$ rpki-client -vvf rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft File: _XRQsRgVCpshTxoL7t8-Oyb-0Es.mft (raw, json) Hash identifier: R/5cKKJejNM4rMOv3Pc/j8p1A2kZsUxnxUg2kcaqL40= Subject key identifier: C3:4B:9A:5C:9E:69:AC:71:42:AA:CC:C9:95:0D:10:37:1D:BF:69:13 Authority key identifier: FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B Certificate issuer: /CN=A9144160/serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B Certificate serial: 0FE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft Manifest number: 0FDE Signing time: Fri 30 May 2025 17:38:41 +0000 Manifest this update: Fri 30 May 2025 17:38:40 +0000 Manifest next update: Fri 06 Jun 2025 17:38:40 +0000 Files and hashes: 1: _XRQsRgVCpshTxoL7t8-Oyb-0Es.crl (hash: I1VDxgFdPP7nVziHwZxUvUVtWxJb7BvoM8X57K3bp0M=) 2: 378459525C6511E989D03610C4F9AE02.roa (hash: IiQprXM45ceBxjHWm+F/2TXqvKDyfsIZ5gHCOtJkT5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4070 (0xfe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144160, serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B Validity Not Before: May 30 17:38:40 2025 GMT Not After : Jun 6 17:38:40 2025 GMT Subject: CN=6839ed20-7bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:83:54:f6:2e:64:30:d3:5a:9b:68:b9:4e:01: 8e:07:d1:28:38:cf:90:23:dc:66:56:b6:54:00:49: 9e:77:3c:87:b9:30:3b:3b:c6:3a:a0:a1:1e:39:00: 15:48:88:2e:dc:bc:c2:c3:79:8d:ff:a0:d8:fb:7d: 34:f9:9a:ee:3a:f9:f4:ad:9f:af:c6:54:2d:31:8d: 1c:dd:9e:fd:60:ee:c9:4d:78:39:96:72:81:72:78: 61:0d:13:e3:e2:b5:8c:86:b6:6f:bd:38:da:6d:9a: d0:65:85:53:42:05:18:34:e8:c3:57:cc:f8:03:fe: d3:2c:b7:c1:6b:87:f4:18:8a:34:68:98:8b:95:fe: 06:ea:a9:3a:3a:63:6d:a5:95:7b:7b:40:9c:8c:a5: 93:42:10:32:53:c2:4c:5c:b2:4a:22:6b:52:ac:2d: 5c:a5:80:6a:02:54:fc:7c:a8:4b:7a:02:da:e8:ad: cc:56:7b:f0:79:7d:4d:d4:d1:e4:7e:11:67:74:9f: 05:09:7a:00:5c:5f:0c:0c:ad:11:88:7b:6f:08:7e: 54:24:3f:74:4e:6d:ef:66:1a:11:b2:c1:27:24:3b: e6:04:82:ce:2b:32:da:03:28:47:b1:2f:4c:ea:37: 74:99:fa:07:51:a5:4c:cd:5b:45:8e:3e:13:c3:0d: 20:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4B:9A:5C:9E:69:AC:71:42:AA:CC:C9:95:0D:10:37:1D:BF:69:13 X509v3 Authority Key Identifier: keyid:FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:29:ff:96:a8:b0:2d:72:43:2a:59:a2:78:34:0e:f8:db:27: f2:63:a1:6e:4d:bf:d4:a5:df:58:1e:76:f1:11:b8:25:ba:b0: 88:72:af:e0:1f:86:3b:a9:32:2c:32:8e:a7:9f:19:38:94:40: 17:0e:9e:55:78:04:63:ff:d3:a6:a8:f6:76:00:2d:72:f3:8b: d2:9a:f2:f7:ee:ed:2f:6a:87:fa:bf:f7:a0:62:48:23:ae:b8: 87:c7:03:6f:c4:c7:14:65:b1:25:5c:25:3c:75:4d:3c:46:49: 7e:49:bc:ca:64:f1:a0:7d:d1:07:b5:ec:27:20:a5:1d:05:14: 42:b2:98:05:74:bc:f1:a5:dc:fe:07:c3:58:4e:ce:1b:a1:c2: 2c:4e:fc:ad:eb:6c:b9:25:5c:5c:a3:2a:9f:72:62:5f:f6:32: 0a:a0:8c:1e:b4:78:84:75:24:36:26:8b:ac:6c:cd:59:35:70: 3e:e9:22:d8:eb:fb:9e:3c:8c:b7:93:9e:f1:40:2e:82:fd:46: a7:e9:61:17:3d:a0:30:4a:59:f0:3a:61:55:d4:53:7c:7c:22: cf:a2:71:5b:a5:ad:5f:ec:e7:e0:0c:6d:e0:82:1b:7e:71:4d: b0:07:2f:a1:68:8d:14:2a:5a:00:d5:0c:fb:20:6b:a6:51:99: 6c:0d:ce:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQxNjAxMTAvBgNVBAUTKEZENzQ1MEIxMTgxNTBBOUIyMTRGMUEwQkVFREYzRTNC MjZGRUQwNEIwHhcNMjUwNTMwMTczODQwWhcNMjUwNjA2MTczODQwWjAYMRYwFAYD VQQDEw02ODM5ZWQyMC03YmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1INU9i5kMNNam2i5TgGOB9EoOM+QI9xmVrZUAEmedzyHuTA7O8Y6oKEeOQAV SIgu3LzCw3mN/6DY+300+ZruOvn0rZ+vxlQtMY0c3Z79YO7JTXg5lnKBcnhhDRPj 4rWMhrZvvTjabZrQZYVTQgUYNOjDV8z4A/7TLLfBa4f0GIo0aJiLlf4G6qk6OmNt pZV7e0CcjKWTQhAyU8JMXLJKImtSrC1cpYBqAlT8fKhLegLa6K3MVnvweX1N1NHk fhFndJ8FCXoAXF8MDK0RiHtvCH5UJD90Tm3vZhoRssEnJDvmBILOKzLaAyhHsS9M 6jd0mfoHUaVMzVtFjj4Tww0gOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNLmlye aaxxQqrMyZUNEDcdv2kTMB8GA1UdIwQYMBaAFP10ULEYFQqbIU8aC+7fPjsm/tBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDE2MC9ERDY1NzFBNjRG OTIxMUU5QUQxMEFBMTNDNEY5QUUwMi9fWFJRc1JnVkNwc2hUeG9MN3Q4LU95Yi0w RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YUlFzUmdWQ3BzaFR4b0w3dDgtT3liLTBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDE2MC9ERDY1NzFBNjRGOTIxMUU5QUQxMEFBMTNDNEY5QUUwMi9fWFJRc1JnVkNw c2hUeG9MN3Q4LU95Yi0wRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWKf+WqLAtckMqWaJ4NA742yfyY6FuTb/Upd9YHnbxEbglurCIcq/g H4Y7qTIsMo6nnxk4lEAXDp5VeARj/9OmqPZ2AC1y84vSmvL37u0vaof6v/egYkgj rriHxwNvxMcUZbElXCU8dU08Rkl+SbzKZPGgfdEHtewnIKUdBRRCspgFdLzxpdz+ B8NYTs4bocIsTvyt62y5JVxcoyqfcmJf9jIKoIwetHiEdSQ2JousbM1ZNXA+6SLY 6/uePIy3k57xQC6C/Uan6WEXPaAwSlnwOmFV1FN8fCLPonFbpa1f7OfgDG3gght+ cU2wBy+haI0UKloA1Qz7IGumUZlsDc4K -----END CERTIFICATE-----Generated at Sat May 31 17:08:59 2025 by rpki-client