$ rpki-client -vvf rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft File: xq-SXz6kP06O56MUIYIWk7Gt9qE.mft (raw, json) Hash identifier: 8Ulek/4MLWPMlkksRYx1zU+s9AwbwCorKNhVyNmLm48= Subject key identifier: 5E:DB:F0:3D:A0:8B:10:89:B9:E6:04:1A:E6:A0:3F:E0:FC:55:5C:93 Authority key identifier: C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1 Certificate issuer: /CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft Manifest number: 0676 Signing time: Fri 30 May 2025 22:32:47 +0000 Manifest this update: Fri 30 May 2025 22:32:47 +0000 Manifest next update: Fri 06 Jun 2025 22:32:47 +0000 Files and hashes: 1: xq-SXz6kP06O56MUIYIWk7Gt9qE.crl (hash: ORpH05aHrIxF6B4GjqiittXEZCWeIuMIAUFhP2AJPXM=) 2: 1A20AAF27BD311EBA6617987C4F9AE02.roa (hash: ayNr4tR/Sfu0YrCAQZrJZu7BfQ9IzQFCs/VABD0dmLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E807, serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1 Validity Not Before: May 30 22:32:47 2025 GMT Not After : Jun 6 22:32:47 2025 GMT Subject: CN=683a320f-c6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4e:90:25:64:50:44:6f:dd:f3:37:3c:cc:3d: 81:1a:2a:60:ad:d6:6d:2d:63:62:cd:57:b5:07:01: f7:20:8c:90:d4:6a:c7:47:92:fd:d5:e7:e8:6e:5a: 45:8c:ef:26:ad:46:a4:26:0b:06:c6:97:46:6e:cf: 7d:18:b5:4d:48:5f:12:22:2c:7b:df:70:ed:d2:b1: 71:ad:f3:45:8e:b1:b2:8c:6d:2f:82:54:5c:a9:fb: fc:69:d8:3a:fb:0e:22:ce:75:78:ec:6f:e5:23:c8: 24:78:b0:45:db:f2:60:14:a3:00:3d:1c:d8:a0:01: e8:d4:65:c2:2b:8a:a1:02:68:c3:8e:a3:7a:ce:e7: 0b:55:c1:72:0d:c6:61:5c:4b:9b:b2:c1:c9:de:c8: 66:31:c4:35:f0:b4:dc:20:70:8e:49:d1:c5:53:09: 24:c5:63:25:63:fe:73:ba:a2:28:0f:9b:af:54:4d: c0:02:9b:bb:aa:32:ec:bf:6e:38:62:d4:a4:4d:e3: 4a:bd:fd:57:c1:9b:c9:51:98:d1:e1:4e:60:d7:7e: 05:50:91:c7:af:da:69:1b:94:a1:4a:b7:e6:65:80: 68:2b:79:b0:9d:df:8b:19:b3:a3:83:7f:29:8d:da: bc:79:34:81:ec:23:7c:0f:04:1c:8f:0b:69:6c:11: 22:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DB:F0:3D:A0:8B:10:89:B9:E6:04:1A:E6:A0:3F:E0:FC:55:5C:93 X509v3 Authority Key Identifier: keyid:C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:29:9d:f8:84:ff:3e:41:75:be:68:34:75:ae:c2:ab:77:13: b9:5f:a3:55:df:36:a6:98:68:7b:ea:31:cc:89:2f:74:6c:6b: eb:52:aa:58:5e:22:82:20:c9:a9:c6:86:42:2c:8c:8a:2a:89: 90:63:da:9b:00:e7:a5:9b:54:14:7d:b2:78:94:ea:47:10:72: fb:9d:10:f3:5d:ba:a5:25:6b:41:1c:39:8a:d7:4d:1f:34:92: 7b:0e:4b:98:c4:99:b5:7c:9e:2c:ba:b9:03:79:3f:e6:44:01: ac:2d:78:ca:e0:db:bb:15:f5:df:41:ae:8a:7b:b6:6c:e4:f5: 85:43:0b:7e:d2:1f:3f:64:75:2d:e7:57:e8:79:de:dd:bd:f2: 20:05:e2:07:96:11:4c:92:cb:a8:93:04:30:4a:00:b6:06:09: 6c:59:93:61:f8:7d:c8:92:8c:54:e5:9a:47:9e:92:e9:f2:0f: 03:c1:d6:c2:6b:e6:5a:ac:b3:19:71:b8:69:d5:6a:a2:bb:6f: 6b:59:84:dd:25:05:d2:de:4c:64:93:58:14:5e:61:db:06:ba: 33:87:7e:b9:20:b2:7d:c9:92:78:5c:36:2d:e2:f8:59:03:a6: f5:f7:6c:3d:60:d2:b4:04:15:27:3a:f1:be:19:7d:7d:b1:c2: ba:e7:c1:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU4MDcxMTAvBgNVBAUTKEM2QUY5MjVGM0VBNDNGNEU4RUU3QTMxNDIxODIxNjkz QjFBREY2QTEwHhcNMjUwNTMwMjIzMjQ3WhcNMjUwNjA2MjIzMjQ3WjAYMRYwFAYD VQQDEw02ODNhMzIwZi1jNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApE6QJWRQRG/d8zc8zD2BGipgrdZtLWNizVe1BwH3IIyQ1GrHR5L91efoblpF jO8mrUakJgsGxpdGbs99GLVNSF8SIix733Dt0rFxrfNFjrGyjG0vglRcqfv8adg6 +w4iznV47G/lI8gkeLBF2/JgFKMAPRzYoAHo1GXCK4qhAmjDjqN6zucLVcFyDcZh XEubssHJ3shmMcQ18LTcIHCOSdHFUwkkxWMlY/5zuqIoD5uvVE3AApu7qjLsv244 YtSkTeNKvf1XwZvJUZjR4U5g134FUJHHr9ppG5ShSrfmZYBoK3mwnd+LGbOjg38p jdq8eTSB7CN8DwQcjwtpbBEihwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7b8D2g ixCJueYEGuagP+D8VVyTMB8GA1UdIwQYMBaAFMavkl8+pD9OjuejFCGCFpOxrfah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTgwNy8yNjk2RjZDNjdC MzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1AwNk81Nk1VSVlJV2s3R3Q5 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxLVNYejZrUDA2TzU2TVVJWUlXazdHdDlxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTgwNy8yNjk2RjZDNjdCMzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1Aw Nk81Nk1VSVlJV2s3R3Q5cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhKZ34hP8+QXW+aDR1rsKrdxO5X6NV3zammGh76jHMiS90bGvrUqpY XiKCIMmpxoZCLIyKKomQY9qbAOelm1QUfbJ4lOpHEHL7nRDzXbqlJWtBHDmK100f NJJ7DkuYxJm1fJ4surkDeT/mRAGsLXjK4Nu7FfXfQa6Ke7Zs5PWFQwt+0h8/ZHUt 51foed7dvfIgBeIHlhFMksuokwQwSgC2BglsWZNh+H3IkoxU5ZpHnpLp8g8DwdbC a+ZarLMZcbhp1Wqiu29rWYTdJQXS3kxkk1gUXmHbBrozh365ILJ9yZJ4XDYt4vhZ A6b192w9YNK0BBUnOvG+GX19scK658H8 -----END CERTIFICATE-----Generated at Sat May 31 17:58:45 2025 by rpki-client