$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft File: xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json) Hash identifier: PxyLKkcDw6iK7VT0H6pzEfjwAT0/+a6UUg3wCdMZHKc= Subject key identifier: FB:95:77:45:2C:34:9B:8B:4C:7D:E7:C8:54:D8:6A:6F:FA:A8:9E:E3 Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Certificate serial: 1CC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft Manifest number: 1C86 Signing time: Fri 30 May 2025 16:21:45 +0000 Manifest this update: Fri 30 May 2025 16:21:45 +0000 Manifest next update: Fri 06 Jun 2025 16:21:45 +0000 Files and hashes: 1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: ocPB7T0NFcxF++jegyV9cS4vHHtkF2KdxRhLu02+dMs=) 2: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: Lk2qEHSCNbYOjvU+PcwacX3VW6CH6qyKSanfWEzTYmU=) 3: A149F286EFD311EFB37AB53EC4F9AE02.roa (hash: 7lOYsVaaqHqx4pgPOBBbAkvs7oMzJU4VOgvj6HMpoQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7362 (0x1cc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Validity Not Before: May 30 16:21:45 2025 GMT Not After : Jun 6 16:21:45 2025 GMT Subject: CN=6839db19-03f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c7:2f:27:d4:3f:35:ad:44:5e:d1:4f:c2:8a: 83:2e:97:d8:36:60:1e:82:1b:90:4c:34:20:ae:bb: 72:4c:c1:ce:ed:2a:a1:ee:ca:31:6f:1b:69:f7:98: 84:90:17:f7:2f:7f:99:cf:f5:32:88:90:88:83:d9: a8:ef:a1:ef:b8:e6:29:82:26:63:33:7a:08:7f:27: 3f:e9:23:66:93:83:0c:c4:fc:29:a1:1a:50:62:c8: 4e:c1:1c:8c:f7:a6:a4:6f:23:a4:4d:98:59:a4:8e: e4:0a:bd:d0:cc:5d:7d:7b:d9:18:0b:a3:28:5f:46: d7:63:b5:1f:e3:e7:2a:2d:14:f0:b7:ac:a3:b3:3c: 3f:d2:4c:86:71:44:ca:52:af:20:3d:26:13:b8:5b: a4:b6:19:86:0e:5d:cd:17:db:b3:51:8c:50:62:e9: 66:ac:1a:1a:10:e7:bb:e6:b4:d0:3d:dc:dc:7b:1e: f2:4e:0d:82:82:d3:f0:6b:61:6e:31:bc:41:ff:5c: 48:d1:dc:99:db:53:fb:44:08:05:82:e2:14:98:24: 9e:79:8a:c2:b6:39:fc:4d:bf:d9:e7:55:c2:11:88: 99:d0:6b:af:d0:03:6f:cc:2e:e4:7d:1d:72:d5:71: d4:6d:a7:f1:e0:41:20:63:eb:f4:bf:75:c2:ae:82: be:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:95:77:45:2C:34:9B:8B:4C:7D:E7:C8:54:D8:6A:6F:FA:A8:9E:E3 X509v3 Authority Key Identifier: keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ed:a7:bc:2c:01:92:83:1b:62:24:bd:08:59:6c:b7:33:f9: ee:b4:bc:32:fa:37:1d:92:6a:fb:dc:16:3b:e4:05:76:85:0b: b0:37:c9:a5:25:ac:aa:c0:16:b8:ea:ff:33:9f:d8:87:3d:1e: 9c:cf:e9:a9:d8:0b:a3:87:55:ed:5c:75:32:f5:cc:7e:ec:31: 56:68:2a:ac:6c:97:c2:0e:0c:9b:d8:6d:e1:94:93:e0:71:09: d6:29:d2:97:c4:72:d8:1e:a1:d5:e4:ff:2d:4a:f2:c0:23:3d: f9:91:ca:d8:f9:e2:fb:9e:94:09:66:26:d2:87:04:dd:c5:30: fa:fa:87:d0:10:39:ea:2a:c1:2f:40:51:44:c7:e9:60:dc:d5: 74:c9:34:e9:32:fc:1b:78:ec:3b:c6:ff:73:22:66:a0:a9:bc: 8f:4a:04:22:08:27:eb:bb:e6:bf:15:52:c6:f6:77:13:c6:d5: 14:93:83:cc:91:ed:f0:7c:f4:6f:6e:56:14:7d:74:da:ea:e4: dc:82:40:00:62:d1:a4:7f:89:27:7f:b9:9a:89:d8:7f:90:d2: b8:af:c3:d4:07:ac:9f:40:eb:b5:89:af:4b:90:ef:8e:38:3c: 99:56:52:61:2e:c2:ed:ae:d8:ae:15:dc:37:0e:66:a9:ee:8b: be:19:e1:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzOTAxMTAvBgNVBAUTKEM2NDMzQzQ5RTYzQ0Q5MjAzNUIzMDdFOEY3OTYzNzYw OEZFQURCRjUwHhcNMjUwNTMwMTYyMTQ1WhcNMjUwNjA2MTYyMTQ1WjAYMRYwFAYD VQQDEw02ODM5ZGIxOS0wM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ccvJ9Q/Na1EXtFPwoqDLpfYNmAeghuQTDQgrrtyTMHO7Sqh7soxbxtp95iE kBf3L3+Zz/UyiJCIg9mo76HvuOYpgiZjM3oIfyc/6SNmk4MMxPwpoRpQYshOwRyM 96akbyOkTZhZpI7kCr3QzF19e9kYC6MoX0bXY7Uf4+cqLRTwt6yjszw/0kyGcUTK Uq8gPSYTuFukthmGDl3NF9uzUYxQYulmrBoaEOe75rTQPdzcex7yTg2CgtPwa2Fu MbxB/1xI0dyZ21P7RAgFguIUmCSeeYrCtjn8Tb/Z51XCEYiZ0Guv0ANvzC7kfR1y 1XHUbafx4EEgY+v0v3XCroK+kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuVd0Us NJuLTH3nyFTYam/6qJ7jMB8GA1UdIwQYMBaAFMZDPEnmPNkgNbMH6PeWN2CP6tv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDM5MC8wRTkzNTRGQ0RD NUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJTQTFzd2ZvOTVZM1lJX3Ey X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrTThTZVk4MlNBMXN3Zm85NVkzWUlfcTJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDM5MC8wRTkzNTRGQ0RDNUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJT QTFzd2ZvOTVZM1lJX3EyX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA7ae8LAGSgxtiJL0IWWy3M/nutLwy+jcdkmr73BY75AV2hQuwN8ml JayqwBa46v8zn9iHPR6cz+mp2Aujh1XtXHUy9cx+7DFWaCqsbJfCDgyb2G3hlJPg cQnWKdKXxHLYHqHV5P8tSvLAIz35kcrY+eL7npQJZibShwTdxTD6+ofQEDnqKsEv QFFEx+lg3NV0yTTpMvwbeOw7xv9zImagqbyPSgQiCCfru+a/FVLG9ncTxtUUk4PM ke3wfPRvblYUfXTa6uTcgkAAYtGkf4knf7maidh/kNK4r8PUB6yfQOu1ia9LkO+O ODyZVlJhLsLtrtiuFdw3Dmap7ou+GeHR -----END CERTIFICATE-----Generated at Sat May 31 17:20:38 2025 by rpki-client