$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft File: 0XRFPpVj66_LuzKsxs-Gb72OIvA.mft (raw, json) Hash identifier: P1dDp+TF496YexjVXwzUS7Y2C/iFG1kmreFDm9tdfjo= Subject key identifier: BA:7E:E6:AC:5D:B6:36:17:CE:6D:E8:86:FC:52:C9:13:E9:DD:F2:5C Authority key identifier: D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0 Certificate issuer: /CN=A9187325/serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft Manifest number: 63 Signing time: Thu 05 Jun 2025 06:25:08 +0000 Manifest this update: Thu 05 Jun 2025 06:25:08 +0000 Manifest next update: Thu 12 Jun 2025 06:25:08 +0000 Files and hashes: 1: 0XRFPpVj66_LuzKsxs-Gb72OIvA.crl (hash: yCfvUBa9LofG0re/xAKaLyqP4NcPuZtoLETwwtODJJk=) 2: D9DB29CCAAEF11EF9187EE2AC4F9AE02.roa (hash: zhUDBt2wZDhknIJUCNitYM8EJRnUn0t65SOwAtO1PEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 06:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187325, serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0 Validity Not Before: Jun 5 06:25:08 2025 GMT Not After : Jun 12 06:25:08 2025 GMT Subject: CN=68413844-8215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d0:1f:e4:c8:33:3c:71:c5:9f:60:6c:8d:ed: a3:6b:1a:2e:40:95:2a:88:8c:ee:21:4b:4f:e0:19: 83:2b:44:1e:b7:e6:56:01:7e:98:a4:41:16:6e:a1: b8:af:a7:b0:28:1b:45:f5:ad:95:4e:d8:4b:dc:21: cc:93:36:27:44:ed:f2:f6:a0:d1:b6:ba:47:16:be: 24:77:60:a3:3f:41:45:a8:db:85:96:8b:d9:b3:d0: 3e:34:26:9e:1c:3d:fe:56:95:dc:71:03:cb:9b:fc: de:d0:74:db:63:12:d1:2a:2a:d4:98:1f:25:53:d5: 43:5d:06:c2:ca:47:32:10:ef:3e:c8:56:77:92:10: 21:bf:c8:f3:f1:77:ca:6b:95:4c:bb:1d:35:16:62: db:44:02:5f:35:a4:fb:ff:9e:db:7e:cf:05:30:fb: 4e:79:ec:83:74:ed:76:41:4a:c7:68:17:a1:e3:a6: 8a:00:93:6a:2d:ba:e1:bd:a4:0b:87:d1:ae:c5:81: 12:a4:1c:d0:f4:f3:99:3f:c8:0a:25:b4:c1:ec:a1: 3f:d9:7d:d7:16:c6:dc:24:81:75:1a:15:31:8b:73: 15:68:13:ff:4a:dd:1d:e2:03:61:39:e0:04:2f:9f: cc:4d:79:d0:57:34:1c:fe:93:cf:9c:da:68:ec:2b: 34:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7E:E6:AC:5D:B6:36:17:CE:6D:E8:86:FC:52:C9:13:E9:DD:F2:5C X509v3 Authority Key Identifier: keyid:D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:be:52:0c:6d:aa:be:97:3d:f3:79:6e:4b:aa:99:8d:69:ce: 64:63:a9:8c:77:00:51:a1:25:f4:87:9f:a8:b3:7e:bf:c3:3e: 1a:7c:fc:dd:06:4d:02:af:d9:40:e1:98:c1:06:ba:af:bc:df: 54:46:c5:1f:ff:a3:c9:7a:05:24:65:89:81:9b:9f:e9:71:32: d7:d1:5a:44:16:1b:11:c7:99:27:65:10:d6:48:0e:c2:2a:a2: bc:3e:76:9e:08:a8:e5:c6:b2:76:bf:14:43:88:69:2f:0e:1f: 97:5e:ce:08:df:4c:5b:0c:f7:00:93:9e:12:1a:0c:31:f7:11: b5:88:18:5e:44:33:07:bc:c3:67:36:61:b2:e0:13:8a:bc:21: d8:d5:52:60:4b:c6:54:dc:03:ca:9f:96:2e:5b:e9:c7:cc:dc: d4:52:e1:82:04:36:5a:af:21:f1:c6:4b:7d:a3:5e:14:03:5d: 67:82:1f:8f:7c:cf:ff:b6:54:11:2d:91:e5:2e:45:84:2d:ce: 63:27:bd:1c:83:f5:af:f0:fe:c2:f4:b3:ce:6f:b9:0b:f4:1e: 50:f6:5f:18:71:78:18:a4:62:d9:f1:74:61:fb:bc:88:05:3f: ba:9c:9a:19:92:0c:3d:a3:d3:1d:9e:10:f4:be:13:4d:e9:15: 31:81:73:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzMyNTExMC8GA1UEBRMoRDE3NDQ1M0U5NTYzRUJBRkNCQkIzMkFDQzZDRjg2NkZC RDhFMjJGMDAeFw0yNTA2MDUwNjI1MDhaFw0yNTA2MTIwNjI1MDhaMBgxFjAUBgNV BAMTDTY4NDEzODQ0LTgyMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU0B/kyDM8ccWfYGyN7aNrGi5AlSqIjO4hS0/gGYMrRB635lYBfpikQRZuobiv p7AoG0X1rZVO2EvcIcyTNidE7fL2oNG2ukcWviR3YKM/QUWo24WWi9mz0D40Jp4c Pf5WldxxA8ub/N7QdNtjEtEqKtSYHyVT1UNdBsLKRzIQ7z7IVneSECG/yPPxd8pr lUy7HTUWYttEAl81pPv/ntt+zwUw+0557IN07XZBSsdoF6HjpooAk2otuuG9pAuH 0a7FgRKkHND085k/yAoltMHsoT/ZfdcWxtwkgXUaFTGLcxVoE/9K3R3iA2E54AQv n8xNedBXNBz+k8+c2mjsKzSrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUun7mrF22 NhfObeiG/FLJE+nd8lwwHwYDVR0jBBgwFoAU0XRFPpVj66/LuzKsxs+Gb72OIvAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3MzI1LzdCMzM0QTRBQUFF OTExRUZCNzIxQzI1REM0RjlBRTAyLzBYUkZQcFZqNjZfTHV6S3N4cy1HYjcyT0l2 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMFhSRlBwVmo2Nl9MdXpLc3hzLUdiNzJPSXZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 MzI1LzdCMzM0QTRBQUFFOTExRUZCNzIxQzI1REM0RjlBRTAyLzBYUkZQcFZqNjZf THV6S3N4cy1HYjcyT0l2QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGy+Ugxtqr6XPfN5bkuqmY1pzmRjqYx3AFGhJfSHn6izfr/DPhp8/N0G TQKv2UDhmMEGuq+831RGxR//o8l6BSRliYGbn+lxMtfRWkQWGxHHmSdlENZIDsIq orw+dp4IqOXGsna/FEOIaS8OH5dezgjfTFsM9wCTnhIaDDH3EbWIGF5EMwe8w2c2 YbLgE4q8IdjVUmBLxlTcA8qfli5b6cfM3NRS4YIENlqvIfHGS32jXhQDXWeCH498 z/+2VBEtkeUuRYQtzmMnvRyD9a/w/sL0s85vuQv0HlD2XxhxeBikYtnxdGH7vIgF P7qcmhmSDD2j0x2eEPS+E03pFTGBc8U= -----END CERTIFICATE-----Generated at Thu Jun 5 20:06:36 2025 by rpki-client