$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: 1NtwS/TKgywAsL1WtKAO0cxLBXU4tp8eFCuUMoZFo4Q= Subject key identifier: E9:BF:48:B8:AC:E9:DE:69:7C:6A:4C:8E:AA:C8:68:4B:E5:E7:38:ED Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 3493 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 3493 Signing time: Wed 02 Jul 2025 15:13:36 +0000 Manifest this update: Wed 02 Jul 2025 15:13:35 +0000 Manifest next update: Wed 09 Jul 2025 15:13:35 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: I6xZteU2ppioU8H0XxXTTW88RJmIDEpGXnz4j9aqFhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13459 (0x3493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: Jul 2 15:13:35 2025 GMT Not After : Jul 9 15:13:35 2025 GMT Subject: CN=68654c9f-822f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:26:fb:9b:ee:19:be:aa:42:b2:c4:34:93: 2a:1f:70:f9:ec:b9:f4:d9:a4:b9:19:ce:d9:f9:a9: af:50:b1:93:fb:27:6a:3d:86:0a:94:9f:c4:e5:d4: b6:bd:f9:29:42:d6:c3:1b:a7:e6:12:90:3b:85:a7: 17:9c:69:b3:63:8a:1a:84:1c:ce:6f:7b:19:0c:70: 5a:ef:49:90:dd:d1:9b:ba:42:aa:ce:6d:12:d4:4d: 7e:4d:5f:a4:e4:0c:1b:d7:c5:0d:f4:12:2e:90:97: 7c:82:03:0b:e2:3a:e3:25:3d:8b:ff:37:1b:b6:78: a3:63:b7:0f:e1:8a:b0:42:9f:df:44:16:26:2f:f9: 22:5c:b5:38:b8:f0:5e:09:93:bf:36:68:48:1d:90: 96:96:b1:c5:a2:e2:9a:43:b4:bd:33:42:26:c5:87: ec:bb:11:f4:0f:19:1e:cb:af:cb:36:33:15:c9:f3: 13:94:60:96:84:1d:ac:46:23:7c:a7:90:6f:52:a3: cd:b0:f5:9a:51:4b:d6:d6:4e:38:01:0e:11:44:dc: be:15:8d:42:26:61:08:59:a5:ce:ed:ff:ff:8c:41: 41:b0:53:a3:52:58:f3:49:df:63:f2:1f:95:b4:88: d0:40:8c:64:77:72:d9:b9:56:c7:a0:3d:07:44:f9: da:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BF:48:B8:AC:E9:DE:69:7C:6A:4C:8E:AA:C8:68:4B:E5:E7:38:ED X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:b3:f2:9f:7b:bf:d0:1f:2a:4e:67:ca:b7:45:ff:fe:90:3a: 7a:a9:6f:10:d4:b2:c0:5b:9b:bd:da:3a:98:bb:b8:53:0b:8a: 5e:a4:d9:d4:b0:c9:ba:32:52:15:b9:5d:07:ce:a7:b1:04:fa: cd:ef:df:a3:25:4f:f2:c0:4c:c9:a8:e8:69:44:b0:e5:d7:41: f7:15:b2:55:63:b9:da:79:27:9d:94:57:10:ca:1f:84:e6:a5: a3:a6:dc:32:22:90:a9:bb:f8:53:26:8d:cc:f2:07:79:16:75: aa:48:69:3e:48:45:f5:50:d5:20:7a:19:f2:79:9d:fd:dc:29: 2d:e6:40:3c:9d:73:05:07:74:8d:7f:57:b9:89:6d:34:1d:22: 83:09:5c:42:51:28:69:d3:c8:f3:7f:b4:8f:c5:f5:23:b6:e3: f8:a0:63:69:85:95:d3:48:36:87:da:7b:30:bd:82:3e:77:87: 0f:52:fa:08:e2:7a:d8:e0:56:06:72:ca:c1:2d:30:61:de:73: 8f:f4:ac:ec:07:46:31:15:a2:18:86:82:4a:e0:0c:36:fd:cb: 10:e5:20:27:b1:5e:48:4d:25:2f:3e:49:2a:61:8c:2a:90:50: d6:3f:30:35:94:c2:65:b7:9c:95:42:b5:e4:0f:bb:76:ce:04: ef:fa:1c:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjUwNzAyMTUxMzM1WhcNMjUwNzA5MTUxMzM1WjAYMRYwFAYD VQQDEw02ODY1NGM5Zi04MjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMYm+5vuGb6qQrLENJMqH3D57Ln02aS5Gc7Z+amvULGT+ydqPYYKlJ/E5dS2 vfkpQtbDG6fmEpA7hacXnGmzY4oahBzOb3sZDHBa70mQ3dGbukKqzm0S1E1+TV+k 5Awb18UN9BIukJd8ggML4jrjJT2L/zcbtnijY7cP4YqwQp/fRBYmL/kiXLU4uPBe CZO/NmhIHZCWlrHFouKaQ7S9M0ImxYfsuxH0Dxkey6/LNjMVyfMTlGCWhB2sRiN8 p5BvUqPNsPWaUUvW1k44AQ4RRNy+FY1CJmEIWaXO7f//jEFBsFOjUljzSd9j8h+V tIjQQIxkd3LZuVbHoD0HRPnawwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOm/SLis 6d5pfGpMjqrIaEvl5zjtMB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCks/Kfe7/QHypOZ8q3Rf/+kDp6qW8Q1LLAW5u92jqYu7hTC4pepNnU sMm6MlIVuV0HzqexBPrN79+jJU/ywEzJqOhpRLDl10H3FbJVY7naeSedlFcQyh+E 5qWjptwyIpCpu/hTJo3M8gd5FnWqSGk+SEX1UNUgehnyeZ393Ckt5kA8nXMFB3SN f1e5iW00HSKDCVxCUShp08jzf7SPxfUjtuP4oGNphZXTSDaH2nswvYI+d4cPUvoI 4nrY4FYGcsrBLTBh3nOP9KzsB0YxFaIYhoJK4Aw2/csQ5SAnsV5ITSUvPkkqYYwq kFDWPzA1lMJlt5yVQrXkD7t2zgTv+hzk -----END CERTIFICATE-----Generated at Thu Jul 3 03:51:17 2025 by rpki-client