$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: FJIGfEq31++FxmXTrUIHIMg/QlRt8u/OTH91iRZw9iw= Subject key identifier: 52:E4:C7:24:D5:68:3E:EB:E7:58:B9:8C:E3:B9:B6:FA:EF:1D:DB:75 Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 1904 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 1690 Signing time: Sun 20 Jul 2025 16:56:06 +0000 Manifest this update: Sun 20 Jul 2025 16:56:06 +0000 Manifest next update: Sun 27 Jul 2025 16:56:06 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: C4XQEQLvu8B4kFDnFmWAy7+DJ10y0+7urageR6hJV34=) 2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=) 3: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: Ju8go9OBKML8ykj6qnfvaBG6KjObv0i9KK2dLnaHCbM=) 4: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=) 5: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=) 6: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=) 7: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=) 8: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=) 9: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=) 10: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=) 11: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=) 12: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=) 13: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=) 14: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=) 15: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=) 16: 67060F128B9F11EA97BB8046C4F9AE02.roa (hash: Bja+pXwIkwi+wu7Wy1czg9tcaeGtk3ByqmVnXr1h7PU=) 17: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=) 18: BEBA6BD452E811F0B4119D49C4F9AE02.roa (hash: bj31AKsxiqWH5iLxyH6akLeGG2k/+OBUaMQXAkduhVU=) 19: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=) 20: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=) 21: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=) 22: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=) 23: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=) 24: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=) 25: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=) 26: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: rx0eRPu2xzrisWwtDOzb2vQcxB4j/OQ/aSmmEmceSy8=) 27: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6404 (0x1904) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Jul 20 16:56:06 2025 GMT Not After : Jul 27 16:56:06 2025 GMT Subject: CN=687d1fa6-a590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:c3:ec:df:09:85:af:31:be:46:ad:0d:9f: 6f:1f:47:fe:23:06:ee:ca:e1:a9:bd:73:56:59:09: db:60:a1:b0:00:89:11:71:7e:50:11:22:bd:eb:24: 1a:f3:9a:95:66:7a:35:7c:76:90:76:c0:5c:ca:35: b2:9d:e4:85:02:ca:8a:de:4c:f7:07:64:f9:7f:d2: 58:41:eb:43:af:52:05:8c:75:b1:3b:e4:43:e5:eb: 76:3e:da:98:85:53:82:da:04:82:76:e6:c5:44:e4: 7e:0a:d8:d1:5d:19:b5:96:1f:e2:7b:66:ab:6e:7d: f7:54:06:9d:00:be:19:f4:a8:92:6f:7e:cb:ca:cb: b8:78:73:05:13:ca:b9:9a:e7:56:31:ee:88:ae:b2: 2a:78:e6:b2:ae:09:1c:c6:57:7e:5a:8d:01:80:2f: 4a:be:9a:f0:ba:8e:9e:04:af:61:d4:d2:a8:12:52: 87:2c:07:11:fe:eb:87:04:6b:f7:e9:37:86:41:cc: ea:4e:e7:bb:16:51:db:80:58:73:91:75:7c:47:64: 06:e0:7f:d0:1c:00:6f:d3:29:16:9a:18:db:2e:9d: 68:2d:4f:50:17:17:b9:db:e9:11:df:85:ed:a6:d1: dc:6f:f6:69:f7:37:a8:c8:f0:d1:a4:6a:a3:54:ed: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E4:C7:24:D5:68:3E:EB:E7:58:B9:8C:E3:B9:B6:FA:EF:1D:DB:75 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:30:a3:a2:32:3e:15:81:66:45:fc:06:5b:9e:6f:88:dd:cb: ca:17:90:d9:97:88:3b:86:90:f9:fa:0b:98:23:4d:45:de:09: 48:da:fe:2d:3c:ef:00:98:0e:e7:8d:29:aa:63:14:07:4d:8f: ea:20:66:59:26:e7:4d:1e:8f:8b:85:d9:81:c8:df:13:7d:db: 48:af:38:cd:f4:4b:c4:97:ef:35:57:13:b9:08:ad:25:db:7e: 55:2e:ba:ee:97:eb:74:63:f6:c7:ff:97:75:3b:51:b5:fa:50: 0c:c5:57:5d:89:06:16:4d:71:fc:c6:44:64:46:8f:c4:39:9c: 2c:dc:93:bd:f8:a3:fa:d3:cb:b4:6c:2d:c8:e1:bc:1f:b5:18: 2a:88:8d:43:a4:02:32:78:87:fc:ba:01:08:f5:49:07:bf:83: bb:4b:7a:db:28:81:48:02:0b:db:67:5a:39:c3:0e:49:11:e3: 8f:cf:cc:9c:74:20:47:24:50:53:71:db:93:d5:b0:a2:ff:30: 4f:2a:66:2e:86:0f:a0:ad:dc:14:24:b8:1f:c4:23:a4:39:56: 9f:70:2f:c5:8e:22:ef:f4:ac:89:9c:c0:b1:77:ff:ee:b4:21: 1b:f9:9f:5d:87:00:66:05:4e:0d:08:6f:15:3a:d0:7e:1c:ce: cc:58:21:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjUwNzIwMTY1NjA2WhcNMjUwNzI3MTY1NjA2WjAYMRYwFAYD VQQDEw02ODdkMWZhNi1hNTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8jD7N8Jha8xvkatDZ9vH0f+IwbuyuGpvXNWWQnbYKGwAIkRcX5QESK96yQa 85qVZno1fHaQdsBcyjWyneSFAsqK3kz3B2T5f9JYQetDr1IFjHWxO+RD5et2PtqY hVOC2gSCdubFROR+CtjRXRm1lh/ie2arbn33VAadAL4Z9KiSb37Lysu4eHMFE8q5 mudWMe6IrrIqeOayrgkcxld+Wo0BgC9Kvprwuo6eBK9h1NKoElKHLAcR/uuHBGv3 6TeGQczqTue7FlHbgFhzkXV8R2QG4H/QHABv0ykWmhjbLp1oLU9QFxe52+kR34Xt ptHcb/Zp9zeoyPDRpGqjVO3FGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLkxyTV aD7r51i5jOO5tvrvHdt1MB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwMKOiMj4VgWZF/AZbnm+I3cvKF5DZl4g7hpD5+guYI01F3glI2v4t PO8AmA7njSmqYxQHTY/qIGZZJudNHo+LhdmByN8TfdtIrzjN9EvEl+81VxO5CK0l 235VLrrul+t0Y/bH/5d1O1G1+lAMxVddiQYWTXH8xkRkRo/EOZws3JO9+KP608u0 bC3I4bwftRgqiI1DpAIyeIf8ugEI9UkHv4O7S3rbKIFIAgvbZ1o5ww5JEeOPz8yc dCBHJFBTcduT1bCi/zBPKmYuhg+grdwUJLgfxCOkOVafcC/FjiLv9KyJnMCxd//u tCEb+Z9dhwBmBU4NCG8VOtB+HM7MWCGY -----END CERTIFICATE-----Generated at Sun Jul 20 19:01:53 2025 by rpki-client