$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft File: xqIW5CMmizknfcEi8-Gq2GxtmkM.mft (raw, json) Hash identifier: F/Xzs5z/adWqgmIs0OMUu6lEIlx4w37nI0KB2NfSCx0= Subject key identifier: 7C:E7:30:14:47:EF:9C:1F:DF:27:1D:51:6B:04:E7:E3:9F:93:9F:34 Authority key identifier: C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 Certificate issuer: /CN=A9135FB6/serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft Manifest number: 71 Signing time: Thu 03 Jul 2025 07:06:20 +0000 Manifest this update: Thu 03 Jul 2025 07:06:19 +0000 Manifest next update: Thu 10 Jul 2025 07:06:19 +0000 Files and hashes: 1: xqIW5CMmizknfcEi8-Gq2GxtmkM.crl (hash: vwx0W2oWEg/IWt7kxuhSpETAefoZBuyZEVu2Sd2Jpx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135FB6, serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Validity Not Before: Jul 3 07:06:19 2025 GMT Not After : Jul 10 07:06:19 2025 GMT Subject: CN=68662beb-bbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6c:9d:ae:22:0f:15:06:57:47:51:da:fb:68: 63:8a:b7:ca:1c:88:08:d9:88:fc:d2:aa:a0:66:87: 99:6e:42:0e:d6:36:87:2e:ed:c1:c4:99:c5:74:63: ac:5d:ac:b2:4d:9f:c1:96:18:d8:a5:48:ef:f9:7c: 39:d7:d5:2f:64:ca:62:03:8e:75:f0:44:13:ad:ee: 4b:7c:1e:c7:81:37:2d:1b:a2:1c:28:44:5e:83:a0: 12:65:95:00:1c:df:63:42:ae:72:4c:35:b4:1b:07: 98:66:51:7e:8c:41:0e:5f:4b:b6:52:de:75:99:b1: ca:93:28:53:9f:7b:47:d5:f0:48:68:c7:b8:bd:e8: 95:07:70:09:44:d3:dd:00:a8:16:13:5a:c5:b0:38: af:2c:97:fa:a5:55:19:f5:5e:14:82:56:d0:04:44: 11:8d:d9:d9:53:00:84:30:50:ca:9a:a8:b0:32:b7: 33:d9:13:bf:03:6b:ee:c2:3e:e2:43:c9:cc:fb:8f: d7:a0:fb:3f:16:19:a0:18:a8:23:dc:51:0b:60:bb: 55:c7:32:4e:cd:d3:8e:02:d5:99:56:d1:e1:71:04: 95:d4:1a:50:9b:8e:dc:93:66:61:5d:d3:56:7f:6c: c0:9f:59:e8:5b:ba:0a:81:80:cc:0d:dc:69:39:f0: 0d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E7:30:14:47:EF:9C:1F:DF:27:1D:51:6B:04:E7:E3:9F:93:9F:34 X509v3 Authority Key Identifier: keyid:C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:53:05:03:02:99:1f:f5:fe:5f:c4:a8:f2:d9:c2:5f:c7:af: 66:f0:06:7a:94:5c:62:2b:7b:71:22:e0:08:be:28:1a:da:8d: c0:e9:5a:22:9e:ad:c7:54:5e:62:5b:92:3c:52:0b:83:a1:4c: d4:df:2a:50:4f:bf:7b:a5:80:e9:47:78:2f:68:ea:8d:81:d5: 69:75:82:4e:22:0a:17:0a:a1:ce:b5:41:f8:07:71:44:3d:9c: 1b:e9:9b:70:eb:c3:43:c4:a8:03:04:ab:31:1f:4a:c7:a0:1d: cb:48:cc:3b:a0:ff:46:24:bc:4e:2f:1a:87:dc:f0:43:fe:30: 38:fa:a1:03:53:ae:24:39:87:75:ed:c8:c0:c3:64:86:cd:58: f2:fc:e7:a3:6e:78:40:32:8d:21:29:54:ce:b7:fb:c3:b5:32: 23:74:2c:ea:1f:77:0c:10:08:5c:72:e1:6f:c8:3a:4e:b6:10: d7:b5:9d:e5:b6:ad:63:fa:4c:e7:16:c9:e8:e2:4a:9c:e3:f1: 67:c1:06:9c:f2:a7:a5:8a:cd:64:51:56:2c:cd:58:bd:3d:af: 5a:f0:d4:d5:ac:81:62:d5:b8:21:4e:9b:d5:82:bc:8f:95:a1: ae:c7:88:79:99:7b:c9:e7:c6:02:cc:8b:1a:32:1a:a8:f9:fc: b8:46:31:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUZCNjExMC8GA1UEBRMoQzZBMjE2RTQyMzI2OEIzOTI3N0RDMTIyRjNFMUFBRDg2 QzZEOUE0MzAeFw0yNTA3MDMwNzA2MTlaFw0yNTA3MTAwNzA2MTlaMBgxFjAUBgNV BAMTDTY4NjYyYmViLWJiZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSbJ2uIg8VBldHUdr7aGOKt8ociAjZiPzSqqBmh5luQg7WNocu7cHEmcV0Y6xd rLJNn8GWGNilSO/5fDnX1S9kymIDjnXwRBOt7kt8HseBNy0bohwoRF6DoBJllQAc 32NCrnJMNbQbB5hmUX6MQQ5fS7ZS3nWZscqTKFOfe0fV8Ehox7i96JUHcAlE090A qBYTWsWwOK8sl/qlVRn1XhSCVtAERBGN2dlTAIQwUMqaqLAytzPZE78Da+7CPuJD ycz7j9eg+z8WGaAYqCPcUQtgu1XHMk7N044C1ZlW0eFxBJXUGlCbjtyTZmFd01Z/ bMCfWehbugqBgMwN3Gk58A2vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfOcwFEfv nB/fJx1RawTn45+TnzQwHwYDVR0jBBgwFoAUxqIW5CMmizknfcEi8+Gq2GxtmkMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RkI2LzhFQzM1REU0QUM2 NDExRUZCNjg0MjY3QkM0RjlBRTAyL3hxSVc1Q01taXprbmZjRWk4LUdxMkd4dG1r TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHFJVzVDTW1pemtuZmNFaTgtR3EyR3h0bWtNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RkI2LzhFQzM1REU0QUM2NDExRUZCNjg0MjY3QkM0RjlBRTAyL3hxSVc1Q01taXpr bmZjRWk4LUdxMkd4dG1rTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHRTBQMCmR/1/l/EqPLZwl/Hr2bwBnqUXGIre3Ei4Ai+KBrajcDpWiKe rcdUXmJbkjxSC4OhTNTfKlBPv3ulgOlHeC9o6o2B1Wl1gk4iChcKoc61QfgHcUQ9 nBvpm3Drw0PEqAMEqzEfSsegHctIzDug/0YkvE4vGofc8EP+MDj6oQNTriQ5h3Xt yMDDZIbNWPL856NueEAyjSEpVM63+8O1MiN0LOofdwwQCFxy4W/IOk62ENe1neW2 rWP6TOcWyejiSpzj8WfBBpzyp6WKzWRRVizNWL09r1rw1NWsgWLVuCFOm9WCvI+V oa7HiHmZe8nnxgLMixoyGqj5/LhGMaI= -----END CERTIFICATE-----Generated at Fri Jul 4 14:57:59 2025 by rpki-client