$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: PzSlTMyDZrJIJMjWhhszVjnrMfpDX+Q+IQiCoX2ZqyQ= Subject key identifier: 19:1A:83:3B:FB:1B:BB:1C:F2:DC:C7:C7:04:74:3A:23:67:7E:E6:88 Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 0786 Signing time: Fri 30 May 2025 21:38:21 +0000 Manifest this update: Fri 30 May 2025 21:38:21 +0000 Manifest next update: Fri 06 Jun 2025 21:38:21 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: PfblKH1BWf43K9JxesZUOXrweHHxEdwlYPH0AhgXsaE=) 2: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: 2EESpGE96F3IVjtLV41daSR2L6O8KHOUeR6PY1Lrgz4=) 3: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: 0Y4V+EWkL3FbcoWlsNiGkR+IyKHT+HocUV9zzfnIVl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Validity Not Before: May 30 21:38:21 2025 GMT Not After : Jun 6 21:38:21 2025 GMT Subject: CN=683a254d-8b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:74:be:0a:d1:43:9e:a4:31:05:75:6e:8f:05: 99:5b:55:10:38:d6:65:5e:95:41:c3:e5:b8:39:df: cb:2c:54:77:86:4c:bc:48:58:85:11:e3:cf:bd:29: 58:91:77:5e:82:08:b4:f4:f6:78:01:af:48:d7:82: ca:82:35:a8:fb:ed:96:0b:9c:63:b6:be:9d:09:bc: 18:b8:1e:1e:ad:96:13:09:20:4b:10:bb:27:1e:71: 2c:7f:41:30:6d:83:7b:f7:0e:4e:cb:b9:51:5e:f8: 27:17:07:86:8a:78:50:a1:d8:92:55:e6:52:3d:db: 6d:95:1f:4d:30:4d:e8:66:d6:73:28:79:e5:0c:64: 86:68:fb:81:1f:50:b2:c6:e7:d6:85:80:3a:5f:68: cb:59:95:46:3f:48:21:e0:87:c3:c5:67:00:71:77: d8:66:7a:d2:0d:06:38:34:27:ea:f9:d4:0c:a5:2f: 9f:4e:03:d1:f3:42:c4:c9:37:cd:72:6b:d3:4b:5e: 9b:d1:02:81:0e:48:cd:f0:56:05:81:0b:1a:fb:14: 94:b8:5c:46:80:9c:f7:89:72:31:32:5d:ea:df:37: e5:d3:79:f0:8c:f4:ae:07:55:79:33:17:5c:5c:c9: ab:56:5c:49:cb:2c:8b:b6:19:b8:32:ef:00:71:41: 4c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1A:83:3B:FB:1B:BB:1C:F2:DC:C7:C7:04:74:3A:23:67:7E:E6:88 X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:9f:fd:f0:ec:03:74:cf:5f:26:6b:08:32:3c:b7:43:d3:62: 7d:a1:fa:e6:f5:cb:4b:7d:b5:1c:16:93:df:4f:e2:a0:e1:84: a4:b9:cf:fe:d1:8c:9f:76:0b:93:ad:b5:b7:e9:49:a9:01:e6: fc:18:2d:78:ef:72:11:4f:ee:08:e5:d7:c9:8b:81:16:51:7c: 34:d2:18:46:ee:5a:ad:b8:27:87:2b:c8:e8:44:8b:ae:dd:cf: 0d:21:79:3b:62:22:07:2f:41:d5:16:e9:cc:e3:3e:29:06:d3: 2f:ce:f2:67:5c:57:c7:47:d5:67:60:95:7d:d6:ee:70:43:4b: 70:d8:d5:13:77:22:1e:d7:aa:f8:f5:46:30:30:fe:10:71:37: 61:e7:f8:c0:2b:fa:f1:8f:31:41:82:de:fd:1b:11:79:e8:f4: 90:59:d6:90:ed:a0:55:df:30:4c:7e:1b:24:6f:05:3a:e6:09: 86:d8:ac:68:20:31:e6:25:16:39:59:d0:db:12:08:fd:ef:7e: 39:ed:ea:3a:34:8c:cb:65:03:0e:a4:1f:fe:fb:24:8c:78:27: ce:17:43:cd:33:4e:75:32:54:6f:1f:91:6f:5c:21:88:43:c3: 40:34:c9:28:8c:9f:03:75:bf:3d:00:2e:af:b7:5f:90:e7:b6: 34:e8:84:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUwNTMwMjEzODIxWhcNMjUwNjA2MjEzODIxWjAYMRYwFAYD VQQDEw02ODNhMjU0ZC04YjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9nS+CtFDnqQxBXVujwWZW1UQONZlXpVBw+W4Od/LLFR3hky8SFiFEePPvSlY kXdeggi09PZ4Aa9I14LKgjWo++2WC5xjtr6dCbwYuB4erZYTCSBLELsnHnEsf0Ew bYN79w5Oy7lRXvgnFweGinhQodiSVeZSPdttlR9NME3oZtZzKHnlDGSGaPuBH1Cy xufWhYA6X2jLWZVGP0gh4IfDxWcAcXfYZnrSDQY4NCfq+dQMpS+fTgPR80LEyTfN cmvTS16b0QKBDkjN8FYFgQsa+xSUuFxGgJz3iXIxMl3q3zfl03nwjPSuB1V5Mxdc XMmrVlxJyyyLthm4Mu8AcUFMEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkagzv7 G7sc8tzHxwR0OiNnfuaIMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmn/3w7AN0z18mawgyPLdD02J9ofrm9ctLfbUcFpPfT+Kg4YSkuc/+ 0YyfdguTrbW36UmpAeb8GC1473IRT+4I5dfJi4EWUXw00hhG7lqtuCeHK8joRIuu 3c8NIXk7YiIHL0HVFunM4z4pBtMvzvJnXFfHR9VnYJV91u5wQ0tw2NUTdyIe16r4 9UYwMP4QcTdh5/jAK/rxjzFBgt79GxF56PSQWdaQ7aBV3zBMfhskbwU65gmG2Kxo IDHmJRY5WdDbEgj973457eo6NIzLZQMOpB/++ySMeCfOF0PNM051MlRvH5FvXCGI Q8NANMkojJ8Ddb89AC6vt1+Q57Y06IRF -----END CERTIFICATE-----Generated at Sat May 31 17:22:08 2025 by rpki-client