$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: +fn8Uxei1c32BcJCIh5LoZeWQhI7m4X8CYXakWyD5uY= Subject key identifier: 1D:75:F2:75:CC:8B:11:8E:26:30:F5:E3:FC:1B:BA:0D:D8:76:DB:DC Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 039F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 0396 Signing time: Sun 29 Jun 2025 00:22:56 +0000 Manifest this update: Sun 29 Jun 2025 00:22:55 +0000 Manifest next update: Sun 06 Jul 2025 00:22:55 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: MI/bRj+YyiBtccOp91CH5hkamXhtdc+80UNvgY3HqBU=) 2: 0484BF6EF76311EC93951455C4F9AE02.roa (hash: ycFGkMxe7h4Ku30iu/P421qHyOaZ/lm2w5Y03BcYNz8=) 3: 3F7E8DCAA45C11EC845FEA36C4F9AE02.roa (hash: DbGKbMecwcykqDAfU21+x6Kvm9Z6g5WTzg4SdqXRisc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:22:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Jun 29 00:22:55 2025 GMT Not After : Jul 6 00:22:55 2025 GMT Subject: CN=68608760-446e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:5f:a6:e5:a6:6a:e1:24:fe:cc:50:84:9d: d3:59:ed:05:99:c7:01:10:f2:c9:fd:01:37:77:ab: 69:51:4c:29:06:d4:46:1f:cd:aa:f7:19:14:95:24: d4:7f:4b:42:88:39:50:6d:c4:66:ea:d4:4a:9d:8a: 7c:9a:a1:d6:78:e6:8a:1b:c2:0f:18:60:f8:b4:01: 3c:11:0e:66:24:52:75:65:be:7f:77:e7:62:74:be: d5:42:11:c0:50:ad:20:78:ea:78:b3:1b:bd:db:77: 26:ba:1b:03:2b:87:6b:04:88:2d:c5:22:7f:49:2e: 77:63:d6:71:63:58:21:6d:2f:5d:fa:f7:6a:fe:69: b3:59:d8:9f:43:0e:0c:cd:9f:06:0d:e3:09:75:d6: 53:54:e0:fa:9f:70:a3:89:ea:21:0f:1e:14:69:11: 15:2a:5d:d5:83:ae:70:6e:21:7d:65:b8:97:69:ae: 32:2b:28:ca:a5:16:f7:fd:28:fc:50:e2:ce:18:ee: ef:b1:96:fa:1b:ea:da:18:e9:32:c2:f5:6b:25:21: 4c:75:66:8c:b0:96:9a:79:be:3e:e4:6f:ec:53:20: 56:a3:3e:de:39:67:bf:1c:f9:c7:91:c4:7a:21:23: df:75:ec:56:33:e0:df:54:e7:42:e2:83:d4:c7:c1: 97:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:75:F2:75:CC:8B:11:8E:26:30:F5:E3:FC:1B:BA:0D:D8:76:DB:DC X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:06:92:4d:05:f5:00:98:1f:0e:13:2e:c2:64:2b:06:ff:a4: b7:9f:52:45:53:5f:9f:69:1f:1a:72:0b:38:d2:b9:ca:51:c4: 2e:c1:18:d2:8d:13:e8:d5:93:e8:02:1e:a7:ec:75:b0:8a:24: f5:bc:8b:f4:13:b9:c1:b8:98:e5:7c:04:33:7d:2b:7b:18:fd: 8d:1f:14:35:e7:80:77:c1:db:ea:07:92:6d:d8:4c:56:bc:39: ac:67:bd:3f:67:36:98:40:30:5c:97:9b:50:7a:60:7a:11:d5: 07:a5:15:e5:eb:7d:77:a9:bf:18:d0:4e:9a:bf:d3:f1:64:44: ad:86:5b:b3:b4:e6:b4:3f:2d:72:29:1d:22:79:f2:06:51:ea: 9f:78:b8:99:60:a2:22:96:f1:00:11:72:2f:39:51:e9:d1:e8: 94:a9:f6:42:65:23:32:4f:ea:0e:b0:43:a0:39:b6:51:7f:fd: 2d:03:53:98:79:92:86:bb:57:6d:70:45:92:7e:5a:aa:d3:61: 03:72:31:1f:41:87:90:7a:fe:3a:49:86:b5:7d:93:68:9c:ee: a6:7c:bf:b9:3e:96:bc:f1:2a:6e:7d:63:0f:6f:52:3d:62:d5: 85:32:1a:50:7e:c1:11:97:fb:7d:54:24:1e:da:e9:6e:c5:a8: 9f:97:1f:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjUwNjI5MDAyMjU1WhcNMjUwNzA2MDAyMjU1WjAYMRYwFAYD VQQDEw02ODYwODc2MC00NDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAra1fpuWmauEk/sxQhJ3TWe0FmccBEPLJ/QE3d6tpUUwpBtRGH82q9xkUlSTU f0tCiDlQbcRm6tRKnYp8mqHWeOaKG8IPGGD4tAE8EQ5mJFJ1Zb5/d+didL7VQhHA UK0geOp4sxu923cmuhsDK4drBIgtxSJ/SS53Y9ZxY1ghbS9d+vdq/mmzWdifQw4M zZ8GDeMJddZTVOD6n3CjieohDx4UaREVKl3Vg65wbiF9ZbiXaa4yKyjKpRb3/Sj8 UOLOGO7vsZb6G+raGOkywvVrJSFMdWaMsJaaeb4+5G/sUyBWoz7eOWe/HPnHkcR6 ISPfdexWM+DfVOdC4oPUx8GX8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB118nXM ixGOJjD14/wbug3YdtvcMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBABpJNBfUAmB8OEy7CZCsG/6S3n1JFU1+faR8acgs40rnKUcQuwRjS jRPo1ZPoAh6n7HWwiiT1vIv0E7nBuJjlfAQzfSt7GP2NHxQ154B3wdvqB5Jt2ExW vDmsZ70/ZzaYQDBcl5tQemB6EdUHpRXl6313qb8Y0E6av9PxZESthluztOa0Py1y KR0iefIGUeqfeLiZYKIilvEAEXIvOVHp0eiUqfZCZSMyT+oOsEOgObZRf/0tA1OY eZKGu1dtcEWSflqq02EDcjEfQYeQev46SYa1fZNonO6mfL+5Ppa88SpufWMPb1I9 YtWFMhpQfsERl/t9VCQe2uluxaiflx8R -----END CERTIFICATE-----Generated at Tue Jul 1 00:33:52 2025 by rpki-client