$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: e+O+KYkXJd2Wyb4MJ8ytv5tlCEkWxXBgQ7dmqQNPt+4= Subject key identifier: 1E:54:11:31:F0:E5:AC:6E:8B:56:AC:75:4A:C4:68:CF:5D:3C:17:FC Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0C5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0C55 Signing time: Fri 04 Jul 2025 18:45:33 +0000 Manifest this update: Fri 04 Jul 2025 18:45:33 +0000 Manifest next update: Fri 11 Jul 2025 18:45:33 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: t5ycSL5txntcY9Q8z11dkhTZJLlbSp7JTiYBhDQKLZQ=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: FqEN/utj0qRJF2RShIO0hvD2R+VumfpS5SKeV7adKGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: Jul 4 18:45:33 2025 GMT Not After : Jul 11 18:45:33 2025 GMT Subject: CN=6868214d-141b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:d7:90:95:35:60:a0:dd:a5:d6:e7:f6:6f: 6c:88:1d:2a:23:62:b2:fa:b2:de:ae:52:7a:79:5e: 6d:d4:62:a8:ca:42:f4:e4:05:51:1c:2f:e9:3b:cb: d1:76:d5:fd:2c:7a:95:89:44:ff:15:e5:85:8d:8c: c7:79:02:46:f0:62:6f:91:28:20:fb:72:e2:f0:b2: 7c:d6:7d:35:5a:b8:65:37:7c:32:ce:bf:f7:52:02: 76:94:04:6a:df:33:73:09:c9:00:15:1a:23:cc:41: 5a:54:3f:eb:97:d8:98:cd:c0:29:77:fc:cf:32:4d: e7:1b:24:15:f5:68:51:4b:36:07:13:c5:55:7f:ac: 39:15:7a:7d:2a:6b:e5:9d:5b:b3:e3:07:a1:93:cd: 15:2d:23:a3:84:cd:41:62:90:b3:4d:21:97:a1:84: e4:69:ea:37:12:27:1e:ee:b9:4a:4c:ad:03:61:45: 68:4a:36:c0:1b:e9:ef:01:c4:dc:a1:ff:02:8d:58: 9a:64:03:5c:91:35:4e:4b:93:75:f6:40:d3:a4:2c: b6:2a:a4:06:a0:63:7a:dd:df:f2:71:3e:68:91:4c: 4c:7d:6a:b8:51:f6:0e:e0:71:15:8b:78:23:b5:b7: b8:85:8f:f3:24:5f:88:4f:ef:9b:7a:e6:f0:aa:e2: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:54:11:31:F0:E5:AC:6E:8B:56:AC:75:4A:C4:68:CF:5D:3C:17:FC X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d6:f3:56:9e:75:1c:58:82:0f:ac:4a:d3:48:ef:1c:51:0a: 9a:66:ba:28:4f:ae:74:c4:c9:6f:73:c2:f8:4c:9d:b6:5a:0a: 06:1a:3a:74:29:26:6d:e2:7f:f4:12:3f:9b:bd:b6:1d:d7:0e: cf:cc:07:78:f0:2e:3a:ef:91:aa:ee:74:e0:20:4d:cc:63:74: 07:97:38:d6:bf:24:78:89:84:11:fa:16:af:ed:9c:a4:af:b4: f1:22:b9:73:d0:e9:e2:c2:4b:45:22:b6:3d:ab:a2:61:80:11: 52:ad:0a:fc:bf:c6:ab:b9:65:31:42:86:75:04:b5:89:7c:80: 06:17:53:0b:38:47:ba:96:80:d4:6f:d9:21:36:30:26:a5:f8: af:82:88:cb:5d:73:a0:48:04:84:7f:65:ad:c9:19:f1:56:c9: 96:c7:8d:a2:d2:d3:e3:27:99:71:e8:a3:c0:ce:d6:9c:8b:65: 79:40:f4:4a:54:79:62:0b:d6:64:c6:d8:0f:ef:36:fa:a8:ba: 08:81:da:65:df:c1:7f:d2:a9:43:9a:36:e7:d4:6d:d6:31:bd: 4d:22:b5:34:bd:df:e3:87:0e:c9:d1:16:8f:83:f7:05:7f:e4: d3:0d:36:af:4c:8a:a3:d6:ef:52:46:86:0a:57:5c:6f:5d:1e: 06:bf:be:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjUwNzA0MTg0NTMzWhcNMjUwNzExMTg0NTMzWjAYMRYwFAYD VQQDEw02ODY4MjE0ZC0xNDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumnXkJU1YKDdpdbn9m9siB0qI2Ky+rLerlJ6eV5t1GKoykL05AVRHC/pO8vR dtX9LHqViUT/FeWFjYzHeQJG8GJvkSgg+3Li8LJ81n01WrhlN3wyzr/3UgJ2lARq 3zNzCckAFRojzEFaVD/rl9iYzcApd/zPMk3nGyQV9WhRSzYHE8VVf6w5FXp9Kmvl nVuz4wehk80VLSOjhM1BYpCzTSGXoYTkaeo3Eice7rlKTK0DYUVoSjbAG+nvAcTc of8CjViaZANckTVOS5N19kDTpCy2KqQGoGN63d/ycT5okUxMfWq4UfYO4HEVi3gj tbe4hY/zJF+IT++beubwquJ5YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5UETHw 5axui1asdUrEaM9dPBf8MB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd1vNWnnUcWIIPrErTSO8cUQqaZrooT650xMlvc8L4TJ22WgoGGjp0 KSZt4n/0Ej+bvbYd1w7PzAd48C4675Gq7nTgIE3MY3QHlzjWvyR4iYQR+hav7Zyk r7TxIrlz0OniwktFIrY9q6JhgBFSrQr8v8aruWUxQoZ1BLWJfIAGF1MLOEe6loDU b9khNjAmpfivgojLXXOgSASEf2WtyRnxVsmWx42i0tPjJ5lx6KPAztaci2V5QPRK VHliC9ZkxtgP7zb6qLoIgdpl38F/0qlDmjbn1G3WMb1NIrU0vd/jhw7J0RaPg/cF f+TTDTavTIqj1u9SRoYKV1xvXR4Gv74v -----END CERTIFICATE-----Generated at Sat Jul 5 05:20:24 2025 by rpki-client