$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json) Hash identifier: 2hVwngxdpJswqF87/KIyy9XfU2027FXA3yMw3p4dSI4= Subject key identifier: 76:CC:BA:6A:23:AE:B7:FD:C3:36:1F:C3:02:4C:65:24:2B:63:BD:27 Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 2321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft Manifest number: 2308 Signing time: Sat 28 Jun 2025 15:45:08 +0000 Manifest this update: Sat 28 Jun 2025 15:45:07 +0000 Manifest next update: Sat 05 Jul 2025 15:45:07 +0000 Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: zPJqet2372jkiKEtRJoRnSRDPKwTvbLNVRBbonqNOPQ=) 2: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: 6e21k1t3PwcFuMYhxFKByN0N0S9Vi6EW4w95vWK0udo=) 3: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: w2d5iGO1DzNwRW9XaGG0C+Ss9EnEjj1pHZpwfJJ5U1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 15:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8993 (0x2321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: Jun 28 15:45:07 2025 GMT Not After : Jul 5 15:45:07 2025 GMT Subject: CN=68600e03-489e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:f3:12:2b:bd:61:47:b6:87:66:53:3b:fe: d3:9f:14:36:3a:ca:3b:5d:c5:31:e9:5c:56:03:a9: ac:3b:14:de:4e:fc:3c:29:8c:e6:a4:5b:1b:03:e0: f7:99:0e:7a:dc:17:85:2e:63:f5:22:aa:e5:f6:3b: 3c:57:26:2e:b3:c3:14:41:bb:d0:6f:0b:e5:d9:37: d1:46:f5:33:68:38:76:27:4a:86:87:9a:a3:4a:b5: 3f:11:88:17:31:9f:6b:7a:ca:08:44:29:cb:d1:c9: 26:a4:a1:d5:cf:ef:a8:29:aa:6b:96:e0:fb:cd:35: c0:20:a6:ab:77:12:cb:01:3a:33:8b:4e:0a:43:02: d6:e8:e2:a9:15:b8:46:0f:7c:de:3d:6d:82:77:ae: 69:a9:23:49:fe:25:6b:63:4b:ff:73:51:ae:43:d4: 4f:7d:cf:eb:2d:5c:7c:56:5a:56:24:88:10:5a:c1: 2f:34:e5:66:e5:a9:e3:e0:7b:7a:2f:95:2e:a7:c0: 45:55:77:4e:ca:dd:3b:2a:c8:02:fc:c6:26:c2:27: ea:68:2d:43:85:ab:58:11:ac:3f:8c:23:6b:ed:a5: 26:56:5d:09:00:cf:b5:04:1c:0b:8b:df:54:28:a0: a2:a4:7d:69:d2:82:de:d8:3c:c8:d4:af:7a:79:33: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CC:BA:6A:23:AE:B7:FD:C3:36:1F:C3:02:4C:65:24:2B:63:BD:27 X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:1a:92:47:56:f9:70:94:9e:4d:d2:1c:3b:71:77:35:bf:82: 01:dd:44:56:ee:be:f0:16:08:74:d0:9c:7c:51:de:50:3f:7d: 7d:33:66:1f:c9:5a:3b:30:04:ca:bc:cc:83:92:94:cc:ac:7a: 60:90:3e:5f:aa:5c:61:e0:d4:c4:57:17:ff:82:22:46:7a:88: 51:20:6f:0b:8c:3c:43:a7:e2:c9:e9:08:d8:2e:8f:09:de:60: 2b:84:58:4c:a3:81:80:c3:c6:38:df:14:5e:8d:ab:20:3a:70: 68:49:6b:d3:05:34:15:06:9f:3c:43:5a:68:28:bc:4b:fe:00: c1:6d:fa:fa:63:71:b8:28:89:00:65:38:7c:93:16:e7:1f:3a: 53:2b:c9:ee:6b:82:76:60:1d:39:4f:62:56:17:43:e3:5a:77: 4c:71:13:84:98:00:22:5b:b5:d8:47:d1:3f:d1:94:11:aa:6d: e8:bb:8f:b2:53:10:bd:cd:41:a3:7e:9c:48:05:0e:4d:b6:d0: 12:d5:db:22:4d:75:11:ab:4d:07:82:58:21:19:4f:e2:1b:9f: 6d:a6:40:dd:e5:bc:bb:39:46:f0:fa:46:3e:34:77:50:e9:5d: 7a:9d:1a:c0:53:b5:7e:06:db:e8:62:63:60:ef:13:ee:91:d8: ac:e0:a6:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjUwNjI4MTU0NTA3WhcNMjUwNzA1MTU0NTA3WjAYMRYwFAYD VQQDEw02ODYwMGUwMy00ODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud7zEiu9YUe2h2ZTO/7TnxQ2Oso7XcUx6VxWA6msOxTeTvw8KYzmpFsbA+D3 mQ563BeFLmP1Iqrl9js8VyYus8MUQbvQbwvl2TfRRvUzaDh2J0qGh5qjSrU/EYgX MZ9resoIRCnL0ckmpKHVz++oKaprluD7zTXAIKardxLLATozi04KQwLW6OKpFbhG D3zePW2Cd65pqSNJ/iVrY0v/c1GuQ9RPfc/rLVx8VlpWJIgQWsEvNOVm5anj4Ht6 L5Uup8BFVXdOyt07KsgC/MYmwifqaC1DhatYEaw/jCNr7aUmVl0JAM+1BBwLi99U KKCipH1p0oLe2DzI1K96eTP7RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbMumoj rrf9wzYfwwJMZSQrY70nMB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzM0Mi82RERCQzdGQzkzMjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10 ZERoQXZHZjloNy1PQVZSbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwGpJHVvlwlJ5N0hw7cXc1v4IB3URW7r7wFgh00Jx8Ud5QP319M2Yf yVo7MATKvMyDkpTMrHpgkD5fqlxh4NTEVxf/giJGeohRIG8LjDxDp+LJ6QjYLo8J 3mArhFhMo4GAw8Y43xRejasgOnBoSWvTBTQVBp88Q1poKLxL/gDBbfr6Y3G4KIkA ZTh8kxbnHzpTK8nua4J2YB05T2JWF0PjWndMcROEmAAiW7XYR9E/0ZQRqm3ou4+y UxC9zUGjfpxIBQ5NttAS1dsiTXURq00HglghGU/iG59tpkDd5by7OUbw+kY+NHdQ 6V16nRrAU7V+BtvoYmNg7xPukdis4Ka6 -----END CERTIFICATE-----Generated at Sun Jun 29 17:46:34 2025 by rpki-client