$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft File: XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft (raw, json) Hash identifier: QXa616p17axWR/yTqAAmnsesOvT4Pv2gqnZSNPy9AO4= Subject key identifier: 6D:1F:6A:ED:5D:55:1D:92:10:49:93:1B:22:BD:8F:4B:48:B1:E1:46 Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 Certificate issuer: /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft Manifest number: 0122 Signing time: Tue 01 Jul 2025 05:14:23 +0000 Manifest this update: Tue 01 Jul 2025 05:14:23 +0000 Manifest next update: Tue 08 Jul 2025 05:14:23 +0000 Files and hashes: 1: XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl (hash: YggeSSVn0Fptr6t2crILOsSU35KwXwajYaJPEN2TR9E=) 2: 262FD0CEFE5C11EFA373D67EC4F9AE02.roa (hash: VFctWPQwbtoig1M0ZyXvaaJ8FzDcDhRRe13XKfb+93w=) 3: 55D387BCFE5C11EFAC82C181C4F9AE02.roa (hash: BXDB9E72EwnR8CUZxXbSk5J1hAgTnGg/I9qirr0mHEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F54, serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Validity Not Before: Jul 1 05:14:23 2025 GMT Not After : Jul 8 05:14:23 2025 GMT Subject: CN=68636eaf-5f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0e:e2:a7:64:72:3e:ac:76:75:6e:4e:60:a6: e1:48:d9:d2:9c:1f:6f:90:c9:01:8b:42:e6:1f:08: d9:a9:12:6f:ca:bd:89:42:19:18:31:2e:b5:32:bb: c6:02:b8:8c:ad:4c:f1:f3:9f:02:8d:63:52:ee:eb: f4:8c:c4:ff:96:95:65:24:d4:3a:b7:6a:a7:3d:49: 30:85:75:ce:7a:71:f8:c7:a5:d7:eb:56:ea:aa:0e: a5:f1:7f:9f:84:e8:ef:9c:20:e1:2c:16:7e:3c:ab: 84:b5:08:f4:74:ec:fa:3d:63:8d:f7:db:5f:ff:b0: 80:86:de:f0:3d:33:c9:6d:07:0b:03:5a:fb:8c:8d: 52:83:6f:29:31:c7:3c:31:18:02:93:50:f3:58:e1: 1e:90:a1:28:c7:e0:6b:0a:b6:57:c5:58:ba:2d:f3: fd:84:93:b5:4b:68:6d:b5:7d:f4:ed:4c:05:d3:07: 39:a6:f8:59:2c:39:5b:c8:39:5d:5f:10:ea:c4:ee: ae:1e:75:f4:41:26:8f:26:06:65:f3:db:c3:7e:3f: dc:fe:2f:9d:01:c9:8a:35:1a:a8:85:00:19:85:e5: 4c:9b:0b:48:76:e5:c8:94:db:3a:e2:0b:7a:67:8c: 38:64:e8:0f:3b:b5:a6:8e:70:62:ba:5f:62:56:52: d3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1F:6A:ED:5D:55:1D:92:10:49:93:1B:22:BD:8F:4B:48:B1:E1:46 X509v3 Authority Key Identifier: keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:60:16:db:c0:c0:ee:75:4a:d0:36:d0:89:91:3d:4b:97:fa: 19:ea:90:1a:7f:b7:7b:96:a2:74:e4:a0:6e:79:9a:8a:83:f4: b6:08:4d:9a:1c:5e:8e:58:cd:24:00:90:94:00:cf:c6:c8:60: f3:5f:4a:a7:c1:ad:b3:e2:7e:e4:65:9e:d3:6b:16:68:cf:28: e6:ea:cf:e5:98:5e:82:cb:5f:90:d8:22:b7:ed:a9:6f:e3:cd: ed:5b:2d:1d:f2:3d:05:6f:61:c3:24:1e:02:07:6a:e3:a9:72: f2:a9:b4:ab:c4:05:4b:46:04:e0:79:08:96:75:26:5d:86:84: e1:8a:d3:5b:3c:80:a8:e5:da:5c:47:66:d5:03:e4:0e:25:88: c4:f5:b0:cf:2d:43:21:4e:fc:f2:c3:79:49:52:57:d5:aa:34: 86:60:15:61:66:2d:e9:76:1b:e6:5e:78:c7:8a:9e:81:3b:29: e5:fd:c9:73:18:76:53:4b:b3:1f:fc:2f:c0:d5:59:58:52:57: ec:9f:db:71:9a:8e:4d:62:63:55:b0:21:75:c2:cd:7a:86:3a: ba:3b:29:94:26:e1:4e:bc:f0:2c:09:7c:0b:8a:72:47:1d:1e: c9:79:64:bb:82:13:7a:f2:34:89:0d:6d:33:69:15:34:81:c7: a8:60:0a:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNTQxMTAvBgNVBAUTKDVEQjU3RUQzODYwMzlFQTY2NEQxRUZGNzU3MDczNkQ2 RjlGMDRDNDQwHhcNMjUwNzAxMDUxNDIzWhcNMjUwNzA4MDUxNDIzWjAYMRYwFAYD VQQDEw02ODYzNmVhZi01ZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4g7ip2RyPqx2dW5OYKbhSNnSnB9vkMkBi0LmHwjZqRJvyr2JQhkYMS61MrvG AriMrUzx858CjWNS7uv0jMT/lpVlJNQ6t2qnPUkwhXXOenH4x6XX61bqqg6l8X+f hOjvnCDhLBZ+PKuEtQj0dOz6PWON99tf/7CAht7wPTPJbQcLA1r7jI1Sg28pMcc8 MRgCk1DzWOEekKEox+BrCrZXxVi6LfP9hJO1S2httX307UwF0wc5pvhZLDlbyDld XxDqxO6uHnX0QSaPJgZl89vDfj/c/i+dAcmKNRqohQAZheVMmwtIduXIlNs64gt6 Z4w4ZOgPO7WmjnBiul9iVlLTEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0fau1d VR2SEEmTGyK9j0tIseFGMB8GA1UdIwQYMBaAFF21ftOGA56mZNHv91cHNtb58ExE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1NC81MUI2RUNFNDlG MjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5xWmswZV8zVndjMjF2bndU RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hiVi0wNFlEbnFaazBlXzNWd2MyMXZud1RFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1NC81MUI2RUNFNDlGMjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5x WmswZV8zVndjMjF2bndURVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnYBbbwMDudUrQNtCJkT1Ll/oZ6pAaf7d7lqJ05KBueZqKg/S2CE2a HF6OWM0kAJCUAM/GyGDzX0qnwa2z4n7kZZ7TaxZozyjm6s/lmF6Cy1+Q2CK37alv 483tWy0d8j0Fb2HDJB4CB2rjqXLyqbSrxAVLRgTgeQiWdSZdhoThitNbPICo5dpc R2bVA+QOJYjE9bDPLUMhTvzyw3lJUlfVqjSGYBVhZi3pdhvmXnjHip6BOynl/clz GHZTS7Mf/C/A1VlYUlfsn9txmo5NYmNVsCF1ws16hjq6OymUJuFOvPAsCXwLinJH HR7JeWS7ghN68jSJDW0zaRU0gceoYAoI -----END CERTIFICATE-----Generated at Tue Jul 1 10:51:11 2025 by rpki-client