$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft File: xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json) Hash identifier: YeemmawF8k4A73nh166qOGRsA+w42cCOCyaUl290LCY= Subject key identifier: B5:D6:1C:7E:42:2A:11:F3:2D:C3:2B:99:5C:01:8A:05:BC:3D:FC:1B Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D Certificate issuer: /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft Manifest number: 7E Signing time: Tue 01 Jul 2025 07:26:24 +0000 Manifest this update: Tue 01 Jul 2025 07:26:23 +0000 Manifest next update: Tue 08 Jul 2025 07:26:23 +0000 Files and hashes: 1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: CQowhKP6Bvt4Ns5cTIV/7Xcb0bHQC4td+tcOvLCaHmc=) 2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: uh0RsXXXDr4A3r/l+n4K/1lemqOiMBSx6tfsdjRL1A4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D Validity Not Before: Jul 1 07:26:23 2025 GMT Not After : Jul 8 07:26:23 2025 GMT Subject: CN=68638da0-d3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:52:4a:9e:62:67:78:24:bc:1e:4b:25:b2: 10:1d:7d:61:eb:e2:dc:bf:cd:f5:2a:20:b2:71:f7: 30:ec:55:92:bb:97:d9:6e:37:97:24:c0:2e:4d:7f: 0b:ac:7a:e7:64:c6:35:46:cd:72:0a:da:0e:8a:4c: 65:2f:5f:c4:47:e5:16:20:e9:05:c8:9d:14:5c:f5: d4:a8:03:58:97:d3:c1:f2:e2:74:72:cc:f6:53:f3: e4:34:4c:91:21:38:cb:8e:8f:db:f3:bb:bc:38:c9: 1f:9a:7f:1d:90:b0:c9:73:18:f0:a8:de:9f:98:bb: ec:dd:56:b5:50:b4:e0:8b:d3:11:e5:c3:11:a8:88: 11:12:78:6c:74:f2:47:ac:88:fd:dd:95:90:ef:ba: 68:05:fc:8b:1d:e9:cd:4e:eb:08:38:fa:c8:bc:55: 41:68:30:20:0f:08:36:0c:07:35:41:ec:89:b2:18: e1:00:13:c5:2c:1e:8e:c9:cb:dd:c1:f7:7c:51:d2: bb:6c:71:4f:68:51:2b:a8:19:40:34:36:31:02:a8: 4b:5f:d8:34:38:02:08:c3:f0:b0:53:78:63:66:d4: d6:ae:f5:e5:f8:54:20:9e:73:f4:82:b0:66:f2:9f: 1a:9b:5a:10:df:3f:20:65:f3:8e:bd:63:bc:39:c4: b5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D6:1C:7E:42:2A:11:F3:2D:C3:2B:99:5C:01:8A:05:BC:3D:FC:1B X509v3 Authority Key Identifier: keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:93:f0:47:c7:0f:4a:ad:c5:4b:54:7d:a0:01:c5:ca:90:4b: fd:45:49:b3:d1:93:ea:21:a6:cf:dc:ac:f2:ec:33:45:00:28: e5:f3:5b:c6:33:eb:ed:a2:3c:92:ef:7d:6f:a3:f9:6d:8d:44: 97:62:79:87:d5:0b:33:1c:29:cd:bd:c1:cd:bc:fc:ae:64:3f: 30:c4:ef:6e:f0:0a:7a:b8:99:c7:d1:b6:47:3a:12:70:1d:a8: 24:e9:4f:c3:38:82:bf:29:37:c3:5b:de:6c:15:d1:8d:45:3b: 82:a6:db:9f:3a:31:ef:d8:66:15:ff:25:4d:c6:e8:f9:bc:b3: 76:6f:8f:8a:f5:01:29:6e:10:e8:ff:50:ff:14:15:3f:16:af: fb:ea:6e:2c:33:7e:dd:a1:38:bc:d3:bd:e4:60:2e:63:28:9e: 2b:19:ce:5c:a1:d5:4f:4f:66:b9:0d:5e:ee:6a:cb:a1:41:e9: e7:7a:77:9b:d6:26:39:67:e0:cb:07:2b:60:21:e5:06:69:99: 40:8d:12:c0:6f:8f:4a:a4:91:1c:24:6c:1e:02:f6:28:ed:46: 77:61:fe:b6:0e:3e:15:e5:33:cc:2d:bd:f5:60:eb:b8:40:d0: dc:02:35:c7:92:38:00:f5:7e:de:1d:34:38:49:29:88:fc:1f: 43:88:b0:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjM4QTExMC8GA1UEBRMoQzQ2QzQzQkEyNzdEMkMxMEVFN0QxRUZGM0RGMEUyRUZD ODg1MUExRDAeFw0yNTA3MDEwNzI2MjNaFw0yNTA3MDgwNzI2MjNaMBgxFjAUBgNV BAMTDTY4NjM4ZGEwLWQzZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBFlJKnmJneCS8HkslshAdfWHr4ty/zfUqILJx9zDsVZK7l9luN5ckwC5Nfwus eudkxjVGzXIK2g6KTGUvX8RH5RYg6QXInRRc9dSoA1iX08Hy4nRyzPZT8+Q0TJEh OMuOj9vzu7w4yR+afx2QsMlzGPCo3p+Yu+zdVrVQtOCL0xHlwxGoiBESeGx08kes iP3dlZDvumgF/Isd6c1O6wg4+si8VUFoMCAPCDYMBzVB7ImyGOEAE8UsHo7Jy93B 93xR0rtscU9oUSuoGUA0NjECqEtf2DQ4AgjD8LBTeGNm1Nau9eX4VCCec/SCsGby nxqbWhDfPyBl8469Y7w5xLXNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtdYcfkIq EfMtwyuZXAGKBbw9/BswHwYDVR0jBBgwFoAUxGxDuid9LBDufR7/PfDi78iFGh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MzhBLzVCREQyQ0FFOTU0 NzExRUY5NjgwOEYyQ0M0RjlBRTAyL3hHeER1aWQ5TEJEdWZSN19QZkRpNzhpRkdo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEd4RHVpZDlMQkR1ZlI3X1BmRGk3OGlGR2gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MzhBLzVCREQyQ0FFOTU0NzExRUY5NjgwOEYyQ0M0RjlBRTAyL3hHeER1aWQ5TEJE dWZSN19QZkRpNzhpRkdoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACWT8EfHD0qtxUtUfaABxcqQS/1FSbPRk+ohps/crPLsM0UAKOXzW8Yz 6+2iPJLvfW+j+W2NRJdieYfVCzMcKc29wc28/K5kPzDE727wCnq4mcfRtkc6EnAd qCTpT8M4gr8pN8Nb3mwV0Y1FO4Km2586Me/YZhX/JU3G6Pm8s3Zvj4r1ASluEOj/ UP8UFT8Wr/vqbiwzft2hOLzTveRgLmMonisZzlyh1U9PZrkNXu5qy6FB6ed6d5vW Jjln4MsHK2Ah5QZpmUCNEsBvj0qkkRwkbB4C9ijtRndh/rYOPhXlM8wtvfVg67hA 0NwCNceSOAD1ft4dNDhJKYj8H0OIsO4= -----END CERTIFICATE-----Generated at Thu Jul 3 05:54:39 2025 by rpki-client