$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json) Hash identifier: lIOjm9QGKnV9wLUzO+gyIHYMka8yDbN2W5Gmlt3Dh8w= Subject key identifier: 19:70:FA:E6:32:20:71:92:6C:43:74:48:25:58:90:41:83:4D:4A:19 Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft Manifest number: 48 Signing time: Tue 03 Jun 2025 07:16:48 +0000 Manifest this update: Tue 03 Jun 2025 07:16:47 +0000 Manifest next update: Tue 10 Jun 2025 07:16:47 +0000 Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: d5US5fnJlSvgvYCSEW3ljDqKcYJcNIHTtPYTObiIUqw=) 2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: a4pNtK3CV+mQ7nJwDHXCGhAdmpO8QsQ6bTiqCpOkfws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Validity Not Before: Jun 3 07:16:47 2025 GMT Not After : Jun 10 07:16:47 2025 GMT Subject: CN=683ea15f-4653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d5:81:b3:7e:43:41:f2:67:74:8a:80:b8:34: fc:38:1b:21:88:be:a6:aa:df:ee:a9:86:8a:e0:10: 1b:27:00:5b:53:0b:d2:a2:ea:bc:42:9e:18:8c:4d: 9e:00:24:04:82:fd:64:9b:4e:47:23:7b:a4:72:15: f1:b5:4a:e8:60:36:cd:9a:2d:59:b4:82:28:5c:60: b7:8c:de:be:9f:82:a7:f1:aa:8f:ac:4f:49:a5:b2: c8:bd:9d:3c:ca:f3:26:e8:b0:1b:7c:d7:df:bf:38: b7:a7:46:5f:19:89:ba:70:45:e4:7d:21:66:4b:6b: ea:af:da:36:15:c5:e9:95:a5:07:0e:67:6c:f4:63: 70:e1:12:1a:0a:d8:85:60:78:d1:32:14:f9:fa:87: 1c:f6:39:ab:45:7d:f2:68:49:b0:af:30:3c:d1:85: e5:d4:6b:66:c0:ef:23:6e:6a:0f:e9:8f:7c:6b:06: ea:3e:77:79:24:47:a4:46:38:6c:91:be:bb:5f:56: 34:b1:32:4c:98:b7:bc:c1:d6:98:4c:c7:82:fb:b4: 8f:f2:6e:e3:c4:33:e4:c3:df:ff:5a:1e:d4:2a:4d: a0:95:83:25:45:ca:fb:4d:e3:58:da:09:1d:b2:2a: e8:a0:ce:cc:4e:32:d4:ab:c7:9c:e5:f5:62:49:11: 8d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:70:FA:E6:32:20:71:92:6C:43:74:48:25:58:90:41:83:4D:4A:19 X509v3 Authority Key Identifier: keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fd:9d:a3:1f:a2:bd:9a:41:0f:33:ce:56:c4:e2:e9:e9:4d: c0:77:f5:52:77:f1:f1:99:23:f2:c1:0c:93:06:d3:c8:50:50: 3b:3f:06:73:b2:45:c6:94:cd:26:27:dd:79:0c:2b:66:50:90: 6a:89:61:da:3c:28:ca:1f:a5:30:21:52:80:d3:f1:3e:41:b1: b4:a6:8b:7f:a1:f8:7c:31:26:e2:4a:75:ac:de:47:1c:c5:09: 04:c0:54:19:7d:42:33:eb:bf:0d:00:c5:e3:af:0b:57:34:2a: fa:5f:90:d4:58:64:78:dd:5e:ce:05:2e:af:63:03:f6:b7:74: 7d:3c:e3:05:3f:ce:bd:85:1b:d1:84:f4:91:87:b5:ed:e7:d1: c5:6b:80:24:50:80:96:38:be:29:1e:02:50:93:a5:bc:e0:da: c6:2b:12:b7:1a:d8:45:d8:64:64:62:7b:47:97:b0:6a:ff:8b: 08:a5:71:22:93:ca:88:8a:a6:6a:9e:9c:0c:d5:34:10:1b:f2: cd:c0:07:9d:ea:10:d4:6f:3f:5d:e9:8e:50:b8:6b:f0:4d:2e: 19:61:70:03:54:fa:f2:7c:52:7b:90:c3:2c:ed:6f:17:24:7a: d6:fa:fb:b6:65:2a:16:68:45:b2:7c:f7:ff:58:e3:9e:5c:2b: f0:e6:a6:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUNGRjExMC8GA1UEBRMoNUVGREU5OEM0RkJGOEQxMTg3QjY4NThFQkM4MUYwNjI1 QjI5MzE2MDAeFw0yNTA2MDMwNzE2NDdaFw0yNTA2MTAwNzE2NDdaMBgxFjAUBgNV BAMTDTY4M2VhMTVmLTQ2NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU1YGzfkNB8md0ioC4NPw4GyGIvqaq3+6phorgEBsnAFtTC9Ki6rxCnhiMTZ4A JASC/WSbTkcje6RyFfG1SuhgNs2aLVm0gihcYLeM3r6fgqfxqo+sT0mlssi9nTzK 8ybosBt819+/OLenRl8ZibpwReR9IWZLa+qv2jYVxemVpQcOZ2z0Y3DhEhoK2IVg eNEyFPn6hxz2OatFffJoSbCvMDzRheXUa2bA7yNuag/pj3xrBuo+d3kkR6RGOGyR vrtfVjSxMkyYt7zB1phMx4L7tI/ybuPEM+TD3/9aHtQqTaCVgyVFyvtN41jaCR2y KuigzsxOMtSrx5zl9WJJEY1PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGXD65jIg cZJsQ3RIJViQQYNNShkwHwYDVR0jBBgwFoAUXv3pjE+/jRGHtoWOvIHwYlspMWAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Q0ZGLzIwQkUxQTMwRDdF MDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1X QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHYzcGpFLV9qUkdIdG9XT3ZJSHdZbHNwTVdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Q0ZGLzIwQkUxQTMwRDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJH SHRvV092SUh3WWxzcE1XQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFr9naMfor2aQQ8zzlbE4unpTcB39VJ38fGZI/LBDJMG08hQUDs/BnOy RcaUzSYn3XkMK2ZQkGqJYdo8KMofpTAhUoDT8T5BsbSmi3+h+HwxJuJKdazeRxzF CQTAVBl9QjPrvw0AxeOvC1c0KvpfkNRYZHjdXs4FLq9jA/a3dH084wU/zr2FG9GE 9JGHte3n0cVrgCRQgJY4vikeAlCTpbzg2sYrErca2EXYZGRie0eXsGr/iwilcSKT yoiKpmqenAzVNBAb8s3AB53qENRvP13pjlC4a/BNLhlhcANU+vJ8UnuQwyztbxck etb6+7ZlKhZoRbJ89/9Y455cK/DmppU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:51 2025 by rpki-client