$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft File: X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json) Hash identifier: LLdfHcZEJJuc0TXxzNWh7L8k6t3ggiOaLnumYo57WwA= Subject key identifier: FC:20:20:DF:32:D5:24:3D:08:1D:EF:F0:06:14:99:0B:2A:AD:59:DD Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 Certificate issuer: /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Certificate serial: 07BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft Manifest number: 07BC Signing time: Sun 08 Jun 2025 20:48:55 +0000 Manifest this update: Sun 08 Jun 2025 20:48:55 +0000 Manifest next update: Sun 15 Jun 2025 20:48:55 +0000 Files and hashes: 1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: XBHDOIb6x1OmtpFcA0sxmZO4XFBi1cH3+IPhWjan/hg=) 2: 799C6AD8149711EFB0CB9E0AC4F9AE02.roa (hash: Z6c5AlKVKf/klPMN7KddRfh49KHTtioUb3aQg5mvfg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 20:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1982 (0x7be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02 Validity Not Before: Jun 8 20:48:55 2025 GMT Not After : Jun 15 20:48:55 2025 GMT Subject: CN=6845f737-d049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d3:a1:6f:bd:94:3f:b2:8b:c8:93:86:9f:b7: 66:66:5f:a6:50:c2:6c:c2:1e:a2:e5:73:ae:b9:75: a7:d6:b4:43:1e:02:f7:72:eb:79:bf:e1:56:62:aa: 8f:66:b2:dc:2b:17:f6:be:8a:11:10:a4:fc:e6:85: 04:3c:43:61:1f:ba:96:fe:53:f1:0a:6c:05:9a:a6: a4:da:41:26:42:e7:20:7a:31:2e:02:18:bd:ea:44: 73:dd:bc:10:db:15:5d:db:a4:b4:d3:2b:c0:13:7c: 16:d0:a8:9a:22:1b:31:a9:6f:d6:a9:cd:7e:8a:94: c3:dd:68:dd:8d:90:51:8e:ab:20:52:22:d3:82:d8: b1:4c:cf:10:c3:8c:5b:bc:df:af:42:87:19:da:73: 0d:19:33:98:73:40:5f:a5:66:ef:fb:51:aa:02:22: 54:46:14:29:e6:e8:03:14:43:88:7a:08:30:3e:36: a6:d9:cf:d8:c5:a4:cc:73:0b:51:35:48:33:1e:9e: 83:8d:a5:f6:58:0f:83:fa:9c:4d:e4:ce:3e:7c:bd: 36:16:ec:ed:19:43:c0:46:31:4a:a9:68:45:11:99: 0d:56:d4:1e:55:0f:86:bd:82:b8:d8:0d:51:4a:b8: 09:00:81:8b:a9:48:60:16:e0:c9:f7:0f:0c:83:eb: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:20:20:DF:32:D5:24:3D:08:1D:EF:F0:06:14:99:0B:2A:AD:59:DD X509v3 Authority Key Identifier: keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:05:62:76:81:f7:4c:42:fd:22:c1:df:7a:16:9e:60:3e:98: b7:3c:e5:53:1e:3f:e9:17:a6:c6:de:40:74:f7:af:0a:1f:4b: 4a:7a:90:b0:7f:51:03:0a:82:b4:ab:33:5e:79:15:cb:e4:ef: 3d:16:d5:cb:59:7b:af:3d:51:8d:28:85:8c:f8:f6:0e:7c:f6: cd:8e:9f:32:86:92:44:55:00:b3:de:5d:82:6d:c8:e6:c2:52: 01:ae:7e:82:2b:52:6b:db:5f:c9:19:fc:8e:74:af:4a:9c:9f: 6f:97:ad:b4:93:ae:e4:1a:25:00:03:57:83:97:17:ce:36:5e: d0:12:d6:9f:bc:55:64:26:0e:00:53:95:42:c5:46:1c:64:7f: f5:f9:80:f0:b0:97:8a:f0:ed:60:28:9b:7f:f0:77:6c:99:f9: 6e:a0:71:38:c0:aa:87:ac:76:62:a7:da:4e:22:ae:a4:b9:d9: c0:6c:12:e7:3f:ec:39:7f:6d:bc:2c:32:bd:b8:73:48:f0:59: 47:40:3b:38:f1:07:b6:4c:e0:57:8c:b6:f7:f6:68:2e:e6:e5: 8f:b8:e1:36:ae:be:20:6e:c3:58:b0:fc:07:e5:67:5b:c0:52: d4:e6:22:6d:b5:3b:3a:a0:e4:8b:a6:d8:66:45:6d:54:f0:29: 0b:00:e4:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlBMEQxMTAvBgNVBAUTKDVGOEYwMTYxQjdBQ0JCMjU1RjEzQ0YwODFCNjY1MzYx OUI0RTJDMDIwHhcNMjUwNjA4MjA0ODU1WhcNMjUwNjE1MjA0ODU1WjAYMRYwFAYD VQQDEw02ODQ1ZjczNy1kMDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NOhb72UP7KLyJOGn7dmZl+mUMJswh6i5XOuuXWn1rRDHgL3cut5v+FWYqqP ZrLcKxf2vooREKT85oUEPENhH7qW/lPxCmwFmqak2kEmQucgejEuAhi96kRz3bwQ 2xVd26S00yvAE3wW0KiaIhsxqW/Wqc1+ipTD3WjdjZBRjqsgUiLTgtixTM8Qw4xb vN+vQocZ2nMNGTOYc0BfpWbv+1GqAiJURhQp5ugDFEOIeggwPjam2c/YxaTMcwtR NUgzHp6DjaX2WA+D+pxN5M4+fL02FuztGUPARjFKqWhFEZkNVtQeVQ+GvYK42A1R SrgJAIGLqUhgFuDJ9w8Mg+ug1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwgIN8y 1SQ9CB3v8AYUmQsqrVndMB8GA1UdIwQYMBaAFF+PAWG3rLslXxPPCBtmU2GbTiwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUEwRC8wRkI3OTE2NEZC MTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5VmZFODhJRzJaVFladE9M QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0OEJZYmVzdXlWZkU4OElHMlpUWVp0T0xBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUEwRC8wRkI3OTE2NEZCMTUxMUVBQjAxMUVDNkVDNEY5QUUwMi9YNDhCWWJlc3V5 VmZFODhJRzJaVFladE9MQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPBWJ2gfdMQv0iwd96Fp5gPpi3POVTHj/pF6bG3kB0968KH0tKepCw f1EDCoK0qzNeeRXL5O89FtXLWXuvPVGNKIWM+PYOfPbNjp8yhpJEVQCz3l2Cbcjm wlIBrn6CK1Jr21/JGfyOdK9KnJ9vl620k67kGiUAA1eDlxfONl7QEtafvFVkJg4A U5VCxUYcZH/1+YDwsJeK8O1gKJt/8HdsmfluoHE4wKqHrHZip9pOIq6kudnAbBLn P+w5f228LDK9uHNI8FlHQDs48Qe2TOBXjLb39mgu5uWPuOE2rr4gbsNYsPwH5Wdb wFLU5iJttTs6oOSLpthmRW1U8CkLAOQY -----END CERTIFICATE-----Generated at Mon Jun 9 03:47:10 2025 by rpki-client