$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: us3iKJ9pzpGp7s7bS/aBOsByCqG5zPkBKGW0p+W/2dQ= Subject key identifier: B6:32:BD:52:83:B2:A8:7F:39:E3:C1:F1:D7:24:23:1B:60:75:FA:C3 Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 0655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 064C Signing time: Mon 30 Jun 2025 22:58:52 +0000 Manifest this update: Mon 30 Jun 2025 22:58:52 +0000 Manifest next update: Mon 07 Jul 2025 22:58:52 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: R8RjjW0UNtXYHu0ymnezgQ2ircKXVmXJ774HtXIXaHg=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: xnj1+DqNRGp1sU91Z+zGlbx4vpo9U2+YWkznSk4BLXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: Jun 30 22:58:52 2025 GMT Not After : Jul 7 22:58:52 2025 GMT Subject: CN=686316ac-628a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:81:10:b6:de:96:0c:44:ba:0f:da:a6:82: e5:0b:36:95:3a:70:4f:90:37:9d:c3:75:5d:d7:2c: 3b:13:f5:c8:88:8e:41:df:ae:0f:b5:91:05:c1:3b: c0:54:50:1a:9f:28:f1:cd:0c:d5:a3:c8:76:38:d9: b5:66:e3:4d:02:8b:13:29:d4:cf:3a:83:79:db:7e: d9:7d:6e:44:6a:61:a2:f1:13:13:f0:04:dd:e0:34: d8:fe:e1:fd:45:9c:73:cf:37:c8:fd:cd:0e:cf:41: c5:0d:4e:f0:38:f6:d8:70:d1:c9:b3:06:d2:8b:42: 7e:03:cf:d8:1c:91:20:73:c4:7c:9f:b0:65:c7:20: d8:b4:b1:db:bf:b6:b4:c1:43:30:8b:d9:22:22:8d: 84:ea:09:88:5b:81:c0:c7:76:bf:78:df:7c:cf:94: 0f:87:3a:c8:2b:97:fe:7a:47:eb:3d:e4:22:a8:e4: f2:d2:7b:48:0e:f9:60:0f:17:17:04:fb:53:7b:26: 99:55:1e:40:44:6d:43:3c:dc:4d:a5:73:78:ee:34: 1d:a7:93:70:0b:c3:a4:e8:cd:50:0a:8a:25:60:4f: b6:04:d2:a8:b7:e2:17:12:31:57:a6:63:af:f3:5e: 1d:d1:85:97:61:31:02:bc:77:c6:61:63:a5:4c:13: 8c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:32:BD:52:83:B2:A8:7F:39:E3:C1:F1:D7:24:23:1B:60:75:FA:C3 X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f6:88:11:58:15:01:bd:30:04:b1:f7:5b:80:5d:56:8b:10: 8a:fd:69:48:37:9b:b1:b4:22:ee:4b:71:ab:09:24:e2:de:52: b3:b1:c3:31:8e:9e:bf:57:ea:a5:b5:ef:45:c3:0a:e2:7b:8b: 8b:82:c2:56:38:1d:99:85:1e:7e:14:ba:76:61:8a:79:b2:2d: 3e:7e:ab:7a:54:b4:b7:2a:04:29:be:f3:86:9b:a3:21:a0:fb: 03:af:d8:94:9e:78:14:ff:3d:5b:27:62:9c:90:9e:50:3a:39: 4e:c0:e2:54:50:01:1d:39:58:47:86:e9:bd:a8:d1:77:5a:f1: e3:91:2a:80:c8:dc:23:b0:ef:1c:e5:bf:ed:57:ce:ed:4a:b8: e1:c8:08:83:f2:4e:6d:ea:4b:14:e3:97:4c:cd:c5:cf:a0:6b: a7:cd:6b:91:0b:9f:2e:79:a3:7d:8a:73:a7:55:28:3c:8b:47: 34:56:2a:d0:d4:7d:a6:68:d2:32:ec:e9:14:69:8b:5f:7a:4d: 09:11:00:a3:9c:d1:a9:10:e4:cf:c8:cc:e3:fb:92:14:95:78: 2a:6c:9f:16:7c:de:97:21:bd:a2:1a:fe:8a:66:c6:d5:04:5b: 4a:aa:70:a8:95:27:03:33:5e:22:2d:14:37:f9:c0:9c:f7:a7: 99:1b:37:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjUwNjMwMjI1ODUyWhcNMjUwNzA3MjI1ODUyWjAYMRYwFAYD VQQDEw02ODYzMTZhYy02MjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuraBELbelgxEug/apoLlCzaVOnBPkDedw3Vd1yw7E/XIiI5B364PtZEFwTvA VFAanyjxzQzVo8h2ONm1ZuNNAosTKdTPOoN5237ZfW5EamGi8RMT8ATd4DTY/uH9 RZxzzzfI/c0Oz0HFDU7wOPbYcNHJswbSi0J+A8/YHJEgc8R8n7BlxyDYtLHbv7a0 wUMwi9kiIo2E6gmIW4HAx3a/eN98z5QPhzrIK5f+ekfrPeQiqOTy0ntIDvlgDxcX BPtTeyaZVR5ARG1DPNxNpXN47jQdp5NwC8Ok6M1QCoolYE+2BNKot+IXEjFXpmOv 814d0YWXYTECvHfGYWOlTBOMOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYyvVKD sqh/OePB8dckIxtgdfrDMB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc9ogRWBUBvTAEsfdbgF1WixCK/WlIN5uxtCLuS3GrCSTi3lKzscMx jp6/V+qlte9Fwwrie4uLgsJWOB2ZhR5+FLp2YYp5si0+fqt6VLS3KgQpvvOGm6Mh oPsDr9iUnngU/z1bJ2KckJ5QOjlOwOJUUAEdOVhHhum9qNF3WvHjkSqAyNwjsO8c 5b/tV87tSrjhyAiD8k5t6ksU45dMzcXPoGunzWuRC58ueaN9inOnVSg8i0c0VirQ 1H2maNIy7OkUaYtfek0JEQCjnNGpEOTPyMzj+5IUlXgqbJ8WfN6XIb2iGv6KZsbV BFtKqnColScDM14iLRQ3+cCc96eZGzed -----END CERTIFICATE-----Generated at Tue Jul 1 13:08:23 2025 by rpki-client