$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft File: xG1ZE_bCUMau4vMnRTXOhmKVufo.mft (raw, json) Hash identifier: mrRbUwMzRqKIef2Bytwt+kVoy/z1Dsb6WnXPgGIT2dg= Subject key identifier: 30:5A:11:2F:FB:A9:4D:B5:DB:4F:AA:FB:C2:33:1F:B4:1B:DF:EB:AE Authority key identifier: C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA Certificate issuer: /CN=A9148B83/serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA Certificate serial: 0662 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft Manifest number: 0657 Signing time: Fri 06 Jun 2025 22:34:41 +0000 Manifest this update: Fri 06 Jun 2025 22:34:41 +0000 Manifest next update: Fri 13 Jun 2025 22:34:41 +0000 Files and hashes: 1: xG1ZE_bCUMau4vMnRTXOhmKVufo.crl (hash: MGcCgMZ0QOtc8fd9Gc/f//B+mrHQTQ9mFR4C0PcDbBs=) 2: 65FE79B8885D11EB81454E41C4F9AE02.roa (hash: 327ah/e9fUSF5H9j9NGNYuwKtrueHyZEroURzg2Xyh8=) 3: 009E969E885C11EB88A7723DC4F9AE02.roa (hash: 10SP9rtLMhnfiCiDsyU/nUUSFenGWa1NBToGV5Ae6kE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 22:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B83, serialNumber=C46D5913F6C250C6AEE2F3274535CE866295B9FA Validity Not Before: Jun 6 22:34:41 2025 GMT Not After : Jun 13 22:34:41 2025 GMT Subject: CN=68436d01-bc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:cb:d6:07:cf:61:96:08:c6:d0:0f:b9:dd: ce:d1:84:55:64:93:e5:4d:9b:9f:49:c4:0d:5d:72: 28:d5:95:ba:9b:a5:bc:4c:07:6a:7d:2b:e0:bc:dc: aa:25:62:ff:2c:2f:ae:a8:61:8c:04:c6:15:a4:08: f4:0d:e1:3c:d3:76:1c:4c:77:99:d3:57:cc:b6:99: db:a4:be:66:cb:ac:41:a1:ba:69:56:7b:a2:78:de: a7:a6:b9:7a:fa:e3:2b:25:dc:0b:44:88:60:0a:73: 92:ea:57:b4:47:ec:99:97:f2:26:22:a6:c5:50:c4: 2c:8c:b9:af:c6:4c:bf:2b:83:d7:5c:9a:09:97:cf: e5:6f:e2:2d:c1:9a:22:ec:d1:e9:2c:a2:36:03:30: f9:f3:f7:b9:36:cc:84:1c:f1:07:57:63:b9:ca:8a: 5b:1b:0c:7e:6f:3f:91:d5:de:16:3c:b6:d3:08:23: a7:6f:2f:2d:61:67:8c:26:96:6f:e5:da:5c:03:3e: ff:4b:05:9e:15:ad:a0:68:f2:46:3f:0a:e6:08:00: 3e:6e:12:cd:77:00:69:0d:4f:d9:98:16:61:1d:7d: 77:34:fc:f2:9c:4d:ab:f3:84:c8:ac:5e:24:0e:1d: fc:3e:b3:78:fd:2f:4c:71:27:f1:cd:c2:35:4c:7d: 82:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5A:11:2F:FB:A9:4D:B5:DB:4F:AA:FB:C2:33:1F:B4:1B:DF:EB:AE X509v3 Authority Key Identifier: keyid:C4:6D:59:13:F6:C2:50:C6:AE:E2:F3:27:45:35:CE:86:62:95:B9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xG1ZE_bCUMau4vMnRTXOhmKVufo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B83/77AA414687E111EBB501CB25C4F9AE02/xG1ZE_bCUMau4vMnRTXOhmKVufo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:24:16:37:ac:89:84:75:26:47:72:34:78:b8:b3:6a:d8:69: 4d:83:f9:7d:dc:a4:e7:f8:c2:08:7a:c4:76:6a:47:6d:4f:c7: ff:90:82:65:94:a9:32:1e:49:fa:47:2d:48:e1:7d:8b:2d:36: 6b:b0:52:48:df:d4:11:a4:68:b9:0d:7f:fb:ca:16:d6:fb:6b: f9:55:d5:4f:af:2f:5e:69:ad:39:91:4b:47:15:31:cc:ae:3a: 52:93:b8:88:a5:3a:21:10:98:74:99:4f:da:f2:4b:4e:16:19: 8c:28:1f:63:a9:d4:fe:3c:25:ac:48:26:08:78:82:37:e7:6b: dc:a4:10:10:28:ec:a9:e5:39:26:4e:6b:67:90:50:5f:ee:4a: c4:7d:aa:87:58:27:27:63:09:46:41:f7:2d:fd:9a:74:44:18: 02:de:68:69:01:41:34:d0:e0:04:f7:4b:ae:07:7f:fb:e5:b9: e2:bb:a9:5f:99:28:b5:a6:69:cb:2a:45:1d:52:94:1a:0d:26: 6e:98:d4:bf:39:73:cf:52:c7:ea:98:bd:71:d5:eb:ea:c0:f6: 11:3f:c6:c4:68:5f:1b:9f:89:94:24:bd:ad:4f:d1:07:2c:79: 30:0e:0d:a8:08:aa:b4:65:bc:1d:14:ce:e4:91:bb:33:4e:d8: 1a:5d:6f:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCODMxMTAvBgNVBAUTKEM0NkQ1OTEzRjZDMjUwQzZBRUUyRjMyNzQ1MzVDRTg2 NjI5NUI5RkEwHhcNMjUwNjA2MjIzNDQxWhcNMjUwNjEzMjIzNDQxWjAYMRYwFAYD VQQDEw02ODQzNmQwMS1iYzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvXL1gfPYZYIxtAPud3O0YRVZJPlTZufScQNXXIo1ZW6m6W8TAdqfSvgvNyq JWL/LC+uqGGMBMYVpAj0DeE803YcTHeZ01fMtpnbpL5my6xBobppVnuieN6nprl6 +uMrJdwLRIhgCnOS6le0R+yZl/ImIqbFUMQsjLmvxky/K4PXXJoJl8/lb+ItwZoi 7NHpLKI2AzD58/e5NsyEHPEHV2O5yopbGwx+bz+R1d4WPLbTCCOnby8tYWeMJpZv 5dpcAz7/SwWeFa2gaPJGPwrmCAA+bhLNdwBpDU/ZmBZhHX13NPzynE2r84TIrF4k Dh38PrN4/S9McSfxzcI1TH2CvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBaES/7 qU2120+q+8IzH7Qb3+uuMB8GA1UdIwQYMBaAFMRtWRP2wlDGruLzJ0U1zoZilbn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI4My83N0FBNDE0Njg3 RTExMUVCQjUwMUNCMjVDNEY5QUUwMi94RzFaRV9iQ1VNYXU0dk1uUlRYT2htS1Z1 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHMVpFX2JDVU1hdTR2TW5SVFhPaG1LVnVmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEI4My83N0FBNDE0Njg3RTExMUVCQjUwMUNCMjVDNEY5QUUwMi94RzFaRV9iQ1VN YXU0dk1uUlRYT2htS1Z1Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAJBY3rImEdSZHcjR4uLNq2GlNg/l93KTn+MIIesR2akdtT8f/kIJl lKkyHkn6Ry1I4X2LLTZrsFJI39QRpGi5DX/7yhbW+2v5VdVPry9eaa05kUtHFTHM rjpSk7iIpTohEJh0mU/a8ktOFhmMKB9jqdT+PCWsSCYIeII352vcpBAQKOyp5Tkm TmtnkFBf7krEfaqHWCcnYwlGQfct/Zp0RBgC3mhpAUE00OAE90uuB3/75bniu6lf mSi1pmnLKkUdUpQaDSZumNS/OXPPUsfqmL1x1evqwPYRP8bEaF8bn4mUJL2tT9EH LHkwDg2oCKq0ZbwdFM7kkbszTtgaXW+Z -----END CERTIFICATE-----Generated at Sat Jun 7 06:54:47 2025 by rpki-client