$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft File: xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json) Hash identifier: KoiKWqmZv6cQGY6I1I8M+LEf2sqwXbCUbohqo9B8238= Subject key identifier: BB:FC:4D:E9:69:75:EB:E6:B7:BD:E2:F0:8A:B8:BA:3C:C5:D4:C0:7C Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 Certificate issuer: /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft Manifest number: E6 Signing time: Sun 29 Jun 2025 04:27:58 +0000 Manifest this update: Sun 29 Jun 2025 04:27:57 +0000 Manifest next update: Sun 06 Jul 2025 04:27:57 +0000 Files and hashes: 1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: /m3hmQGZ5uJNmtQcrqmH1BqvwPVF15j+6aqWSAFimrE=) 2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: JP9Pvfyfa3vW7gxEOqKzfjawNJzZLQs3btJhigzzzxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D51, serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Validity Not Before: Jun 29 04:27:57 2025 GMT Not After : Jul 6 04:27:57 2025 GMT Subject: CN=6860c0cd-2d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:eb:24:96:2e:2e:0b:2f:6c:31:a8:15:07: 8e:4d:79:63:f0:18:fb:55:8e:f1:c8:6d:f0:53:b8: 69:79:6e:f5:f6:61:a4:fb:bd:7d:1c:6e:1d:0e:8a: 2b:e6:18:af:36:91:14:e1:e2:b4:6a:7d:c3:62:b4: 21:aa:8f:c2:a3:fa:fe:3b:14:3c:1c:94:e7:52:aa: 49:95:b3:1f:8e:f1:1e:3c:4d:b2:a1:52:f2:df:a8: 21:37:5d:33:b4:9e:39:ef:39:de:57:ea:4a:f0:8c: 10:99:0e:fa:00:a1:bb:5b:4d:ff:c4:3b:a8:26:68: 4e:e7:3e:f7:00:7c:a8:6b:32:6b:7e:41:ca:61:09: e2:ca:8b:e5:79:87:d0:e5:e3:33:cb:f2:ea:c2:0e: 75:15:b4:fe:80:ad:2b:11:6e:c9:69:0d:ef:b4:50: 3d:a3:93:89:77:f2:3b:aa:13:19:84:f4:56:1f:92: 19:ea:8a:f3:f2:a7:9a:20:af:d4:ca:5d:8d:da:08: d1:71:45:66:c3:3c:82:45:1a:85:a2:03:ef:84:48: 99:db:cd:25:ed:83:80:02:cc:10:6b:23:9e:b7:69: 6b:53:ce:15:eb:50:f9:df:f9:a4:a7:68:bb:84:73: e9:60:ec:d6:37:a7:ff:c5:72:8f:a8:1a:9d:91:ca: a7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FC:4D:E9:69:75:EB:E6:B7:BD:E2:F0:8A:B8:BA:3C:C5:D4:C0:7C X509v3 Authority Key Identifier: keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:86:fb:22:69:05:1b:4d:47:f4:9f:90:a3:96:bb:03:77:4d: aa:98:69:80:f6:07:15:b9:29:30:31:ec:f2:f8:af:7d:d4:ee: 25:61:a1:46:62:18:ba:e1:f8:59:a0:2a:f3:0e:48:c6:0d:c7: 80:c8:76:2a:75:49:2a:d3:6a:5c:4c:3e:f1:14:a4:7c:7b:1f: da:24:99:f6:a4:09:af:06:ab:fa:87:fb:fb:33:1a:68:57:3c: 84:59:1b:7b:75:51:6a:68:9e:e8:fe:be:28:f3:6c:64:9b:7a: d7:b1:de:b6:71:0a:7e:fc:31:e8:f5:92:c4:df:00:5d:36:a1: 5b:ad:70:df:a6:84:d3:c9:31:75:8d:8a:3a:bd:a6:62:a6:d8: 64:8f:c4:e7:f2:9f:08:8c:3a:2b:a7:8a:c5:83:4d:c4:14:3e: 16:33:f1:61:4a:56:66:2e:ae:f7:c2:9b:77:10:bd:11:8d:dd: 53:4d:f5:15:66:92:db:5b:13:e1:a8:e1:d5:e7:4c:fd:a5:a7: 2a:09:86:40:eb:93:de:01:d0:7d:c1:b5:48:3b:08:66:a8:9c: 21:c4:f0:05:9f:52:94:97:94:5b:a8:cc:35:70:4c:11:35:d6: a8:47:7d:f5:39:d7:ae:31:14:7b:53:78:7a:d5:18:ea:ba:a7: b1:ce:69:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJENTExMTAvBgNVBAUTKEM0QzY3RUJCNkIyRERDNjkyNEJCQjk2NTVFN0UwRjgy MTg1MzBDNjUwHhcNMjUwNjI5MDQyNzU3WhcNMjUwNzA2MDQyNzU3WjAYMRYwFAYD VQQDEw02ODYwYzBjZC0yZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsL3rJJYuLgsvbDGoFQeOTXlj8Bj7VY7xyG3wU7hpeW719mGk+719HG4dDoor 5hivNpEU4eK0an3DYrQhqo/Co/r+OxQ8HJTnUqpJlbMfjvEePE2yoVLy36ghN10z tJ457zneV+pK8IwQmQ76AKG7W03/xDuoJmhO5z73AHyoazJrfkHKYQniyovleYfQ 5eMzy/Lqwg51FbT+gK0rEW7JaQ3vtFA9o5OJd/I7qhMZhPRWH5IZ6orz8qeaIK/U yl2N2gjRcUVmwzyCRRqFogPvhEiZ280l7YOAAswQayOet2lrU84V61D53/mkp2i7 hHPpYOzWN6f/xXKPqBqdkcqnhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLv8Telp devmt73i8Iq4ujzF1MB8MB8GA1UdIwQYMBaAFMTGfrtrLdxpJLu5ZV5+D4IYUwxl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ1MS9FQUU1RkNBQUYy MzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNHa2t1N2xsWG40UGdoaFRE R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNWi11MnN0M0dra3U3bGxYbjRQZ2hoVERHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ1MS9FQUU1RkNBQUYyMzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNH a2t1N2xsWG40UGdoaFRER1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChhvsiaQUbTUf0n5CjlrsDd02qmGmA9gcVuSkwMezy+K991O4lYaFG Yhi64fhZoCrzDkjGDceAyHYqdUkq02pcTD7xFKR8ex/aJJn2pAmvBqv6h/v7Mxpo VzyEWRt7dVFqaJ7o/r4o82xkm3rXsd62cQp+/DHo9ZLE3wBdNqFbrXDfpoTTyTF1 jYo6vaZipthkj8Tn8p8IjDorp4rFg03EFD4WM/FhSlZmLq73wpt3EL0Rjd1TTfUV ZpLbWxPhqOHV50z9pacqCYZA65PeAdB9wbVIOwhmqJwhxPAFn1KUl5RbqMw1cEwR NdaoR331OdeuMRR7U3h61RjquqexzmkW -----END CERTIFICATE-----Generated at Sun Jun 29 23:42:40 2025 by rpki-client