$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft File: xpA79e8aQHD8mDw02cUDz0MT_Is.mft (raw, json) Hash identifier: 2DEFKwduv2WdIwNdqmuGSj53bICY/I6oi6ey/sc3Skc= Subject key identifier: 19:E3:94:98:43:A6:47:70:00:DD:C6:21:0C:10:B6:E5:5B:0C:07:62 Authority key identifier: C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B Certificate issuer: /CN=A9111A96/serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B Certificate serial: 0502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft Manifest number: 04FE Signing time: Fri 30 May 2025 23:52:59 +0000 Manifest this update: Fri 30 May 2025 23:52:58 +0000 Manifest next update: Fri 06 Jun 2025 23:52:58 +0000 Files and hashes: 1: xpA79e8aQHD8mDw02cUDz0MT_Is.crl (hash: zlok4Oqyr0e8drP5HJIji1hvZUJ2Q3ejDGasmv7Uu2c=) 2: ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa (hash: n4qbIc5i3kLkXS9yMK9sKanURu/yHl+PFiYDGaralVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1282 (0x502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111A96, serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B Validity Not Before: May 30 23:52:58 2025 GMT Not After : Jun 6 23:52:58 2025 GMT Subject: CN=683a44da-7eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:27:53:3a:e5:ca:09:54:37:22:5e:34:e2: 67:61:38:cd:95:92:4c:f4:a1:27:75:39:10:67:f6: 6d:1c:51:4a:e4:6c:ea:4a:84:04:86:5c:f3:76:fa: 63:88:2c:9d:10:36:b5:6a:37:90:b5:4d:10:7c:9a: 3a:38:54:b9:7f:6c:03:da:47:db:b9:a6:b3:3b:5f: a8:ba:49:b8:c5:78:ac:db:ac:80:dc:b3:74:94:90: 73:82:4a:56:0a:ad:05:5d:5c:97:c4:36:f7:48:8d: 55:5b:7f:29:fc:fa:04:36:98:75:9b:6f:40:51:ad: a0:23:bd:3c:59:09:1f:80:0e:cc:d7:16:e7:15:76: f0:25:c0:89:b7:d5:26:f4:f5:ec:2d:3b:80:98:88: 8e:3b:dc:c0:61:bd:63:a9:ee:57:a6:92:ab:cd:73: 4c:82:fe:11:ae:b3:11:2c:dc:91:b3:9e:53:6b:a7: 32:4c:34:40:97:46:f7:e3:0b:e4:c7:43:b4:91:c3: 9a:4b:16:86:90:f9:28:bb:e5:be:bf:f5:bf:8a:d8: 7f:19:5a:8e:e9:f8:f8:8c:be:18:8a:e5:0e:7b:bb: dc:62:1d:43:1d:07:72:8c:22:ac:4f:9f:9d:cf:24: 33:ef:be:97:49:b9:e7:27:32:a4:c8:0f:c5:75:86: c7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E3:94:98:43:A6:47:70:00:DD:C6:21:0C:10:B6:E5:5B:0C:07:62 X509v3 Authority Key Identifier: keyid:C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:00:85:ef:37:82:cb:ef:09:1e:53:eb:fd:b9:56:e3:1e:5b: 6f:c0:49:2a:30:e0:ce:e1:b5:a5:ca:2a:56:32:62:96:ba:3d: e4:6c:f8:21:c3:d1:98:91:da:18:b1:92:ca:f8:47:81:27:3b: 5d:d4:86:e4:01:82:99:d6:ff:27:7d:c3:d4:cd:19:02:31:82: 56:24:72:fa:1d:0b:ea:f7:fd:ac:39:a8:ed:12:a5:bc:a2:36: cb:67:87:76:98:17:78:45:61:41:01:09:e9:a9:b5:72:80:4a: 83:ac:9b:d1:95:0f:b9:bd:e4:f1:62:c3:9b:9a:8e:2c:0d:eb: 19:52:25:17:00:29:c6:46:2b:cb:e0:ee:79:64:b8:ae:4a:b6: 3a:e3:51:02:d0:9c:85:d5:75:00:90:24:8b:ac:c4:5d:0d:ae: da:b8:ed:77:50:54:f8:ae:ca:d8:b5:cb:bb:19:cb:65:5d:5c: 19:2e:cd:14:f6:91:0a:74:5b:e2:0a:1b:df:40:ee:54:97:55: cc:8a:2a:fa:b9:b5:31:ff:92:ce:75:01:0b:c3:49:db:7b:bd: 86:48:cd:28:3d:88:19:af:ba:bf:f4:66:ea:42:a6:03:d5:5a: dc:51:ad:c3:b5:33:95:34:4b:69:83:36:ad:ac:0a:3c:22:71: 2e:b6:2f:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFBOTYxMTAvBgNVBAUTKEM2OTAzQkY1RUYxQTQwNzBGQzk4M0MzNEQ5QzUwM0NG NDMxM0ZDOEIwHhcNMjUwNTMwMjM1MjU4WhcNMjUwNjA2MjM1MjU4WjAYMRYwFAYD VQQDEw02ODNhNDRkYS03ZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPInUzrlyglUNyJeNOJnYTjNlZJM9KEndTkQZ/ZtHFFK5GzqSoQEhlzzdvpj iCydEDa1ajeQtU0QfJo6OFS5f2wD2kfbuaazO1+oukm4xXis26yA3LN0lJBzgkpW Cq0FXVyXxDb3SI1VW38p/PoENph1m29AUa2gI708WQkfgA7M1xbnFXbwJcCJt9Um 9PXsLTuAmIiOO9zAYb1jqe5XppKrzXNMgv4RrrMRLNyRs55Ta6cyTDRAl0b34wvk x0O0kcOaSxaGkPkou+W+v/W/ith/GVqO6fj4jL4YiuUOe7vcYh1DHQdyjCKsT5+d zyQz776XSbnnJzKkyA/FdYbHGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnjlJhD pkdwAN3GIQwQtuVbDAdiMB8GA1UdIwQYMBaAFMaQO/XvGkBw/Jg8NNnFA89DE/yL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUE5Ni80NTg5QzYzODBF RUYxMUVDODZBREUwNEJDNEY5QUUwMi94cEE3OWU4YVFIRDhtRHcwMmNVRHowTVRf SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwQTc5ZThhUUhEOG1EdzAyY1VEejBNVF9Jcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUE5Ni80NTg5QzYzODBFRUYxMUVDODZBREUwNEJDNEY5QUUwMi94cEE3OWU4YVFI RDhtRHcwMmNVRHowTVRfSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGAIXvN4LL7wkeU+v9uVbjHltvwEkqMODO4bWlyipWMmKWuj3kbPgh w9GYkdoYsZLK+EeBJztd1IbkAYKZ1v8nfcPUzRkCMYJWJHL6HQvq9/2sOajtEqW8 ojbLZ4d2mBd4RWFBAQnpqbVygEqDrJvRlQ+5veTxYsObmo4sDesZUiUXACnGRivL 4O55ZLiuSrY641EC0JyF1XUAkCSLrMRdDa7auO13UFT4rsrYtcu7GctlXVwZLs0U 9pEKdFviChvfQO5Ul1XMiir6ubUx/5LOdQELw0nbe72GSM0oPYgZr7q/9GbqQqYD 1VrcUa3DtTOVNEtpgzatrAo8InEuti94 -----END CERTIFICATE-----Generated at Sat May 31 16:33:03 2025 by rpki-client