$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft File: XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft (raw, json) Hash identifier: q5Qk6uijipDTjZD+Dr4MzvokFt7SkF3puDYVD5dQgEc= Subject key identifier: A9:68:D0:3F:7D:45:3C:5B:FE:6C:A7:57:8C:AE:D8:A8:04:67:AE:AC Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C Certificate issuer: /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft Manifest number: 13 Signing time: Mon 02 Jun 2025 17:54:04 +0000 Manifest this update: Mon 02 Jun 2025 17:54:03 +0000 Manifest next update: Mon 09 Jun 2025 17:54:03 +0000 Files and hashes: 1: XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl (hash: 6QU6n51nmic4qlmC/KFFQbUVqTJ8Gmka2W39eJBPQCY=) 2: D5271A183ADB11F0BC52A042C4F9AE02.roa (hash: Je+up3kY6qu1B3So3Vnq/xOYjMIPNymqMCzCxvb8aL4=) 3: 87087F00267E11F09183092AC4F9AE02.roa (hash: vPD3MBlV+VYxtTk5npGCIsRmwvlSAFp0uTh8dXUbHV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C Validity Not Before: Jun 2 17:54:03 2025 GMT Not After : Jun 9 17:54:03 2025 GMT Subject: CN=683de53b-eebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b7:13:4f:b1:9b:89:f4:82:1f:4f:31:13:18: 43:20:9f:aa:92:1b:74:f1:67:1c:18:48:85:1f:a7: 04:1d:54:c9:5a:ce:0f:d3:3b:01:e2:ca:3b:f5:5b: 44:83:c6:20:ad:04:4a:01:7b:eb:4e:38:b6:8a:3b: aa:15:fa:be:bd:dd:60:84:ae:d8:7e:4c:18:0a:a1: 0e:21:f4:e9:c1:97:7b:69:df:9e:04:da:c9:ea:d7: d1:e3:f6:87:e5:a6:81:3f:a5:83:b1:0f:bf:65:0f: d8:7a:4f:dd:cc:04:a7:84:e9:3e:e1:57:68:97:91: 70:e6:da:c7:a6:a1:0f:29:2c:2e:56:2e:2f:ab:fb: 6c:88:8f:75:67:43:be:25:a1:28:c3:4a:eb:21:87: ed:7c:9d:55:7b:8d:02:e3:17:4b:d7:e8:1b:06:0f: fb:8a:71:82:c9:fc:fb:06:06:03:81:46:1d:90:c3: f4:05:31:70:35:5e:86:7b:22:24:2b:ee:4e:c8:7e: ca:ce:99:0f:19:b2:13:db:3c:9a:a1:9d:61:dd:34: 35:19:06:01:c7:c4:c5:4e:02:5f:d3:73:ef:ef:e1: be:70:85:35:60:34:b9:25:85:2d:f5:b4:8b:d2:d7: 81:39:21:2a:12:63:37:33:85:40:3a:af:ae:22:34: c8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:68:D0:3F:7D:45:3C:5B:FE:6C:A7:57:8C:AE:D8:A8:04:67:AE:AC X509v3 Authority Key Identifier: keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:8d:05:31:36:de:67:a1:bd:b1:2f:18:59:7c:a6:bc:09:7f: 02:28:5f:00:cb:ce:32:85:20:a2:93:14:11:4b:0c:30:41:70: 62:a8:c5:9d:b7:a6:c9:69:a5:28:19:f0:34:1a:7f:de:a9:ef: 98:fa:33:ee:79:e3:ef:dd:44:7a:22:3f:1b:0f:23:18:3f:16: f9:e6:c0:b0:8c:36:44:5b:11:e9:30:3a:2a:74:5c:05:ce:cd: 4d:10:77:e6:2d:e3:34:7c:26:b2:25:01:16:54:2c:56:01:3f: 62:3a:3a:35:24:7d:46:4e:84:5a:bc:c6:ad:e7:69:83:57:e6: 45:04:09:ba:bc:ff:b4:94:e4:e5:54:8b:af:92:bf:94:d2:e2: a3:19:f3:78:6d:80:85:81:aa:36:13:dc:df:64:b2:77:f2:6f: 25:02:d2:f8:fc:94:16:af:6e:db:17:e2:87:87:27:63:32:51: a4:af:03:60:0a:47:56:39:36:e8:0d:56:6f:40:6e:b8:7e:65: 10:2e:ec:42:d7:0e:08:2e:23:8e:ed:60:88:9d:6f:47:e6:58: a3:2f:fb:de:15:73:4d:c7:8c:73:1b:5d:6b:78:ae:ef:e5:ce: a7:df:d9:9e:bb:8b:c3:7f:dd:42:d6:0a:08:f7:66:ac:85:56: 57:0a:61:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Njk4RTExMC8GA1UEBRMoNURCNzVCMkRGOTREMDQ0NzRBNkU1RTJENEI3OENDMDg0 QkZDMkE2QzAeFw0yNTA2MDIxNzU0MDNaFw0yNTA2MDkxNzU0MDNaMBgxFjAUBgNV BAMTDTY4M2RlNTNiLWVlYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJtxNPsZuJ9IIfTzETGEMgn6qSG3TxZxwYSIUfpwQdVMlazg/TOwHiyjv1W0SD xiCtBEoBe+tOOLaKO6oV+r693WCErth+TBgKoQ4h9OnBl3tp354E2snq19Hj9ofl poE/pYOxD79lD9h6T93MBKeE6T7hV2iXkXDm2semoQ8pLC5WLi+r+2yIj3VnQ74l oSjDSushh+18nVV7jQLjF0vX6BsGD/uKcYLJ/PsGBgOBRh2Qw/QFMXA1XoZ7IiQr 7k7IfsrOmQ8ZshPbPJqhnWHdNDUZBgHHxMVOAl/Tc+/v4b5whTVgNLklhS31tIvS 14E5ISoSYzczhUA6r64iNMjrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqWjQP31F PFv+bKdXjK7YqARnrqwwHwYDVR0jBBgwFoAUXbdbLflNBEdKbl4tS3jMCEv8Kmww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2OThFLzA5NUY2QzhDMjY3 QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVkS2JsNHRTM2pNQ0V2OEtt dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGJkYkxmbE5CRWRLYmw0dFMzak1DRXY4S213LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 OThFLzA5NUY2QzhDMjY3QzExRjA5Njc3RjgwQkM0RjlBRTAyL1hiZGJMZmxOQkVk S2JsNHRTM2pNQ0V2OEttdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEmNBTE23mehvbEvGFl8prwJfwIoXwDLzjKFIKKTFBFLDDBBcGKoxZ23 pslppSgZ8DQaf96p75j6M+554+/dRHoiPxsPIxg/FvnmwLCMNkRbEekwOip0XAXO zU0Qd+Yt4zR8JrIlARZULFYBP2I6OjUkfUZOhFq8xq3naYNX5kUECbq8/7SU5OVU i6+Sv5TS4qMZ83htgIWBqjYT3N9ksnfybyUC0vj8lBavbtsX4oeHJ2MyUaSvA2AK R1Y5NugNVm9Abrh+ZRAu7ELXDgguI47tYIidb0fmWKMv+94Vc03HjHMbXWt4ru/l zqff2Z67i8N/3ULWCgj3ZqyFVlcKYT0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:31 2025 by rpki-client