$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: CoR4jJL+EjMORPevDlXPVzbF3l9qsXayb0TIRj0jlqw= Subject key identifier: B1:CC:FF:EE:E0:E1:FE:85:28:94:C3:49:E5:36:4E:7C:19:37:B7:27 Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0C41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0C3A Signing time: Fri 30 May 2025 18:41:11 +0000 Manifest this update: Fri 30 May 2025 18:41:11 +0000 Manifest next update: Fri 06 Jun 2025 18:41:11 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: vxDiW56Y8Js1UpSReh7y212AwA9HeOCpVWqtLOg7DxQ=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: jepyyGmhyczAJbapeZ5nuaRxeukad7rFEbIHfvNySKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: May 30 18:41:11 2025 GMT Not After : Jun 6 18:41:11 2025 GMT Subject: CN=6839fbc7-5a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c1:b5:f7:66:cb:72:9b:95:ee:4b:96:9b:c5: 60:89:92:d5:a2:da:d6:07:7d:a3:12:66:2c:e9:96: 5a:3b:cf:49:54:60:87:e7:24:93:4c:37:6e:d3:6e: 8f:50:ab:be:a5:92:3c:4d:3d:2a:8d:7f:ac:4d:f6: 85:9d:1c:c8:4b:43:a4:0d:78:89:cc:42:97:c9:24: b9:59:71:d4:a6:17:4b:eb:a0:b2:a9:4c:26:ef:30: e9:4a:4b:8c:47:d3:02:e1:5b:62:4c:6f:db:64:64: 81:aa:f2:ac:8c:98:0c:44:79:12:db:cb:29:9d:fe: 43:dd:96:74:30:9d:34:d9:5b:c0:83:16:a1:9c:3b: 99:b6:09:e4:7e:21:10:ee:de:d9:36:42:6d:5b:ff: 7b:c6:ec:29:7c:6e:7d:d2:aa:3b:b9:e0:d4:1f:a6: 08:08:ee:6f:3f:d5:22:67:0e:9e:75:1a:de:92:36: 53:4c:3d:56:58:33:ed:b9:e9:35:db:86:f4:06:b3: e4:16:3d:c1:46:78:10:01:a3:8d:dd:e0:92:a7:8c: 91:5d:1d:4d:ab:f2:f1:d2:25:ca:7e:ba:7b:b3:2b: 50:32:37:25:73:fa:6c:9d:3f:83:9b:48:65:ba:ca: 94:db:7d:fb:ea:ea:3a:2f:18:c5:9b:aa:02:37:d8: ae:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CC:FF:EE:E0:E1:FE:85:28:94:C3:49:E5:36:4E:7C:19:37:B7:27 X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:cc:06:da:c9:c1:d2:14:74:a6:8d:c8:d3:f3:0c:9c:cc:85: 3f:32:78:c0:e7:e8:2b:5d:47:b8:81:1c:19:a2:da:24:40:9b: 83:4b:d5:43:4a:d5:fc:0e:22:52:4a:9b:02:24:af:13:70:12: d4:10:c4:79:03:c9:d1:64:3c:5d:ff:ad:ca:28:22:3f:70:71: 6e:b8:17:69:0c:ba:23:67:e8:6f:f4:7b:64:33:17:af:5f:8f: 23:2c:37:bd:43:a5:6e:87:05:ba:e8:f2:2d:75:60:0f:29:85: 7a:5c:dc:ab:14:69:32:a5:7a:66:69:53:56:25:af:b2:62:1f: 6b:c7:00:38:ef:39:7c:11:b4:cc:8f:73:d0:06:ab:ff:f4:38: a3:28:6e:45:31:14:16:f4:c3:b6:61:9a:63:bd:0d:36:f9:72: 98:8f:d7:c4:2d:24:c4:55:ad:a9:b1:ad:16:b7:eb:25:40:42: 6b:f6:f6:f9:af:03:f2:f0:62:2a:0c:c0:57:83:ec:d4:34:c4: 22:f8:42:51:90:8e:e2:bd:4c:b6:a4:1e:32:0c:af:ae:23:b8: f5:ee:45:ad:a6:f3:cb:28:1d:09:d4:8d:fb:a0:9f:1a:88:76: f2:00:b1:02:e1:9f:04:18:b7:7c:3e:63:df:a8:b1:d8:2f:96: 86:dd:0f:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjUwNTMwMTg0MTExWhcNMjUwNjA2MTg0MTExWjAYMRYwFAYD VQQDEw02ODM5ZmJjNy01YTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMG192bLcpuV7kuWm8VgiZLVotrWB32jEmYs6ZZaO89JVGCH5ySTTDdu026P UKu+pZI8TT0qjX+sTfaFnRzIS0OkDXiJzEKXySS5WXHUphdL66CyqUwm7zDpSkuM R9MC4VtiTG/bZGSBqvKsjJgMRHkS28spnf5D3ZZ0MJ002VvAgxahnDuZtgnkfiEQ 7t7ZNkJtW/97xuwpfG590qo7ueDUH6YICO5vP9UiZw6edRrekjZTTD1WWDPtuek1 24b0BrPkFj3BRngQAaON3eCSp4yRXR1Nq/Lx0iXKfrp7sytQMjclc/psnT+Dm0hl usqU23376uo6LxjFm6oCN9iuRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHM/+7g 4f6FKJTDSeU2TnwZN7cnMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANzAbaycHSFHSmjcjT8wyczIU/MnjA5+grXUe4gRwZotokQJuDS9VD StX8DiJSSpsCJK8TcBLUEMR5A8nRZDxd/63KKCI/cHFuuBdpDLojZ+hv9HtkMxev X48jLDe9Q6VuhwW66PItdWAPKYV6XNyrFGkypXpmaVNWJa+yYh9rxwA47zl8EbTM j3PQBqv/9DijKG5FMRQW9MO2YZpjvQ02+XKYj9fELSTEVa2psa0Wt+slQEJr9vb5 rwPy8GIqDMBXg+zUNMQi+EJRkI7ivUy2pB4yDK+uI7j17kWtpvPLKB0J1I37oJ8a iHbyALEC4Z8EGLd8PmPfqLHYL5aG3Q++ -----END CERTIFICATE-----Generated at Sat May 31 17:27:50 2025 by rpki-client