$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft File: XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft (raw, json) Hash identifier: /TP+1OYYAvRFpJgpNb40xups5etL47syW/t/3soecEg= Subject key identifier: EC:AE:B6:62:A9:BF:64:91:81:69:A4:28:B6:F9:1D:76:4E:BB:60:9C Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44 Certificate issuer: /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft Manifest number: 06 Signing time: Tue 03 Jun 2025 08:03:44 +0000 Manifest this update: Tue 03 Jun 2025 08:03:43 +0000 Manifest next update: Tue 10 Jun 2025 08:03:43 +0000 Files and hashes: 1: XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl (hash: BQ6CRR2F/MReV00oizEAQMqYrGiTv2Pj+Q8KuF8LMlE=) 2: C053613E38B311F08DB63209C4F9AE02.roa (hash: uKfaLXcOCNJdE2XGkLLuO2/nisMUjVXsuFOacDhWkTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 08:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144 Validity Not Before: Jun 3 08:03:43 2025 GMT Not After : Jun 10 08:03:43 2025 GMT Subject: CN=683eac5f-f39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:6e:65:01:d2:e4:55:f3:96:f8:e3:3c:02: d8:b1:c9:59:43:ea:4e:f9:98:d2:8b:12:a4:80:e4: 28:d9:0c:dc:96:bf:09:53:f7:8c:97:b0:a6:5d:42: 75:b3:87:eb:84:90:c2:ea:3e:e5:44:55:a5:40:f7: 2c:24:18:32:d9:49:6e:66:52:5f:10:75:fd:e6:b6: 52:1d:93:5c:4b:4f:01:4e:9c:08:5c:b8:b6:6e:1f: 8d:2f:78:e1:a7:52:79:97:5c:76:32:5e:d1:d3:0a: 88:c6:90:de:aa:6b:59:ef:70:9b:39:92:a3:ce:c0: 1f:96:2a:16:55:e7:80:e3:52:27:49:9f:59:81:ad: a0:b1:9b:7d:ef:54:d0:a0:7a:1e:43:a5:f9:6f:35: f4:cc:a4:f6:c3:f8:1b:bc:c3:db:66:51:6f:d8:8d: 74:2e:a2:6e:62:4a:c6:87:47:1a:96:9b:93:76:e5: da:13:f2:a8:e6:e9:fa:f0:91:4f:cb:0c:09:15:bd: 16:16:2c:89:e3:cf:b3:8f:7a:a3:8c:3a:9a:69:20: 83:04:10:cc:71:b9:b8:54:c9:ec:22:b3:78:9c:68: 72:20:57:45:61:97:63:b4:5f:9b:04:4b:55:f8:a9: f8:b2:35:2d:5d:4d:55:b4:96:14:80:4b:0d:44:11: a9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AE:B6:62:A9:BF:64:91:81:69:A4:28:B6:F9:1D:76:4E:BB:60:9C X509v3 Authority Key Identifier: keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0c:20:97:ba:62:65:f9:f4:da:86:65:c7:82:4c:12:d8:4a: 2d:6c:8a:51:aa:76:24:82:a6:0c:d0:df:78:b8:85:cd:41:99: 23:bb:33:26:18:d5:d2:d2:20:65:09:ad:58:fd:d3:0b:e7:11: 54:47:63:30:56:94:cf:2d:6d:a5:a8:96:85:76:59:c0:dd:6e: 8c:1e:14:3d:be:88:e0:81:b6:fc:73:0c:63:1c:98:5d:f2:ef: 79:29:d4:11:70:e6:14:b0:40:e7:ec:aa:03:28:fd:73:d7:4d: e2:a1:3f:07:cc:c1:1a:2d:b1:e0:55:dd:6c:49:a7:d3:f7:29: 1d:f7:9f:7d:06:3c:fb:96:ca:ab:bd:47:46:88:bc:86:e2:80: 91:b5:73:4a:08:2b:f6:a7:93:21:ae:2b:d3:c3:33:3b:80:ad: b0:e4:f0:ba:a5:9b:fb:e0:15:e1:55:90:48:b7:6b:ab:2d:8a: 3f:4e:60:14:80:d7:77:5a:7a:d0:fc:04:81:7f:fd:2c:52:a0: 7e:d5:27:f3:bb:f7:ac:73:22:c4:74:04:13:f9:87:8c:7b:2d: 41:39:4a:ba:92:2d:65:bb:91:e9:2b:71:00:22:d9:f4:42:9f: a6:51:6a:7c:57:95:ff:95:1e:00:ea:73:4c:46:6d:44:1e:1a: d7:8e:2d:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoNUVDNUZCMzM0RUU1MkI5MDA5Q0I5MjNDNjkzQkQyMEYw NDc4QTE0NDAeFw0yNTA2MDMwODAzNDNaFw0yNTA2MTAwODAzNDNaMBgxFjAUBgNV BAMTDTY4M2VhYzVmLWYzOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgHm5lAdLkVfOW+OM8AtixyVlD6k75mNKLEqSA5CjZDNyWvwlT94yXsKZdQnWz h+uEkMLqPuVEVaVA9ywkGDLZSW5mUl8Qdf3mtlIdk1xLTwFOnAhcuLZuH40veOGn UnmXXHYyXtHTCojGkN6qa1nvcJs5kqPOwB+WKhZV54DjUidJn1mBraCxm33vVNCg eh5DpflvNfTMpPbD+Bu8w9tmUW/YjXQuom5iSsaHRxqWm5N25doT8qjm6frwkU/L DAkVvRYWLInjz7OPeqOMOpppIIMEEMxxubhUyewis3icaHIgV0Vhl2O0X5sES1X4 qfiyNS1dTVW0lhSASw1EEambAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7K62Yqm/ ZJGBaaQotvkddk67YJwwHwYDVR0jBBgwFoAUXsX7M07lK5AJy5I8aTvSDwR4oUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzM0MDA4MDIyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL1hzWDdNMDdsSzVBSnk1SThhVHZTRHdSNG9V US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHNYN00wN2xLNUFKeTVJOGFUdlNEd1I0b1VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzM0MDA4MDIyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL1hzWDdNMDdsSzVB Snk1SThhVHZTRHdSNG9VUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH8MIJe6YmX59NqGZceCTBLYSi1silGqdiSCpgzQ33i4hc1BmSO7MyYY 1dLSIGUJrVj90wvnEVRHYzBWlM8tbaWoloV2WcDdboweFD2+iOCBtvxzDGMcmF3y 73kp1BFw5hSwQOfsqgMo/XPXTeKhPwfMwRotseBV3WxJp9P3KR33n30GPPuWyqu9 R0aIvIbigJG1c0oIK/ankyGuK9PDMzuArbDk8Lqlm/vgFeFVkEi3a6stij9OYBSA 13daetD8BIF//SxSoH7VJ/O796xzIsR0BBP5h4x7LUE5SrqSLWW7kekrcQAi2fRC n6ZRanxXlf+VHgDqc0xGbUQeGteOLYs= -----END CERTIFICATE-----Generated at Wed Jun 4 00:06:09 2025 by rpki-client