$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft File: xH0VZB2jsUx05cspvMBIgSMK0U4.mft (raw, json) Hash identifier: peUO2RUkNW862QBllANRzla0jDk8I+Qsx1UQy7i8lMg= Subject key identifier: 5C:F6:BC:9F:31:21:7A:69:CF:47:0B:82:DD:01:3A:FD:1A:6A:3B:27 Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E Certificate issuer: /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Certificate serial: 028A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft Manifest number: 0284 Signing time: Tue 01 Jul 2025 02:22:20 +0000 Manifest this update: Tue 01 Jul 2025 02:22:20 +0000 Manifest next update: Tue 08 Jul 2025 02:22:20 +0000 Files and hashes: 1: xH0VZB2jsUx05cspvMBIgSMK0U4.crl (hash: qNI+7E/i+v0V0qo+etEcczI4vb2Yi0h3rDGmUGeKGis=) 2: 62B575B8104C11ED8CE56267C4F9AE02.roa (hash: LJhv9R+LostgKj3I2cWW/yrIOe+4xlAQa1Sq/wPUOsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 650 (0x28a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187364, serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Validity Not Before: Jul 1 02:22:20 2025 GMT Not After : Jul 8 02:22:20 2025 GMT Subject: CN=6863465c-7339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:7d:33:1e:56:cc:d6:75:86:09:98:92:17: 2f:e8:69:12:42:0e:5f:f1:d1:63:48:ee:4c:e7:cd: 4a:24:94:a6:bf:0e:15:9f:2a:d9:95:2c:7b:73:da: a6:78:36:fb:7c:32:cc:3a:b9:5b:29:2c:39:36:50: a7:dd:0f:2d:d6:c5:5c:b4:b6:0e:2b:db:18:39:58: db:50:0d:f6:04:a6:9a:bf:1c:f0:8a:f5:03:df:8e: 70:36:dc:5a:a8:f5:30:9c:84:bc:68:01:76:5e:bd: 26:bd:93:35:90:ef:92:55:46:f1:31:7a:ad:1a:ea: ba:72:55:2f:1b:a1:43:50:04:43:3e:c8:dc:fe:64: e6:6e:f7:87:dd:92:53:93:1e:c0:49:a2:ec:2d:57: 48:4c:d6:69:0a:08:bc:10:ef:52:ad:40:27:b5:f5: e9:e6:8a:f5:c6:48:5b:2d:f5:ef:c7:07:d8:f7:61: d6:32:3e:9a:71:5e:f6:0c:d4:ce:eb:98:86:f5:83: 0f:63:2d:a7:7e:a1:61:8d:21:16:db:17:30:d4:10: 63:ed:5b:de:d3:8f:18:d2:d7:f4:1a:bd:e0:db:88: f0:cc:49:53:b5:1d:bd:1f:65:7b:e5:7e:2c:4d:cd: b8:51:4b:c0:e6:aa:f5:6f:0a:14:bd:5a:de:20:8d: aa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F6:BC:9F:31:21:7A:69:CF:47:0B:82:DD:01:3A:FD:1A:6A:3B:27 X509v3 Authority Key Identifier: keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6e:eb:f3:64:91:8e:02:09:79:68:0f:f2:f5:44:97:73:b2: de:b6:bc:5f:32:64:1f:26:7b:a1:62:ac:e0:2a:77:85:b5:4f: 68:8d:d7:20:61:c1:16:f9:98:1d:8d:0b:36:c0:e4:1c:4f:c7: b0:b6:e3:90:75:09:2f:da:11:e0:75:92:8c:0e:22:cd:ab:b6: 60:33:a3:bc:d3:cb:fb:62:21:c5:64:b8:f6:d5:21:28:5c:a6: bf:0f:67:5f:2f:75:09:90:03:d6:07:98:66:9b:e8:79:4c:d0: 7b:d6:9c:ed:b6:76:c5:b3:21:7b:8f:0b:c9:be:52:9c:d3:ca: b3:6b:75:db:8d:64:6a:4d:66:e2:3e:68:16:6f:d9:4a:aa:b2: f4:4d:8e:8e:c5:97:35:09:7a:34:36:43:92:96:30:19:45:5a: ee:c6:ed:67:af:02:a5:66:be:67:dd:ad:87:6d:b5:cb:ef:77: e3:44:cf:66:f5:e2:2b:45:4a:ed:d1:85:9f:c3:fc:70:6f:02: a8:74:47:88:6c:9c:40:b0:d3:5a:2f:fb:cc:3c:dd:f3:b5:d6: fb:d5:a6:74:74:fd:c4:57:18:8b:5d:f0:6e:80:53:14:d7:a8: ba:e6:c6:58:8e:93:74:d9:ea:54:6c:42:30:4b:ce:c1:b7:54: 1f:cf:de:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczNjQxMTAvBgNVBAUTKEM0N0QxNTY0MURBM0IxNEM3NEU1Q0IyOUJDQzA0ODgx MjMwQUQxNEUwHhcNMjUwNzAxMDIyMjIwWhcNMjUwNzA4MDIyMjIwWjAYMRYwFAYD VQQDEw02ODYzNDY1Yy03MzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMd9Mx5WzNZ1hgmYkhcv6GkSQg5f8dFjSO5M581KJJSmvw4VnyrZlSx7c9qm eDb7fDLMOrlbKSw5NlCn3Q8t1sVctLYOK9sYOVjbUA32BKaavxzwivUD345wNtxa qPUwnIS8aAF2Xr0mvZM1kO+SVUbxMXqtGuq6clUvG6FDUARDPsjc/mTmbveH3ZJT kx7ASaLsLVdITNZpCgi8EO9SrUAntfXp5or1xkhbLfXvxwfY92HWMj6acV72DNTO 65iG9YMPYy2nfqFhjSEW2xcw1BBj7Vve048Y0tf0Gr3g24jwzElTtR29H2V75X4s Tc24UUvA5qr1bwoUvVreII2qnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFz2vJ8x IXppz0cLgt0BOv0aajsnMB8GA1UdIwQYMBaAFMR9FWQdo7FMdOXLKbzASIEjCtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM2NC9FOUE0RUE3MDEw NDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNVeDA1Y3Nwdk1CSWdTTUsw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIMFZaQjJqc1V4MDVjc3B2TUJJZ1NNSzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM2NC9FOUE0RUE3MDEwNDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNV eDA1Y3Nwdk1CSWdTTUswVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbbuvzZJGOAgl5aA/y9USXc7LetrxfMmQfJnuhYqzgKneFtU9ojdcg YcEW+ZgdjQs2wOQcT8ewtuOQdQkv2hHgdZKMDiLNq7ZgM6O808v7YiHFZLj21SEo XKa/D2dfL3UJkAPWB5hmm+h5TNB71pzttnbFsyF7jwvJvlKc08qza3XbjWRqTWbi PmgWb9lKqrL0TY6OxZc1CXo0NkOSljAZRVruxu1nrwKlZr5n3a2HbbXL73fjRM9m 9eIrRUrt0YWfw/xwbwKodEeIbJxAsNNaL/vMPN3ztdb71aZ0dP3EVxiLXfBugFMU 16i65sZYjpN02epUbEIwS87Bt1Qfz95/ -----END CERTIFICATE-----Generated at Tue Jul 1 18:32:48 2025 by rpki-client