$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft File: XiM50eqvU0mhOKR5fagtDrTfqew.mft (raw, json) Hash identifier: GPYWMCXWUygsVVQEvziTQyNrrpbRNJ9dtsOb6KhaNqk= Subject key identifier: 87:BB:05:2A:32:8F:34:55:BA:C9:92:EB:ED:E8:76:B5:4F:06:91:84 Authority key identifier: 5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC Certificate issuer: /CN=A918CFAD/serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft Manifest number: ED Signing time: Thu 03 Jul 2025 05:29:54 +0000 Manifest this update: Thu 03 Jul 2025 05:29:54 +0000 Manifest next update: Thu 10 Jul 2025 05:29:54 +0000 Files and hashes: 1: XiM50eqvU0mhOKR5fagtDrTfqew.crl (hash: WTVwAnx5rAhebDnkBaczefW9uUEeD9tQMvvMkBdHn70=) 2: D161B1F0EA0411EE98A86A13C4F9AE02.roa (hash: +NOhwE6m6lpwH5XuFy8HqU1ULWBp+YrGh21v4UoRt+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD, serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC Validity Not Before: Jul 3 05:29:54 2025 GMT Not After : Jul 10 05:29:54 2025 GMT Subject: CN=68661552-37e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3e:50:57:ab:7e:8e:35:bd:73:7b:14:f7:71: 42:33:1b:8c:ce:a9:de:9f:05:cd:0c:4f:d6:37:3a: ed:17:57:99:fe:ed:59:76:e3:8a:39:63:b5:7d:bc: b9:5c:c1:4c:c1:96:5e:aa:90:c7:5f:89:a4:e9:0f: 84:73:2c:50:65:d3:a0:ce:09:f5:f5:23:b5:85:92: 80:b6:18:ec:69:53:58:30:de:0a:c0:1b:21:0a:24: ea:f1:e4:bb:bd:59:ce:ed:88:89:28:1f:75:18:82: 43:12:7e:ee:dd:df:94:14:8a:6e:44:c1:f9:5d:9f: 84:c5:44:3d:76:b4:72:d3:31:96:f1:6c:b7:49:34: 44:dd:eb:38:ad:a5:20:5f:75:92:19:f3:d5:8e:dc: 5b:7b:cb:ea:45:2e:ea:fa:53:76:ff:54:8c:0c:0a: c8:bd:32:e3:e6:bf:2b:dc:f5:7b:2a:6a:4a:91:48: ac:8a:15:0b:e9:39:bc:bd:2b:6a:26:96:51:b1:6b: b7:c1:21:1d:95:a5:f4:0e:b7:f7:70:db:16:30:13: 78:69:0b:94:4b:76:ae:d0:38:5a:a6:45:ed:63:a3: 1a:53:52:b0:04:cd:6f:4e:a0:cc:82:69:ee:9e:35: 3a:18:7c:a0:32:67:6c:2c:83:c5:de:a2:16:b9:ea: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BB:05:2A:32:8F:34:55:BA:C9:92:EB:ED:E8:76:B5:4F:06:91:84 X509v3 Authority Key Identifier: keyid:5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:7c:f6:f1:1b:3b:e6:ba:20:11:df:f6:67:e6:c6:06:f8:55: df:f3:69:8c:30:ee:6e:0d:29:83:dc:9a:04:65:12:13:eb:69: 4c:15:d3:75:ab:b1:44:2e:e6:a7:af:36:c4:57:b0:87:99:19: fa:02:c8:c8:d7:79:78:e8:2c:8e:c7:b3:b6:ed:e3:d6:ae:00: 84:7c:34:34:d4:d1:79:63:05:fc:29:b7:05:6a:1e:56:4b:61: 73:8b:52:23:7e:b6:1c:9a:bf:80:0f:d7:7f:af:da:16:be:f3: 16:f7:fd:fe:5e:ea:d8:33:5f:2b:b8:f9:8b:d9:1c:6d:9f:64: b1:21:ce:8f:4e:52:80:c1:ce:3c:83:19:59:34:a3:a1:94:a7: 1e:62:ee:67:04:18:23:d5:b5:f8:a6:a6:a8:cc:cc:40:25:bb: 10:01:94:59:45:8d:ee:a3:83:16:2b:17:c7:a6:30:38:52:e6: 6e:c5:1d:fb:08:1f:62:f8:ef:7b:13:f4:74:09:86:14:d3:37: bf:85:36:aa:2d:3d:e8:5a:94:ca:35:e3:51:83:d2:d3:c0:1e: dd:d7:5c:ed:44:ea:63:c5:f8:61:2a:b2:9c:5b:19:b1:67:3a: c6:21:58:14:e6:db:05:75:ce:97:ae:95:1a:42:69:2c:9e:a1: b4:ae:72:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENGQUQxMTAvBgNVBAUTKDVFMjMzOUQxRUFBRjUzNDlBMTM4QTQ3OTdEQTgyRDBF QjRERkE5RUMwHhcNMjUwNzAzMDUyOTU0WhcNMjUwNzEwMDUyOTU0WjAYMRYwFAYD VQQDEw02ODY2MTU1Mi0zN2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1T5QV6t+jjW9c3sU93FCMxuMzqnenwXNDE/WNzrtF1eZ/u1ZduOKOWO1fby5 XMFMwZZeqpDHX4mk6Q+EcyxQZdOgzgn19SO1hZKAthjsaVNYMN4KwBshCiTq8eS7 vVnO7YiJKB91GIJDEn7u3d+UFIpuRMH5XZ+ExUQ9drRy0zGW8Wy3STRE3es4raUg X3WSGfPVjtxbe8vqRS7q+lN2/1SMDArIvTLj5r8r3PV7KmpKkUisihUL6Tm8vStq JpZRsWu3wSEdlaX0Drf3cNsWMBN4aQuUS3au0DhapkXtY6MaU1KwBM1vTqDMgmnu njU6GHygMmdsLIPF3qIWueqwcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIe7BSoy jzRVusmS6+3odrVPBpGEMB8GA1UdIwQYMBaAFF4jOdHqr1NJoTikeX2oLQ6036ns MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC80QzkwMEYxQ0VB MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUwbWhPS1I1ZmFndERyVGZx ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hpTTUwZXF2VTBtaE9LUjVmYWd0RHJUZnFldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ZBRC80QzkwMEYxQ0VBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9YaU01MGVxdlUw bWhPS1I1ZmFndERyVGZxZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWfPbxGzvmuiAR3/Zn5sYG+FXf82mMMO5uDSmD3JoEZRIT62lMFdN1 q7FELuanrzbEV7CHmRn6AsjI13l46CyOx7O27ePWrgCEfDQ01NF5YwX8KbcFah5W S2Fzi1IjfrYcmr+AD9d/r9oWvvMW9/3+XurYM18ruPmL2Rxtn2SxIc6PTlKAwc48 gxlZNKOhlKceYu5nBBgj1bX4pqaozMxAJbsQAZRZRY3uo4MWKxfHpjA4UuZuxR37 CB9i+O97E/R0CYYU0ze/hTaqLT3oWpTKNeNRg9LTwB7d11ztROpjxfhhKrKcWxmx ZzrGIVgU5tsFdc6XrpUaQmksnqG0rnIg -----END CERTIFICATE-----Generated at Thu Jul 3 21:43:28 2025 by rpki-client