$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json) Hash identifier: EOXlt7l9FjLl5+Kzn5uw8iwj5OpaQvECnsuksTeFkxY= Subject key identifier: CF:C1:86:16:37:09:3B:28:B2:E1:F6:38:1E:CD:5A:1D:C4:CB:EC:EC Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 2312 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft Manifest number: 22F9 Signing time: Fri 30 May 2025 16:01:43 +0000 Manifest this update: Fri 30 May 2025 16:01:42 +0000 Manifest next update: Fri 06 Jun 2025 16:01:42 +0000 Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: uKHm4/Lxcfsf/tRsjIbbskhuyKqobnMq9MP6FAi57Ak=) 2: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: 6e21k1t3PwcFuMYhxFKByN0N0S9Vi6EW4w95vWK0udo=) 3: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: w2d5iGO1DzNwRW9XaGG0C+Ss9EnEjj1pHZpwfJJ5U1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8978 (0x2312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: May 30 16:01:42 2025 GMT Not After : Jun 6 16:01:42 2025 GMT Subject: CN=6839d666-c121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ce:3f:57:1e:78:d5:82:a2:e5:49:04:8f:18: 4b:df:57:81:b0:f3:e8:a9:87:ca:e8:44:14:59:97: 89:a2:79:62:c3:f9:0b:cc:6e:ab:84:32:c6:c6:83: 07:0c:f1:34:8f:fa:37:d4:27:ed:cd:03:bf:cb:60: 14:16:a7:eb:52:93:02:fb:05:ae:a6:0c:cd:6f:d9: 46:e6:a5:3d:36:a7:7d:e1:98:f3:b0:a6:f4:57:71: d1:f2:36:20:47:ce:b4:cd:aa:07:c8:17:b0:40:3d: 43:03:af:d9:c6:69:8d:66:69:43:36:cc:ed:95:0f: df:cd:e4:f2:17:7c:25:ba:33:2b:22:8a:b1:e3:9e: 86:9c:0b:00:9e:60:30:c0:bf:ed:98:9e:55:74:df: 35:80:d0:29:dd:cc:05:c9:55:06:a4:b8:9a:6c:49: eb:09:f9:75:21:5e:54:81:50:23:0b:70:6d:a1:3e: 72:fc:f8:03:5b:1f:51:a2:5e:27:ee:d8:a1:9b:21: ea:31:1a:4e:8d:fa:00:db:55:d8:6f:1a:8a:e4:92: 23:dc:50:31:2a:c7:e2:c3:a2:cc:a5:80:32:66:d1: 8e:10:30:6d:b4:b5:f2:9c:d0:96:1e:af:20:2e:80: 7f:2c:47:fb:98:b0:7b:98:20:74:f5:b2:d8:67:ca: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C1:86:16:37:09:3B:28:B2:E1:F6:38:1E:CD:5A:1D:C4:CB:EC:EC X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:92:d2:7f:5b:81:5e:09:92:61:18:97:72:a0:22:1a:b7:95: a2:63:ea:05:c8:32:53:70:46:4c:87:d4:44:79:4a:d6:85:c5: 09:ab:46:7a:b9:a3:f4:36:52:3a:2a:e9:2d:05:60:25:dd:d5: e0:e8:b0:4f:70:03:81:ef:96:10:78:e9:2a:a2:c3:24:e5:9f: 41:40:b8:e1:47:53:27:fe:81:57:65:f2:f9:5a:c5:c8:88:59: 0e:3a:dc:5e:a9:2b:58:80:fa:8b:03:75:41:eb:32:cc:b7:10: b6:8c:ab:5f:55:97:39:dd:1a:7f:26:25:16:81:1d:06:28:f9: 0f:18:a8:96:5d:3a:27:46:bc:f3:85:e0:91:d6:29:16:6f:16: c1:8e:55:21:66:a2:8a:76:27:a9:73:99:98:46:0c:7a:5c:5c: da:c5:16:09:23:2e:05:c9:95:cc:81:45:0e:48:ed:03:84:ce: e1:f2:2b:54:08:cd:e4:0e:9b:54:5d:0d:c8:71:aa:fa:72:63: 47:95:6f:e4:78:51:b3:c7:29:ba:89:c1:19:2d:6a:d8:61:a6: 3c:18:2c:29:e8:ce:d3:21:76:59:84:84:43:84:7f:de:2d:07: 45:d9:a0:0a:81:9b:55:4d:5e:31:e6:92:8d:f2:a0:c4:1d:5d: 93:4a:d7:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjUwNTMwMTYwMTQyWhcNMjUwNjA2MTYwMTQyWjAYMRYwFAYD VQQDEw02ODM5ZDY2Ni1jMTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA684/Vx541YKi5UkEjxhL31eBsPPoqYfK6EQUWZeJonliw/kLzG6rhDLGxoMH DPE0j/o31CftzQO/y2AUFqfrUpMC+wWupgzNb9lG5qU9Nqd94ZjzsKb0V3HR8jYg R860zaoHyBewQD1DA6/ZxmmNZmlDNsztlQ/fzeTyF3wlujMrIoqx456GnAsAnmAw wL/tmJ5VdN81gNAp3cwFyVUGpLiabEnrCfl1IV5UgVAjC3BtoT5y/PgDWx9Rol4n 7tihmyHqMRpOjfoA21XYbxqK5JIj3FAxKsfiw6LMpYAyZtGOEDBttLXynNCWHq8g LoB/LEf7mLB7mCB09bLYZ8rA3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/BhhY3 CTsosuH2OB7NWh3Ey+zsMB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzM0Mi82RERCQzdGQzkzMjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10 ZERoQXZHZjloNy1PQVZSbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfktJ/W4FeCZJhGJdyoCIat5WiY+oFyDJTcEZMh9REeUrWhcUJq0Z6 uaP0NlI6KuktBWAl3dXg6LBPcAOB75YQeOkqosMk5Z9BQLjhR1Mn/oFXZfL5WsXI iFkOOtxeqStYgPqLA3VB6zLMtxC2jKtfVZc53Rp/JiUWgR0GKPkPGKiWXTonRrzz heCR1ikWbxbBjlUhZqKKdiepc5mYRgx6XFzaxRYJIy4FyZXMgUUOSO0DhM7h8itU CM3kDptUXQ3Icar6cmNHlW/keFGzxym6icEZLWrYYaY8GCwp6M7TIXZZhIRDhH/e LQdF2aAKgZtVTV4x5pKN8qDEHV2TStfp -----END CERTIFICATE-----Generated at Sat May 31 14:46:33 2025 by rpki-client