$ rpki-client -vvf rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft File: XEFCLE7PHfpomnDePAORsdR-Vew.mft (raw, json) Hash identifier: XOMH6b74gwB763MuzxuvntZzEuZPhZpkqUjC4Vu4zWU= Subject key identifier: 61:6B:87:E7:EE:F8:8B:10:76:F9:4C:AD:59:95:25:73:FF:90:8E:76 Authority key identifier: 5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC Certificate issuer: /CN=A916B19D/serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC Certificate serial: 0284 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft Manifest number: 027F Signing time: Sun 29 Jun 2025 01:13:41 +0000 Manifest this update: Sun 29 Jun 2025 01:13:40 +0000 Manifest next update: Sun 06 Jul 2025 01:13:40 +0000 Files and hashes: 1: XEFCLE7PHfpomnDePAORsdR-Vew.crl (hash: L3UcaVbBNHBrLpPcSeHRtqGbK5KyVQ/Y7zcKYcVPjvg=) 2: D11B9044112011EDAC1D3B15C4F9AE02.roa (hash: jBBbANmuNZVxVrVIl9nOmJTDHehO/z/tNRNLXj+1oS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B19D, serialNumber=5C41422C4ECF1DFA689A70DE3C0391B1D47E55EC Validity Not Before: Jun 29 01:13:40 2025 GMT Not After : Jul 6 01:13:40 2025 GMT Subject: CN=68609345-fa5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:99:e7:dc:ea:a0:81:e2:10:90:ac:c3:8f:d4: 26:ad:6c:5b:59:c0:f8:82:a0:a8:27:1b:cc:e6:a0: 07:c2:73:bf:74:f0:c9:94:b0:ce:3b:60:a5:4a:6c: 72:14:57:f9:2c:a6:6b:3a:e7:a8:ba:7f:90:05:36: 65:9a:6c:92:96:ee:c7:56:2c:31:91:1d:b4:a3:82: e9:6e:dd:ca:03:ae:cc:96:16:fa:91:90:7d:18:e1: 1a:49:e4:52:95:cd:e3:41:73:83:a5:ec:31:97:6c: 1a:eb:9f:2c:d8:90:2b:d4:20:a3:e0:a0:34:bb:e8: dd:04:16:f7:8f:84:2f:4a:38:ea:e7:a2:b7:0c:5d: 0b:a3:4d:55:94:d2:a9:e4:04:f0:16:ea:77:0c:db: 2c:4f:a4:8f:c6:44:cc:e0:cd:48:44:54:a2:80:ff: 97:01:d8:37:56:e0:9f:74:18:a3:38:0b:39:4b:1c: 07:c6:94:6e:9a:41:46:b3:f8:b2:d7:13:2d:70:4e: 93:e1:57:5c:9e:80:23:0a:24:9a:10:14:d4:4e:a1: cd:dc:51:73:48:56:00:65:eb:51:a7:d8:eb:f7:fe: e6:f3:77:f9:b5:c0:9f:e6:ae:56:99:ac:1f:19:ac: c2:85:ab:0f:56:74:5e:f8:f7:f3:a1:a0:e5:b5:ca: 56:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6B:87:E7:EE:F8:8B:10:76:F9:4C:AD:59:95:25:73:FF:90:8E:76 X509v3 Authority Key Identifier: keyid:5C:41:42:2C:4E:CF:1D:FA:68:9A:70:DE:3C:03:91:B1:D4:7E:55:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEFCLE7PHfpomnDePAORsdR-Vew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B19D/D2695DDE111E11ED9B58FD14C4F9AE02/XEFCLE7PHfpomnDePAORsdR-Vew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:02:0f:77:08:84:bd:03:6b:6b:67:63:c2:cf:ad:71:13:7a: a8:36:90:b7:6d:4c:29:6f:b5:df:69:5d:35:00:93:6c:e5:16: c3:d2:c0:55:8c:e4:f8:e7:9c:8a:48:d8:05:d8:b0:f5:62:4c: a5:4c:32:41:9b:fb:cd:d1:14:f7:1d:60:cd:c5:81:53:1a:de: c7:e9:b3:8a:62:be:a2:12:a7:b5:3d:8c:87:df:0e:68:44:a1: 82:a2:3e:f0:24:b0:57:44:89:20:43:9f:64:a3:10:e1:8a:de: 66:14:72:1c:e0:c7:71:90:a6:0d:c5:ef:79:ed:60:f7:cc:3c: f2:5f:e8:70:4c:9f:08:a6:fa:af:3a:be:f0:a7:ca:f0:22:8f: 90:ab:32:2f:43:b8:5d:5b:be:9d:de:11:f2:9c:a4:00:01:1b: 83:06:00:28:f6:1f:ef:a1:ce:51:30:ac:d9:f7:c5:0c:c5:b5: 8b:cc:c2:7f:16:09:31:a6:d6:98:d5:00:1f:a6:c4:f2:0e:a6: 76:bb:7a:2f:df:1d:05:d9:78:12:12:81:30:4e:e7:de:20:d5: 59:4a:49:8a:35:94:fc:44:54:22:21:1d:94:e9:11:62:f8:4c: 2d:ee:a5:0d:9c:85:ee:44:62:73:78:57:de:a0:25:0a:aa:f8: b1:7e:73:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOUQxMTAvBgNVBAUTKDVDNDE0MjJDNEVDRjFERkE2ODlBNzBERTNDMDM5MUIx RDQ3RTU1RUMwHhcNMjUwNjI5MDExMzQwWhcNMjUwNzA2MDExMzQwWjAYMRYwFAYD VQQDEw02ODYwOTM0NS1mYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5nn3OqggeIQkKzDj9QmrWxbWcD4gqCoJxvM5qAHwnO/dPDJlLDOO2ClSmxy FFf5LKZrOueoun+QBTZlmmySlu7HViwxkR20o4Lpbt3KA67Mlhb6kZB9GOEaSeRS lc3jQXODpewxl2wa658s2JAr1CCj4KA0u+jdBBb3j4QvSjjq56K3DF0Lo01VlNKp 5ATwFup3DNssT6SPxkTM4M1IRFSigP+XAdg3VuCfdBijOAs5SxwHxpRumkFGs/iy 1xMtcE6T4VdcnoAjCiSaEBTUTqHN3FFzSFYAZetRp9jr9/7m83f5tcCf5q5Wmawf GazChasPVnRe+PfzoaDltcpW0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFrh+fu +IsQdvlMrVmVJXP/kI52MB8GA1UdIwQYMBaAFFxBQixOzx36aJpw3jwDkbHUflXs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE5RC9EMjY5NURERTEx MUUxMUVEOUI1OEZEMTRDNEY5QUUwMi9YRUZDTEU3UEhmcG9tbkRlUEFPUnNkUi1W ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFRkNMRTdQSGZwb21uRGVQQU9Sc2RSLVZldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjE5RC9EMjY5NURERTExMUUxMUVEOUI1OEZEMTRDNEY5QUUwMi9YRUZDTEU3UEhm cG9tbkRlUEFPUnNkUi1WZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRAg93CIS9A2trZ2PCz61xE3qoNpC3bUwpb7XfaV01AJNs5RbD0sBV jOT455yKSNgF2LD1YkylTDJBm/vN0RT3HWDNxYFTGt7H6bOKYr6iEqe1PYyH3w5o RKGCoj7wJLBXRIkgQ59koxDhit5mFHIc4MdxkKYNxe957WD3zDzyX+hwTJ8Ipvqv Or7wp8rwIo+QqzIvQ7hdW76d3hHynKQAARuDBgAo9h/voc5RMKzZ98UMxbWLzMJ/ FgkxptaY1QAfpsTyDqZ2u3ov3x0F2XgSEoEwTufeINVZSkmKNZT8RFQiIR2U6RFi +Ewt7qUNnIXuRGJzeFfeoCUKqvixfnOe -----END CERTIFICATE-----Generated at Sun Jun 29 14:01:22 2025 by rpki-client