$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: n4aAVT5iOWMlkcVZv+m8KxJXs3KZZ8aSAy23KNcmg40= Subject key identifier: 45:5C:78:50:02:63:E0:FE:15:8E:A4:89:A5:64:D1:26:DE:8B:CC:FB Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: AA Signing time: Tue 01 Jul 2025 06:45:58 +0000 Manifest this update: Tue 01 Jul 2025 06:45:57 +0000 Manifest next update: Tue 08 Jul 2025 06:45:57 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: ASpWS0iVwo6x31PfwwrZZLWDm/3cvoBq6wP1eCwY8AE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: Jul 1 06:45:57 2025 GMT Not After : Jul 8 06:45:57 2025 GMT Subject: CN=68638425-877b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:86:2c:81:d6:3f:22:2c:ba:84:51:c8:46:1c: 71:25:9d:7f:94:ee:42:95:10:cf:d0:4d:9d:92:f6: cf:c8:ac:84:0f:63:17:b9:59:78:2f:af:77:01:73: bb:f6:b2:9a:94:2a:56:0c:62:03:17:af:93:a8:24: 2a:d9:af:b3:68:9d:71:c8:c1:b7:eb:89:b2:73:a9: 29:8e:05:78:e2:30:47:91:f7:3e:57:5c:6f:95:3a: 81:3f:29:4c:60:4c:c4:a6:e3:fd:51:01:bd:d8:77: 10:97:a3:e5:23:41:f7:6c:a9:ea:90:b4:46:ab:09: 2d:c2:14:26:a8:f2:a5:42:68:69:b3:51:6a:ea:48: bd:60:46:55:40:4a:43:1a:c6:95:f7:e1:ac:6c:53: 17:cb:ce:92:31:e4:02:67:9d:a2:30:d7:b1:bd:1f: 17:a4:a4:25:02:1e:94:20:ef:4f:a4:30:05:d9:52: 07:39:06:06:38:95:af:ff:0f:17:cb:1b:da:1a:cf: 0e:c5:66:9a:21:6d:c9:49:ad:b3:a7:93:c6:b7:57: 3a:fb:e5:87:49:06:b5:df:57:20:96:4c:d8:a1:27: 2c:ba:e9:e2:b2:97:49:30:ce:a1:2d:55:b2:44:95: fb:d3:18:c2:ba:28:b2:da:e4:c2:07:a1:42:94:3e: 29:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5C:78:50:02:63:E0:FE:15:8E:A4:89:A5:64:D1:26:DE:8B:CC:FB X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:10:26:6b:30:3d:2f:35:99:de:c0:02:28:d5:24:f3:fe:34: ce:e4:db:86:3e:c0:d1:42:d0:c5:38:46:67:63:be:12:a6:df: 46:8d:df:8f:34:53:0a:9a:ca:b4:e1:ec:41:f2:ab:fc:ab:84: f0:d9:b5:60:03:96:35:8a:8d:64:1c:f9:ce:6b:a3:68:14:52: 77:71:a5:5d:40:d8:28:08:48:5f:cf:ab:67:d5:70:b4:fa:6e: 4c:76:72:51:5b:8b:ee:d7:80:2b:c1:26:06:21:15:ea:62:0c: 9c:99:4c:32:95:d3:05:14:29:2c:b4:90:d0:71:6f:14:ca:3d: 20:54:2a:0a:c3:a5:c6:0a:04:d4:73:13:13:0c:94:f1:b5:fa: 2f:d6:61:dc:95:90:74:b8:00:d1:46:c5:2c:a1:51:fb:7b:44: 41:7a:f4:4b:51:82:65:de:96:24:8f:a6:d7:9f:21:a6:2b:e3: 67:f4:a3:06:77:9e:a4:02:81:5b:a7:c9:6e:ab:a6:b7:e2:03: 87:0d:64:8f:8f:56:d3:fd:6c:fb:ff:ec:ad:d2:b2:0e:81:6b: ad:2c:b8:90:44:39:eb:99:9b:55:e6:5c:2d:4d:2d:0c:63:cf: 24:df:04:0d:1c:f0:78:87:69:d5:a7:24:d5:4b:ca:36:a9:7e: d5:25:5b:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG QUE4OENEODQwHhcNMjUwNzAxMDY0NTU3WhcNMjUwNzA4MDY0NTU3WjAYMRYwFAYD VQQDEw02ODYzODQyNS04NzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl4YsgdY/Iiy6hFHIRhxxJZ1/lO5ClRDP0E2dkvbPyKyED2MXuVl4L693AXO7 9rKalCpWDGIDF6+TqCQq2a+zaJ1xyMG364myc6kpjgV44jBHkfc+V1xvlTqBPylM YEzEpuP9UQG92HcQl6PlI0H3bKnqkLRGqwktwhQmqPKlQmhps1Fq6ki9YEZVQEpD GsaV9+GsbFMXy86SMeQCZ52iMNexvR8XpKQlAh6UIO9PpDAF2VIHOQYGOJWv/w8X yxvaGs8OxWaaIW3JSa2zp5PGt1c6++WHSQa131cglkzYoScsuunispdJMM6hLVWy RJX70xjCuiiy2uTCB6FClD4pawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVceFAC Y+D+FY6kiaVk0Sbei8z7MB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6 WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1 RkdwQU92cFZmRno2cUl6WVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6ECZrMD0vNZnewAIo1STz/jTO5NuGPsDRQtDFOEZnY74Spt9Gjd+P NFMKmsq04exB8qv8q4Tw2bVgA5Y1io1kHPnOa6NoFFJ3caVdQNgoCEhfz6tn1XC0 +m5MdnJRW4vu14ArwSYGIRXqYgycmUwyldMFFCkstJDQcW8Uyj0gVCoKw6XGCgTU cxMTDJTxtfov1mHclZB0uADRRsUsoVH7e0RBevRLUYJl3pYkj6bXnyGmK+Nn9KMG d56kAoFbp8luq6a34gOHDWSPj1bT/Wz7/+yt0rIOgWutLLiQRDnrmZtV5lwtTS0M Y88k3wQNHPB4h2nVpyTVS8o2qX7VJVs0 -----END CERTIFICATE-----Generated at Tue Jul 1 19:51:37 2025 by rpki-client