$ rpki-client -vvf rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft File: xDfVjxI6auBXxgjiFrtr_WWER2o.mft (raw, json) Hash identifier: lzHco/b85WBHGnRlJdq7BWL3VaLDntd4d7i8C2dkPl0= Subject key identifier: 74:63:07:19:FE:77:0D:C4:AA:FC:5F:5E:B6:D3:DB:5D:21:A7:AE:D8 Authority key identifier: C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A Certificate issuer: /CN=A9169903/serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A Certificate serial: 05CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft Manifest number: 05C4 Signing time: Mon 30 Jun 2025 23:28:30 +0000 Manifest this update: Mon 30 Jun 2025 23:28:29 +0000 Manifest next update: Mon 07 Jul 2025 23:28:29 +0000 Files and hashes: 1: xDfVjxI6auBXxgjiFrtr_WWER2o.crl (hash: S/vaj0jBBlVDkpmPm3QfN+hCe9Nh/aLVCbDoJIOTnMU=) 2: ED31D84EC81D11EBA4C0E321C4F9AE02.roa (hash: bXFPKdh1DOKKzF1VDrO1xVCyooUJXcE+RZoWJywL3IM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1482 (0x5ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169903, serialNumber=C437D58F123A6AE057C608E216BB6BFD6584476A Validity Not Before: Jun 30 23:28:29 2025 GMT Not After : Jul 7 23:28:29 2025 GMT Subject: CN=68631d9d-1ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:46:18:05:6a:32:7b:3d:6d:d6:98:ad:7d: 0d:d0:f4:c6:7b:59:fd:3f:94:2a:50:ba:df:b1:1d: 34:7d:5f:b7:a3:64:80:ec:3b:e0:cd:65:97:31:b9: d7:de:62:bd:79:c3:a3:36:ac:42:4c:58:3c:ad:e1: 56:c1:77:15:0f:ca:4e:30:1c:ee:04:2c:5a:1a:ba: bf:77:e8:03:b8:0e:2b:d4:de:b9:8a:44:a5:13:8a: a7:87:ed:f0:b3:e3:08:83:51:a8:0d:80:ea:a3:e7: 24:3c:d0:37:0a:5c:66:14:a0:8c:62:c9:8e:8b:17: d2:83:fe:34:5f:5a:37:c7:5e:4a:45:c0:5e:1c:03: 6a:29:19:93:43:80:b5:7a:39:74:7c:26:a5:0c:a1: 32:cf:87:be:0d:e4:53:51:0d:d0:0b:66:20:6f:31: 2b:6c:40:e1:33:67:c7:b2:b9:27:55:24:91:d8:af: 6d:d8:e5:46:23:ca:f5:6c:22:f7:26:8f:eb:69:ec: 28:80:80:e3:0c:d8:48:6e:65:ec:6b:bc:22:5d:49: e2:21:51:c1:49:d0:c3:59:e2:e9:df:a7:9c:58:8d: 5f:16:e3:f4:c0:ca:75:58:dc:e0:bb:50:18:dd:4c: f2:64:82:4e:85:d7:e4:7f:7b:4f:8e:4f:48:69:83: 1d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:63:07:19:FE:77:0D:C4:AA:FC:5F:5E:B6:D3:DB:5D:21:A7:AE:D8 X509v3 Authority Key Identifier: keyid:C4:37:D5:8F:12:3A:6A:E0:57:C6:08:E2:16:BB:6B:FD:65:84:47:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDfVjxI6auBXxgjiFrtr_WWER2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169903/EE6B7418C81811EB83CEEB4AC4F9AE02/xDfVjxI6auBXxgjiFrtr_WWER2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:4f:fa:e2:3c:72:40:7b:06:0c:12:1e:b5:67:89:a3:fe:95: 73:cc:c3:30:48:f6:a2:87:2d:0b:82:15:5e:f2:d5:52:69:47: c7:62:58:24:02:39:25:59:4a:1b:26:ea:f6:7d:59:96:06:3a: b1:2a:28:85:e5:44:76:0e:e6:66:7f:e4:df:55:8e:d2:ec:76: 44:2e:1d:3e:a0:eb:94:c3:2c:c2:3a:47:a1:4d:77:74:8c:f2: c8:18:a4:49:10:f5:df:6c:17:6f:36:c3:63:7b:4b:06:51:87: f2:51:65:0d:bc:3a:32:b3:16:16:a3:3f:a3:2d:47:54:dc:83: 53:e0:1c:d0:c6:b3:fd:c2:17:47:62:58:13:f4:7b:48:9d:46: e0:6b:7a:7d:77:40:8a:82:d9:d7:78:8e:56:c0:bc:bf:f5:76: 1e:22:fd:43:38:25:6b:b0:e4:86:5a:1b:72:7d:53:5f:81:58: eb:6b:66:08:b7:b0:83:69:5a:0f:e1:64:dc:4d:94:dc:7c:5f: 86:7b:f4:2c:5d:da:f9:a9:18:95:84:ab:d8:2e:81:3b:79:78: e7:b6:bd:b5:01:79:e9:65:41:1d:27:39:21:cd:fc:2b:f1:24: f8:f7:e7:ac:2e:db:11:8f:7b:a3:a4:b2:b6:3c:c8:4a:ee:75: 36:6e:33:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk5MDMxMTAvBgNVBAUTKEM0MzdENThGMTIzQTZBRTA1N0M2MDhFMjE2QkI2QkZE NjU4NDQ3NkEwHhcNMjUwNjMwMjMyODI5WhcNMjUwNzA3MjMyODI5WjAYMRYwFAYD VQQDEw02ODYzMWQ5ZC0xZmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2VGGAVqMns9bdaYrX0N0PTGe1n9P5QqULrfsR00fV+3o2SA7DvgzWWXMbnX 3mK9ecOjNqxCTFg8reFWwXcVD8pOMBzuBCxaGrq/d+gDuA4r1N65ikSlE4qnh+3w s+MIg1GoDYDqo+ckPNA3ClxmFKCMYsmOixfSg/40X1o3x15KRcBeHANqKRmTQ4C1 ejl0fCalDKEyz4e+DeRTUQ3QC2YgbzErbEDhM2fHsrknVSSR2K9t2OVGI8r1bCL3 Jo/raewogIDjDNhIbmXsa7wiXUniIVHBSdDDWeLp36ecWI1fFuP0wMp1WNzgu1AY 3UzyZIJOhdfkf3tPjk9IaYMduwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRjBxn+ dw3EqvxfXrbT210hp67YMB8GA1UdIwQYMBaAFMQ31Y8SOmrgV8YI4ha7a/1lhEdq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTkwMy9FRTZCNzQxOEM4 MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1Qlh4Z2ppRnJ0cl9XV0VS Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEZlZqeEk2YXVCWHhnamlGcnRyX1dXRVIyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTkwMy9FRTZCNzQxOEM4MTgxMUVCODNDRUVCNEFDNEY5QUUwMi94RGZWanhJNmF1 Qlh4Z2ppRnJ0cl9XV0VSMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2T/riPHJAewYMEh61Z4mj/pVzzMMwSPaihy0LghVe8tVSaUfHYlgk AjklWUobJur2fVmWBjqxKiiF5UR2DuZmf+TfVY7S7HZELh0+oOuUwyzCOkehTXd0 jPLIGKRJEPXfbBdvNsNje0sGUYfyUWUNvDoysxYWoz+jLUdU3INT4BzQxrP9whdH YlgT9HtInUbga3p9d0CKgtnXeI5WwLy/9XYeIv1DOCVrsOSGWhtyfVNfgVjra2YI t7CDaVoP4WTcTZTcfF+Ge/QsXdr5qRiVhKvYLoE7eXjntr21AXnpZUEdJzkhzfwr 8ST49+esLtsRj3ujpLK2PMhK7nU2bjP/ -----END CERTIFICATE-----Generated at Wed Jul 2 10:25:21 2025 by rpki-client