$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft File: xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json) Hash identifier: /8raWYIY61mXZxuHJ92/jGrWwvJmHkeycl2BVXD6hmY= Subject key identifier: 50:17:3B:EE:5C:9C:F3:DE:6B:C9:45:ED:A2:6E:13:42:3C:AD:88:7E Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 Certificate issuer: /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Certificate serial: 34CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft Manifest number: 34B3 Signing time: Wed 02 Jul 2025 14:19:44 +0000 Manifest this update: Wed 02 Jul 2025 14:19:43 +0000 Manifest next update: Wed 09 Jul 2025 14:19:43 +0000 Files and hashes: 1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: EQkf9sZ42OpJGc8TEKAmjpAnsGfAWfv44OPCcfOQhss=) 2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: PJCdta/4Q6f57KQKAkTotBkGcFV1WNt4V36v9eyDoQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13515 (0x34cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Validity Not Before: Jul 2 14:19:43 2025 GMT Not After : Jul 9 14:19:43 2025 GMT Subject: CN=68654000-804d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:34:3b:3f:a7:64:62:c4:b4:c4:22:e9:b2: 5e:59:c7:49:0d:84:1b:13:f4:59:8f:48:47:93:e7: 0e:f5:fd:a0:8e:b1:e8:fa:68:99:87:8d:9f:d5:2a: ea:f8:77:14:3f:ba:d1:00:7d:c1:d1:0a:d1:a1:39: d3:4e:8a:ab:ca:4e:76:89:ac:3d:22:4f:12:3e:e2: 0d:b2:3f:3c:2c:80:56:ce:b0:fa:b0:db:fe:58:61: 7b:b5:2d:79:fc:bb:8e:0d:26:56:e3:e0:a8:a4:93: 7f:fb:82:3e:43:da:b3:b5:5f:da:3a:e1:13:eb:c7: e7:0b:da:1f:da:f1:2e:89:87:52:a8:0b:bc:e8:4b: ce:1c:66:41:59:f2:8f:aa:46:6c:a2:f1:8c:70:ae: 92:95:b1:56:e3:cf:da:a8:c7:2d:d0:56:a1:a7:03: 47:07:05:24:1f:44:85:0d:93:e0:83:9f:72:53:32: a9:48:f6:9d:fc:d8:f9:5f:cf:51:45:84:4e:5b:ea: b0:25:3b:ef:90:3e:0c:73:a9:cf:36:ec:98:60:cb: 72:99:09:f9:09:15:2a:7c:fa:05:60:45:ff:5c:f8: 21:2d:a8:69:31:3b:67:d4:87:68:2b:a1:df:6d:bd: 5f:be:19:ce:ef:b3:47:6d:88:d3:31:bd:d1:8b:5b: e7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:17:3B:EE:5C:9C:F3:DE:6B:C9:45:ED:A2:6E:13:42:3C:AD:88:7E X509v3 Authority Key Identifier: keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:84:4a:f0:4f:3a:4b:ae:2c:74:00:b5:43:71:67:c9:09:e8: e8:9e:a7:9f:8e:a1:62:f6:12:ed:da:13:3d:42:38:86:88:ab: 5f:fc:b5:36:b3:13:48:50:c8:04:48:bc:33:ad:8e:53:75:d1: 3a:16:a7:e2:f1:b6:b0:97:cc:2e:66:66:9e:01:b3:21:94:4e: be:ed:b5:8e:da:1f:62:06:da:93:f0:57:30:4a:ad:ad:1e:04: 02:c6:62:fb:fe:c9:ba:a2:99:1e:06:f6:82:ac:0b:7a:67:0f: 65:0b:d5:fc:8e:76:16:7e:16:05:96:5b:b4:8f:58:40:3c:42: de:1f:34:4c:83:01:bd:24:ea:db:d1:8f:12:a9:1d:a1:5d:98: 6e:e9:6e:06:09:25:84:5c:40:81:d9:95:ee:cb:2c:1c:eb:d1: 7a:a5:94:5e:59:94:79:d4:05:2f:9a:04:73:15:3d:63:36:f3: 9d:71:58:57:ba:6e:d3:27:c2:d4:bf:3f:e9:09:a8:2e:15:b8: f5:23:97:4e:0e:97:20:5f:f9:79:25:64:5d:fe:92:38:01:f6: 09:65:ed:10:ba:2d:d9:89:c1:5c:a8:61:66:36:d0:26:98:13: bc:5c:b3:27:56:69:4c:58:a5:a2:84:c4:a1:eb:a4:62:91:a0: db:6b:c9:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OTAxMTAvBgNVBAUTKEM0MEVCNzgxNjQ1MTg3NTQ4NkRBNjQzRjhGOTM2MUI3 N0RGQjIxQTMwHhcNMjUwNzAyMTQxOTQzWhcNMjUwNzA5MTQxOTQzWjAYMRYwFAYD VQQDEw02ODY1NDAwMC04MDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2s0Oz+nZGLEtMQi6bJeWcdJDYQbE/RZj0hHk+cO9f2gjrHo+miZh42f1Srq +HcUP7rRAH3B0QrRoTnTToqryk52iaw9Ik8SPuINsj88LIBWzrD6sNv+WGF7tS15 /LuODSZW4+CopJN/+4I+Q9qztV/aOuET68fnC9of2vEuiYdSqAu86EvOHGZBWfKP qkZsovGMcK6SlbFW48/aqMct0FahpwNHBwUkH0SFDZPgg59yUzKpSPad/Nj5X89R RYROW+qwJTvvkD4Mc6nPNuyYYMtymQn5CRUqfPoFYEX/XPghLahpMTtn1IdoK6Hf bb1fvhnO77NHbYjTMb3Ri1vnrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAXO+5c nPPea8lF7aJuE0I8rYh+MB8GA1UdIwQYMBaAFMQOt4FkUYdUhtpkP4+TYbd9+yGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5MC9GQzQ0QjM4QTFE NzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgxU0cybVFfajVOaHQzMzdJ YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hBNjNnV1JSaDFTRzJtUV9qNU5odDMzN0lhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5MC9GQzQ0QjM4QTFENzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgx U0cybVFfajVOaHQzMzdJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAhErwTzpLrix0ALVDcWfJCejonqefjqFi9hLt2hM9QjiGiKtf/LU2 sxNIUMgESLwzrY5TddE6Fqfi8bawl8wuZmaeAbMhlE6+7bWO2h9iBtqT8FcwSq2t HgQCxmL7/sm6opkeBvaCrAt6Zw9lC9X8jnYWfhYFllu0j1hAPELeHzRMgwG9JOrb 0Y8SqR2hXZhu6W4GCSWEXECB2ZXuyywc69F6pZReWZR51AUvmgRzFT1jNvOdcVhX um7TJ8LUvz/pCaguFbj1I5dODpcgX/l5JWRd/pI4AfYJZe0Qui3ZicFcqGFmNtAm mBO8XLMnVmlMWKWihMSh66RikaDba8mp -----END CERTIFICATE-----Generated at Thu Jul 3 10:47:46 2025 by rpki-client