$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: bsZVj+jaSbaPYPGtlTfFfkaBeSbzdlAzbPt7yrxLwUc= Subject key identifier: BB:D1:34:85:39:67:FC:BB:DA:DC:3B:D3:83:F1:C7:49:10:13:CE:4C Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0C52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0C4B Signing time: Wed 02 Jul 2025 18:41:45 +0000 Manifest this update: Wed 02 Jul 2025 18:41:44 +0000 Manifest next update: Wed 09 Jul 2025 18:41:44 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: gPD5oqqyKDBU0iZjhp8w3HofVU1/NgdSoZ+/Utnj/BQ=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: jepyyGmhyczAJbapeZ5nuaRxeukad7rFEbIHfvNySKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: Jul 2 18:41:44 2025 GMT Not After : Jul 9 18:41:44 2025 GMT Subject: CN=68657d68-05a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:6b:db:d6:69:69:d4:5c:67:4b:c9:43:ea: d9:83:22:bd:7e:ef:75:b4:07:45:43:e7:8e:8a:cb: c6:ec:7f:46:af:04:ca:58:6a:4b:f8:d7:81:12:cd: 20:f6:b8:e1:b8:24:0f:30:a3:84:01:77:76:14:1f: 19:fd:e3:58:e9:a5:fe:04:c4:6f:ee:e3:96:f4:f6: da:1b:49:c1:11:6a:5c:38:4f:c8:a3:5f:4f:ea:f6: 99:6a:41:ff:6d:47:a7:c8:67:be:39:34:96:bf:c7: 0f:eb:29:f4:72:a4:f9:a3:15:46:3c:6e:ea:4b:40: 52:21:d6:29:e6:d6:6d:31:38:f8:e9:8e:5a:58:59: 6d:08:6f:b7:08:84:75:b8:35:b6:a0:47:fa:bb:53: 01:02:88:f8:d9:3a:8d:07:b2:72:b5:f2:e3:b1:1b: 86:68:a0:08:37:36:cf:5c:45:e1:ba:ce:4c:09:71: 29:68:32:f5:43:c4:ce:c2:c4:c0:98:cf:25:ce:12: c8:17:c6:a4:39:3d:2d:44:89:dc:09:68:20:88:bf: b1:85:df:7f:de:a0:7a:af:98:4a:1f:fb:4c:9d:99: cd:ba:8c:1e:b8:9e:fe:23:c7:93:33:9b:9f:a7:c5: da:ad:2b:ff:68:e7:bf:1e:61:c4:68:50:a2:05:5f: d4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D1:34:85:39:67:FC:BB:DA:DC:3B:D3:83:F1:C7:49:10:13:CE:4C X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:8b:ba:42:89:5b:b6:7c:44:5a:60:78:fe:91:c9:95:4d:bf: 6a:4f:44:bb:b3:1c:c9:e3:ad:dd:3d:2e:5f:87:81:b8:11:2e: 59:07:69:45:ef:a4:81:51:37:e3:de:ae:eb:53:83:d5:a4:8c: 34:25:e6:5e:15:b0:b4:f3:b9:aa:7a:dc:85:bc:ed:c2:dd:e8: ea:5a:6e:5f:db:23:7c:90:c7:95:5e:97:cc:8b:3b:6c:d9:d0: 34:dc:81:b2:f7:f5:06:70:66:d6:8f:88:5e:3f:c5:73:94:5a: 44:64:7b:11:0e:d2:42:e0:0a:95:64:71:52:07:35:d3:95:a6: 05:2d:fc:d8:2f:f3:6b:c7:21:12:da:94:7a:00:82:ac:43:4f: 93:a3:5e:0c:be:0c:69:3b:64:f1:b3:a1:21:e4:e0:64:d1:93: e4:34:a2:99:64:38:d0:17:84:c2:c1:2a:ab:8a:a2:c2:e6:f1: 58:67:17:94:01:55:86:d4:2b:64:10:83:74:89:eb:1c:1b:d7: 1d:c8:a5:c1:f9:c5:40:ba:2d:9e:d1:08:7f:cb:0a:27:9b:fc: 0d:2d:a5:2b:ec:15:27:a7:3b:04:75:e8:69:47:1f:9d:06:55: 4a:52:c0:08:22:2d:c9:61:bf:66:c4:61:d0:02:78:7d:a5:a4: 34:38:58:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjUwNzAyMTg0MTQ0WhcNMjUwNzA5MTg0MTQ0WjAYMRYwFAYD VQQDEw02ODY1N2Q2OC0wNWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvlr29ZpadRcZ0vJQ+rZgyK9fu91tAdFQ+eOisvG7H9GrwTKWGpL+NeBEs0g 9rjhuCQPMKOEAXd2FB8Z/eNY6aX+BMRv7uOW9PbaG0nBEWpcOE/Io19P6vaZakH/ bUenyGe+OTSWv8cP6yn0cqT5oxVGPG7qS0BSIdYp5tZtMTj46Y5aWFltCG+3CIR1 uDW2oEf6u1MBAoj42TqNB7JytfLjsRuGaKAINzbPXEXhus5MCXEpaDL1Q8TOwsTA mM8lzhLIF8akOT0tRIncCWggiL+xhd9/3qB6r5hKH/tMnZnNuoweuJ7+I8eTM5uf p8XarSv/aOe/HmHEaFCiBV/U+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvRNIU5 Z/y72tw704Pxx0kQE85MMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWi7pCiVu2fERaYHj+kcmVTb9qT0S7sxzJ463dPS5fh4G4ES5ZB2lF 76SBUTfj3q7rU4PVpIw0JeZeFbC087mqetyFvO3C3ejqWm5f2yN8kMeVXpfMizts 2dA03IGy9/UGcGbWj4heP8VzlFpEZHsRDtJC4AqVZHFSBzXTlaYFLfzYL/NrxyES 2pR6AIKsQ0+To14MvgxpO2Txs6Eh5OBk0ZPkNKKZZDjQF4TCwSqriqLC5vFYZxeU AVWG1CtkEIN0iescG9cdyKXB+cVAui2e0Qh/ywonm/wNLaUr7BUnpzsEdehpRx+d BlVKUsAIIi3JYb9mxGHQAnh9paQ0OFjq -----END CERTIFICATE-----Generated at Fri Jul 4 07:45:32 2025 by rpki-client