$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft File: XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft (raw, json) Hash identifier: T59rbSMe5zt+zUOQAh6YwXTQOaH33lo0WUIsVyLZgEU= Subject key identifier: 19:E4:26:9E:13:28:47:E8:2C:90:51:BB:43:7E:FD:6E:97:B3:1B:36 Authority key identifier: 5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 Certificate issuer: /CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Certificate serial: 06D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft Manifest number: 06D4 Signing time: Wed 04 Jun 2025 21:52:11 +0000 Manifest this update: Wed 04 Jun 2025 21:52:10 +0000 Manifest next update: Wed 11 Jun 2025 21:52:10 +0000 Files and hashes: 1: XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl (hash: AglRGj9u50HencjxjUE45neU3bfL86Me2AQpViEf+HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 21:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1748 (0x6d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F9E, serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Validity Not Before: Jun 4 21:52:10 2025 GMT Not After : Jun 11 21:52:10 2025 GMT Subject: CN=6840c00b-a7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:39:80:34:48:51:04:c5:9b:56:a8:38:3f: 24:53:31:ab:76:4b:ed:9b:51:71:fc:75:5c:7d:8b: 3f:89:03:b1:c3:d5:b0:4d:a6:ec:7b:4c:c6:b3:f8: bf:c4:3a:c5:f8:f8:13:14:a9:17:ac:98:12:58:e0: 7e:09:ee:b9:49:d8:52:b0:c7:4a:1a:90:41:cf:e8: 77:79:58:af:c5:17:8b:9f:6a:e1:d3:91:b9:c8:62: c9:dd:bd:96:29:18:40:9e:ee:af:fe:6a:e0:d0:63: 59:d0:bb:94:91:c8:bb:a0:ee:56:a0:b7:04:22:72: 24:66:7d:61:23:c5:3a:07:2b:67:75:01:84:b0:27: 62:65:f7:aa:9a:b3:25:b2:61:3c:e4:ea:7c:a4:85: 76:d0:53:27:e1:23:85:77:2f:57:ff:ea:f2:fd:c5: f8:a6:b0:3b:04:25:ad:9e:ee:46:20:0e:46:6a:01: 06:ea:4d:e3:a7:00:32:0d:73:99:9c:c4:da:5b:c1: 16:35:d6:1a:98:bf:f2:66:44:9f:4e:a3:74:49:29: 7e:05:95:a3:a5:17:0e:13:30:04:98:9d:8c:49:1c: 68:2d:f4:84:07:c1:01:46:0e:6a:a2:b4:44:b4:0c: a3:1d:ed:6c:67:b8:5d:97:34:32:6d:75:21:5e:24: 98:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E4:26:9E:13:28:47:E8:2C:90:51:BB:43:7E:FD:6E:97:B3:1B:36 X509v3 Authority Key Identifier: keyid:5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:90:22:3e:fd:34:a1:c6:9d:a1:8e:eb:f0:9f:6b:b6:d8:25: 00:f0:21:4e:86:22:24:ee:ca:e8:0d:9a:0e:3e:d2:52:7f:cb: 47:af:92:14:ce:9c:e4:3d:e4:72:f3:03:80:4b:3c:7e:42:3f: 71:73:2d:c9:25:21:93:37:66:21:4b:9c:35:47:00:42:13:c2: 81:bc:f5:75:22:49:e2:05:dc:5c:e6:3e:4a:8d:b3:30:1b:a9: 0f:24:b4:f0:dd:39:77:00:28:25:27:98:5f:d3:5c:a9:a7:62: 1f:75:03:a9:ca:70:8c:0e:1c:79:ea:b7:c8:27:3b:98:43:dd: b6:0d:70:16:e6:4f:68:ee:83:7e:84:ff:dd:b1:15:a7:64:ae: 77:67:fa:96:de:37:98:e0:09:9e:3c:59:ff:41:5d:f5:a2:ef: fa:0c:e6:a9:51:6b:59:f8:b7:3f:18:e6:af:e9:a5:4c:57:5d: 31:b5:0e:02:08:7c:8d:c2:3c:25:8e:60:ac:98:3f:61:7f:aa: 8f:d4:87:0e:23:22:4d:0d:90:e9:1f:64:1d:de:4c:8e:62:98: af:a7:c9:9e:b9:5d:a3:71:51:c9:eb:79:a2:2d:a2:34:c0:42: b2:29:8b:b6:e1:c0:c9:cb:d4:21:c2:68:cc:90:1e:69:33:8e: b6:29:86:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNGOUUxMTAvBgNVBAUTKDVDMkM1ODI3QzRFODk5QkMyQTUwMzQwNkM1Q0IwOUIx OEUxMzNGQzYwHhcNMjUwNjA0MjE1MjEwWhcNMjUwNjExMjE1MjEwWjAYMRYwFAYD VQQDEw02ODQwYzAwYi1hN2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZY5gDRIUQTFm1aoOD8kUzGrdkvtm1Fx/HVcfYs/iQOxw9WwTabse0zGs/i/ xDrF+PgTFKkXrJgSWOB+Ce65SdhSsMdKGpBBz+h3eVivxReLn2rh05G5yGLJ3b2W KRhAnu6v/mrg0GNZ0LuUkci7oO5WoLcEInIkZn1hI8U6BytndQGEsCdiZfeqmrMl smE85Op8pIV20FMn4SOFdy9X/+ry/cX4prA7BCWtnu5GIA5GagEG6k3jpwAyDXOZ nMTaW8EWNdYamL/yZkSfTqN0SSl+BZWjpRcOEzAEmJ2MSRxoLfSEB8EBRg5qorRE tAyjHe1sZ7hdlzQybXUhXiSYUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnkJp4T KEfoLJBRu0N+/W6Xsxs2MB8GA1UdIwQYMBaAFFwsWCfE6Jm8KlA0BsXLCbGOEz/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0Y5RS8wMEQ4Qzg4QzUz QUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21id3FVRFFHeGNzSnNZNFRQ OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDeFlKOFRvbWJ3cVVEUUd4Y3NKc1k0VFA4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Y5RS8wMEQ4Qzg4QzUzQUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21i d3FVRFFHeGNzSnNZNFRQOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjkCI+/TShxp2hjuvwn2u22CUA8CFOhiIk7sroDZoOPtJSf8tHr5IU zpzkPeRy8wOASzx+Qj9xcy3JJSGTN2YhS5w1RwBCE8KBvPV1IkniBdxc5j5KjbMw G6kPJLTw3Tl3ACglJ5hf01ypp2IfdQOpynCMDhx56rfIJzuYQ922DXAW5k9o7oN+ hP/dsRWnZK53Z/qW3jeY4AmePFn/QV31ou/6DOapUWtZ+Lc/GOav6aVMV10xtQ4C CHyNwjwljmCsmD9hf6qP1IcOIyJNDZDpH2Qd3kyOYpivp8meuV2jcVHJ63miLaI0 wEKyKYu24cDJy9QhwmjMkB5pM462KYbi -----END CERTIFICATE-----Generated at Thu Jun 5 19:20:43 2025 by rpki-client