$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft File: xPuRgT57oJnZHpxIFyCUuZBcDxE.mft (raw, json) Hash identifier: LtQY9RJ0FUML7f+tZviadhrElXs+0j+b8lF68bf7SVw= Subject key identifier: 74:42:1A:F6:D1:C1:82:42:00:92:63:F9:BC:08:73:A7:DD:DE:DC:91 Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11 Certificate issuer: /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11 Certificate serial: 1E34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft Manifest number: 1E16 Signing time: Thu 12 Jun 2025 16:03:48 +0000 Manifest this update: Thu 12 Jun 2025 16:03:48 +0000 Manifest next update: Thu 19 Jun 2025 16:03:48 +0000 Files and hashes: 1: xPuRgT57oJnZHpxIFyCUuZBcDxE.crl (hash: ZN0Npr0GIS5BfQiojiuV7rb9Q9mDI2B+Yj/yXDU/nwQ=) 2: 6553E9461A0611F08E7AD42AC4F9AE02.roa (hash: f1rUI1t3KqdGMKeqiBAUTM/laLwJwP3gycWHTBm/djM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7732 (0x1e34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11 Validity Not Before: Jun 12 16:03:48 2025 GMT Not After : Jun 19 16:03:48 2025 GMT Subject: CN=684afa64-27b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:06:97:95:3d:66:ae:c2:30:89:6a:1e:90: 17:b3:07:d0:c1:8e:60:c6:fe:c1:eb:82:c9:df:17: 5b:c5:df:1c:3b:09:5a:67:47:b0:26:65:67:2b:8f: 82:05:ec:c8:f2:d4:21:e4:99:73:84:67:c2:06:a2: ba:bf:4f:9d:fe:24:08:58:23:a2:93:45:2d:e2:75: df:b2:68:e0:6a:b8:83:16:28:2f:1a:3e:49:dc:ea: 3d:41:df:1d:e6:4f:58:e8:24:93:b7:ea:b8:f4:57: 2f:1e:63:a6:8b:41:29:47:72:75:d2:a8:69:e1:30: 39:8c:8a:59:5a:b9:8c:64:63:21:fe:6a:71:c3:cb: fe:5f:3e:90:ea:f5:56:16:bc:43:18:b6:cd:9a:78: 93:69:b2:be:3c:5d:2a:10:ec:67:6a:78:4c:8d:40: 76:37:a1:9c:8a:c9:21:d5:44:f6:19:fd:c9:61:b3: 12:b1:99:a7:88:cc:24:e0:10:e2:78:33:97:50:ae: 76:72:89:d5:83:0a:ee:b9:1c:04:68:6e:5d:bf:ca: 9f:64:64:6d:aa:c5:06:ac:95:50:a0:a8:2b:7b:23: c6:fb:4d:fb:44:68:98:2f:b4:d3:5b:93:66:57:d7: d7:ce:10:77:10:f0:1b:0f:51:78:2b:eb:c5:a8:e4: c1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:42:1A:F6:D1:C1:82:42:00:92:63:F9:BC:08:73:A7:DD:DE:DC:91 X509v3 Authority Key Identifier: keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:8b:8f:4d:88:8a:ae:ab:0a:9c:34:d5:55:dc:72:ad:d1:0d: f3:96:3c:d1:d4:b4:cc:33:8f:05:d6:ff:22:8c:6b:58:18:e6: 5a:6f:0e:d8:84:fe:0a:1e:c8:a0:08:ab:37:79:59:25:75:b0: 10:81:a3:cb:01:34:55:1e:e3:18:0b:45:cf:cd:49:55:f9:57: 1b:c6:e1:8c:c1:38:cf:31:ee:aa:4d:49:0b:fc:da:61:8f:66: ef:20:51:a7:0d:ad:16:9d:43:9e:88:b9:ec:86:3c:35:de:53: cd:29:cb:c4:f8:31:7a:19:8b:91:a2:0c:71:18:18:5e:41:bd: cf:63:1b:35:b7:c7:5c:6b:db:97:dd:94:64:4f:c3:24:14:6d: 95:21:f1:43:99:69:b6:13:92:52:bf:95:90:a2:ee:32:40:52: 67:0e:50:78:e2:35:d8:6f:c5:b6:7a:42:9e:a0:e8:db:3d:74: c8:56:4e:fc:d5:09:62:00:71:d6:89:11:d8:3d:58:58:bd:0e: c3:0d:36:c3:fb:40:ed:d7:3c:59:b4:e8:74:fe:8f:74:b3:4b: ff:ff:4f:d7:bc:9a:8e:5a:48:0b:05:be:01:e1:ea:89:b3:f2: 1a:97:2d:2a:d5:1a:7c:5b:f9:7c:1a:4e:cf:36:3a:a9:31:d4: 6f:f5:c8:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzQkMxMTAvBgNVBAUTKEM0RkI5MTgxM0U3QkEwOTlEOTFFOUM0ODE3MjA5NEI5 OTA1QzBGMTEwHhcNMjUwNjEyMTYwMzQ4WhcNMjUwNjE5MTYwMzQ4WjAYMRYwFAYD VQQDEw02ODRhZmE2NC0yN2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZMGl5U9Zq7CMIlqHpAXswfQwY5gxv7B64LJ3xdbxd8cOwlaZ0ewJmVnK4+C BezI8tQh5JlzhGfCBqK6v0+d/iQIWCOik0Ut4nXfsmjgariDFigvGj5J3Oo9Qd8d 5k9Y6CSTt+q49FcvHmOmi0EpR3J10qhp4TA5jIpZWrmMZGMh/mpxw8v+Xz6Q6vVW FrxDGLbNmniTabK+PF0qEOxnanhMjUB2N6Gciskh1UT2Gf3JYbMSsZmniMwk4BDi eDOXUK52conVgwruuRwEaG5dv8qfZGRtqsUGrJVQoKgreyPG+037RGiYL7TTW5Nm V9fXzhB3EPAbD1F4K+vFqOTB3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRCGvbR wYJCAJJj+bwIc6fd3tyRMB8GA1UdIwQYMBaAFMT7kYE+e6CZ2R6cSBcglLmQXA8R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zODEyNDRGRThG OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi94UHVSZ1Q1N29KblpIcHhJRnlDVXVaQmNE eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQdVJnVDU3b0puWkhweElGeUNVdVpCY0R4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjNCQy8zODEyNDRGRThGOUIxMUU2QkVDNUNCMjVDNEY5QUUwMi94UHVSZ1Q1N29K blpIcHhJRnlDVXVaQmNEeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVi49NiIquqwqcNNVV3HKt0Q3zljzR1LTMM48F1v8ijGtYGOZabw7Y hP4KHsigCKs3eVkldbAQgaPLATRVHuMYC0XPzUlV+VcbxuGMwTjPMe6qTUkL/Nph j2bvIFGnDa0WnUOeiLnshjw13lPNKcvE+DF6GYuRogxxGBheQb3PYxs1t8dca9uX 3ZRkT8MkFG2VIfFDmWm2E5JSv5WQou4yQFJnDlB44jXYb8W2ekKeoOjbPXTIVk78 1QliAHHWiRHYPVhYvQ7DDTbD+0Dt1zxZtOh0/o90s0v//0/XvJqOWkgLBb4B4eqJ s/Ialy0q1Rp8W/l8Gk7PNjqpMdRv9cjI -----END CERTIFICATE-----Generated at Sat Jun 14 01:15:42 2025 by rpki-client