$ rpki-client -vvf rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft File: xw3ieKt3JtKco6jAJAeqW64S7Ao.mft (raw, json) Hash identifier: pyLp8MJwdaEV1FQeprMGQ+rWSANLjrdzPPBq1sQvzvY= Subject key identifier: 9B:B5:94:02:92:DD:07:11:07:20:8B:47:A5:33:EB:1A:77:27:8F:A0 Authority key identifier: C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A Certificate issuer: /CN=A918D323/serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft Manifest number: D3 Signing time: Sat 07 Jun 2025 05:12:55 +0000 Manifest this update: Sat 07 Jun 2025 05:12:54 +0000 Manifest next update: Sat 14 Jun 2025 05:12:54 +0000 Files and hashes: 1: xw3ieKt3JtKco6jAJAeqW64S7Ao.crl (hash: GHIzsGYAxxNIsJzRSUFk6/4uDuRIikcVnLZ1FZc+gek=) 2: CC166DAC0A0811EFBE7E465EC4F9AE02.roa (hash: C3Ga1a9eb1Df3VllPQUKdb207TqBrmGNq5XYCS2u3O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 05:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D323, serialNumber=C70DE278AB7726D29CA3A8C02407AA5BAE12EC0A Validity Not Before: Jun 7 05:12:54 2025 GMT Not After : Jun 14 05:12:54 2025 GMT Subject: CN=6843ca57-b152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:e6:66:33:15:ea:86:b2:36:30:0d:99:38: 08:d0:84:ef:87:7f:d3:89:9e:91:9d:eb:1b:3b:f5: 0d:47:0a:55:09:3a:12:8d:be:a7:dd:64:da:7d:41: cb:35:59:c8:48:d8:5e:83:f2:38:48:b1:a2:57:93: a2:74:cd:b4:e0:6d:21:63:c4:6f:f8:be:e8:a4:aa: d0:12:96:c2:d4:2a:b5:ef:ed:61:be:b0:9e:25:08: 63:57:ed:79:ac:1a:94:42:2a:8c:77:b9:01:5b:49: 44:32:91:08:18:99:9e:64:93:f5:e2:4a:83:eb:6e: 0e:97:41:6a:a4:be:8c:55:19:a0:d6:c7:59:b5:5e: cc:ca:09:9f:a8:a1:ba:5d:f5:05:3b:10:50:52:e7: 60:8a:51:26:47:4f:e3:b1:6d:ce:0a:40:be:aa:3f: 07:03:29:79:e7:0d:22:9f:e3:75:c7:11:0d:8c:0f: b3:53:83:7e:92:e7:1d:43:ba:24:86:d0:58:7d:17: 28:67:12:c8:03:6b:5a:94:a3:7b:c3:a8:9a:4b:7f: 0e:2d:7b:56:76:30:c4:e4:01:80:7d:73:80:23:e4: 9f:2d:07:82:0d:39:f4:b5:10:a6:05:76:b7:1d:c2: 84:d2:17:31:ad:8b:e4:8e:c6:12:d8:a7:fa:2b:1e: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B5:94:02:92:DD:07:11:07:20:8B:47:A5:33:EB:1A:77:27:8F:A0 X509v3 Authority Key Identifier: keyid:C7:0D:E2:78:AB:77:26:D2:9C:A3:A8:C0:24:07:AA:5B:AE:12:EC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xw3ieKt3JtKco6jAJAeqW64S7Ao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D323/220A1FD809EB11EFBC4D1534C4F9AE02/xw3ieKt3JtKco6jAJAeqW64S7Ao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:af:d6:71:29:5f:3f:7d:6e:75:84:2c:fd:a4:a5:49:29:dd: 6d:fa:65:ec:b1:68:60:fb:ff:fd:51:51:08:b0:42:53:7a:95: 99:e5:60:f7:8a:f5:f0:a1:2e:40:0a:cb:5f:f7:68:28:d9:63: 1b:9c:b7:d0:08:6d:31:b1:02:c6:d9:49:a8:e3:0b:5f:fd:8c: f0:3f:6f:59:51:b6:e8:91:e7:eb:8c:ce:fd:97:f1:ba:ec:9b: 70:2c:93:83:fb:19:d6:3c:3c:af:05:b6:26:c0:ca:e8:b6:11: 19:fb:bd:63:ec:5b:37:6b:5d:64:0c:69:c8:cc:ae:71:6e:98: c1:10:36:fc:7e:e8:59:22:53:5c:ce:f6:aa:33:05:f0:6f:a0: c6:96:3f:dc:53:64:2d:98:57:ef:11:85:00:a2:0a:dd:d0:00: a7:7f:b5:fb:ca:1d:ad:f1:76:a9:25:d5:76:45:c5:1c:b6:b7: de:49:1c:2b:59:93:3b:7c:2c:fa:6c:e9:db:65:6c:a9:ea:80: 46:8c:31:73:7f:23:d3:70:54:4c:25:18:d6:ff:61:4b:bf:15: 3d:31:37:ee:0c:19:be:c8:ad:21:d4:b2:60:77:99:4c:de:71: af:22:e8:ee:5d:ce:c2:17:a7:47:1b:b9:58:ca:02:ba:bc:77: 84:36:77:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQzMjMxMTAvBgNVBAUTKEM3MERFMjc4QUI3NzI2RDI5Q0EzQThDMDI0MDdBQTVC QUUxMkVDMEEwHhcNMjUwNjA3MDUxMjU0WhcNMjUwNjE0MDUxMjU0WjAYMRYwFAYD VQQDEw02ODQzY2E1Ny1iMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+XmZjMV6oayNjANmTgI0ITvh3/TiZ6RnesbO/UNRwpVCToSjb6n3WTafUHL NVnISNheg/I4SLGiV5OidM204G0hY8Rv+L7opKrQEpbC1Cq17+1hvrCeJQhjV+15 rBqUQiqMd7kBW0lEMpEIGJmeZJP14kqD624Ol0FqpL6MVRmg1sdZtV7MygmfqKG6 XfUFOxBQUudgilEmR0/jsW3OCkC+qj8HAyl55w0in+N1xxENjA+zU4N+kucdQ7ok htBYfRcoZxLIA2talKN7w6iaS38OLXtWdjDE5AGAfXOAI+SfLQeCDTn0tRCmBXa3 HcKE0hcxrYvkjsYS2Kf6Kx6zbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJu1lAKS 3QcRByCLR6Uz6xp3J4+gMB8GA1UdIwQYMBaAFMcN4nirdybSnKOowCQHqluuEuwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDMyMy8yMjBBMUZEODA5 RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0S2NvNmpBSkFlcVc2NFM3 QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3M2llS3QzSnRLY282akFKQWVxVzY0UzdBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDMyMy8yMjBBMUZEODA5RUIxMUVGQkM0RDE1MzRDNEY5QUUwMi94dzNpZUt0M0p0 S2NvNmpBSkFlcVc2NFM3QW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/r9ZxKV8/fW51hCz9pKVJKd1t+mXssWhg+//9UVEIsEJTepWZ5WD3 ivXwoS5ACstf92go2WMbnLfQCG0xsQLG2Umo4wtf/YzwP29ZUbbokefrjM79l/G6 7JtwLJOD+xnWPDyvBbYmwMrothEZ+71j7Fs3a11kDGnIzK5xbpjBEDb8fuhZIlNc zvaqMwXwb6DGlj/cU2QtmFfvEYUAogrd0ACnf7X7yh2t8XapJdV2RcUctrfeSRwr WZM7fCz6bOnbZWyp6oBGjDFzfyPTcFRMJRjW/2FLvxU9MTfuDBm+yK0h1LJgd5lM 3nGvIujuXc7CF6dHG7lYygK6vHeENne9 -----END CERTIFICATE-----Generated at Mon Jun 9 00:14:55 2025 by rpki-client