$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: 5NqKTm37W9XnfGbBe2RUfRhO28G018K89DndUHNPd9Q= Subject key identifier: 12:83:43:E0:C9:85:93:2E:46:46:00:77:F4:4C:A4:1D:08:52:37:DE Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 0A1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 0A12 Signing time: Mon 30 Jun 2025 19:57:35 +0000 Manifest this update: Mon 30 Jun 2025 19:57:35 +0000 Manifest next update: Mon 07 Jul 2025 19:57:35 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: odFFWVYZZQ0BxA9qsaQogISzXbeqEyAnhbI5PFf3WvY=) 2: CA67185A02E511EF8ED1355CC4F9AE02.roa (hash: dM/bkocbrskLUTOMClpNK4FPOQXtlGaqmRxFxTWilMw=) 3: C98E616802E511EF8ED1355CC4F9AE02.roa (hash: gcadtXqsvUpMiAzq36zy8qMAKjIAq2N8zE6RS42bGR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2588 (0xa1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Jun 30 19:57:35 2025 GMT Not After : Jul 7 19:57:35 2025 GMT Subject: CN=6862ec2f-e321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:f2:4c:a5:f0:d2:83:67:12:49:47:92:d6: b6:5b:b7:c6:12:a2:d0:97:96:02:f9:f0:11:ce:b2: d3:2a:cb:da:ce:96:2a:e9:5f:7b:a1:01:16:f9:c4: 77:e0:97:10:1d:03:5f:8e:8b:47:e9:5a:03:e0:8a: 09:32:77:e7:66:71:c1:6b:a2:5f:5c:37:28:ed:0b: ae:ee:6c:0c:de:7c:f0:e5:6b:37:24:6a:31:21:4f: 33:18:46:63:95:f3:5e:67:f4:59:1a:68:64:a3:d5: d4:5c:38:3e:79:d9:6a:a3:ca:9f:9f:ba:0b:a6:2b: 7f:bb:e7:b8:d7:b8:df:98:55:14:69:1b:ab:d8:af: d8:1f:62:a7:fe:cd:17:9b:1f:63:0c:82:15:cd:90: f5:cf:88:db:56:ee:15:85:e0:e4:d1:b7:11:b6:9d: b8:01:c5:f8:c8:24:e2:a6:06:5c:11:59:84:63:c9: 78:9e:04:4b:f2:d1:d9:14:03:0a:6a:0e:70:f6:7c: de:52:81:5b:86:e8:06:5f:2f:84:16:8e:94:8b:20: f2:43:d6:4f:b9:c4:f9:a6:ed:a9:80:f2:b8:b6:39: 1d:50:99:db:67:f0:a9:c2:e4:e3:6c:8f:c3:38:9a: e9:80:e2:c5:c0:d0:fb:6e:f6:34:e0:69:85:d2:82: 5f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:83:43:E0:C9:85:93:2E:46:46:00:77:F4:4C:A4:1D:08:52:37:DE X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6f:29:cc:ec:6f:12:7e:94:9f:23:e7:83:23:21:f5:f1:52: 1f:43:ef:1b:c0:9d:6d:41:ae:c6:97:63:63:77:c7:e9:c9:00: 7e:a1:61:a1:d2:c3:61:e4:8e:84:d6:66:6c:c9:4e:b4:03:79: d9:18:65:47:3f:67:60:90:dd:b8:ba:4d:07:ae:ea:92:c9:bd: 22:6f:a5:ce:57:87:7c:b1:02:a7:81:cb:2c:4b:ab:f7:46:b7: 0c:97:49:7e:63:61:7b:83:74:bb:6f:2d:b0:da:38:2a:2d:c3: 2f:e1:72:5f:ae:b9:71:12:81:ac:db:2f:cb:86:75:68:b9:06: ea:75:24:33:99:64:bb:5e:70:61:db:2e:5c:8d:98:46:09:e5: cf:6b:04:76:61:c8:bd:e4:40:5d:43:7c:2a:0b:f9:7b:b9:5c: 75:13:6f:da:25:73:ec:f6:f5:7e:eb:55:f6:36:bb:6f:ff:e4: 50:73:88:44:12:d4:e8:a7:05:f2:4f:d7:d7:f3:b2:bb:5c:44: 8e:c8:fb:f6:77:28:c5:4d:c9:df:f6:64:6f:c6:4c:ee:9c:d0: bd:95:7b:4f:37:1c:fe:e6:e6:ad:0a:87:4e:ef:5c:bc:99:46: 1c:cb:f3:f2:6f:8d:87:36:99:45:9f:a6:bc:62:bd:25:d8:cf: 30:7f:2c:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjUwNjMwMTk1NzM1WhcNMjUwNzA3MTk1NzM1WjAYMRYwFAYD VQQDEw02ODYyZWMyZi1lMzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqf/yTKXw0oNnEklHkta2W7fGEqLQl5YC+fARzrLTKsvazpYq6V97oQEW+cR3 4JcQHQNfjotH6VoD4IoJMnfnZnHBa6JfXDco7Quu7mwM3nzw5Ws3JGoxIU8zGEZj lfNeZ/RZGmhko9XUXDg+edlqo8qfn7oLpit/u+e417jfmFUUaRur2K/YH2Kn/s0X mx9jDIIVzZD1z4jbVu4VheDk0bcRtp24AcX4yCTipgZcEVmEY8l4ngRL8tHZFAMK ag5w9nzeUoFbhugGXy+EFo6UiyDyQ9ZPucT5pu2pgPK4tjkdUJnbZ/CpwuTjbI/D OJrpgOLFwND7bvY04GmF0oJfPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKDQ+DJ hZMuRkYAd/RMpB0IUjfeMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7bynM7G8SfpSfI+eDIyH18VIfQ+8bwJ1tQa7Gl2Njd8fpyQB+oWGh 0sNh5I6E1mZsyU60A3nZGGVHP2dgkN24uk0HruqSyb0ib6XOV4d8sQKngcssS6v3 RrcMl0l+Y2F7g3S7by2w2jgqLcMv4XJfrrlxEoGs2y/LhnVouQbqdSQzmWS7XnBh 2y5cjZhGCeXPawR2Yci95EBdQ3wqC/l7uVx1E2/aJXPs9vV+61X2Nrtv/+RQc4hE EtTopwXyT9fX87K7XESOyPv2dyjFTcnf9mRvxkzunNC9lXtPNxz+5uatCodO71y8 mUYcy/Pyb42HNplFn6a8Yr0l2M8wfyxc -----END CERTIFICATE-----Generated at Tue Jul 1 16:45:13 2025 by rpki-client