$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft File: XotdlW6b29kHcBQqxw_fm2OIxtg.mft (raw, json) Hash identifier: hJano/g13bvJD2W8JDyYVVFADMo1o+heRl7SJ+3tBgQ= Subject key identifier: F6:E5:6A:DD:8C:A9:53:55:B1:E0:72:4F:C9:FF:51:39:5F:4A:50:4D Authority key identifier: 5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8 Certificate issuer: /CN=A919D2EE/serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8 Certificate serial: 045F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft Manifest number: 045A Signing time: Sat 28 Jun 2025 23:45:43 +0000 Manifest this update: Sat 28 Jun 2025 23:45:42 +0000 Manifest next update: Sat 05 Jul 2025 23:45:42 +0000 Files and hashes: 1: XotdlW6b29kHcBQqxw_fm2OIxtg.crl (hash: K84ilWVsuBunranKx9JhILE62K3VY0NvYo1o3yyc4aI=) 2: 097C49CC56FC11EC8032440FC4F9AE02.roa (hash: LDObm+V0VfIIUmkFfanPpTePErVvUeuNiy33kvT6Iys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2EE, serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8 Validity Not Before: Jun 28 23:45:42 2025 GMT Not After : Jul 5 23:45:42 2025 GMT Subject: CN=68607ea7-cb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e3:82:63:e0:92:8f:60:d8:7f:f7:97:69:50: 91:9d:26:8b:e1:d6:0b:b0:42:bb:f8:41:44:33:fb: 32:b2:5e:c8:f6:33:d4:8b:cb:a9:b0:80:9a:94:17: ac:1c:d1:ff:5b:ae:a3:cd:1e:7f:76:91:ab:8c:b8: e7:40:3f:00:95:1f:98:e4:e4:b0:db:c0:56:43:1c: 12:03:b4:07:04:7e:eb:cf:24:c3:36:c3:3d:71:6d: 81:ef:3c:48:c5:f6:68:0b:69:2f:cc:a5:6b:03:bf: 96:2f:ee:12:e7:8a:96:02:52:40:de:d6:ce:ec:60: 12:7f:1b:18:0e:69:7d:00:f1:ad:ce:90:58:e3:73: 63:45:fd:b4:b7:85:a4:6d:62:4a:f6:24:3e:b0:87: bd:f8:87:68:87:2c:91:6d:a5:ce:a6:1a:37:a5:eb: 4b:10:9a:c6:82:16:60:15:06:55:a9:a3:66:f9:48: 1e:7e:ad:27:57:ab:ee:15:89:54:6b:5f:e4:4c:2e: 59:7f:85:4f:66:dc:fc:9e:83:62:03:9b:8f:a6:47: b9:8c:4a:53:74:64:d1:ef:6c:e1:01:d1:b7:c9:f2: ee:7f:a6:ee:e1:34:81:dc:29:71:5b:16:dd:f4:a7: 41:c6:5d:ba:df:0b:2a:d7:fb:d8:97:12:49:a6:f6: 4f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E5:6A:DD:8C:A9:53:55:B1:E0:72:4F:C9:FF:51:39:5F:4A:50:4D X509v3 Authority Key Identifier: keyid:5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:9b:99:b2:38:fd:19:2f:50:5c:89:ab:e0:01:18:00:88:b1: 0b:5a:0a:42:9c:62:4f:63:cb:26:1c:8c:b4:ba:4e:92:de:53: d1:00:7c:37:20:c0:c3:4c:7e:73:e9:cc:7b:54:52:44:38:43: f0:ab:db:eb:9e:e7:f5:38:4a:d4:02:60:a9:a2:f0:06:1f:e2: 8a:4d:5b:16:09:88:59:27:29:c2:fb:4b:8e:25:d3:99:2c:64: f4:b2:1e:4b:f0:d4:57:71:a3:a7:59:a4:cb:98:cf:c9:8a:08: 8b:d3:6a:03:e5:99:d6:30:68:ec:63:94:be:d2:39:cf:64:d1: 12:d6:40:c6:2a:8b:58:34:78:7e:af:1c:dd:21:b9:08:47:c5: 12:f6:5c:c3:f4:f1:f8:25:15:06:81:13:4e:1b:dd:c3:f4:2c: 19:4f:5e:bc:1f:45:bf:5a:ff:14:ca:f4:19:69:43:db:32:d0: f3:84:34:1b:19:b9:24:a8:c3:1d:37:f8:84:c6:d6:73:c9:41: c1:c2:a8:8e:ff:c0:4b:0a:18:0a:17:33:b6:31:c8:0a:05:fc: 16:2e:2b:65:3a:95:8f:49:99:36:8b:45:c1:0e:a8:46:2f:ce: 58:64:40:45:43:3e:13:35:1a:f3:c6:b9:18:ca:6d:98:4d:14: b4:dc:ec:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQyRUUxMTAvBgNVBAUTKDVFOEI1RDk1NkU5QkRCRDkwNzcwMTQyQUM3MEZERjlC NjM4OEM2RDgwHhcNMjUwNjI4MjM0NTQyWhcNMjUwNzA1MjM0NTQyWjAYMRYwFAYD VQQDEw02ODYwN2VhNy1jYjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOOCY+CSj2DYf/eXaVCRnSaL4dYLsEK7+EFEM/sysl7I9jPUi8upsICalBes HNH/W66jzR5/dpGrjLjnQD8AlR+Y5OSw28BWQxwSA7QHBH7rzyTDNsM9cW2B7zxI xfZoC2kvzKVrA7+WL+4S54qWAlJA3tbO7GASfxsYDml9APGtzpBY43NjRf20t4Wk bWJK9iQ+sIe9+IdohyyRbaXOpho3petLEJrGghZgFQZVqaNm+Ugefq0nV6vuFYlU a1/kTC5Zf4VPZtz8noNiA5uPpke5jEpTdGTR72zhAdG3yfLuf6bu4TSB3ClxWxbd 9KdBxl263wsq1/vYlxJJpvZPkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPblat2M qVNVseByT8n/UTlfSlBNMB8GA1UdIwQYMBaAFF6LXZVum9vZB3AUKscP35tjiMbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDJFRS84RDk2Njc1NDU2 RjkxMUVDQjAyMUY2MENDNEY5QUUwMi9Yb3RkbFc2YjI5a0hjQlFxeHdfZm0yT0l4 dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvdGRsVzZiMjlrSGNCUXF4d19mbTJPSXh0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDJFRS84RDk2Njc1NDU2RjkxMUVDQjAyMUY2MENDNEY5QUUwMi9Yb3RkbFc2YjI5 a0hjQlFxeHdfZm0yT0l4dGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZm5myOP0ZL1BciavgARgAiLELWgpCnGJPY8smHIy0uk6S3lPRAHw3 IMDDTH5z6cx7VFJEOEPwq9vrnuf1OErUAmCpovAGH+KKTVsWCYhZJynC+0uOJdOZ LGT0sh5L8NRXcaOnWaTLmM/JigiL02oD5ZnWMGjsY5S+0jnPZNES1kDGKotYNHh+ rxzdIbkIR8US9lzD9PH4JRUGgRNOG93D9CwZT168H0W/Wv8UyvQZaUPbMtDzhDQb GbkkqMMdN/iExtZzyUHBwqiO/8BLChgKFzO2McgKBfwWLitlOpWPSZk2i0XBDqhG L85YZEBFQz4TNRrzxrkYym2YTRS03OxN -----END CERTIFICATE-----Generated at Mon Jun 30 19:30:25 2025 by rpki-client