$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json) Hash identifier: 5AHqmUVUZLaSxCQfOD4zV4ce+UatlHxXkm4rUdIL10o= Subject key identifier: 8C:DD:1F:92:F1:15:CB:8A:47:A3:E8:4D:C7:6E:76:A4:98:0E:E4:03 Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft Manifest number: 57 Signing time: Thu 03 Jul 2025 07:27:58 +0000 Manifest this update: Thu 03 Jul 2025 07:27:58 +0000 Manifest next update: Thu 10 Jul 2025 07:27:58 +0000 Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: 3/FtS18naQ2nSLyYWkT4rlho9yzUEKl4s+PTcz403OE=) 2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: a4pNtK3CV+mQ7nJwDHXCGhAdmpO8QsQ6bTiqCpOkfws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Validity Not Before: Jul 3 07:27:58 2025 GMT Not After : Jul 10 07:27:58 2025 GMT Subject: CN=686630fe-63e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:1c:88:5e:90:4b:f2:6b:de:54:87:8c:01: 11:d1:7e:19:bc:e4:19:23:e6:36:8a:2c:77:6b:58: 35:d4:b9:0c:c0:2c:31:03:59:d6:f6:2f:fb:22:13: 6d:63:d3:87:65:f8:b1:cb:d8:44:5a:63:da:fe:cf: 1a:a7:1a:e7:68:f8:80:06:59:02:23:f2:5c:38:1e: db:24:69:37:70:8c:ed:3a:27:db:a8:37:f9:6f:0b: ac:d6:55:63:40:ae:b5:87:53:4c:e1:aa:1c:2d:5d: 3a:fe:44:26:8d:94:18:3b:78:58:6a:c6:55:6e:1f: 45:82:11:60:53:45:0b:54:e1:0c:04:0e:6a:7b:ac: 9a:8e:18:ac:3f:b0:3c:d0:b7:fb:db:f2:6d:a6:88: de:ef:48:a6:8b:9e:27:94:db:68:2e:21:4b:53:ae: 17:a0:5e:98:a8:d1:15:26:d5:02:92:50:2a:6e:dc: e6:84:ec:a8:45:af:8e:48:dc:62:08:40:d6:e9:7e: cf:31:d5:da:d4:c3:4c:74:51:a7:6e:c8:7b:43:e2: 05:53:26:7a:3c:e3:3f:c1:34:e3:fc:b6:0f:aa:db: a1:53:83:a2:49:16:83:6b:ae:df:b5:b3:68:30:ef: ca:ec:b0:ca:eb:7e:18:ba:b3:72:55:c9:1c:eb:e8: 61:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DD:1F:92:F1:15:CB:8A:47:A3:E8:4D:C7:6E:76:A4:98:0E:E4:03 X509v3 Authority Key Identifier: keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2c:98:1a:66:4a:dc:17:cd:35:38:54:41:b6:41:dd:37:3c: 6d:de:ab:36:aa:83:c1:5c:66:b6:cb:05:cc:f5:be:8f:09:21: 02:2b:af:fb:8a:b4:28:6e:3f:79:e1:78:98:5e:59:7e:7d:43: ac:9a:e7:a0:6b:bd:fc:84:74:0a:7d:28:b5:14:d3:09:68:62: 9a:3a:41:65:ba:fd:58:f8:f5:e9:9d:03:3c:d7:a2:42:fb:53: cc:c2:0b:e1:d7:8a:a3:2f:c9:4c:bf:fe:6d:e0:15:98:33:0e: 61:6f:74:74:b6:19:2a:0e:73:db:8d:94:94:32:a5:b9:2d:ba: 29:2f:1e:06:c2:f0:f2:6c:05:c5:2f:c6:55:23:1a:27:d0:2b: 96:57:03:3d:a0:5d:7b:ae:42:46:4d:72:19:4d:b1:d9:50:39: c6:9e:92:53:30:d0:48:d8:bd:2f:79:30:61:00:1d:c2:e0:2e: 12:56:3c:f2:d5:3f:2c:73:42:4c:1d:07:36:2e:51:c5:21:e0: 2d:5b:57:e6:2a:ec:e1:5e:6a:4f:65:a2:f0:53:85:f6:ad:ab: 90:31:17:ab:58:d7:d1:8e:52:aa:f1:36:2a:ac:63:97:57:b3: c0:44:ab:24:5a:70:c8:7c:c5:43:1f:0e:47:26:8c:d2:47:c1: 26:28:69:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUNGRjExMC8GA1UEBRMoNUVGREU5OEM0RkJGOEQxMTg3QjY4NThFQkM4MUYwNjI1 QjI5MzE2MDAeFw0yNTA3MDMwNzI3NThaFw0yNTA3MTAwNzI3NThaMBgxFjAUBgNV BAMTDTY4NjYzMGZlLTYzZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyIhyIXpBL8mveVIeMARHRfhm85Bkj5jaKLHdrWDXUuQzALDEDWdb2L/siE21j 04dl+LHL2ERaY9r+zxqnGudo+IAGWQIj8lw4HtskaTdwjO06J9uoN/lvC6zWVWNA rrWHU0zhqhwtXTr+RCaNlBg7eFhqxlVuH0WCEWBTRQtU4QwEDmp7rJqOGKw/sDzQ t/vb8m2miN7vSKaLnieU22guIUtTrhegXpio0RUm1QKSUCpu3OaE7KhFr45I3GII QNbpfs8x1drUw0x0UaduyHtD4gVTJno84z/BNOP8tg+q26FTg6JJFoNrrt+1s2gw 78rssMrrfhi6s3JVyRzr6GG7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjN0fkvEV y4pHo+hNx252pJgO5AMwHwYDVR0jBBgwFoAUXv3pjE+/jRGHtoWOvIHwYlspMWAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Q0ZGLzIwQkUxQTMwRDdF MDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1X QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHYzcGpFLV9qUkdIdG9XT3ZJSHdZbHNwTVdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Q0ZGLzIwQkUxQTMwRDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJH SHRvV092SUh3WWxzcE1XQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD4smBpmStwXzTU4VEG2Qd03PG3eqzaqg8FcZrbLBcz1vo8JIQIrr/uK tChuP3nheJheWX59Q6ya56BrvfyEdAp9KLUU0wloYpo6QWW6/Vj49emdAzzXokL7 U8zCC+HXiqMvyUy//m3gFZgzDmFvdHS2GSoOc9uNlJQypbktuikvHgbC8PJsBcUv xlUjGifQK5ZXAz2gXXuuQkZNchlNsdlQOcaeklMw0EjYvS95MGEAHcLgLhJWPPLV PyxzQkwdBzYuUcUh4C1bV+Yq7OFeak9lovBThfatq5AxF6tY19GOUqrxNiqsY5dX s8BEqyRacMh8xUMfDkcmjNJHwSYoaeM= -----END CERTIFICATE-----Generated at Fri Jul 4 06:11:23 2025 by rpki-client