$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json) Hash identifier: UAhT5Gjb/U4uriPzr+LYpnolUy2iDBvXVZoPqpTGkRQ= Subject key identifier: C3:C4:E2:A0:0D:4A:81:1A:A7:FD:CA:8F:4F:4C:04:5A:63:D5:67:28 Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft Manifest number: 0162 Signing time: Tue 01 Jul 2025 04:27:08 +0000 Manifest this update: Tue 01 Jul 2025 04:27:08 +0000 Manifest next update: Tue 08 Jul 2025 04:27:08 +0000 Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: bKbveb7cdI4EEacqUu84FClYppMATJnBWCi4E/kOEQU=) 2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: 40lvaLr1gKHAad8xOy7yfS2hh56AhlCYkcilzIpf0Sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192BCF, serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Validity Not Before: Jul 1 04:27:08 2025 GMT Not After : Jul 8 04:27:08 2025 GMT Subject: CN=6863639c-ffb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:28:91:ea:47:d8:5e:05:3b:b2:ea:80:b9:06: b2:d9:ba:e9:12:65:36:ee:91:67:94:62:54:93:80: 83:f6:cb:a2:65:ca:02:93:36:ce:c6:80:75:70:b9: 10:90:42:c2:16:f0:3d:85:e9:65:88:dd:c3:f3:b2: bd:72:04:c7:e0:72:81:db:63:ef:9a:1b:15:8d:e1: 63:dc:46:c9:b9:c2:63:13:31:d2:d2:9c:18:7e:83: fb:df:94:d5:fe:70:aa:22:f4:f2:99:09:41:40:a0: f6:92:65:62:b2:aa:fd:e0:ce:ac:48:68:ae:f9:98: 02:a3:fe:b0:2f:b2:e1:4a:81:95:30:f7:24:99:e7: 8b:65:e8:a1:81:e5:5b:29:46:40:e5:e9:53:b3:d8: 45:94:2c:7d:02:ee:74:cd:f0:f1:e5:95:31:4c:33: 82:75:fc:4c:f2:04:45:cf:ee:e1:59:8d:dc:55:60: 88:76:f1:9b:3a:7d:44:8b:25:cf:70:b7:c5:99:89: 65:3f:02:d0:ce:94:67:99:ca:e4:ab:25:0d:c5:62: 79:54:ea:17:ca:ae:55:a0:ca:a3:dd:8c:bd:eb:11: 21:60:1b:db:97:b2:e4:c6:bd:e2:63:e4:d3:18:67: 18:18:c1:86:93:e2:d9:42:4a:be:31:c2:1b:44:59: 24:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C4:E2:A0:0D:4A:81:1A:A7:FD:CA:8F:4F:4C:04:5A:63:D5:67:28 X509v3 Authority Key Identifier: keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:65:8f:b5:c4:f4:66:6a:bd:b0:01:3d:b8:06:e1:67:f7:43: 84:45:d5:48:84:2d:48:24:9e:cd:fb:d9:69:63:7d:eb:9c:a6: 2a:8b:e0:ec:d8:64:2c:85:0d:17:08:bd:67:e8:f0:b5:50:36: 6a:c3:f2:cf:b3:66:26:24:c8:24:22:da:80:9e:e9:87:27:84: 97:a9:05:81:53:0f:00:05:73:ba:fb:ea:d7:2a:89:f0:c5:bc: c6:a1:d7:ef:81:3b:f7:46:e2:40:a8:ab:ac:c3:83:85:52:cf: 16:34:ef:f7:22:84:0e:9a:15:95:1b:41:39:e5:98:42:60:28: 1c:fd:21:1c:6a:5d:80:e6:c1:52:93:b2:57:0e:a4:56:07:96: 78:bd:a6:a3:89:3a:6c:15:be:71:12:50:22:6f:75:13:23:de: f4:f9:6d:5a:92:52:d8:50:dc:96:b1:2b:2d:9e:d6:c6:19:ec: 9d:33:ec:c8:0c:4d:fb:5a:9c:fd:b4:37:3d:9c:c6:a0:3d:01: 49:ef:f8:df:dd:d5:8f:fe:5f:c0:bd:25:34:48:b8:27:2d:97: dd:cb:96:35:19:58:a6:9c:74:b5:61:c0:48:38:fc:dd:8d:af: de:c5:99:46:fe:cb:06:43:8d:25:ac:9d:dc:8e:dc:f5:ef:67: 65:25:19:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCQ0YxMTAvBgNVBAUTKDVEQTRBRDdBMEQxOTI0NTUxNUU1QTJEODRBMEM2NzQ3 MDBBNDNGQ0QwHhcNMjUwNzAxMDQyNzA4WhcNMjUwNzA4MDQyNzA4WjAYMRYwFAYD VQQDEw02ODYzNjM5Yy1mZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyiR6kfYXgU7suqAuQay2brpEmU27pFnlGJUk4CD9suiZcoCkzbOxoB1cLkQ kELCFvA9helliN3D87K9cgTH4HKB22PvmhsVjeFj3EbJucJjEzHS0pwYfoP735TV /nCqIvTymQlBQKD2kmVisqr94M6sSGiu+ZgCo/6wL7LhSoGVMPckmeeLZeihgeVb KUZA5elTs9hFlCx9Au50zfDx5ZUxTDOCdfxM8gRFz+7hWY3cVWCIdvGbOn1EiyXP cLfFmYllPwLQzpRnmcrkqyUNxWJ5VOoXyq5VoMqj3Yy96xEhYBvbl7Lkxr3iY+TT GGcYGMGGk+LZQkq+McIbRFkkXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPE4qAN SoEap/3Kj09MBFpj1WcoMB8GA1UdIwQYMBaAFF2krXoNGSRVFeWi2EoMZ0cApD/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkJDRi8zMDUyQ0NBNjNC NEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpGVVY1YUxZU2d4blJ3Q2tQ ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hhU3RlZzBaSkZVVjVhTFlTZ3huUndDa1A4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkJDRi8zMDUyQ0NBNjNCNEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpG VVY1YUxZU2d4blJ3Q2tQODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWZY+1xPRmar2wAT24BuFn90OERdVIhC1IJJ7N+9lpY33rnKYqi+Ds 2GQshQ0XCL1n6PC1UDZqw/LPs2YmJMgkItqAnumHJ4SXqQWBUw8ABXO6++rXKonw xbzGodfvgTv3RuJAqKusw4OFUs8WNO/3IoQOmhWVG0E55ZhCYCgc/SEcal2A5sFS k7JXDqRWB5Z4vaajiTpsFb5xElAib3UTI970+W1aklLYUNyWsSstntbGGeydM+zI DE37Wpz9tDc9nMagPQFJ7/jf3dWP/l/AvSU0SLgnLZfdy5Y1GVimnHS1YcBIOPzd ja/exZlG/ssGQ40lrJ3cjtz172dlJRk3 -----END CERTIFICATE-----Generated at Wed Jul 2 13:37:54 2025 by rpki-client