$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft File: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft (raw, json) Hash identifier: YGPQ5mZyoUog+wKBSpaZEi2rMtG46Kzal4Mua+s9mYw= Subject key identifier: 14:AE:31:B2:D2:25:C7:B6:DE:F6:A8:D4:E5:09:AA:9A:C7:37:E9:EB Authority key identifier: C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD Certificate issuer: /CN=A91B6F60/serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Certificate serial: 04FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft Manifest number: 04F4 Signing time: Fri 06 Jun 2025 23:44:50 +0000 Manifest this update: Fri 06 Jun 2025 23:44:50 +0000 Manifest next update: Fri 13 Jun 2025 23:44:50 +0000 Files and hashes: 1: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl (hash: tTN2HCRR7GmuVu0JnJ5dFKTCChv2i3oP9WiESPdw3Ng=) 2: 52A8AE84152E11EC94BCB264C4F9AE02.roa (hash: rYm3bxzeD9Hz/zvaLyO6m3QZv6wC6yDqGi0rEoUEXJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 23:44:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1274 (0x4fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F60, serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Validity Not Before: Jun 6 23:44:50 2025 GMT Not After : Jun 13 23:44:50 2025 GMT Subject: CN=68437d72-b04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:4f:06:b3:2c:a1:90:47:0a:47:ca:87:ef: e4:66:1f:0d:50:de:73:db:43:b3:d9:be:ae:cb:a8: ea:40:fe:cb:6c:da:13:f5:b9:48:19:0c:ad:33:09: 64:56:ac:e4:cf:53:86:c6:a4:66:0d:0b:f7:a3:fa: 44:60:98:da:b2:e7:ab:f7:cd:36:43:d8:1b:73:6a: 9c:b8:9e:aa:e9:83:08:4d:40:c6:38:fe:de:b5:af: 57:8a:ce:bd:a8:c9:c1:0a:98:db:ca:3a:6b:24:e8: 9a:9c:57:66:ea:07:8d:e8:20:d1:60:14:76:1f:91: eb:50:36:13:9c:4c:82:3a:39:c3:05:f8:39:6e:fe: 84:56:36:92:b4:1b:18:f8:72:94:75:4f:e5:a6:21: d3:dd:6d:95:04:64:6e:59:30:a1:5f:4e:1e:83:38: 24:fa:bc:96:da:77:29:1d:05:d7:7a:b5:1b:16:74: d1:b3:3b:60:86:41:8f:83:e6:7d:b0:c6:df:9e:58: 2b:17:21:ba:a0:14:67:1a:4f:55:06:74:fc:34:ee: 89:06:84:3e:c8:6d:8e:d4:7c:42:e1:56:3a:8a:fb: 86:58:2a:d2:6e:d8:ca:9c:7e:18:82:a9:f5:93:af: a4:4c:70:d4:c3:18:3c:8c:ec:85:73:1a:a3:d2:08: 9b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AE:31:B2:D2:25:C7:B6:DE:F6:A8:D4:E5:09:AA:9A:C7:37:E9:EB X509v3 Authority Key Identifier: keyid:C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:00:b6:67:0c:27:56:a9:7e:ce:b9:09:5b:5a:60:74:8c:11: 92:2e:60:fe:db:7d:9a:db:d7:26:5a:bf:74:be:cb:0d:b5:f1: b4:d1:1d:03:73:df:e4:ec:c2:ed:97:56:ed:7a:9b:a1:e2:f0: 61:df:d9:3d:2f:3a:93:f3:12:a4:a4:3a:9b:6a:dd:42:14:67: 1d:8b:0b:7a:5a:57:15:8f:59:23:be:28:df:36:a9:ca:86:1f: a5:22:bf:59:84:fa:9c:55:cb:33:a1:f2:d5:16:37:ed:65:0e: 7f:9d:1b:51:9f:f3:be:18:45:ff:4a:64:ba:2d:5a:7e:66:4d: 24:63:88:fd:ca:99:19:b4:7d:dd:08:78:4c:95:e9:70:61:5f: 75:95:af:1e:c9:c0:b8:88:25:64:f9:3c:23:73:38:7e:d1:30: ce:d4:32:9a:33:1a:87:65:47:94:50:4e:df:51:19:66:d9:07: f5:dc:76:f5:22:77:5c:1d:0b:f4:6e:d5:cd:39:98:27:5e:e8: 18:1c:f0:4d:64:7f:e8:8f:5d:c9:6b:71:30:ab:61:c1:75:92: 9e:63:8d:d3:89:70:d2:d1:b8:26:2f:e4:9c:56:93:e6:8e:61: 14:a7:31:09:6a:81:09:34:07:c1:08:78:68:3e:6d:fa:37:95: e6:a8:3d:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNjAxMTAvBgNVBAUTKEM0MTFDMkQ3MjQwMUY1M0VDQTAxNjM1Nzg4OUQ3RUJB M0JDQ0ZEQ0QwHhcNMjUwNjA2MjM0NDUwWhcNMjUwNjEzMjM0NDUwWjAYMRYwFAYD VQQDEw02ODQzN2Q3Mi1iMDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrBPBrMsoZBHCkfKh+/kZh8NUN5z20Oz2b6uy6jqQP7LbNoT9blIGQytMwlk Vqzkz1OGxqRmDQv3o/pEYJjasuer9802Q9gbc2qcuJ6q6YMITUDGOP7eta9Xis69 qMnBCpjbyjprJOianFdm6geN6CDRYBR2H5HrUDYTnEyCOjnDBfg5bv6EVjaStBsY +HKUdU/lpiHT3W2VBGRuWTChX04egzgk+ryW2ncpHQXXerUbFnTRsztghkGPg+Z9 sMbfnlgrFyG6oBRnGk9VBnT8NO6JBoQ+yG2O1HxC4VY6ivuGWCrSbtjKnH4Ygqn1 k6+kTHDUwxg8jOyFcxqj0gibiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSuMbLS Jce23vao1OUJqprHN+nrMB8GA1UdIwQYMBaAFMQRwtckAfU+ygFjV4idfro7zP3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY2MC85NDkzMkJFQzE1 MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlUN0tBV05YaUoxLXVqdk1f YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCSEMxeVFCOVQ3S0FXTlhpSjEtdWp2TV9jMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY2MC85NDkzMkJFQzE1MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlU N0tBV05YaUoxLXVqdk1fYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5ALZnDCdWqX7OuQlbWmB0jBGSLmD+232a29cmWr90vssNtfG00R0D c9/k7MLtl1btepuh4vBh39k9LzqT8xKkpDqbat1CFGcdiwt6WlcVj1kjvijfNqnK hh+lIr9ZhPqcVcszofLVFjftZQ5/nRtRn/O+GEX/SmS6LVp+Zk0kY4j9ypkZtH3d CHhMlelwYV91la8eycC4iCVk+Twjczh+0TDO1DKaMxqHZUeUUE7fURlm2Qf13Hb1 IndcHQv0btXNOZgnXugYHPBNZH/oj13Ja3Ewq2HBdZKeY43TiXDS0bgmL+ScVpPm jmEUpzEJaoEJNAfBCHhoPm36N5XmqD0y -----END CERTIFICATE-----Generated at Mon Jun 9 00:15:54 2025 by rpki-client