$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft File: xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft (raw, json) Hash identifier: ATl3tECYV89IZIHVW4mSWzoM7U27PFGap0juWUvVIrc= Subject key identifier: 72:AE:6F:D5:02:4B:31:01:BE:B7:7B:C1:B5:8F:2A:85:6C:D2:3E:F9 Authority key identifier: C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 Certificate issuer: /CN=A9157B66/serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Certificate serial: 0653 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft Manifest number: 064E Signing time: Wed 02 Jul 2025 22:51:51 +0000 Manifest this update: Wed 02 Jul 2025 22:51:51 +0000 Manifest next update: Wed 09 Jul 2025 22:51:51 +0000 Files and hashes: 1: xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl (hash: h1KUOqHT+Amk9/CUo7z2yvsX/RI2BhoumeHDp6LW4jU=) 2: 807CB298903A11EBA9783756C4F9AE02.roa (hash: HcRkeL0L46StqN8XUYCiDhZBU5a1szFT/RluEKL79UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1619 (0x653) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B66, serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Validity Not Before: Jul 2 22:51:51 2025 GMT Not After : Jul 9 22:51:51 2025 GMT Subject: CN=6865b807-55c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5c:48:12:e6:0d:10:53:1b:45:a0:ea:42:49: 84:0d:49:3b:91:7b:bf:3a:0f:fb:37:0c:00:6b:2b: c2:bf:9d:33:61:fe:1e:80:05:3e:b2:c2:bd:16:79: f0:91:61:a8:57:8b:91:16:a9:e4:b1:ba:55:18:d6: a9:e5:ed:12:ae:10:03:7d:e1:67:16:d4:11:90:33: 68:ec:60:e4:a5:eb:17:37:2b:13:ea:56:f1:f7:20: 75:05:00:fc:9c:13:6b:fd:0b:60:38:19:71:3a:ea: cc:c2:cb:01:73:6f:4f:48:da:90:3e:83:7b:c8:5d: 80:1e:53:32:dc:ac:c3:21:78:d6:e3:8e:5b:e0:8c: 48:20:5a:62:e8:91:c1:ca:01:7c:1b:81:47:20:ab: 7c:56:35:dc:5a:38:8b:92:51:97:4e:e2:c3:d4:02: db:97:5f:38:ee:f4:49:9b:3c:64:71:6b:12:63:f7: 37:1f:a2:c6:1e:78:6d:15:ed:13:c6:5b:a6:33:b9: 4b:a1:bc:6f:fc:0d:50:4d:61:49:f2:81:6d:cf:1e: 01:b6:c1:d5:1e:8e:e0:fd:46:52:4a:04:09:ec:07: fc:9d:4e:74:7c:94:8f:e7:dd:b1:09:2a:74:ff:97: da:c2:71:51:f5:a6:29:2a:8e:81:99:4e:37:b5:de: be:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AE:6F:D5:02:4B:31:01:BE:B7:7B:C1:B5:8F:2A:85:6C:D2:3E:F9 X509v3 Authority Key Identifier: keyid:C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a3:48:f5:d9:ab:26:d2:ab:fc:79:b3:39:e8:88:0d:e0:65: 64:de:81:c2:1f:65:a9:28:2c:ca:11:c4:d1:98:c0:3a:c8:4a: ad:a9:7a:30:c6:54:0e:0e:90:5a:9a:44:70:49:80:07:7c:0a: 7c:b0:d8:3b:db:ad:d7:3c:c5:6b:39:78:5b:f0:e1:45:cd:ce: bb:63:70:3e:83:77:17:4c:6e:b3:64:97:ea:44:0f:51:dd:23: d9:c8:22:74:1a:eb:d2:28:6b:d1:ee:25:20:45:d1:7c:c1:8e: 17:ab:71:99:d9:3b:00:e9:5f:c8:7a:b3:87:fd:6c:91:26:dc: 82:28:e7:e2:5e:41:a8:7c:11:c3:8b:b5:10:9e:da:dc:0d:f5: 23:8f:a9:53:80:21:ce:59:ae:3c:d3:72:74:4c:85:91:e7:8b: db:1f:7a:a6:d9:4f:72:14:2d:8f:8f:db:26:22:44:3e:3b:7e: e6:1b:a3:f3:3d:0d:9d:bd:58:7c:6f:ae:60:a4:ff:a5:1e:5c: 06:0a:a2:3a:c1:f1:5c:de:5b:02:a1:81:8f:d6:6d:bf:c8:4c: 3d:12:de:c0:f1:5e:7a:53:61:9e:4f:d7:5d:a1:4b:10:0b:20: 2b:94:88:9d:ee:09:69:66:7a:62:f6:9e:23:a9:c1:38:85:6b: d7:c3:a6:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCNjYxMTAvBgNVBAUTKEM0NTVCMDg2QkFCODY0N0NEMjUxMENBODMyNDFFNzAw MTRDRDhBNDQwHhcNMjUwNzAyMjI1MTUxWhcNMjUwNzA5MjI1MTUxWjAYMRYwFAYD VQQDEw02ODY1YjgwNy01NWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFxIEuYNEFMbRaDqQkmEDUk7kXu/Og/7NwwAayvCv50zYf4egAU+ssK9Fnnw kWGoV4uRFqnksbpVGNap5e0SrhADfeFnFtQRkDNo7GDkpesXNysT6lbx9yB1BQD8 nBNr/QtgOBlxOurMwssBc29PSNqQPoN7yF2AHlMy3KzDIXjW445b4IxIIFpi6JHB ygF8G4FHIKt8VjXcWjiLklGXTuLD1ALbl1847vRJmzxkcWsSY/c3H6LGHnhtFe0T xlumM7lLobxv/A1QTWFJ8oFtzx4BtsHVHo7g/UZSSgQJ7Af8nU50fJSP592xCSp0 /5fawnFR9aYpKo6BmU43td6+WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKub9UC SzEBvrd7wbWPKoVs0j75MB8GA1UdIwQYMBaAFMRVsIa6uGR80lEMqDJB5wAUzYpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I2Ni9FNUM0RDMyNjkw MzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpIelNVUXlvTWtIbkFCVE5p a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hGV3docnE0Wkh6U1VReW9Na0huQUJUTmlrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0I2Ni9FNUM0RDMyNjkwMzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpI elNVUXlvTWtIbkFCVE5pa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvo0j12asm0qv8ebM56IgN4GVk3oHCH2WpKCzKEcTRmMA6yEqtqXow xlQODpBamkRwSYAHfAp8sNg7263XPMVrOXhb8OFFzc67Y3A+g3cXTG6zZJfqRA9R 3SPZyCJ0GuvSKGvR7iUgRdF8wY4Xq3GZ2TsA6V/IerOH/WyRJtyCKOfiXkGofBHD i7UQntrcDfUjj6lTgCHOWa4803J0TIWR54vbH3qm2U9yFC2Pj9smIkQ+O37mG6Pz PQ2dvVh8b65gpP+lHlwGCqI6wfFc3lsCoYGP1m2/yEw9Et7A8V56U2GeT9ddoUsQ CyArlIid7glpZnpi9p4jqcE4hWvXw6YH -----END CERTIFICATE-----Generated at Thu Jul 3 08:36:40 2025 by rpki-client