$ rpki-client -vvf rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft File: xz6_TxX6Jikr9a24ioZXfsOnHN4.mft (raw, json) Hash identifier: XqjvC+4oKSsBZtMr8GEk2ILVjAyTfwSCkTfEWyX7JwY= Subject key identifier: 6A:B2:0D:7C:AC:08:4B:E2:BF:AC:08:9B:F9:48:BF:3B:82:2D:BE:C6 Authority key identifier: C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE Certificate issuer: /CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE Certificate serial: 12F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft Manifest number: 12EE Signing time: Fri 30 May 2025 17:14:07 +0000 Manifest this update: Fri 30 May 2025 17:14:07 +0000 Manifest next update: Fri 06 Jun 2025 17:14:07 +0000 Files and hashes: 1: xz6_TxX6Jikr9a24ioZXfsOnHN4.crl (hash: WEzOzyVZI2gfURJWt0GO+ijOCkld2qXOLvh3aFfQmpQ=) 2: FF3B3F84B63311E8BAD5A95EC4F9AE02.roa (hash: 0tM/V7nX9hi4ETzuWiBmb9YtIWsrgFEIcg6fokAj5jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4856 (0x12f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161EA6, serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE Validity Not Before: May 30 17:14:07 2025 GMT Not After : Jun 6 17:14:07 2025 GMT Subject: CN=6839e75f-e7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:68:21:9b:91:b7:08:a6:5e:9c:87:a2:45:4b: 6d:48:d9:7e:da:b5:d4:d5:51:4a:3d:f9:35:e5:e6: 01:e9:f2:4f:4d:d6:30:3c:71:95:b8:e5:aa:f3:2f: 4f:50:6b:ff:6a:2c:45:03:73:97:ba:df:40:cf:4c: 82:cc:7b:9c:73:2a:59:33:64:92:24:88:89:8d:78: 7c:b9:c1:ca:f7:91:1f:14:7b:31:db:f2:a1:24:7d: 36:8d:3e:ee:96:df:c7:30:db:22:bb:45:d1:1c:e3: fc:38:64:ce:1a:e0:c5:86:66:28:d8:fc:2e:1c:ea: 1c:ef:69:7b:5d:9c:10:cd:d3:5e:d7:6c:f4:26:44: c6:fa:29:92:70:29:52:3c:d0:e5:0a:69:47:9f:64: 1c:9f:44:46:0f:4e:89:c9:c1:ae:c0:cc:7b:f7:bc: 5c:ee:e9:ef:19:3e:3e:54:a2:46:82:77:1c:64:95: 55:86:56:dd:21:d0:8a:ba:d0:35:4f:36:89:93:32: 21:a9:3f:ac:a8:7c:c3:1f:27:05:d6:b7:bf:66:1d: 89:3d:28:2c:d1:73:f8:e9:33:b2:76:fe:c1:23:0a: 90:61:9d:09:32:95:f7:c4:86:7e:55:37:39:07:c1: 79:73:77:ac:4a:14:4b:99:b4:2a:8c:47:d8:b8:47: de:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B2:0D:7C:AC:08:4B:E2:BF:AC:08:9B:F9:48:BF:3B:82:2D:BE:C6 X509v3 Authority Key Identifier: keyid:C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:b2:a0:c2:b4:83:c9:59:9b:4e:26:3d:f4:36:59:77:cc:03: 4e:e4:c9:11:55:85:e2:fc:fc:81:bc:d2:5c:29:e1:c9:44:62: 78:ae:5c:1e:4b:1b:f2:2a:56:15:78:12:1b:6b:9d:a4:bf:52: fb:87:89:1e:9a:98:5f:d9:86:10:5d:5d:2d:35:d9:94:72:1a: d7:b7:f2:18:51:81:9a:c7:12:9b:8d:a9:d9:57:2d:80:20:72: f9:a9:19:1c:c8:1a:5c:51:d2:5f:cb:a9:ce:d3:9c:c7:c0:dd: ae:f3:97:71:7f:53:80:f7:43:65:84:60:4f:5d:c0:88:3d:f4: 30:75:93:78:23:32:2d:ed:06:b2:92:e4:fc:1d:2e:89:09:f4: 1e:9b:7b:ba:63:32:ac:6a:c9:4f:a7:02:e0:7a:1d:c7:0f:6a: 55:8b:4b:95:33:f5:33:e5:3c:52:75:92:f0:fa:68:86:4b:22: f4:fb:bf:11:5f:a8:41:cf:d5:cd:0d:b0:a1:75:37:c3:85:a0: 5c:b9:c9:61:37:c2:3d:82:12:ef:41:5b:78:25:eb:47:2a:53: bd:56:2e:6f:f0:df:a4:8a:6a:42:39:a7:af:c9:db:15:c2:a2: 0a:44:29:a8:40:0e:8a:bc:aa:9b:94:d8:6d:90:30:e0:9a:29: 57:05:44:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFFQTYxMTAvBgNVBAUTKEM3M0VCRjRGMTVGQTI2MjkyQkY1QURCODhBODY1NzdF QzNBNzFDREUwHhcNMjUwNTMwMTcxNDA3WhcNMjUwNjA2MTcxNDA3WjAYMRYwFAYD VQQDEw02ODM5ZTc1Zi1lN2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mghm5G3CKZenIeiRUttSNl+2rXU1VFKPfk15eYB6fJPTdYwPHGVuOWq8y9P UGv/aixFA3OXut9Az0yCzHuccypZM2SSJIiJjXh8ucHK95EfFHsx2/KhJH02jT7u lt/HMNsiu0XRHOP8OGTOGuDFhmYo2PwuHOoc72l7XZwQzdNe12z0JkTG+imScClS PNDlCmlHn2Qcn0RGD06JycGuwMx797xc7unvGT4+VKJGgnccZJVVhlbdIdCKutA1 TzaJkzIhqT+sqHzDHycF1re/Zh2JPSgs0XP46TOydv7BIwqQYZ0JMpX3xIZ+VTc5 B8F5c3esShRLmbQqjEfYuEfeKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqyDXys CEviv6wIm/lIvzuCLb7GMB8GA1UdIwQYMBaAFMc+v08V+iYpK/WtuIqGV37Dpxze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUVBNi8xQURFMkUyNkI2 MzAxMUU4OTgyQUJDNTNDNEY5QUUwMi94ejZfVHhYNkppa3I5YTI0aW9aWGZzT25I TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h6Nl9UeFg2SmlrcjlhMjRpb1pYZnNPbkhONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUVBNi8xQURFMkUyNkI2MzAxMUU4OTgyQUJDNTNDNEY5QUUwMi94ejZfVHhYNkpp a3I5YTI0aW9aWGZzT25ITjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzsqDCtIPJWZtOJj30Nll3zANO5MkRVYXi/PyBvNJcKeHJRGJ4rlwe SxvyKlYVeBIba52kv1L7h4kemphf2YYQXV0tNdmUchrXt/IYUYGaxxKbjanZVy2A IHL5qRkcyBpcUdJfy6nO05zHwN2u85dxf1OA90NlhGBPXcCIPfQwdZN4IzIt7Qay kuT8HS6JCfQem3u6YzKsaslPpwLgeh3HD2pVi0uVM/Uz5TxSdZLw+miGSyL0+78R X6hBz9XNDbChdTfDhaBcuclhN8I9ghLvQVt4JetHKlO9Vi5v8N+kimpCOaevydsV wqIKRCmoQA6KvKqblNhtkDDgmilXBUSZ -----END CERTIFICATE-----Generated at Sat May 31 16:57:43 2025 by rpki-client