$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft File: xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json) Hash identifier: /Y+BlIpVydic0Pfh84642i4kzL9rjtDWIgq00gsz6NI= Subject key identifier: 4D:3B:08:59:D0:7C:9C:51:61:CA:39:A0:2B:B9:B1:62:AC:43:A7:5F Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 Certificate issuer: /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft Manifest number: 34A3 Signing time: Sat 31 May 2025 14:19:33 +0000 Manifest this update: Sat 31 May 2025 14:19:33 +0000 Manifest next update: Sat 07 Jun 2025 14:19:33 +0000 Files and hashes: 1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: ApvvtNx2Vvn0gulmT0vDXwoly2Ap0ISRxig2EmQeptw=) 2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: PJCdta/4Q6f57KQKAkTotBkGcFV1WNt4V36v9eyDoQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Validity Not Before: May 31 14:19:33 2025 GMT Not After : Jun 7 14:19:33 2025 GMT Subject: CN=683b0ff5-92bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:b5:36:c8:89:4c:70:3b:df:e1:dd:59:d3: 1c:7f:01:a6:72:e8:04:8f:7e:34:91:a1:c3:c8:53: 89:ec:7c:c2:22:d7:37:28:d7:1f:5f:35:6a:b1:48: d5:fc:56:f1:69:d2:95:ce:6c:a7:38:b2:93:04:f6: 59:ae:b2:75:e8:c5:7a:67:05:5c:dc:26:42:5e:b9: c7:85:51:8c:b8:53:5f:6c:34:36:c3:cb:64:23:da: e3:05:de:7c:b3:54:8b:2d:f6:2c:43:69:70:6d:57: 2f:6f:8e:2a:e5:3d:50:90:4e:87:b4:08:cd:21:6b: 64:cd:3b:78:74:0e:80:9d:fa:57:19:c2:4b:6c:40: 2b:c4:1d:22:d4:d4:a9:75:b5:26:a9:5e:3a:38:4e: c8:ab:fb:2c:9f:df:6b:f1:bf:9a:9c:5e:34:2b:d3: 0a:10:77:5e:0d:a0:0e:fa:c4:dd:a2:20:ff:c0:b0: 34:b4:92:ef:26:2f:58:e3:fc:e1:c6:49:8e:db:8e: 89:3a:11:2c:ab:e1:97:62:37:ec:b4:94:66:f0:2d: a6:4d:34:36:fd:24:ea:80:31:2f:db:11:c7:3a:1f: 1e:2c:e1:8a:01:49:7e:33:f1:34:7c:66:ca:cc:c7: 2a:04:96:e1:bf:5e:58:c7:c0:b8:27:90:f4:38:69: f8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3B:08:59:D0:7C:9C:51:61:CA:39:A0:2B:B9:B1:62:AC:43:A7:5F X509v3 Authority Key Identifier: keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:95:ae:f8:07:26:29:05:27:d8:d6:45:b4:46:6e:f8:48:79: 7a:41:9c:ce:23:92:9c:32:96:4b:7c:f5:3f:10:dc:41:38:58: 04:d5:6e:2e:fc:1b:8b:17:20:99:43:35:fc:eb:9d:cd:1c:40: 1a:0b:45:2b:f4:fd:c8:ca:76:52:b1:c0:39:7d:f4:0f:e7:ad: 45:e4:11:fb:6e:7c:55:6b:56:8a:7b:0e:54:59:bd:af:66:c3: 68:c6:a5:33:c5:a7:f5:90:61:d0:2f:75:54:9e:7e:df:e8:15: ec:85:6b:f2:19:e9:a3:1c:72:39:bc:20:32:60:bd:7c:63:29: 39:7a:0c:d8:d6:76:6e:ce:31:d8:3a:d8:76:9d:28:7a:e1:48: 3d:74:68:3c:3c:9f:9b:14:fd:d9:18:04:8f:51:87:3f:6e:34: f2:f9:7b:db:4f:be:6e:9b:3e:c1:c4:d6:d7:97:93:6b:51:b3: 49:0a:10:5a:a1:1e:80:e9:57:91:9e:0a:0c:05:60:bc:f9:41: b7:d5:82:bb:da:22:5f:80:17:21:8a:c4:37:7e:03:c7:8e:f8: 5e:a5:a8:d4:4b:12:33:1d:04:65:e1:c8:a8:94:2f:3e:24:0a: 63:8e:1b:48:b6:23:8d:80:29:83:ed:42:7f:14:e1:ec:79:3e: 01:66:9a:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OTAxMTAvBgNVBAUTKEM0MEVCNzgxNjQ1MTg3NTQ4NkRBNjQzRjhGOTM2MUI3 N0RGQjIxQTMwHhcNMjUwNTMxMTQxOTMzWhcNMjUwNjA3MTQxOTMzWjAYMRYwFAYD VQQDEw02ODNiMGZmNS05MmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLe1NsiJTHA73+HdWdMcfwGmcugEj340kaHDyFOJ7HzCItc3KNcfXzVqsUjV /FbxadKVzmynOLKTBPZZrrJ16MV6ZwVc3CZCXrnHhVGMuFNfbDQ2w8tkI9rjBd58 s1SLLfYsQ2lwbVcvb44q5T1QkE6HtAjNIWtkzTt4dA6AnfpXGcJLbEArxB0i1NSp dbUmqV46OE7Iq/ssn99r8b+anF40K9MKEHdeDaAO+sTdoiD/wLA0tJLvJi9Y4/zh xkmO246JOhEsq+GXYjfstJRm8C2mTTQ2/STqgDEv2xHHOh8eLOGKAUl+M/E0fGbK zMcqBJbhv15Yx8C4J5D0OGn4qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE07CFnQ fJxRYco5oCu5sWKsQ6dfMB8GA1UdIwQYMBaAFMQOt4FkUYdUhtpkP4+TYbd9+yGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5MC9GQzQ0QjM4QTFE NzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgxU0cybVFfajVOaHQzMzdJ YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hBNjNnV1JSaDFTRzJtUV9qNU5odDMzN0lhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5MC9GQzQ0QjM4QTFENzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgx U0cybVFfajVOaHQzMzdJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLla74ByYpBSfY1kW0Rm74SHl6QZzOI5KcMpZLfPU/ENxBOFgE1W4u /BuLFyCZQzX8653NHEAaC0Ur9P3IynZSscA5ffQP561F5BH7bnxVa1aKew5UWb2v ZsNoxqUzxaf1kGHQL3VUnn7f6BXshWvyGemjHHI5vCAyYL18Yyk5egzY1nZuzjHY Oth2nSh64Ug9dGg8PJ+bFP3ZGASPUYc/bjTy+XvbT75umz7BxNbXl5NrUbNJChBa oR6A6VeRngoMBWC8+UG31YK72iJfgBchisQ3fgPHjvhepajUSxIzHQRl4ciolC8+ JApjjhtItiONgCmD7UJ/FOHseT4BZpqP -----END CERTIFICATE-----Generated at Sat May 31 17:17:35 2025 by rpki-client