$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft File: XoJBeVOzWp-LWaQuyUb00CTYd2s.mft (raw, json) Hash identifier: eyObzqcZjgkg6/UssRh2tMh2ClEIQoRoT4lDCmrU1u4= Subject key identifier: 64:42:39:C3:A4:04:77:27:59:EC:57:93:43:DD:E1:83:AE:B6:CF:36 Authority key identifier: 5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B Certificate issuer: /CN=A915B2F1/serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B Certificate serial: 0657 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft Manifest number: 0652 Signing time: Sat 28 Jun 2025 22:09:56 +0000 Manifest this update: Sat 28 Jun 2025 22:09:55 +0000 Manifest next update: Sat 05 Jul 2025 22:09:55 +0000 Files and hashes: 1: XoJBeVOzWp-LWaQuyUb00CTYd2s.crl (hash: 84lam04XTil89Of81h7BDsN832WzF9V3293J9doyXrU=) 2: 9378220A8DF211EBADEDD212C4F9AE02.roa (hash: VBf2KoYNobofH3/9baJ/IEUrVzYCh2sv0jk4TufySgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1623 (0x657) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2F1, serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B Validity Not Before: Jun 28 22:09:55 2025 GMT Not After : Jul 5 22:09:55 2025 GMT Subject: CN=68606834-f3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:17:93:c6:57:cc:ba:17:0b:75:89:45:1b:6b: 85:51:22:38:67:58:72:49:a2:eb:21:43:8d:0b:5d: 5e:7e:29:0e:7b:f5:a1:93:b0:db:28:db:0a:e7:d8: 37:a3:21:51:69:75:45:15:1f:74:81:f4:41:70:75: e6:4e:59:c6:51:fc:17:3b:1e:33:c2:71:0d:ff:cf: 87:0d:40:b4:5f:61:68:ac:8d:cf:fc:59:90:e6:00: db:b6:e3:52:22:69:ee:8e:54:40:4a:80:77:fe:ee: e5:8f:6a:62:54:39:41:6e:88:8c:d9:96:98:1b:ee: f0:a1:9a:e3:0e:09:ba:81:30:a2:e6:ff:8a:a0:e8: 5d:f0:78:0f:86:d3:d7:99:10:a8:b1:59:a0:a1:44: 8f:66:a2:f7:6c:10:56:ec:a8:ec:00:f8:66:3e:0b: b5:38:4f:b6:c2:03:9c:a1:65:4b:3f:bb:12:f5:14: d9:a3:87:99:8f:e2:b6:c2:f7:37:7d:a9:6c:ce:41: 63:a4:6f:3a:1a:43:38:d7:85:3e:5a:67:c1:47:bd: 2e:4b:27:ce:d9:54:ed:8b:bd:5f:d7:f8:91:07:92: cb:3d:af:e2:b4:37:e6:c9:f8:96:bc:be:61:db:a3: 12:13:e0:32:18:78:bb:37:cc:dd:ed:eb:cb:89:4e: 61:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:42:39:C3:A4:04:77:27:59:EC:57:93:43:DD:E1:83:AE:B6:CF:36 X509v3 Authority Key Identifier: keyid:5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4d:73:5a:da:d9:64:45:75:29:1d:63:bf:28:b9:db:fe:2b: 00:e6:04:8c:b0:c8:37:f3:de:30:97:f0:94:2a:87:0b:2d:46: b6:83:4c:79:82:31:34:d6:5f:4f:3e:77:c7:0d:4a:29:17:60: 7e:79:7e:66:97:c6:5f:38:38:70:93:73:68:87:0b:12:51:b8: c8:25:12:3e:0d:61:13:ec:59:4d:36:31:bf:17:d4:5f:bf:52: 61:2e:5b:cd:34:07:9e:49:8e:81:10:12:d1:c1:b4:a4:f3:30: 8a:bf:cf:bf:37:68:10:a7:4f:8b:88:40:06:0b:48:0e:1e:d5: 1a:df:90:c9:99:f2:79:b0:a8:64:9a:b6:c6:fb:81:59:16:9b: 98:20:b8:dc:70:5a:3c:d2:5d:ab:30:df:11:ed:41:c9:b4:dc: c7:0e:4d:64:bf:8b:d5:c0:bd:0c:da:2f:0a:5e:30:7e:c9:48: 1b:79:17:a4:16:ab:e0:8a:ec:7d:c2:1d:73:78:d8:58:54:62: 69:e0:8b:de:3e:ef:f7:8e:be:8a:d2:23:51:2a:ba:8a:50:cf: 13:90:f0:b8:4c:d7:a4:21:a4:97:ce:40:67:9c:08:47:f5:9e: 6a:3b:af:e8:ab:58:4d:46:04:5b:70:97:ca:7b:b8:f0:07:89: 82:46:a8:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyRjExMTAvBgNVBAUTKDVFODI0MTc5NTNCMzVBOUY4QjU5QTQyRUM5NDZGNEQw MjREODc3NkIwHhcNMjUwNjI4MjIwOTU1WhcNMjUwNzA1MjIwOTU1WjAYMRYwFAYD VQQDEw02ODYwNjgzNC1mM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BeTxlfMuhcLdYlFG2uFUSI4Z1hySaLrIUONC11efikOe/Whk7DbKNsK59g3 oyFRaXVFFR90gfRBcHXmTlnGUfwXOx4zwnEN/8+HDUC0X2ForI3P/FmQ5gDbtuNS ImnujlRASoB3/u7lj2piVDlBboiM2ZaYG+7woZrjDgm6gTCi5v+KoOhd8HgPhtPX mRCosVmgoUSPZqL3bBBW7KjsAPhmPgu1OE+2wgOcoWVLP7sS9RTZo4eZj+K2wvc3 falszkFjpG86GkM414U+WmfBR70uSyfO2VTti71f1/iRB5LLPa/itDfmyfiWvL5h 26MSE+AyGHi7N8zd7evLiU5h+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRCOcOk BHcnWexXk0Pd4YOuts82MB8GA1UdIwQYMBaAFF6CQXlTs1qfi1mkLslG9NAk2Hdr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJGMS8yNjAwN0ZCNjhE RjExMUVCOEQwRUE1MTFDNEY5QUUwMi9Yb0pCZVZPeldwLUxXYVF1eVViMDBDVFlk MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvSkJlVk96V3AtTFdhUXV5VWIwMENUWWQycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjJGMS8yNjAwN0ZCNjhERjExMUVCOEQwRUE1MTFDNEY5QUUwMi9Yb0pCZVZPeldw LUxXYVF1eVViMDBDVFlkMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9TXNa2tlkRXUpHWO/KLnb/isA5gSMsMg3894wl/CUKocLLUa2g0x5 gjE01l9PPnfHDUopF2B+eX5ml8ZfODhwk3NohwsSUbjIJRI+DWET7FlNNjG/F9Rf v1JhLlvNNAeeSY6BEBLRwbSk8zCKv8+/N2gQp0+LiEAGC0gOHtUa35DJmfJ5sKhk mrbG+4FZFpuYILjccFo80l2rMN8R7UHJtNzHDk1kv4vVwL0M2i8KXjB+yUgbeRek Fqvgiux9wh1zeNhYVGJp4IvePu/3jr6K0iNRKrqKUM8TkPC4TNekIaSXzkBnnAhH 9Z5qO6/oq1hNRgRbcJfKe7jwB4mCRqgo -----END CERTIFICATE-----Generated at Sun Jun 29 17:10:23 2025 by rpki-client