$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json) Hash identifier: /er6OpKjtCMjconab+p08mN+CoQxI1Ieu4KgEFcpjCI= Subject key identifier: 23:E4:10:E8:09:5F:20:7D:E3:51:01:4D:AF:25:DB:00:6B:99:AA:C8 Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Certificate serial: 0683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft Manifest number: 0677 Signing time: Wed 02 Jul 2025 22:39:51 +0000 Manifest this update: Wed 02 Jul 2025 22:39:51 +0000 Manifest next update: Wed 09 Jul 2025 22:39:51 +0000 Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: KbROAdXU07ykHDZUm/aPPa2UgVAOyD4msSIQ3L0Xat0=) 2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: Ode9C1rjZZ48xy/QuIzg9S8zoYsoG2CKnN/yX25u2gs=) 3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: p4MgzG+OXWtv9vZOtFXE4K9GjNanwMoHoivstYkkSaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Validity Not Before: Jul 2 22:39:51 2025 GMT Not After : Jul 9 22:39:51 2025 GMT Subject: CN=6865b537-5856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d3:47:09:47:41:73:99:15:ad:c4:b4:56:d8: fe:0e:58:65:fa:4c:ec:b7:e7:9a:4e:3a:ad:f0:03: 5c:a2:c3:eb:15:d6:39:b8:7d:bc:22:7d:c7:29:ce: bf:ff:5b:c1:fe:72:21:29:82:16:a9:23:60:27:54: 11:65:b9:ee:29:a2:5c:8a:a1:b0:c4:cf:b6:6b:b3: 35:44:43:f6:57:34:01:5e:b6:59:ab:9e:a5:56:0e: d2:07:6c:c5:63:32:e3:5a:b5:79:fa:5a:96:87:28: 88:c1:bb:c8:7c:59:64:61:ae:89:82:a8:27:36:24: 09:ba:c0:88:92:a4:61:a8:de:97:6b:c8:09:1e:88: 5c:b1:75:6c:58:b5:f0:52:ac:a7:c9:93:a6:68:05: dd:e3:ca:0e:dd:c4:1e:9c:8d:95:f7:4a:63:64:b8: 1c:47:26:be:0a:33:fb:03:fb:bc:c5:2e:aa:65:18: 89:7c:1c:f7:ad:3a:6b:da:a9:ba:60:da:2c:f6:ad: c0:e8:27:0f:f7:c3:63:3b:90:bf:e8:f1:60:6c:04: 0e:ed:59:a8:11:8b:94:4c:da:41:b6:57:d5:f3:ab: cf:d4:ef:30:8f:c0:7e:e0:58:02:4c:c7:bd:ce:d0: 8b:b7:5d:37:84:bc:b0:dc:e4:ff:46:f7:14:a3:13: c0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E4:10:E8:09:5F:20:7D:E3:51:01:4D:AF:25:DB:00:6B:99:AA:C8 X509v3 Authority Key Identifier: keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b8:de:4d:d8:8e:5a:d6:ac:9c:af:eb:af:73:d0:c5:af:ad: 40:d6:8e:33:0a:0c:58:99:34:de:c4:9d:82:27:9a:33:b0:92: 13:dc:0c:a7:ca:5b:b6:cb:7e:e4:40:6d:e6:69:1c:ae:40:56: 54:c0:b4:04:98:aa:9c:f0:2f:07:35:ee:52:06:9d:16:e1:90: 5e:61:06:68:d0:09:3c:77:94:42:06:ab:8d:1f:2b:b7:03:97: 7f:08:fe:16:50:5b:a4:5b:70:3c:c8:82:1d:ce:f7:c7:26:2f: a9:36:d0:9a:a0:32:8e:b6:ac:3a:49:32:3e:a5:77:74:98:3b: d0:65:e1:95:48:9d:8a:f1:b8:af:cb:b3:67:12:c8:b8:81:86: 85:8c:df:4b:bb:b8:61:a8:58:f3:18:a8:ec:bb:50:85:80:ab: e8:d0:f3:69:78:66:bc:1c:15:07:9b:bc:f9:94:a9:f0:c2:ad: e9:0a:ae:41:97:eb:8e:e5:c6:b3:11:6c:7f:1c:22:30:3a:1d: f8:9f:ce:8b:b8:34:24:ad:46:b5:7e:b3:3c:d5:26:f8:f8:e4: 29:9a:50:85:0c:06:71:ea:2a:64:71:c1:c1:83:9f:79:da:ae: c2:2b:db:eb:99:55:35:2a:7c:60:c2:01:ec:99:55:78:4d:77: de:46:42:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw QTUyOEVEQzAwHhcNMjUwNzAyMjIzOTUxWhcNMjUwNzA5MjIzOTUxWjAYMRYwFAYD VQQDEw02ODY1YjUzNy01ODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtNHCUdBc5kVrcS0Vtj+Dlhl+kzst+eaTjqt8ANcosPrFdY5uH28In3HKc6/ /1vB/nIhKYIWqSNgJ1QRZbnuKaJciqGwxM+2a7M1REP2VzQBXrZZq56lVg7SB2zF YzLjWrV5+lqWhyiIwbvIfFlkYa6JgqgnNiQJusCIkqRhqN6Xa8gJHohcsXVsWLXw UqynyZOmaAXd48oO3cQenI2V90pjZLgcRya+CjP7A/u8xS6qZRiJfBz3rTpr2qm6 YNos9q3A6CcP98NjO5C/6PFgbAQO7VmoEYuUTNpBtlfV86vP1O8wj8B+4FgCTMe9 ztCLt103hLyw3OT/RvcUoxPAOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPkEOgJ XyB941EBTa8l2wBrmarIMB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL Y1BrNlhMY0xabWdLVW83Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsuN5N2I5a1qycr+uvc9DFr61A1o4zCgxYmTTexJ2CJ5ozsJIT3Ayn ylu2y37kQG3maRyuQFZUwLQEmKqc8C8HNe5SBp0W4ZBeYQZo0Ak8d5RCBquNHyu3 A5d/CP4WUFukW3A8yIIdzvfHJi+pNtCaoDKOtqw6STI+pXd0mDvQZeGVSJ2K8biv y7NnEsi4gYaFjN9Lu7hhqFjzGKjsu1CFgKvo0PNpeGa8HBUHm7z5lKnwwq3pCq5B l+uO5cazEWx/HCIwOh34n86LuDQkrUa1frM81Sb4+OQpmlCFDAZx6ipkccHBg595 2q7CK9vrmVU1KnxgwgHsmVV4TXfeRkIG -----END CERTIFICATE-----Generated at Thu Jul 3 17:08:42 2025 by rpki-client