$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json) Hash identifier: UqWlUg3OnU1D+Z970rA/pM3TW3GihaDoXHtZ1QMm0u8= Subject key identifier: 85:23:BE:B1:1D:E4:9B:E8:74:61:AE:D2:78:BE:DA:06:B6:1D:CB:03 Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft Manifest number: 013C Signing time: Sun 15 Jun 2025 03:37:04 +0000 Manifest this update: Sun 15 Jun 2025 03:37:04 +0000 Manifest next update: Sun 22 Jun 2025 03:37:04 +0000 Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: HyPsbwVdphblDM/sd62FPRhZSqEYet7BgAjmHNm1Iuw=) 2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: tBK54wCyQ2wcX6ZNsRYGZb85q/LNuJrcbm5n2EF4GsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Validity Not Before: Jun 15 03:37:04 2025 GMT Not After : Jun 22 03:37:04 2025 GMT Subject: CN=684e3fe0-2726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:87:6a:76:8c:34:36:6f:2a:51:2d:cd:aa: e4:3e:8b:f9:10:70:d2:29:25:c7:fe:04:f9:37:fa: cc:eb:a5:43:fe:22:04:1a:63:28:c2:37:30:5a:86: b8:85:c8:d4:8c:7e:78:0a:cf:7c:e5:cb:a9:63:a3: de:8e:e5:d6:2b:7c:a6:0e:a0:aa:b7:bf:4d:8e:c2: 35:07:bd:9f:e1:63:71:2a:73:c1:77:58:89:b6:d2: 20:af:db:2b:eb:9d:68:db:e4:7f:88:a5:2e:af:0b: 59:a0:0e:8a:15:94:a5:f4:8f:59:39:a4:91:16:3a: de:24:1c:ee:15:d5:af:12:d9:cc:73:74:d2:87:13: 49:a0:be:9f:30:8f:da:ea:99:fa:b7:6d:c3:9f:6a: c7:eb:9d:9b:3e:8d:e1:0e:0b:ff:39:ed:2b:ab:91: ee:6d:42:65:fe:26:8d:78:69:b4:7f:1c:f8:ca:f4: 53:19:7c:df:79:8a:f5:20:d9:f7:01:2c:ad:bd:8a: 1a:bc:a7:07:14:cc:36:f8:42:a3:e4:b7:8b:76:d0: b5:a2:a7:c8:72:3d:2e:fd:36:dd:b1:45:57:2f:8f: 9b:44:d0:c2:06:dc:de:9d:35:e3:54:be:f2:d6:7e: 4c:b8:f4:17:44:9c:ef:38:d8:d3:26:42:e3:9b:0e: 96:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:23:BE:B1:1D:E4:9B:E8:74:61:AE:D2:78:BE:DA:06:B6:1D:CB:03 X509v3 Authority Key Identifier: keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:06:a3:a8:25:c7:89:af:df:ea:fa:26:a6:71:53:3b:5e:ca: 23:ca:10:f6:b4:29:06:f6:a5:d2:21:18:7e:c7:f8:b5:77:9c: 93:a5:a0:08:b6:e5:3c:c6:f9:96:9e:49:0e:90:c5:85:b7:9e: 4e:f6:51:ca:ef:fd:37:59:ee:57:34:72:0f:86:99:b6:41:96: 3f:9f:be:6d:34:92:8f:3b:f1:7f:04:5b:2f:77:cd:7d:b0:41: c8:44:d3:50:e9:e9:e3:62:d0:97:47:ff:98:70:51:43:de:34: 61:44:da:cd:7f:d7:30:e2:6a:70:64:ff:b8:9f:29:57:d1:89: 4b:0c:73:20:f0:87:1c:fb:1d:85:ef:69:64:e0:21:e0:66:7f: 6a:ac:5d:7c:82:9b:0a:38:18:3f:23:54:97:41:68:35:e9:ee: 4c:68:14:d3:03:b3:10:0b:b8:bb:e9:cf:82:e1:e0:6f:d8:92: af:2b:ba:2a:61:78:93:22:1e:e9:81:47:e3:b4:11:e7:b9:9a: fa:fe:34:b3:76:b0:5f:8c:b2:4d:b1:1e:0d:ea:a0:3b:ca:73: 13:2d:47:4b:76:32:1f:14:1d:e5:d0:3a:54:09:ad:0d:4c:7d: 91:57:c0:40:4f:e8:7a:d4:80:7a:29:d5:30:0e:20:4f:56:c2: 90:d8:59:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY4ODQxMTAvBgNVBAUTKEM1RDQwOUZCNUQzQUE5NzNBOTUwQzlDMzFDQzMwMTU1 RjM0OTNGNjIwHhcNMjUwNjE1MDMzNzA0WhcNMjUwNjIyMDMzNzA0WjAYMRYwFAYD VQQDEw02ODRlM2ZlMC0yNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuveHanaMNDZvKlEtzarkPov5EHDSKSXH/gT5N/rM66VD/iIEGmMowjcwWoa4 hcjUjH54Cs985cupY6PejuXWK3ymDqCqt79NjsI1B72f4WNxKnPBd1iJttIgr9sr 651o2+R/iKUurwtZoA6KFZSl9I9ZOaSRFjreJBzuFdWvEtnMc3TShxNJoL6fMI/a 6pn6t23Dn2rH652bPo3hDgv/Oe0rq5HubUJl/iaNeGm0fxz4yvRTGXzfeYr1INn3 ASytvYoavKcHFMw2+EKj5LeLdtC1oqfIcj0u/TbdsUVXL4+bRNDCBtzenTXjVL7y 1n5MuPQXRJzvONjTJkLjmw6W1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUjvrEd 5JvodGGu0ni+2ga2HcsDMB8GA1UdIwQYMBaAFMXUCftdOqlzqVDJwxzDAVXzST9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjg4NC8yQTk1MDI1NjY5 NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFYT3BVTW5ESE1NQlZmTkpQ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hkUUotMTA2cVhPcFVNbkRITU1CVmZOSlAySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njg4NC8yQTk1MDI1NjY5NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFY T3BVTW5ESE1NQlZmTkpQMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIBqOoJceJr9/q+iamcVM7XsojyhD2tCkG9qXSIRh+x/i1d5yTpaAI tuU8xvmWnkkOkMWFt55O9lHK7/03We5XNHIPhpm2QZY/n75tNJKPO/F/BFsvd819 sEHIRNNQ6enjYtCXR/+YcFFD3jRhRNrNf9cw4mpwZP+4nylX0YlLDHMg8Icc+x2F 72lk4CHgZn9qrF18gpsKOBg/I1SXQWg16e5MaBTTA7MQC7i76c+C4eBv2JKvK7oq YXiTIh7pgUfjtBHnuZr6/jSzdrBfjLJNsR4N6qA7ynMTLUdLdjIfFB3l0DpUCa0N TH2RV8BAT+h61IB6KdUwDiBPVsKQ2Fkz -----END CERTIFICATE-----Generated at Sun Jun 15 10:09:46 2025 by rpki-client