$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: +0cvbPPAfkKR9KFBzk9ITqMiQAXEzrIhV1wFgrQBX4Q= Subject key identifier: 4E:D3:CC:28:BE:48:2E:B4:2E:B6:22:F5:6D:4B:8A:CA:A3:6E:FD:3B Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 07B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 07B2 Signing time: Fri 30 May 2025 21:24:51 +0000 Manifest this update: Fri 30 May 2025 21:24:50 +0000 Manifest next update: Fri 06 Jun 2025 21:24:50 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: I10Wa0orS/ghin4MkXc+LGZmpV4jubl7GE0MH2ygYKk=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: pS3E0icAhyYawyxkXSLUFbWuAzA0NV/jlalvE1DTh1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1975 (0x7b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: May 30 21:24:50 2025 GMT Not After : Jun 6 21:24:50 2025 GMT Subject: CN=683a2222-5c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e5:11:65:69:43:fe:40:4b:5e:4a:cd:9c:8c: 26:90:7d:4d:05:95:7d:67:25:40:9a:8a:5f:4f:ca: 86:8b:83:70:61:e8:5d:5b:20:1d:0a:1f:11:83:62: 66:0d:49:3d:3a:df:9f:ca:b0:b4:f0:a2:d8:bd:0e: 90:fd:cc:1a:f9:be:7f:eb:b5:42:93:31:e8:7a:fe: ae:72:47:9b:52:52:eb:2f:42:c6:5b:a8:fb:1f:db: b8:fd:07:b4:f1:10:75:1a:4c:4c:70:f9:04:3c:9a: 98:9c:04:35:60:6e:7d:3d:ed:3d:9d:d1:79:e8:89: 63:54:9b:1d:fa:4a:3d:e0:26:f2:b0:32:2e:a1:b7: 92:9d:45:79:6d:fd:da:38:3c:55:c9:8f:e1:b3:ec: dd:e8:2a:1e:f7:e4:df:b7:c3:7d:8a:8c:17:0a:74: 7c:ff:6f:07:fb:05:62:01:d8:91:78:e2:ec:b7:0a: 6a:38:31:d2:3e:46:bc:96:73:cd:40:b3:01:fe:98: 31:99:65:70:a2:16:5a:16:27:34:43:1c:e6:15:e8: 3e:2f:8f:f2:60:7c:8b:35:f2:a7:bc:e5:55:9d:cc: df:da:c4:72:a7:7d:d5:1c:9f:38:19:03:77:12:f6: 51:34:0d:13:0e:47:58:8d:a3:5f:b1:ec:95:41:92: bc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D3:CC:28:BE:48:2E:B4:2E:B6:22:F5:6D:4B:8A:CA:A3:6E:FD:3B X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e2:5c:e2:65:e1:34:a7:77:f7:22:5d:8d:9c:db:5e:c3:30: f1:20:47:96:e9:e3:4b:56:64:11:41:aa:fb:fb:c2:3c:7c:6d: ff:dc:80:82:d6:a7:0b:21:c0:73:10:23:86:ac:2e:56:4c:85: db:a5:74:a7:df:bf:f7:ef:fb:03:a8:f7:81:a4:b7:80:6b:c2: df:f4:ad:6d:92:25:09:f7:da:aa:bf:d1:2d:0b:9d:7e:81:c2: e2:c0:53:e9:5a:3b:72:11:b2:4d:18:0d:bc:3f:25:50:bd:34: 3a:b2:2f:2d:58:ce:da:b2:5a:9b:00:6a:97:46:c9:8f:fd:ac: 43:91:f4:73:16:16:01:a8:97:57:14:69:6f:fc:ed:ec:a8:08: 4a:de:a3:92:c6:39:12:3a:63:03:bb:f6:80:9a:55:d0:b5:21: b5:59:99:d8:d3:d3:59:ca:7f:e4:4c:95:00:3b:6f:ef:3b:f6: b6:ac:18:93:c2:d5:51:be:74:0b:51:18:c3:db:5b:9b:7b:c0: 4f:1e:f5:7a:f9:08:4b:e2:7e:a5:be:af:28:af:b9:f7:ff:04: d7:c5:2e:52:d2:1f:38:c9:e7:f8:42:59:f1:6d:73:94:fe:16: 16:9b:68:32:00:f4:5f:16:47:48:88:42:b2:15:df:af:e1:f1: a1:1a:ce:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjUwNTMwMjEyNDUwWhcNMjUwNjA2MjEyNDUwWjAYMRYwFAYD VQQDEw02ODNhMjIyMi01YzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4uURZWlD/kBLXkrNnIwmkH1NBZV9ZyVAmopfT8qGi4NwYehdWyAdCh8Rg2Jm DUk9Ot+fyrC08KLYvQ6Q/cwa+b5/67VCkzHoev6uckebUlLrL0LGW6j7H9u4/Qe0 8RB1GkxMcPkEPJqYnAQ1YG59Pe09ndF56IljVJsd+ko94CbysDIuobeSnUV5bf3a ODxVyY/hs+zd6Coe9+Tft8N9iowXCnR8/28H+wViAdiReOLstwpqODHSPka8lnPN QLMB/pgxmWVwohZaFic0QxzmFeg+L4/yYHyLNfKnvOVVnczf2sRyp33VHJ84GQN3 EvZRNA0TDkdYjaNfseyVQZK8YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7TzCi+ SC60LrYi9W1Lisqjbv07MB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN4lziZeE0p3f3Il2NnNtewzDxIEeW6eNLVmQRQar7+8I8fG3/3ICC 1qcLIcBzECOGrC5WTIXbpXSn37/37/sDqPeBpLeAa8Lf9K1tkiUJ99qqv9EtC51+ gcLiwFPpWjtyEbJNGA28PyVQvTQ6si8tWM7aslqbAGqXRsmP/axDkfRzFhYBqJdX FGlv/O3sqAhK3qOSxjkSOmMDu/aAmlXQtSG1WZnY09NZyn/kTJUAO2/vO/a2rBiT wtVRvnQLURjD21ube8BPHvV6+QhL4n6lvq8or7n3/wTXxS5S0h84yef4QlnxbXOU /hYWm2gyAPRfFkdIiEKyFd+v4fGhGs5o -----END CERTIFICATE-----Generated at Sat May 31 17:49:41 2025 by rpki-client