$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft File: xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json) Hash identifier: JACAS7CGJ7KyVc+AcZqIH4Q6nRMoIs30nJr4IvMpiFY= Subject key identifier: 9A:88:C5:B6:C3:C3:EB:6A:3D:26:65:A8:07:81:FD:D1:D8:0A:9E:96 Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 Certificate issuer: /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft Manifest number: 6E Signing time: Sun 01 Jun 2025 04:27:42 +0000 Manifest this update: Sun 01 Jun 2025 04:27:41 +0000 Manifest next update: Sun 08 Jun 2025 04:27:41 +0000 Files and hashes: 1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: OvacQvxgbgwPXL39CRN5DK419nVlnUUlQxT0PT0q8rU=) 2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: xY5rRYGsWrcsy57HxUo/DUZymmQ+QbhnmZvTvm4JJxQ=) 3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: 3NBZi9t73NGUqewcrwzUwAEjzkPNxuY/EA9dZDJA11Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Validity Not Before: Jun 1 04:27:41 2025 GMT Not After : Jun 8 04:27:41 2025 GMT Subject: CN=683bd6be-58fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:98:b1:2d:b4:18:75:46:a4:00:4c:81:f5: 80:27:8d:e8:79:c8:15:9a:8c:b8:7d:59:e4:9d:71: 27:9d:ec:47:bf:3f:70:b3:af:da:ee:0c:0a:41:d0: d9:21:a0:95:ff:39:07:c0:39:56:ce:68:42:09:d8: 44:6c:a8:5f:d8:88:2b:87:d9:68:aa:22:02:dc:98: 3b:c3:4b:b2:51:4c:28:95:3c:ed:86:e6:99:8b:89: 83:26:80:d6:1e:96:51:6b:4d:3a:99:39:ee:4b:38: 00:b0:cc:e1:0a:c2:3c:d2:70:69:ab:2a:f8:27:3c: 3b:1e:fe:ba:9d:3c:3a:da:98:46:e1:f1:6e:3c:49: 3d:2b:e8:e4:c6:e7:c7:e9:e0:70:81:f0:9b:7e:6d: ed:e6:7f:00:98:9d:25:4a:99:8d:9d:80:59:de:5a: 73:cb:d9:ed:3c:13:58:6f:5a:7b:33:66:eb:f3:5b: 65:6d:78:a2:ae:be:96:72:b5:1d:19:4a:59:b8:24: f9:63:65:d2:1c:f0:e5:c7:7e:95:82:9c:eb:82:21: 8f:24:c6:1c:44:8c:ad:bc:0c:85:56:70:07:83:62: 92:a0:27:a0:ee:55:ac:9c:18:c3:1a:2e:04:09:79: 1e:ac:6b:7c:d0:34:29:c0:0d:3e:7b:ce:28:6b:e4: 27:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:88:C5:B6:C3:C3:EB:6A:3D:26:65:A8:07:81:FD:D1:D8:0A:9E:96 X509v3 Authority Key Identifier: keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:99:71:ff:a9:12:1b:cf:58:a9:ff:f6:a8:78:6e:e8:2c:a7: 83:5f:c5:74:81:59:23:fa:b1:b2:01:5e:1d:e0:36:54:fc:03: 97:82:26:59:83:e4:da:f2:07:98:d3:ec:17:1e:01:0d:09:3b: e9:da:61:09:dc:54:31:99:30:ee:44:28:a8:b4:19:c7:b1:a3: 2c:42:83:ce:29:21:08:aa:02:fa:3e:8a:17:a2:94:36:75:9e: fa:f4:d8:c0:b0:c9:b7:55:c7:b1:0b:59:68:ea:f7:53:c8:92: b4:7f:93:83:0c:9d:46:6c:1c:7a:6e:8e:0d:f7:fd:5f:c8:82: 2d:d8:21:c0:4e:95:a9:12:90:09:d6:4d:36:46:e4:66:e3:15: a8:aa:03:15:4b:61:46:fd:98:0f:5f:56:9e:7b:39:1b:6a:a3: d7:42:3d:08:c5:24:84:f6:b0:a3:44:26:62:e9:35:c2:dd:e1: 6b:fc:13:eb:33:83:5e:b0:b4:d4:a7:26:c4:80:cc:e6:a9:33: 6b:9e:25:6e:15:42:f7:f4:db:a8:e7:96:12:a5:77:7d:64:f6: d6:76:bc:91:c0:c9:e1:f3:45:2b:47:41:27:64:27:2c:59:10: ed:ec:f2:46:60:0b:bc:8c:56:cc:bb:64:35:b6:3f:cc:85:aa: ba:65:a3:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkI4NTExMC8GA1UEBRMoQzU1NjRERUMxMDE2NjNCRjQzRDNGMkUzNDAzOTRDMDA3 NjZBNjNFMzAeFw0yNTA2MDEwNDI3NDFaFw0yNTA2MDgwNDI3NDFaMBgxFjAUBgNV BAMTDTY4M2JkNmJlLTU4ZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdwpixLbQYdUakAEyB9YAnjeh5yBWajLh9WeSdcSed7Ee/P3Czr9ruDApB0Nkh oJX/OQfAOVbOaEIJ2ERsqF/YiCuH2WiqIgLcmDvDS7JRTCiVPO2G5pmLiYMmgNYe llFrTTqZOe5LOACwzOEKwjzScGmrKvgnPDse/rqdPDramEbh8W48ST0r6OTG58fp 4HCB8Jt+be3mfwCYnSVKmY2dgFneWnPL2e08E1hvWnszZuvzW2VteKKuvpZytR0Z Slm4JPljZdIc8OXHfpWCnOuCIY8kxhxEjK28DIVWcAeDYpKgJ6DuVaycGMMaLgQJ eR6sa3zQNCnADT57zihr5CdDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmojFtsPD 62o9JmWoB4H90dgKnpYwHwYDVR0jBBgwFoAUxVZN7BAWY79D0/LjQDlMAHZqY+Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyQjg1L0NDQkJBQkVBOUY2 NDExRUZBOTMxNDczQ0M0RjlBRTAyL3hWWk43QkFXWTc5RDBfTGpRRGxNQUhacVkt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveFZaTjdCQVdZNzlEMF9MalFEbE1BSFpxWS1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy Qjg1L0NDQkJBQkVBOUY2NDExRUZBOTMxNDczQ0M0RjlBRTAyL3hWWk43QkFXWTc5 RDBfTGpRRGxNQUhacVktTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGOZcf+pEhvPWKn/9qh4bugsp4NfxXSBWSP6sbIBXh3gNlT8A5eCJlmD 5NryB5jT7BceAQ0JO+naYQncVDGZMO5EKKi0GcexoyxCg84pIQiqAvo+iheilDZ1 nvr02MCwybdVx7ELWWjq91PIkrR/k4MMnUZsHHpujg33/V/Igi3YIcBOlakSkAnW TTZG5GbjFaiqAxVLYUb9mA9fVp57ORtqo9dCPQjFJIT2sKNEJmLpNcLd4Wv8E+sz g16wtNSnJsSAzOapM2ueJW4VQvf026jnlhKld31k9tZ2vJHAyeHzRStHQSdkJyxZ EO3s8kZgC7yMVsy7ZDW2P8yFqrployk= -----END CERTIFICATE-----Generated at Mon Jun 2 19:49:36 2025 by rpki-client