$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: iLNgXT/hPYypVGbtNxaun/852UEka/7z5qUWEtXP6OY= Subject key identifier: 6B:B2:2E:23:E2:4E:3E:CA:E3:B7:18:DD:87:8F:82:F5:B0:2E:12:82 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 0640 Signing time: Wed 02 Jul 2025 23:12:08 +0000 Manifest this update: Wed 02 Jul 2025 23:12:07 +0000 Manifest next update: Wed 09 Jul 2025 23:12:07 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: QzV/h4tZndBck6sA+whPzx1CppLdERi72lmduJy5wUg=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: oyubRpGqXRPhXUbHGDMN11nyLcbaEyRpquXs/6vcD1s=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: kmT51UeYfwldQaeBqmjE4hyTmZuSt7H0mxT17oVrkW8=) 4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: q5An5IejOkRYWLTS2K7o5KZUOm0z/1pEEu1xwJZBWV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Jul 2 23:12:07 2025 GMT Not After : Jul 9 23:12:07 2025 GMT Subject: CN=6865bcc8-65ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:32:c8:12:87:22:e4:95:4d:57:8b:31:c8:a0: e6:f7:0e:b7:ed:83:65:c5:b3:d9:c0:6e:58:80:ce: b0:b3:89:6e:40:3c:c5:59:5f:32:05:c7:07:b4:84: 34:bb:ef:c9:a3:4d:b3:a8:6b:a9:41:19:c7:5c:ad: 7a:09:4b:8c:0c:89:e0:23:38:a9:8a:e4:e0:41:f2: eb:3c:36:42:d4:f9:0f:5c:65:5f:c6:6e:68:05:eb: 4d:2f:c8:c7:44:47:2f:fe:bd:09:61:2b:a7:6c:29: 00:a7:80:80:4e:ce:ea:14:d5:10:26:13:ca:b3:06: 88:27:86:69:29:a4:4c:cc:f2:76:b8:7f:40:1e:5e: e8:4a:91:8c:05:3c:8f:31:31:ef:89:ea:d2:b8:2f: c0:8a:ca:f1:62:59:46:dd:a7:68:a0:44:01:46:cf: d7:df:b6:53:0e:ad:a8:7f:bb:44:4b:d6:11:77:68: b5:f5:23:44:a7:fa:42:78:7a:9b:6c:49:d4:20:82: 6f:a5:ba:e5:7d:f4:68:63:27:5c:d5:06:20:0a:60: 82:20:21:ae:88:f8:5d:2c:02:9f:81:b8:96:84:cf: 42:67:ec:dd:38:20:7f:61:c6:a0:66:b2:22:e0:12: 28:ee:f0:06:3e:4c:20:96:84:08:88:20:4c:dc:08: 52:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B2:2E:23:E2:4E:3E:CA:E3:B7:18:DD:87:8F:82:F5:B0:2E:12:82 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:5b:9c:6e:b1:e7:cf:7a:6d:16:e6:c6:f7:15:6d:90:22:41: c8:12:ee:d3:da:8a:4a:5d:51:e9:1c:11:b1:17:97:84:11:0b: c7:f7:df:2c:3a:c3:29:c8:56:35:1d:ec:15:c7:32:ff:8c:aa: 91:48:dc:7d:f4:dc:93:1f:8d:a7:a5:c9:0a:66:8e:fb:b6:a5: 90:7b:1f:d7:a8:d1:85:43:76:2c:27:29:d4:1f:44:aa:f4:d9: df:d0:7c:14:f9:75:3a:e6:9b:d8:0f:16:4a:f1:68:27:65:91: 35:61:16:8a:92:8a:95:fc:c6:56:30:c1:2f:6a:b1:64:4c:15: 8c:eb:41:11:41:29:ec:59:03:1d:8d:ed:8c:2e:bb:4f:9b:be: 45:71:06:69:bd:ca:29:93:d6:dc:17:0a:97:67:ce:74:cb:ff: 00:57:fc:d8:70:94:2d:0c:dc:91:38:84:b4:8b:33:bf:64:8a: 15:37:47:de:ef:1c:41:ee:cf:1c:68:76:35:f1:18:1f:45:a6: d3:27:5f:8b:46:5d:46:73:30:c3:d5:6f:dd:86:25:b1:6c:99: f4:89:f7:f7:2e:7c:b7:3e:24:95:93:ba:a1:f7:06:e6:32:90: fd:5b:52:e8:8b:30:db:fc:d0:04:fa:92:8c:d8:c9:5c:bc:9f: 5a:29:13:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjUwNzAyMjMxMjA3WhcNMjUwNzA5MjMxMjA3WjAYMRYwFAYD VQQDEw02ODY1YmNjOC02NWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4TLIEoci5JVNV4sxyKDm9w637YNlxbPZwG5YgM6ws4luQDzFWV8yBccHtIQ0 u+/Jo02zqGupQRnHXK16CUuMDIngIzipiuTgQfLrPDZC1PkPXGVfxm5oBetNL8jH REcv/r0JYSunbCkAp4CATs7qFNUQJhPKswaIJ4ZpKaRMzPJ2uH9AHl7oSpGMBTyP MTHvierSuC/AisrxYllG3adooEQBRs/X37ZTDq2of7tES9YRd2i19SNEp/pCeHqb bEnUIIJvpbrlffRoYydc1QYgCmCCICGuiPhdLAKfgbiWhM9CZ+zdOCB/YcagZrIi 4BIo7vAGPkwgloQIiCBM3AhSewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuyLiPi Tj7K47cY3YePgvWwLhKCMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoW5xusefPem0W5sb3FW2QIkHIEu7T2opKXVHpHBGxF5eEEQvH998s OsMpyFY1HewVxzL/jKqRSNx99NyTH42npckKZo77tqWQex/XqNGFQ3YsJynUH0Sq 9Nnf0HwU+XU65pvYDxZK8WgnZZE1YRaKkoqV/MZWMMEvarFkTBWM60ERQSnsWQMd je2MLrtPm75FcQZpvcopk9bcFwqXZ850y/8AV/zYcJQtDNyROIS0izO/ZIoVN0fe 7xxB7s8caHY18RgfRabTJ1+LRl1GczDD1W/dhiWxbJn0iff3Lny3PiSVk7qh9wbm MpD9W1LoizDb/NAE+pKM2MlcvJ9aKROW -----END CERTIFICATE-----Generated at Thu Jul 3 03:49:39 2025 by rpki-client