$ rpki-client -vvf rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft File: xz6_TxX6Jikr9a24ioZXfsOnHN4.mft (raw, json) Hash identifier: QLET25lPCy0VfyIUzTsKYrLIsyAY+sY19AAsI8a9c9I= Subject key identifier: 1F:32:CD:FA:A8:6B:4D:7A:B1:6D:63:44:61:DC:62:11:F2:65:5E:09 Authority key identifier: C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE Certificate issuer: /CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE Certificate serial: 1309 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft Manifest number: 12FF Signing time: Wed 02 Jul 2025 17:14:08 +0000 Manifest this update: Wed 02 Jul 2025 17:14:08 +0000 Manifest next update: Wed 09 Jul 2025 17:14:08 +0000 Files and hashes: 1: xz6_TxX6Jikr9a24ioZXfsOnHN4.crl (hash: GYr6VzNgNSHG+rWjlgJ8hgz0dcsxYtvEW4wlhvGIz/0=) 2: FF3B3F84B63311E8BAD5A95EC4F9AE02.roa (hash: 0tM/V7nX9hi4ETzuWiBmb9YtIWsrgFEIcg6fokAj5jY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4873 (0x1309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161EA6, serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE Validity Not Before: Jul 2 17:14:08 2025 GMT Not After : Jul 9 17:14:08 2025 GMT Subject: CN=686568e0-eee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:35:cc:a4:5b:41:4a:bd:73:d5:2d:85:7e: 65:8c:e2:0f:78:4f:8e:84:b8:5b:9f:f2:ba:2f:e1: 4a:c8:fd:40:6b:10:5b:20:ac:e0:5b:ef:f8:60:d1: 4c:10:15:48:65:74:6d:dc:6f:20:47:16:53:c7:11: 4a:5a:a2:4b:8f:3d:d8:49:f9:1d:2d:88:32:11:9e: 2f:49:21:d5:79:3d:27:81:b1:b0:c6:7c:bf:be:9e: 38:52:79:50:ec:5a:56:a2:7e:ac:ce:7a:16:6c:5e: 85:e2:fa:a3:4f:b3:e3:f7:f7:85:70:83:da:f8:2c: 24:b6:fd:6d:f3:a8:90:b9:ad:ea:bc:04:d4:a5:33: b3:fe:11:2b:1f:88:48:c0:91:35:87:1e:cb:ed:b4: 3d:a3:66:da:3a:dd:1e:29:65:4f:3f:6f:73:39:c7: c6:fa:92:9c:65:48:7d:e5:e7:5e:19:d1:ef:fa:b0: a5:40:73:3f:d1:6a:bb:f1:d0:7c:3d:d2:50:0f:31: e7:a0:fb:cd:10:06:0e:4a:da:9f:e9:52:68:a2:59: d1:25:af:ab:36:4d:4a:9e:61:0a:2d:00:da:05:2c: ce:06:f6:9b:35:91:c8:b2:61:f8:ae:b4:8d:56:9a: d1:e0:05:8d:29:91:e0:0e:98:99:7d:63:c2:77:f8: 3b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:32:CD:FA:A8:6B:4D:7A:B1:6D:63:44:61:DC:62:11:F2:65:5E:09 X509v3 Authority Key Identifier: keyid:C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8d:e2:41:11:cd:66:16:fe:b2:3f:e8:ce:e7:6d:a0:fb:ba: e9:da:04:5c:26:8e:78:60:31:57:fc:3c:5c:d1:9e:58:94:b5: a4:3f:9f:a8:0f:e5:c8:12:2a:ed:c8:42:cc:92:3e:b2:d6:04: 3b:48:cb:c5:96:7d:56:06:c6:1e:e3:be:c7:1d:46:6d:a4:29: 52:1b:ed:ac:d2:0d:d9:c6:64:ea:34:34:6f:e4:17:5d:c1:0a: b2:b2:ad:0a:6c:f0:ec:0f:c2:db:ea:18:e9:9c:8f:04:eb:2a: 8a:ab:8d:7b:6c:f0:69:da:30:8d:de:5c:47:38:ca:cb:36:d9: f9:8f:78:2d:de:6e:dc:ac:46:c8:1a:f5:0c:9a:78:03:c9:11: 3d:cb:a6:53:97:dc:21:89:ba:ad:3e:b8:46:6f:4e:74:73:e0: 6d:7d:c2:9e:e7:6b:04:6c:79:7c:a3:4e:ee:58:98:12:91:96: 80:d6:22:5d:a1:dc:9d:90:b9:b3:4f:43:51:48:7a:24:41:bb: e5:eb:13:be:01:02:7a:95:48:52:b7:ec:d6:b8:a9:8f:66:29: f6:ae:be:9b:3d:65:f7:f7:b4:33:cf:36:06:d0:d9:65:32:36: 1b:75:d2:72:01:61:5e:97:3a:f9:1a:8f:36:3d:14:3e:d7:06: 8e:6e:aa:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFFQTYxMTAvBgNVBAUTKEM3M0VCRjRGMTVGQTI2MjkyQkY1QURCODhBODY1NzdF QzNBNzFDREUwHhcNMjUwNzAyMTcxNDA4WhcNMjUwNzA5MTcxNDA4WjAYMRYwFAYD VQQDEw02ODY1NjhlMC1lZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/A1zKRbQUq9c9UthX5ljOIPeE+OhLhbn/K6L+FKyP1AaxBbIKzgW+/4YNFM EBVIZXRt3G8gRxZTxxFKWqJLjz3YSfkdLYgyEZ4vSSHVeT0ngbGwxny/vp44UnlQ 7FpWon6sznoWbF6F4vqjT7Pj9/eFcIPa+Cwktv1t86iQua3qvATUpTOz/hErH4hI wJE1hx7L7bQ9o2baOt0eKWVPP29zOcfG+pKcZUh95edeGdHv+rClQHM/0Wq78dB8 PdJQDzHnoPvNEAYOStqf6VJoolnRJa+rNk1KnmEKLQDaBSzOBvabNZHIsmH4rrSN VprR4AWNKZHgDpiZfWPCd/g7gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8yzfqo a016sW1jRGHcYhHyZV4JMB8GA1UdIwQYMBaAFMc+v08V+iYpK/WtuIqGV37Dpxze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUVBNi8xQURFMkUyNkI2 MzAxMUU4OTgyQUJDNTNDNEY5QUUwMi94ejZfVHhYNkppa3I5YTI0aW9aWGZzT25I TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h6Nl9UeFg2SmlrcjlhMjRpb1pYZnNPbkhONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUVBNi8xQURFMkUyNkI2MzAxMUU4OTgyQUJDNTNDNEY5QUUwMi94ejZfVHhYNkpp a3I5YTI0aW9aWGZzT25ITjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBejeJBEc1mFv6yP+jO522g+7rp2gRcJo54YDFX/Dxc0Z5YlLWkP5+o D+XIEirtyELMkj6y1gQ7SMvFln1WBsYe477HHUZtpClSG+2s0g3ZxmTqNDRv5Bdd wQqysq0KbPDsD8Lb6hjpnI8E6yqKq417bPBp2jCN3lxHOMrLNtn5j3gt3m7crEbI GvUMmngDyRE9y6ZTl9whibqtPrhGb050c+BtfcKe52sEbHl8o07uWJgSkZaA1iJd odydkLmzT0NRSHokQbvl6xO+AQJ6lUhSt+zWuKmPZin2rr6bPWX397QzzzYG0Nll MjYbddJyAWFelzr5Go82PRQ+1waObqql -----END CERTIFICATE-----Generated at Thu Jul 3 07:06:16 2025 by rpki-client