$ rpki-client -vvf rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft File: xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft (raw, json) Hash identifier: SpowugAMTJl9M5raGVKI8j63givrUMgxFgZm3WqKQfs= Subject key identifier: D6:C3:2E:EC:10:D6:5A:11:6B:B5:E5:DB:95:B6:0E:38:DA:1A:69:53 Authority key identifier: C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 Certificate issuer: /CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Certificate serial: 0421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft Manifest number: 0421 Signing time: Tue 01 Jul 2025 00:54:37 +0000 Manifest this update: Tue 01 Jul 2025 00:54:37 +0000 Manifest next update: Tue 08 Jul 2025 00:54:37 +0000 Files and hashes: 1: xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl (hash: m+cumdmWtsF8TaHN9OQWVisqY1/97pdJ4ZPI8HWrgpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918767B, serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Validity Not Before: Jul 1 00:54:37 2025 GMT Not After : Jul 8 00:54:37 2025 GMT Subject: CN=686331cd-d7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:18:39:15:e3:86:9f:d5:0e:a9:c8:61:58:18: 0d:7c:c4:2f:cc:20:8b:0b:b5:3f:08:e8:bd:88:db: 6a:46:8d:99:5c:c3:b0:36:e9:74:bc:35:34:da:9c: 74:e6:ad:d3:36:f3:23:be:00:17:3b:ec:d2:4c:e2: b1:e7:3d:9c:6a:ee:98:9a:8c:0b:2f:c5:8a:fd:62: 98:23:3c:36:4c:28:4d:93:b4:d6:c0:32:41:9a:ff: e4:4a:b3:a7:e1:89:a2:f7:5f:2b:d3:98:48:fc:db: 02:f2:af:5a:8d:65:f4:92:21:cb:59:2b:a7:d4:69: d0:69:3f:e3:c8:44:50:cf:0a:97:5e:c3:8d:a5:1e: c9:cb:3b:19:9d:11:93:68:46:99:a9:4d:88:77:f7: ca:71:aa:28:c7:71:54:19:7c:d3:3d:04:91:63:cf: 44:72:17:67:bc:a2:39:c0:fb:9f:bc:ff:38:9a:1c: 5c:c5:32:2c:d2:0c:b1:96:10:cf:55:cb:d2:2e:d4: 67:02:95:98:76:35:c5:76:57:bd:44:6d:3f:db:8b: 93:a7:6c:0a:e1:24:68:7a:38:7b:56:66:03:83:6d: be:c8:9f:26:a8:ca:22:3e:6a:b9:0c:74:ef:ad:69: 10:80:c3:26:e3:0d:89:72:75:ff:ec:63:e9:3c:c0: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C3:2E:EC:10:D6:5A:11:6B:B5:E5:DB:95:B6:0E:38:DA:1A:69:53 X509v3 Authority Key Identifier: keyid:C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a6:64:dc:10:84:03:65:55:f2:29:cc:8c:ff:51:2b:70:fe: 36:35:cc:80:57:db:cb:59:2c:33:ee:65:cd:93:ae:10:37:78: dd:a2:24:44:05:a9:05:ef:9a:ee:a5:3f:f5:93:4e:eb:d4:34: f0:d7:95:e1:e0:ec:26:99:b3:36:bd:e4:f8:35:17:05:d9:b2: 75:b9:4b:91:36:f4:0c:c2:44:62:a4:2b:3f:96:63:b9:5b:86: 73:d2:5f:33:70:0d:0f:1d:9c:c9:2d:e9:b4:a9:fa:84:29:26: 52:5c:7b:66:c8:63:f5:59:6a:4b:3b:5d:e5:5a:db:9e:e4:21: 2a:76:3e:5c:19:80:a9:2a:f2:55:f2:b4:72:2d:69:97:5f:50: 06:9d:54:e0:d2:15:52:ff:a2:e7:af:eb:59:1b:4f:35:5d:d3: db:7d:80:d9:0d:cf:f7:3e:a7:50:65:d6:74:e1:e6:1f:8e:12: 52:96:d3:16:05:c5:a0:e9:26:56:5b:b9:69:7e:f7:7c:25:cc: 0e:43:a9:9c:01:dc:a1:e0:73:06:45:a4:1f:b4:53:bc:25:b2: ee:a7:95:83:fa:1e:96:52:27:09:31:b9:73:c4:b6:91:e5:e7: 42:9b:16:2d:1e:76:84:ca:8b:63:80:a4:d5:fc:9a:ba:04:8f: 8b:c0:8c:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2N0IxMTAvBgNVBAUTKEM1MzQyMzI4OEY5RkZDMTAwNDg0MkJDQzQwQTUxOTIz ODkzNEFBNzcwHhcNMjUwNzAxMDA1NDM3WhcNMjUwNzA4MDA1NDM3WjAYMRYwFAYD VQQDEw02ODYzMzFjZC1kN2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxg5FeOGn9UOqchhWBgNfMQvzCCLC7U/COi9iNtqRo2ZXMOwNul0vDU02px0 5q3TNvMjvgAXO+zSTOKx5z2cau6YmowLL8WK/WKYIzw2TChNk7TWwDJBmv/kSrOn 4Ymi918r05hI/NsC8q9ajWX0kiHLWSun1GnQaT/jyERQzwqXXsONpR7JyzsZnRGT aEaZqU2Id/fKcaoox3FUGXzTPQSRY89EchdnvKI5wPufvP84mhxcxTIs0gyxlhDP VcvSLtRnApWYdjXFdle9RG0/24uTp2wK4SRoejh7VmYDg22+yJ8mqMoiPmq5DHTv rWkQgMMm4w2JcnX/7GPpPMBYzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbDLuwQ 1loRa7Xl25W2DjjaGmlTMB8GA1UdIwQYMBaAFMU0IyiPn/wQBIQrzEClGSOJNKp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY3Qi9GODdGQUQ5MjZB QzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9CQUVoQ3ZNUUtVWkk0azBx bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUUWpLSS1mX0JBRWhDdk1RS1VaSTRrMHFuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY3Qi9GODdGQUQ5MjZBQzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9C QUVoQ3ZNUUtVWkk0azBxbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUpmTcEIQDZVXyKcyM/1ErcP42NcyAV9vLWSwz7mXNk64QN3jdoiRE BakF75rupT/1k07r1DTw15Xh4OwmmbM2veT4NRcF2bJ1uUuRNvQMwkRipCs/lmO5 W4Zz0l8zcA0PHZzJLem0qfqEKSZSXHtmyGP1WWpLO13lWtue5CEqdj5cGYCpKvJV 8rRyLWmXX1AGnVTg0hVS/6Lnr+tZG081XdPbfYDZDc/3PqdQZdZ04eYfjhJSltMW BcWg6SZWW7lpfvd8JcwOQ6mcAdyh4HMGRaQftFO8JbLup5WD+h6WUicJMblzxLaR 5edCmxYtHnaEyotjgKTV/Jq6BI+LwIw0 -----END CERTIFICATE-----Generated at Wed Jul 2 02:13:43 2025 by rpki-client