$ rpki-client -vvf rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft File: xz6_TxX6Jikr9a24ioZXfsOnHN4.mft (raw, json) Hash identifier: pSNdMNmQq+UCbChX5cxsK+1gSD7u9guC3WspF3ekMRE= Subject key identifier: BD:8D:2D:38:CE:07:08:43:23:85:5C:0D:F2:22:F8:BC:29:DC:19:4B Authority key identifier: C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE Certificate issuer: /CN=A9161EA6/serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE Certificate serial: 12ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft Manifest number: 12E4 Signing time: Mon 12 May 2025 16:59:57 +0000 Manifest this update: Mon 12 May 2025 16:59:56 +0000 Manifest next update: Mon 19 May 2025 16:59:56 +0000 Files and hashes: 1: xz6_TxX6Jikr9a24ioZXfsOnHN4.crl (hash: 7x8FWub/zMPx8cUo7tbYfGbjHfOt1HIJo7fHeoFeNWY=) 2: FF3B3F84B63311E8BAD5A95EC4F9AE02.roa (hash: uFyvztQzxevciuQ6NLXE4AsYEtpQjXVKdG3AXeRRVx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4845 (0x12ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161EA6, serialNumber=C73EBF4F15FA26292BF5ADB88A86577EC3A71CDE Validity Not Before: May 12 16:59:56 2025 GMT Not After : May 19 16:59:56 2025 GMT Subject: CN=6822290c-7029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ca:fc:c1:bb:b5:ae:28:04:c9:df:3c:12:d1: 33:d3:e5:fa:75:56:0a:9b:aa:28:2c:fa:86:3d:2e: 16:8c:46:36:f6:6e:86:ed:ba:07:a7:77:64:ea:dc: 46:37:ce:e9:f9:ab:8e:b3:e3:08:3e:31:b1:96:d9: de:24:4b:05:2f:5b:4d:c1:9a:a5:33:27:1b:37:0e: 27:f2:a9:50:1c:21:de:1c:23:99:7b:21:9d:23:9c: 75:74:22:23:2d:35:4a:e4:27:62:12:eb:c1:77:cf: ec:0d:d7:d2:06:aa:b5:ff:ad:98:df:85:0e:05:7e: 9b:a4:b0:7d:5e:d0:cc:ac:62:2a:34:49:99:42:40: 9f:7b:a8:a8:34:90:11:a4:25:ad:28:00:49:4f:bb: 77:91:61:ae:cd:53:96:01:01:10:dd:19:4d:ec:cf: 31:f9:bf:73:6e:2f:db:2a:72:8d:48:15:7d:9b:29: 47:e6:64:9a:5a:1d:74:74:cd:7d:e5:7d:c8:91:73: 8d:98:02:ab:b3:83:06:59:d2:e0:8b:ad:ff:4d:d0: ee:37:59:b5:cf:47:ca:d8:61:4c:9a:ab:4f:9d:62: fc:53:8f:a7:a3:fb:1b:ad:a2:dd:83:00:a1:d0:08: 01:23:ae:93:4c:07:44:aa:ce:6d:eb:b7:3a:9a:f4: fb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8D:2D:38:CE:07:08:43:23:85:5C:0D:F2:22:F8:BC:29:DC:19:4B X509v3 Authority Key Identifier: keyid:C7:3E:BF:4F:15:FA:26:29:2B:F5:AD:B8:8A:86:57:7E:C3:A7:1C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xz6_TxX6Jikr9a24ioZXfsOnHN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161EA6/1ADE2E26B63011E8982ABC53C4F9AE02/xz6_TxX6Jikr9a24ioZXfsOnHN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:84:05:89:46:16:fb:01:ff:f1:27:0f:c7:51:8f:f5:22:9a: 52:71:a6:14:3e:60:13:a3:ed:d5:e4:05:8f:62:f9:55:56:52: 06:64:02:45:56:e3:89:28:c0:b6:28:13:56:4f:6e:15:76:9a: 90:1f:03:8f:51:70:0a:18:bc:05:1e:7b:72:72:93:90:48:68: 13:bd:cc:a7:04:48:dd:86:40:e4:f6:36:66:b9:7d:9e:35:05: 8c:b8:86:8f:f1:ef:38:f5:0d:b1:a5:d2:8b:4d:66:4d:ed:01: 3d:be:2a:30:ad:f3:55:61:55:96:63:22:e9:5e:72:89:09:ad: 31:45:6c:33:56:42:10:6b:c7:9b:d2:58:e3:87:b6:c2:e8:68: ab:e2:73:64:18:6d:51:40:de:ea:ef:41:31:1c:c6:81:9e:b7: a2:76:4c:d9:bf:1d:4e:bd:00:ab:c4:b5:c0:02:ce:32:09:86: ac:3d:1c:47:f7:2b:d6:ce:ba:e2:e1:c0:b5:56:00:a7:e7:76: 37:9c:d7:26:c6:59:67:7f:d2:a6:37:85:a2:e0:06:5a:9c:93: 5f:b7:11:99:0d:6e:07:06:81:54:2d:30:ad:b7:bd:65:b9:ed: 58:e9:68:03:e8:06:e6:4d:53:37:95:1d:26:9c:48:2a:d4:4c: b1:27:b6:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFFQTYxMTAvBgNVBAUTKEM3M0VCRjRGMTVGQTI2MjkyQkY1QURCODhBODY1NzdF QzNBNzFDREUwHhcNMjUwNTEyMTY1OTU2WhcNMjUwNTE5MTY1OTU2WjAYMRYwFAYD VQQDEw02ODIyMjkwYy03MDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Mr8wbu1rigEyd88EtEz0+X6dVYKm6ooLPqGPS4WjEY29m6G7boHp3dk6txG N87p+auOs+MIPjGxltneJEsFL1tNwZqlMycbNw4n8qlQHCHeHCOZeyGdI5x1dCIj LTVK5CdiEuvBd8/sDdfSBqq1/62Y34UOBX6bpLB9XtDMrGIqNEmZQkCfe6ioNJAR pCWtKABJT7t3kWGuzVOWAQEQ3RlN7M8x+b9zbi/bKnKNSBV9mylH5mSaWh10dM19 5X3IkXONmAKrs4MGWdLgi63/TdDuN1m1z0fK2GFMmqtPnWL8U4+no/sbraLdgwCh 0AgBI66TTAdEqs5t67c6mvT7UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2NLTjO BwhDI4VcDfIi+Lwp3BlLMB8GA1UdIwQYMBaAFMc+v08V+iYpK/WtuIqGV37Dpxze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUVBNi8xQURFMkUyNkI2 MzAxMUU4OTgyQUJDNTNDNEY5QUUwMi94ejZfVHhYNkppa3I5YTI0aW9aWGZzT25I TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h6Nl9UeFg2SmlrcjlhMjRpb1pYZnNPbkhONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUVBNi8xQURFMkUyNkI2MzAxMUU4OTgyQUJDNTNDNEY5QUUwMi94ejZfVHhYNkpp a3I5YTI0aW9aWGZzT25ITjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZhAWJRhb7Af/xJw/HUY/1IppScaYUPmATo+3V5AWPYvlVVlIGZAJF VuOJKMC2KBNWT24VdpqQHwOPUXAKGLwFHntycpOQSGgTvcynBEjdhkDk9jZmuX2e NQWMuIaP8e849Q2xpdKLTWZN7QE9viowrfNVYVWWYyLpXnKJCa0xRWwzVkIQa8eb 0ljjh7bC6Gir4nNkGG1RQN7q70ExHMaBnreidkzZvx1OvQCrxLXAAs4yCYasPRxH 9yvWzrri4cC1VgCn53Y3nNcmxllnf9KmN4Wi4AZanJNftxGZDW4HBoFULTCtt71l ue1Y6WgD6AbmTVM3lR0mnEgq1EyxJ7ZM -----END CERTIFICATE-----Generated at Mon May 12 22:10:20 2025 by rpki-client