$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft File: xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json) Hash identifier: kg9eQ/Hm2GJRoLDDQko8WvgC4CimDzAPsmF+vnD1NGM= Subject key identifier: 67:0B:46:39:C3:D7:D3:3D:8E:F2:9F:C5:3B:45:0F:68:93:D2:85:68 Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 Certificate issuer: /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft Manifest number: 08 Signing time: Sat 07 Jun 2025 07:38:50 +0000 Manifest this update: Sat 07 Jun 2025 07:38:49 +0000 Manifest next update: Sat 14 Jun 2025 07:38:49 +0000 Files and hashes: 1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: wMiCsgJHAOTxg1HE8V0gY4G6/mdSCCFItPlbuJXM5ZM=) 2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: rIKd0p3e0QLGiCh3oOuC0PziP82slPgSfQtsZGWJI0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 07:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873 Validity Not Before: Jun 7 07:38:49 2025 GMT Not After : Jun 14 07:38:49 2025 GMT Subject: CN=6843ec8a-c76e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:72:7f:8b:83:3d:d9:a8:56:87:67:71:fd:c3: 76:7a:7f:e4:ed:c2:4f:32:8c:22:72:93:7f:61:b8: a2:9b:26:1b:93:e5:87:97:cb:bc:31:fb:a9:2c:cc: 05:7d:9f:2e:67:50:0d:1f:c7:f9:3d:e8:8d:7c:05: 1b:e7:b3:6c:4d:56:f8:da:3c:ac:99:64:57:b1:40: f3:70:6a:3d:57:2d:c0:73:f1:28:a6:12:a9:3d:b0: 0d:00:8b:10:b5:a4:25:33:1d:c6:a5:d7:0e:d9:68: 03:0d:cc:db:9e:7e:2c:88:ad:a4:db:ae:9c:a6:e6: 1d:f6:81:c3:7f:67:11:ae:42:f0:a6:20:d2:40:d2: 97:42:89:3d:01:d9:e4:47:68:7e:c4:1e:bf:3b:4e: 83:f5:3e:20:59:40:c2:e5:af:18:ea:a7:05:ce:44: b5:0e:bc:d1:d5:8e:4e:57:ae:60:87:49:80:9b:5b: 8c:d9:ef:db:a2:05:5a:7c:39:ee:d2:52:c1:94:88: a1:c7:0f:8b:1c:c2:d2:2d:50:89:e6:08:63:20:49: 3d:f1:0f:27:c7:e2:c2:1c:2e:10:25:c5:44:bd:bd: 09:bc:28:8b:44:6b:5a:b7:08:ab:fa:6b:4f:db:1d: cc:2a:30:ac:12:14:12:c4:40:17:6d:0c:06:5f:53: dc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0B:46:39:C3:D7:D3:3D:8E:F2:9F:C5:3B:45:0F:68:93:D2:85:68 X509v3 Authority Key Identifier: keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ac:d9:28:53:28:8d:03:e1:e1:84:c5:72:0e:78:83:8d:05: 23:3d:56:ad:50:91:92:28:44:35:e4:b9:39:62:25:22:0c:8a: 1c:b4:04:75:fc:3b:e6:02:f2:05:ba:98:4d:6a:f1:dd:f6:46: 9a:3e:e0:30:d3:d4:74:fd:6a:47:08:b4:cc:46:97:02:d2:4b: 86:94:e5:d9:58:89:bf:70:88:00:d2:63:05:6a:32:1b:4e:cf: 12:a5:60:76:37:63:30:55:c7:36:b8:56:82:f5:ae:65:28:8e: 03:b1:39:09:95:ba:ee:38:39:e9:2d:4d:41:18:33:39:7c:7d: d8:13:b9:6d:10:0f:ec:14:d6:45:ca:e3:56:01:ad:23:3d:80: 9e:32:6f:f5:1b:c9:36:62:92:6c:35:2d:59:f2:7f:48:f7:7f: de:e5:4d:84:9b:ef:99:e9:38:41:39:2c:52:92:97:61:7f:16: 5b:52:f6:8a:0f:76:7a:02:18:ca:3d:47:61:08:b5:aa:88:36: f3:1b:7f:38:ae:54:8a:e7:01:c0:b4:8c:b3:bf:b4:4d:93:8b: 4d:18:6b:3d:3a:3c:93:a0:07:88:fd:eb:08:ee:93:35:9a:7f: 89:3f:01:ea:29:85:f8:cd:b3:81:fa:15:69:de:c7:6e:7e:23: c6:65:b9:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTg1NzExMC8GA1UEBRMoQzQyNkQ0MjY0MDA2NzY1NTU5NzNERkVERTRFQjI2NDRC RUVEMjg3MzAeFw0yNTA2MDcwNzM4NDlaFw0yNTA2MTQwNzM4NDlaMBgxFjAUBgNV BAMTDTY4NDNlYzhhLWM3NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrcn+Lgz3ZqFaHZ3H9w3Z6f+Ttwk8yjCJyk39huKKbJhuT5YeXy7wx+6kszAV9 ny5nUA0fx/k96I18BRvns2xNVvjaPKyZZFexQPNwaj1XLcBz8SimEqk9sA0AixC1 pCUzHcal1w7ZaAMNzNuefiyIraTbrpym5h32gcN/ZxGuQvCmINJA0pdCiT0B2eRH aH7EHr87ToP1PiBZQMLlrxjqpwXORLUOvNHVjk5XrmCHSYCbW4zZ79uiBVp8Oe7S UsGUiKHHD4scwtItUInmCGMgST3xDyfH4sIcLhAlxUS9vQm8KItEa1q3CKv6a0/b HcwqMKwSFBLEQBdtDAZfU9xbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZwtGOcPX 0z2O8p/FO0UPaJPShWgwHwYDVR0jBBgwFoAUxCbUJkAGdlVZc9/t5OsmRL7tKHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxODU3L0MxRjczMDcyM0M5 ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxWWmM5X3Q1T3NtUkw3dEtI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveENiVUprQUdkbFZaYzlfdDVPc21STDd0S0hNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx ODU3L0MxRjczMDcyM0M5ODExRjBBRjEyNEIzOEM0RjlBRTAyL3hDYlVKa0FHZGxW WmM5X3Q1T3NtUkw3dEtITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH2s2ShTKI0D4eGExXIOeIONBSM9Vq1QkZIoRDXkuTliJSIMihy0BHX8 O+YC8gW6mE1q8d32Rpo+4DDT1HT9akcItMxGlwLSS4aU5dlYib9wiADSYwVqMhtO zxKlYHY3YzBVxza4VoL1rmUojgOxOQmVuu44OektTUEYMzl8fdgTuW0QD+wU1kXK 41YBrSM9gJ4yb/UbyTZikmw1LVnyf0j3f97lTYSb75npOEE5LFKSl2F/FltS9ooP dnoCGMo9R2EItaqINvMbfziuVIrnAcC0jLO/tE2Ti00Yaz06PJOgB4j96wjukzWa f4k/AeophfjNs4H6FWnex25+I8ZluTY= -----END CERTIFICATE-----Generated at Mon Jun 9 06:44:45 2025 by rpki-client