$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft File: xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json) Hash identifier: i7cmircQOEDepUPluoUpiv1W5HbhoNgt1P/ab0nq2qk= Subject key identifier: D3:C0:9C:37:CF:0F:8A:73:D3:D2:64:0C:B6:FE:75:42:89:36:7B:62 Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft Manifest number: 04B4 Signing time: Sun 08 Jun 2025 23:35:35 +0000 Manifest this update: Sun 08 Jun 2025 23:35:35 +0000 Manifest next update: Sun 15 Jun 2025 23:35:35 +0000 Files and hashes: 1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: pqb2sxXV2AcTck9MfB6mUHY+5WxZUoykBCkmHgbZXNA=) 2: 9E9D5C66157C11F0B4CD801EC4F9AE02.roa (hash: 1C34cm2EkOQCZ4JCIngq0S5UUVGOvkcAMgGxSVETRwg=) 3: 83595478B65E11EF8DB85B32C4F9AE02.roa (hash: 8tjvkR4DoTk7UtvsWE0jDhrG+DVKY6Vhv3UaWUDUXuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 23:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Validity Not Before: Jun 8 23:35:35 2025 GMT Not After : Jun 15 23:35:35 2025 GMT Subject: CN=68461e47-3104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:91:e1:a4:93:a9:ef:12:f3:be:15:2a:56: 4d:be:60:66:65:b5:ba:61:4e:a1:0f:d3:2b:0f:ef: 85:ce:af:29:36:17:ba:42:43:6f:db:98:4e:3c:d7: 81:7e:20:cb:e1:68:ec:cb:bd:e1:6a:04:5d:12:0b: 1f:09:99:ae:ab:3e:9b:ec:98:be:fc:69:b2:17:20: 80:42:46:56:17:ae:28:1b:54:b0:71:d2:64:2b:a1: 34:3e:fb:15:44:bd:6c:21:c9:75:7f:31:17:b4:6e: 49:df:d7:a3:bd:d0:17:d6:36:dc:42:a7:69:7d:58: ce:e3:9f:d6:09:06:48:c1:2b:c6:13:34:bd:82:3b: 3b:36:7f:3a:1a:7f:4c:7c:5d:2a:f4:2e:c7:88:9a: 49:1a:f8:2d:40:bf:81:f4:1c:e1:3d:bc:1d:2a:e9: 65:8b:da:4a:06:5b:28:9f:d1:c4:7b:4b:07:ac:8e: 4a:0a:a2:08:c1:21:e2:c8:e5:a4:8f:7a:1c:e0:33: 05:1b:74:98:91:f7:b9:b9:1e:a1:9f:5f:e8:2b:fe: a1:05:1e:0a:bd:b6:78:13:ae:bb:c1:9c:69:55:db: 32:32:43:46:b2:63:99:65:5e:45:78:c4:17:69:69: d8:73:52:e6:a6:c9:7a:b1:86:19:92:ac:0c:6d:69: 60:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C0:9C:37:CF:0F:8A:73:D3:D2:64:0C:B6:FE:75:42:89:36:7B:62 X509v3 Authority Key Identifier: keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5d:d5:d7:69:08:f7:5f:1b:e6:a4:f6:f7:8a:64:7c:6c:b5: 73:1e:d0:95:8b:de:89:3c:66:60:e9:fa:52:02:e8:09:d7:0f: 22:a3:9f:8e:db:b4:8e:4a:e1:b5:45:b9:36:4c:44:2c:be:b2: f1:d3:ca:84:e8:97:4a:f6:cd:78:e8:f6:7f:5c:74:dc:31:d3: 5e:77:9f:a8:c5:b1:ae:ad:1f:45:8c:0e:32:cf:82:b6:01:fe: 56:c4:46:cc:17:fc:ff:8d:49:39:5e:8c:57:ef:23:e4:62:2e: c6:b7:3b:20:c9:8a:de:b2:d9:6e:c3:89:2f:3c:03:83:b8:68: 82:57:5e:98:ab:22:65:f8:60:9c:63:91:4b:4c:5f:22:20:4a: ae:5a:69:a9:92:ef:5c:6e:8b:2e:8d:bb:22:63:06:9c:ad:96: 4c:b2:e0:17:78:df:2e:b8:54:e4:fa:ba:9e:96:d2:63:ef:4b: 33:1d:62:6d:f6:b1:2e:94:0b:d4:ea:7c:7c:c1:10:46:d4:9e: fd:0d:8f:1b:a4:83:7f:89:e3:26:d2:78:e0:32:88:27:ec:51: 6f:87:39:ac:32:ff:d2:aa:f3:a3:cd:61:65:8d:dc:56:1e:c1: 95:c9:16:03:e8:a1:f4:a7:72:94:18:d8:c5:0e:02:d2:e5:de: 1f:73:74:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU3OTExMTAvBgNVBAUTKEM0RDdCOTRCOURGQjY0RjVDMTg5MjcyMzMwREJEQ0FE MkE3RDAxNkUwHhcNMjUwNjA4MjMzNTM1WhcNMjUwNjE1MjMzNTM1WjAYMRYwFAYD VQQDEw02ODQ2MWU0Ny0zMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAst+R4aSTqe8S874VKlZNvmBmZbW6YU6hD9MrD++Fzq8pNhe6QkNv25hOPNeB fiDL4Wjsy73hagRdEgsfCZmuqz6b7Ji+/GmyFyCAQkZWF64oG1SwcdJkK6E0PvsV RL1sIcl1fzEXtG5J39ejvdAX1jbcQqdpfVjO45/WCQZIwSvGEzS9gjs7Nn86Gn9M fF0q9C7HiJpJGvgtQL+B9BzhPbwdKulli9pKBlson9HEe0sHrI5KCqIIwSHiyOWk j3oc4DMFG3SYkfe5uR6hn1/oK/6hBR4KvbZ4E667wZxpVdsyMkNGsmOZZV5FeMQX aWnYc1Lmpsl6sYYZkqwMbWlglQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPAnDfP D4pz09JkDLb+dUKJNntiMB8GA1UdIwQYMBaAFMTXuUud+2T1wYknIzDb3K0qfQFu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTc5MS8xOUM2OEQwNjNB MDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQWEJpU2NqTU52Y3JTcDlB VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZTVTNTM3WlBYQmlTY2pNTnZjclNwOUFXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTc5MS8xOUM2OEQwNjNBMDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQ WEJpU2NqTU52Y3JTcDlBVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7XdXXaQj3XxvmpPb3imR8bLVzHtCVi96JPGZg6fpSAugJ1w8io5+O 27SOSuG1Rbk2TEQsvrLx08qE6JdK9s146PZ/XHTcMdNed5+oxbGurR9FjA4yz4K2 Af5WxEbMF/z/jUk5XoxX7yPkYi7GtzsgyYrestluw4kvPAODuGiCV16YqyJl+GCc Y5FLTF8iIEquWmmpku9cbosujbsiYwacrZZMsuAXeN8uuFTk+rqeltJj70szHWJt 9rEulAvU6nx8wRBG1J79DY8bpIN/ieMm0njgMogn7FFvhzmsMv/SqvOjzWFljdxW HsGVyRYD6KH0p3KUGNjFDgLS5d4fc3RI -----END CERTIFICATE-----Generated at Mon Jun 9 08:30:50 2025 by rpki-client