$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: wtYVqXEkfP8aY8ujd72WmgiHk3aUZAdrh7YaSLnpXnM= Subject key identifier: 7A:09:DE:53:89:03:BF:66:AE:AA:E7:AE:D5:BB:AF:10:79:A6:03:9A Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 3494 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 3494 Signing time: Wed 02 Jul 2025 15:17:06 +0000 Manifest this update: Wed 02 Jul 2025 15:17:05 +0000 Manifest next update: Wed 09 Jul 2025 15:17:05 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: kYvQsJW99fW6owQFq4S5qfZV7csEs/mXJdrFSlVUpAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13460 (0x3494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: Jul 2 15:17:05 2025 GMT Not After : Jul 9 15:17:05 2025 GMT Subject: CN=68654d72-5f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:06:4d:63:ac:85:4e:bd:48:20:70:70:e4:6e: bd:a2:1b:d2:79:c3:1d:d9:48:1a:2b:c2:6f:65:f8: dc:d7:76:c7:53:47:cf:81:1a:c3:70:83:c7:c9:32: e0:94:b6:10:e2:0c:53:45:ce:09:e8:b1:19:65:f9: d4:8f:8f:b2:ee:f3:98:10:04:a7:49:f0:c1:71:cd: 38:d6:fd:c7:77:f0:3a:35:4b:01:96:e9:0f:05:39: 8b:d4:76:a5:c3:39:17:f1:0d:35:72:ed:76:07:19: ab:d7:1a:5e:66:75:a7:dc:d4:cd:d0:c0:0b:2d:c6: 0a:31:b7:0a:4b:a8:3a:44:f5:49:4c:d2:9e:f2:6d: 3a:a8:2e:bd:54:29:34:8e:64:ab:ee:8f:9f:6e:0e: a4:65:1b:49:b8:7e:14:f2:c1:da:fb:8d:fc:ad:ad: 63:aa:21:27:a3:1d:c0:80:3c:8c:29:22:e2:c7:df: b2:61:7b:59:1e:d4:e6:dc:ce:7b:4d:75:23:4b:88: 8d:10:8a:ef:d7:0a:f4:fe:1a:57:07:df:a3:ee:24: 60:df:de:9e:c6:2e:3c:ad:68:eb:8a:b5:64:e2:6d: 4b:b1:69:06:b4:83:58:aa:7e:bb:25:92:0b:ef:7f: f6:97:b4:e6:d4:5c:8f:e8:2e:33:09:f3:7f:9f:a7: 57:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:09:DE:53:89:03:BF:66:AE:AA:E7:AE:D5:BB:AF:10:79:A6:03:9A X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:81:ca:a6:9f:e8:5c:99:bc:26:13:e5:d0:27:12:d7:83:a6: 09:7a:06:99:a3:ed:5a:4f:46:8d:6a:b9:19:d7:c2:4a:0e:81: 4d:1b:a0:d9:f6:d9:15:7a:41:a9:01:8d:e0:e3:f3:72:ba:37: 7f:7c:07:2c:09:7e:34:ea:af:41:59:a0:72:37:33:8a:fd:f6: 62:f9:eb:16:38:d4:09:f7:a5:19:ba:6f:89:06:00:42:82:57: 27:6e:4c:e0:29:45:7c:45:5b:0d:b8:f6:26:72:21:db:7e:2c: 77:66:ab:66:ba:61:d4:bf:87:ad:52:82:1e:e7:27:04:37:26: b2:b8:71:50:3d:d2:92:34:4a:6a:46:79:04:c4:1b:02:9a:a5: cf:ab:2e:d0:a0:bd:24:5c:65:6e:ab:44:a1:57:62:23:22:53: 55:92:77:86:dc:aa:e2:70:be:ff:6a:0d:9c:31:f0:09:40:58: de:06:62:75:24:8b:a9:b6:25:27:61:b2:f5:72:d8:b4:8b:b3: 05:6d:01:dd:6a:04:7e:24:e7:f9:9d:74:0a:43:3e:57:f0:48: 0b:e3:e1:84:46:4a:35:06:a4:fc:20:4b:56:0e:16:6b:b5:b5: 4f:e4:27:f4:15:83:81:3b:53:57:f1:73:69:0b:b2:e8:b3:0f: ce:86:ba:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjUwNzAyMTUxNzA1WhcNMjUwNzA5MTUxNzA1WjAYMRYwFAYD VQQDEw02ODY1NGQ3Mi01ZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7wZNY6yFTr1IIHBw5G69ohvSecMd2UgaK8JvZfjc13bHU0fPgRrDcIPHyTLg lLYQ4gxTRc4J6LEZZfnUj4+y7vOYEASnSfDBcc041v3Hd/A6NUsBlukPBTmL1Hal wzkX8Q01cu12Bxmr1xpeZnWn3NTN0MALLcYKMbcKS6g6RPVJTNKe8m06qC69VCk0 jmSr7o+fbg6kZRtJuH4U8sHa+438ra1jqiEnox3AgDyMKSLix9+yYXtZHtTm3M57 TXUjS4iNEIrv1wr0/hpXB9+j7iRg396exi48rWjrirVk4m1LsWkGtINYqn67JZIL 73/2l7Tm1FyP6C4zCfN/n6dX+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoJ3lOJ A79mrqrnrtW7rxB5pgOaMB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1gcqmn+hcmbwmE+XQJxLXg6YJegaZo+1aT0aNarkZ18JKDoFNG6DZ 9tkVekGpAY3g4/Nyujd/fAcsCX406q9BWaByNzOK/fZi+esWONQJ96UZum+JBgBC glcnbkzgKUV8RVsNuPYmciHbfix3ZqtmumHUv4etUoIe5ycENyayuHFQPdKSNEpq RnkExBsCmqXPqy7QoL0kXGVuq0ShV2IjIlNVkneG3KricL7/ag2cMfAJQFjeBmJ1 JIuptiUnYbL1cti0i7MFbQHdagR+JOf5nXQKQz5X8EgL4+GERko1BqT8IEtWDhZr tbVP5Cf0FYOBO1NX8XNpC7Losw/OhrpW -----END CERTIFICATE-----Generated at Fri Jul 4 12:02:36 2025 by rpki-client