$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft File: xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft (raw, json) Hash identifier: 4PSifrgHIZqvTSJPdLDbIDFbR8hZPOT38GLOxcnxhe0= Subject key identifier: 67:C6:A0:0E:4B:4A:16:06:4B:55:C0:B6:1F:48:3B:21:D1:AC:82:CE Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 Certificate issuer: /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft Manifest number: 0182 Signing time: Thu 03 Jul 2025 03:41:50 +0000 Manifest this update: Thu 03 Jul 2025 03:41:50 +0000 Manifest next update: Thu 10 Jul 2025 03:41:50 +0000 Files and hashes: 1: xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl (hash: LM+3XhiH7PUAJzE4/JHK/jjQhUZKOeZ+kExpSIhfeuo=) 2: CD377A6C06B411EE841D6C4AC4F9AE02.roa (hash: eGRq+1XhrILN9pC7Bu29wtZG2xTxwIWpAe96/Tzv+yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A750, serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Validity Not Before: Jul 3 03:41:50 2025 GMT Not After : Jul 10 03:41:50 2025 GMT Subject: CN=6865fbfe-1cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:05:58:a5:cf:0c:7a:66:43:c4:de:66:60:79: f6:bf:ce:9e:23:be:4a:5f:0b:cd:02:cd:a4:7c:8e: fa:e1:1c:a4:08:fe:2c:83:62:11:ab:72:2d:85:8e: 65:d6:61:66:f7:fe:14:b4:88:68:0e:71:02:43:73: 8a:e9:85:65:43:92:5a:19:96:50:3e:bd:77:81:4d: 56:d9:97:45:3f:3b:0b:8b:f0:f8:62:f0:5c:6e:a9: 1d:47:fb:e0:ee:a0:2a:17:75:00:2f:e8:6c:4f:d3: a3:c3:20:4a:f3:f9:fb:0d:e7:b2:c6:d4:ad:66:d7: 59:dc:49:47:ab:34:64:27:45:bc:1b:bb:53:5e:49: 09:d8:eb:b7:49:ee:0b:a0:53:da:57:de:9b:ec:56: f9:6c:cc:6a:54:9d:31:4d:c2:bb:ad:e7:d0:72:42: 54:21:0a:7d:1e:1a:a2:c7:0d:dc:74:2f:c8:92:5a: 7b:a5:33:25:1a:f7:58:1d:43:0a:42:0a:8f:cf:e7: 30:ab:3e:38:ff:2f:f1:2e:70:23:12:a1:c7:2e:5c: b6:ab:ea:ec:ba:97:e1:1c:af:32:86:97:84:6a:ad: 75:10:25:53:d9:a2:a3:f9:32:ba:8f:2f:50:c8:d6: d6:d3:61:44:3b:5d:42:50:79:ad:02:26:61:fb:73: cb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C6:A0:0E:4B:4A:16:06:4B:55:C0:B6:1F:48:3B:21:D1:AC:82:CE X509v3 Authority Key Identifier: keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:87:47:77:c3:e0:c3:29:90:31:bb:65:b6:3c:8e:7c:c6:38: 81:0d:0d:9d:97:e2:f1:ae:fb:b6:06:84:d8:0f:8f:32:d8:e8: e2:fb:c0:c6:38:a1:14:4e:76:bb:11:1f:69:25:97:a4:7f:22: 42:4e:2f:3b:4e:6d:47:87:00:54:83:93:18:71:26:23:38:0b: f8:1c:bd:30:54:32:d6:1b:45:c3:1a:ac:99:c1:ed:87:00:14: 6e:d4:35:38:76:42:f7:3e:7d:cf:09:45:a9:48:fa:cc:c6:b2: 93:ec:ef:28:d1:50:66:f9:bf:f2:40:eb:9c:36:6a:dd:d3:9e: a2:cc:c6:78:4e:84:82:37:7e:59:6d:2c:80:11:8b:f6:9d:82: 4f:6a:cd:04:46:12:d9:dc:07:1d:e5:d8:79:dd:4a:46:01:44: 4d:85:69:e8:51:8f:2b:06:6c:ae:b3:75:bd:57:f6:6c:56:a3: 4a:ab:67:84:2e:e8:69:d0:d0:bb:eb:1e:1c:85:a0:52:77:2c: de:34:99:2b:9d:5e:48:5a:dd:c9:27:d7:a3:8b:e8:2d:cb:67: 06:61:bc:e6:aa:57:1a:99:fe:83:50:2c:56:c9:b6:83:46:71: 14:2a:2a:06:11:35:5d:ca:9a:bb:c5:68:ae:d7:f2:cb:a5:88: 4f:0b:bf:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE3NTAxMTAvBgNVBAUTKEM2NTRGQzQ3NkNERjJFMzA2QkUyNzcwREFFOTEwNDIz NjExQTMxOTIwHhcNMjUwNzAzMDM0MTUwWhcNMjUwNzEwMDM0MTUwWjAYMRYwFAYD VQQDEw02ODY1ZmJmZS0xY2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3AVYpc8MemZDxN5mYHn2v86eI75KXwvNAs2kfI764RykCP4sg2IRq3IthY5l 1mFm9/4UtIhoDnECQ3OK6YVlQ5JaGZZQPr13gU1W2ZdFPzsLi/D4YvBcbqkdR/vg 7qAqF3UAL+hsT9OjwyBK8/n7DeeyxtStZtdZ3ElHqzRkJ0W8G7tTXkkJ2Ou3Se4L oFPaV96b7Fb5bMxqVJ0xTcK7refQckJUIQp9Hhqixw3cdC/Iklp7pTMlGvdYHUMK QgqPz+cwqz44/y/xLnAjEqHHLly2q+rsupfhHK8yhpeEaq11ECVT2aKj+TK6jy9Q yNbW02FEO11CUHmtAiZh+3PLXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfGoA5L ShYGS1XAth9IOyHRrILOMB8GA1UdIwQYMBaAFMZU/Eds3y4wa+J3Da6RBCNhGjGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTc1MC80NTFENkE2QTA2 QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6ZkxqQnI0bmNOcnBFRUkyRWFN WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsVDhSMnpmTGpCcjRuY05ycEVFSTJFYU1aSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTc1MC80NTFENkE2QTA2QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6Zkxq QnI0bmNOcnBFRUkyRWFNWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8h0d3w+DDKZAxu2W2PI58xjiBDQ2dl+Lxrvu2BoTYD48y2Oji+8DG OKEUTna7ER9pJZekfyJCTi87Tm1HhwBUg5MYcSYjOAv4HL0wVDLWG0XDGqyZwe2H ABRu1DU4dkL3Pn3PCUWpSPrMxrKT7O8o0VBm+b/yQOucNmrd056izMZ4ToSCN35Z bSyAEYv2nYJPas0ERhLZ3Acd5dh53UpGAURNhWnoUY8rBmyus3W9V/ZsVqNKq2eE Luhp0NC76x4chaBSdyzeNJkrnV5IWt3JJ9eji+gty2cGYbzmqlcamf6DUCxWybaD RnEUKioGETVdypq7xWiu1/LLpYhPC78R -----END CERTIFICATE-----Generated at Thu Jul 3 09:38:09 2025 by rpki-client