$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: gUG8DfO1qwp7E0omLUS/s1iGM585OvK1uiyhOsiaRYw= Subject key identifier: 77:19:97:B5:89:72:EE:23:5E:1F:5A:30:B6:94:74:E3:F7:17:A8:B6 Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 18C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 1652 Signing time: Thu 10 Apr 2025 16:55:35 +0000 Manifest this update: Thu 10 Apr 2025 16:55:34 +0000 Manifest next update: Thu 17 Apr 2025 16:55:34 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: Oj+nQccji1G7YG4balDneRBH3JVbjW97J/vjk17YPCk=) 2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=) 3: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=) 4: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=) 5: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=) 6: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=) 7: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=) 8: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=) 9: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=) 10: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=) 11: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=) 12: 17C5C2EE0AC511F0B49A897EC4F9AE02.roa (hash: K9Z6BonmUzy423wGSqURiFZpSiAZAgbS8kqKahHQ+jI=) 13: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=) 14: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=) 15: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=) 16: 67060F128B9F11EA97BB8046C4F9AE02.roa (hash: Bja+pXwIkwi+wu7Wy1czg9tcaeGtk3ByqmVnXr1h7PU=) 17: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=) 18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=) 19: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=) 20: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=) 21: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=) 22: 3AED95046D0111ECA5893B2BC4F9AE02.roa (hash: aLX0spZdD1HmaR+qKo3b5UUfl5pW1J8tkF+sIveKmK8=) 23: 97AAC8FE86A011EB8BEAC92BC4F9AE02.roa (hash: j8JrS+AqnkCckpa8gG946yMRu94Md+3E6AE+h/Sfwzw=) 24: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=) 25: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=) 26: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=) 27: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: rx0eRPu2xzrisWwtDOzb2vQcxB4j/OQ/aSmmEmceSy8=) 28: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 16:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6338 (0x18c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D Validity Not Before: Apr 10 16:55:34 2025 GMT Not After : Apr 17 16:55:34 2025 GMT Subject: CN=67f7f807-acef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d1:78:5e:9d:07:f1:64:e6:46:a3:e8:37:d8: 7b:b2:74:3c:87:11:85:40:bd:18:f5:83:51:05:32: 0d:5f:95:81:57:b5:56:90:fd:bd:e2:69:31:a7:d6: 5f:9a:ab:41:b7:fa:7c:89:5c:2c:b8:20:da:de:a3: cc:9c:2a:c0:f0:16:44:79:31:74:74:dc:a9:1e:22: 3d:ce:76:2e:9d:db:e3:1f:b0:d4:54:9f:85:07:99: ff:64:c8:ad:bc:81:40:43:28:64:c0:bc:f1:f3:e2: 20:1d:8b:34:6e:25:24:c6:21:58:f6:a1:16:3d:0a: 47:7f:27:7d:6e:d3:e3:96:dd:95:76:da:4e:4f:f7: 81:23:b2:3d:a7:7d:49:a3:e6:53:a3:34:a3:37:f6: 86:b7:af:57:5e:4d:b6:be:53:f9:36:13:b0:62:cf: 5a:d9:df:ff:ce:d9:d1:0e:0d:97:11:21:79:fe:06: 02:a8:59:2b:49:7f:d7:ed:6f:f1:ba:10:4f:4b:4c: 6d:d2:08:d1:17:5c:09:58:1b:61:cc:5a:ca:3d:d5: e4:1d:99:be:8d:44:88:07:02:b4:c6:28:4e:d5:b6: 80:1a:71:5b:75:bf:97:98:2b:44:fb:74:1f:88:9d: 01:3b:5a:1c:6f:08:77:71:17:02:47:7c:fd:61:ed: a3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:19:97:B5:89:72:EE:23:5E:1F:5A:30:B6:94:74:E3:F7:17:A8:B6 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:af:d2:8e:d9:7f:43:5c:a7:32:15:c3:4d:9a:bf:4d:fd:56: e3:97:68:6c:e1:5a:93:29:4c:28:33:d2:9f:63:c6:47:0d:de: 2a:85:d5:99:6a:2b:54:61:50:f8:ea:12:f0:4b:f2:3d:e5:3c: 16:39:d9:5a:5a:8d:30:81:67:9c:93:c1:35:07:b0:03:59:0f: 66:2f:d5:68:b5:9e:89:96:23:91:dd:6a:38:80:14:2a:a3:c4: 7c:c2:df:0f:cc:a5:db:d8:9c:f6:3f:0e:4d:eb:53:fb:f3:4b: 8a:fc:7e:26:25:7a:bb:97:29:95:64:46:f3:e3:ca:47:95:8f: be:2e:9f:0d:a1:01:7a:20:15:60:d7:33:2d:d3:57:23:a1:3c: 3f:83:be:63:6a:5d:3f:be:4b:53:a7:7e:bd:ee:73:3f:06:be: 4d:42:4b:dd:7f:c0:6b:2d:60:3f:48:80:fd:d6:ba:0e:aa:5c: a0:0a:46:85:22:8e:d5:cd:fd:34:00:56:09:1e:05:76:70:43: 30:c5:b9:16:2a:19:11:a7:b9:9d:d4:3c:0a:69:0e:b1:87:2f: 4a:eb:31:de:ae:36:81:9f:0b:67:61:b9:6b:10:13:c2:e2:16: 9f:03:6b:83:a5:a4:f8:68:8a:76:b9:05:5d:50:fb:47:a8:f8: 0d:fe:91:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjUwNDEwMTY1NTM0WhcNMjUwNDE3MTY1NTM0WjAYMRYwFAYD VQQDEw02N2Y3ZjgwNy1hY2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztF4Xp0H8WTmRqPoN9h7snQ8hxGFQL0Y9YNRBTINX5WBV7VWkP294mkxp9Zf mqtBt/p8iVwsuCDa3qPMnCrA8BZEeTF0dNypHiI9znYundvjH7DUVJ+FB5n/ZMit vIFAQyhkwLzx8+IgHYs0biUkxiFY9qEWPQpHfyd9btPjlt2VdtpOT/eBI7I9p31J o+ZTozSjN/aGt69XXk22vlP5NhOwYs9a2d//ztnRDg2XESF5/gYCqFkrSX/X7W/x uhBPS0xt0gjRF1wJWBthzFrKPdXkHZm+jUSIBwK0xihO1baAGnFbdb+XmCtE+3Qf iJ0BO1ocbwh3cRcCR3z9Ye2j7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcZl7WJ cu4jXh9aMLaUdOP3F6i2MB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrr9KO2X9DXKcyFcNNmr9N/Vbjl2hs4VqTKUwoM9KfY8ZHDd4qhdWZ aitUYVD46hLwS/I95TwWOdlaWo0wgWeck8E1B7ADWQ9mL9VotZ6JliOR3Wo4gBQq o8R8wt8PzKXb2Jz2Pw5N61P780uK/H4mJXq7lymVZEbz48pHlY++Lp8NoQF6IBVg 1zMt01cjoTw/g75jal0/vktTp3697nM/Br5NQkvdf8BrLWA/SID91roOqlygCkaF Io7Vzf00AFYJHgV2cEMwxbkWKhkRp7md1DwKaQ6xhy9K6zHerjaBnwtnYblrEBPC 4hafA2uDpaT4aIp2uQVdUPtHqPgN/pHX -----END CERTIFICATE-----Generated at Sat Apr 12 02:22:16 2025 by rpki-client