$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json) Hash identifier: q3JZA14Zv+7LFADpwym0snC+iqfJG8I8HWSos7T1sQM= Subject key identifier: C3:E0:46:EE:9C:24:C5:B0:4E:CE:57:35:5C:8E:12:B8:DA:E9:35:EE Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft Manifest number: 01E4 Signing time: Tue 01 Jul 2025 03:07:19 +0000 Manifest this update: Tue 01 Jul 2025 03:07:18 +0000 Manifest next update: Tue 08 Jul 2025 03:07:18 +0000 Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: ya4q72ReFFfaFdDieR2mf8c/BqP8yrLz+LEJZUfdAQA=) 2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: ziWoAY2hbvtxePvnZWAtSB5jp5zkw3S8bF9M6H2eX84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EC0, serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Validity Not Before: Jul 1 03:07:18 2025 GMT Not After : Jul 8 03:07:18 2025 GMT Subject: CN=686350e7-f91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:72:a0:3c:f3:48:75:55:f5:56:88:d0:d2:15: 99:13:db:65:05:0f:80:1a:3a:9b:af:bb:28:4b:a8: d0:7c:dd:2b:7f:c2:ab:45:52:1b:09:1e:6d:c8:23: d4:f8:77:89:58:24:66:01:70:36:fc:7a:00:b9:8e: 45:6e:a7:fb:c9:8d:51:da:49:ce:8b:99:72:83:1a: a3:96:22:ae:58:5d:45:15:10:f2:14:62:b7:ed:ee: 2b:65:fc:98:cb:5a:87:df:a7:80:d5:5d:32:21:09: 19:cc:0b:7b:0c:7e:0e:70:4f:93:49:51:f1:66:49: 12:0e:39:91:c1:cb:ef:23:1a:26:8f:a5:06:d5:67: 0d:9a:c9:33:6e:7c:79:2b:db:6b:4e:6b:56:9c:f6: 48:93:ee:01:6e:ef:bf:05:f6:c6:7c:17:5f:9b:b2: 26:3a:16:22:e0:0e:1f:c3:a7:44:1c:b1:8a:ec:5b: 55:48:f0:47:03:9e:4e:5f:bc:80:2e:81:6c:9a:19: fb:49:21:fc:28:36:78:d4:2c:22:b9:22:df:62:6c: 6c:c7:9d:3c:c7:5c:53:cd:60:27:9d:1f:94:e5:49: c1:f8:09:d9:66:41:9d:8a:f5:e4:b9:a0:ea:54:92: 0f:72:c8:b1:2c:b3:ef:44:d4:a2:64:9e:58:e7:2c: 8a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E0:46:EE:9C:24:C5:B0:4E:CE:57:35:5C:8E:12:B8:DA:E9:35:EE X509v3 Authority Key Identifier: keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:35:76:da:66:d6:bd:fc:6f:f8:68:68:0f:47:8c:43:aa:0a: 5a:32:5a:e5:84:2f:31:d1:85:ee:4e:cf:5a:6f:70:16:58:54: 3f:2e:b2:1d:7f:f6:f6:6d:59:75:3e:71:d0:94:2d:2c:ed:f3: 55:83:03:1a:c2:b8:4e:8e:8a:05:8e:6b:71:24:c5:4c:e1:52: 51:ff:17:4e:07:2f:e3:30:36:64:27:f5:31:e6:0b:d1:f4:7d: c8:f2:92:a8:a9:26:d2:9a:1d:5d:aa:09:2f:b6:8c:5e:98:83: 33:eb:21:55:05:60:74:04:02:84:6f:2b:ec:92:f8:81:71:88: 1f:f3:8d:69:1e:59:52:b9:d4:8e:f3:fc:f6:96:dd:c0:fa:12: 75:c1:f1:f7:d3:39:89:6c:cd:62:7e:1d:5e:78:82:8c:29:ae: cd:37:3a:3a:76:06:06:16:0b:51:9a:a3:5e:4f:7b:49:f6:53: 21:1c:ef:41:fd:2e:39:e7:d4:af:9f:35:1a:26:63:87:b6:f9: 5a:65:40:70:c2:eb:c5:ca:51:94:47:7f:d7:bb:5f:4c:c8:14: b6:c2:7a:15:36:5a:63:83:e2:20:b9:b9:e0:83:1d:73:a0:c8: 6d:8e:d3:fb:fc:5e:fd:64:30:a2:d3:f9:57:65:5d:80:2d:95: 49:05:8a:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0 N0E1Qzc0NzEwHhcNMjUwNzAxMDMwNzE4WhcNMjUwNzA4MDMwNzE4WjAYMRYwFAYD VQQDEw02ODYzNTBlNy1mOTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXKgPPNIdVX1VojQ0hWZE9tlBQ+AGjqbr7soS6jQfN0rf8KrRVIbCR5tyCPU +HeJWCRmAXA2/HoAuY5Fbqf7yY1R2knOi5lygxqjliKuWF1FFRDyFGK37e4rZfyY y1qH36eA1V0yIQkZzAt7DH4OcE+TSVHxZkkSDjmRwcvvIxomj6UG1WcNmskzbnx5 K9trTmtWnPZIk+4Bbu+/BfbGfBdfm7ImOhYi4A4fw6dEHLGK7FtVSPBHA55OX7yA LoFsmhn7SSH8KDZ41CwiuSLfYmxsx508x1xTzWAnnR+U5UnB+AnZZkGdivXkuaDq VJIPcsixLLPvRNSiZJ5Y5yyKBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPgRu6c JMWwTs5XNVyOErja6TXuMB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEVDMC9EQUU2NzQwQzdGM0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBS aWNlZURuU294N2hIcGNkSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvNXbaZta9/G/4aGgPR4xDqgpaMlrlhC8x0YXuTs9ab3AWWFQ/LrId f/b2bVl1PnHQlC0s7fNVgwMawrhOjooFjmtxJMVM4VJR/xdOBy/jMDZkJ/Ux5gvR 9H3I8pKoqSbSmh1dqgkvtoxemIMz6yFVBWB0BAKEbyvskviBcYgf841pHllSudSO 8/z2lt3A+hJ1wfH30zmJbM1ifh1eeIKMKa7NNzo6dgYGFgtRmqNeT3tJ9lMhHO9B /S4559SvnzUaJmOHtvlaZUBwwuvFylGUR3/Xu19MyBS2wnoVNlpjg+Igubnggx1z oMhtjtP7/F79ZDCi0/lXZV2ALZVJBYox -----END CERTIFICATE-----Generated at Wed Jul 2 01:47:23 2025 by rpki-client