3: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: p5KqoJW3tDR/PENRBzb6MlrbIycp47ssNfWx91ehau4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9018 (0x233a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Validity Not Before: Jun 14 15:49:10 2025 GMT Not After : Jun 21 15:49:10 2025 GMT Subject: CN=684d99f7-c3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:02:94:82:03:7a:2d:45:a2:ee:6a:79:b6:b8: e6:1c:a9:aa:a6:28:fb:f3:17:fe:81:df:ed:1f:6b: ea:46:66:31:34:e2:56:76:62:a3:f6:99:35:e9:ab: c8:f5:6f:c6:90:8a:52:38:1c:96:db:80:f6:38:93: b5:69:92:fe:07:c4:6b:d4:32:8d:61:e5:1d:8b:6a: 47:6d:dc:dd:3b:cd:bc:13:2a:a4:aa:7a:f9:52:68: 72:f5:94:d8:67:96:87:1e:84:a5:01:b9:e9:ed:69: c9:07:d5:58:70:ae:57:3f:17:a0:6d:27:2c:87:d0: e4:c8:3f:ea:2c:e0:5c:73:71:91:c5:e0:45:56:ab: 40:73:8f:12:d7:ac:3c:b4:2b:41:9c:eb:83:6f:a5: c4:ab:81:76:5e:d5:00:0a:17:e9:bc:cc:42:0e:30: 3b:ba:4f:15:ac:17:8f:c7:dc:07:18:6b:e7:ed:fe: 07:8e:2f:67:53:cb:da:5e:12:7a:64:49:ae:e6:99: 05:e2:1a:dd:ce:01:8b:bb:5f:1f:30:c6:23:a9:ff: 8e:e4:3b:6d:aa:32:e2:ac:c6:5a:56:81:33:5a:2c: d5:5b:0b:39:58:22:27:e0:3e:74:d0:f7:1a:bf:dc: 07:d9:90:c9:34:2f:c9:14:8d:b5:05:74:fb:3b:ce: 82:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B1:47:48:F0:E8:7F:B2:32:F7:9D:3A:32:83:1D:6E:25:06:0A:46 X509v3 Authority Key Identifier: keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0e:3a:61:33:0d:ad:5e:b2:b6:5e:7b:9c:10:66:b6:dd:af: af:1d:db:bd:75:d0:9d:cf:ac:4f:14:1c:04:c7:fb:14:cf:4d: 02:74:0c:86:1b:cd:51:95:a9:07:1f:e6:6b:67:c5:58:91:a8: 3c:82:4f:d7:53:00:52:f0:ac:92:25:3e:fe:5e:96:01:e8:4b: 01:af:50:73:9f:77:f4:75:2d:46:f4:a7:7c:14:40:9c:ec:d5: d1:36:93:f2:aa:8b:fe:b7:a2:b2:0c:a8:43:3d:ea:de:67:36: 62:83:db:68:1a:4e:5a:cb:7a:e1:a3:7f:bb:16:3a:b3:54:50: fb:93:03:54:d6:27:24:39:ba:5d:6e:55:a6:1c:cf:1f:14:e3: 06:65:ea:dd:02:06:26:5b:af:f3:0c:72:b7:ff:b8:e1:92:f2: 38:48:62:42:8f:9e:ae:3b:8e:30:da:ae:12:b3:c6:38:35:21: 67:22:f0:aa:1f:4f:14:57:e8:cc:2c:03:d1:4f:33:d9:65:54: 1c:77:1f:d2:4d:d1:99:ab:5d:f0:1c:3b:8d:41:6f:84:5d:24: 88:5a:29:8f:e4:e4:49:0b:d0:e3:37:4e:f8:2c:53:2a:bf:8d: 81:ec:7f:76:e2:ae:91:72:7f:75:ea:d9:fc:24:61:e1:4e:50: 8d:8e:54:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1 QkQ5NDFFNDAwHhcNMjUwNjE0MTU0OTEwWhcNMjUwNjIxMTU0OTEwWjAYMRYwFAYD VQQDEw02ODRkOTlmNy1jM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQKUggN6LUWi7mp5trjmHKmqpij78xf+gd/tH2vqRmYxNOJWdmKj9pk16avI 9W/GkIpSOByW24D2OJO1aZL+B8Rr1DKNYeUdi2pHbdzdO828Eyqkqnr5Umhy9ZTY Z5aHHoSlAbnp7WnJB9VYcK5XPxegbScsh9DkyD/qLOBcc3GRxeBFVqtAc48S16w8 tCtBnOuDb6XEq4F2XtUAChfpvMxCDjA7uk8VrBePx9wHGGvn7f4Hji9nU8vaXhJ6 ZEmu5pkF4hrdzgGLu18fMMYjqf+O5DttqjLirMZaVoEzWizVWws5WCIn4D500Pca v9wH2ZDJNC/JFI21BXT7O86CEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSxR0jw 6H+yMvedOjKDHW4lBgpGMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0 ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REZEMy8xRkQxQThCRTk0ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3Qz OWs1RUpKcG91VjFiMlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBODjphMw2tXrK2XnucEGa23a+vHdu9ddCdz6xPFBwEx/sUz00CdAyG G81RlakHH+ZrZ8VYkag8gk/XUwBS8KySJT7+XpYB6EsBr1Bzn3f0dS1G9Kd8FECc 7NXRNpPyqov+t6KyDKhDPereZzZig9toGk5ay3rho3+7FjqzVFD7kwNU1ickObpd blWmHM8fFOMGZerdAgYmW6/zDHK3/7jhkvI4SGJCj56uO44w2q4Ss8Y4NSFnIvCq H08UV+jMLAPRTzPZZVQcdx/STdGZq13wHDuNQW+EXSSIWimP5ORJC9DjN074LFMq v42B7H924q6Rcn916tn8JGHhTlCNjlSb -----END CERTIFICATE-----Generated at Mon Jun 16 15:32:51 2025 by rpki-client