$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft File: xiZYMphXjR1K9yc-vXkccjCjdEk.mft (raw, json) Hash identifier: u7Tf/vYGGJb9XdT5KTebx2X1Nowh8NVRemKAvvVZRVk= Subject key identifier: 3B:5B:C1:25:ED:03:93:58:D1:AE:62:7A:2B:07:B9:22:66:5D:9E:AE Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49 Certificate issuer: /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft Manifest number: 48 Signing time: Sun 01 Jun 2025 07:05:23 +0000 Manifest this update: Sun 01 Jun 2025 07:05:23 +0000 Manifest next update: Sun 08 Jun 2025 07:05:23 +0000 Files and hashes: 1: xiZYMphXjR1K9yc-vXkccjCjdEk.crl (hash: 2xRiwr+9JuKjnS0OAUoI1mcc0R9ahaGntonRsq94Grk=) 2: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (hash: 8Wzv5veel/E+M5qspAlwBsfA0pAvjm21LyceiyRo5cA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449 Validity Not Before: Jun 1 07:05:23 2025 GMT Not After : Jun 8 07:05:23 2025 GMT Subject: CN=683bfbb3-ea05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:03:11:0f:10:7f:1c:f8:5f:58:dd:f8:b8: 21:aa:a1:11:32:f6:c0:0b:89:db:2a:32:17:72:45: 37:8e:5a:16:ed:41:7f:a9:51:76:7c:3d:bf:51:5b: 88:1e:9b:2e:a8:97:2d:e0:3a:42:26:9d:f9:41:fc: a3:67:b5:58:46:9c:75:78:b2:e3:8d:ec:45:4b:e5: c2:fa:78:1a:ef:2c:0e:5f:71:ba:94:7d:0b:cf:e9: 1b:20:e1:7d:ec:51:e3:45:ea:1f:8a:15:14:a1:03: f6:00:81:96:50:ab:ed:56:47:72:39:81:28:81:66: 96:7d:97:5e:0a:2b:6e:b0:27:85:c4:3e:1c:df:40: a7:15:39:6e:09:c9:dd:f7:39:e4:ed:94:9a:fd:17: 1c:75:27:43:6f:99:1c:b8:df:1d:4e:d9:1a:af:fe: b2:57:f0:22:20:4d:78:0c:00:4e:c3:f8:7b:4a:79: 44:78:ed:b4:20:28:db:bf:c7:e8:05:a4:b2:39:f4: eb:7b:13:05:e9:99:9d:30:7c:51:9d:93:08:01:6e: 04:40:a2:46:bf:25:20:4a:c4:ae:af:64:36:23:8a: 50:a9:4f:a9:a2:c6:11:fb:6c:7b:52:6e:15:b4:a1: 93:92:34:f8:68:4f:fd:4d:a2:49:73:96:93:25:85: ed:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5B:C1:25:ED:03:93:58:D1:AE:62:7A:2B:07:B9:22:66:5D:9E:AE X509v3 Authority Key Identifier: keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:46:94:0f:68:ff:9f:aa:ea:48:e9:e9:6f:01:71:cf:f0:53: de:e0:b5:11:97:60:c3:33:a2:15:a2:36:da:e8:16:f1:32:66: 28:84:58:37:52:28:cb:64:90:b2:13:9e:08:e0:40:e1:6d:01: 01:83:bb:91:07:89:aa:bd:c6:45:ab:50:87:5d:b4:92:a8:f6: d6:cf:2d:3c:98:73:a6:86:0d:42:07:f1:75:13:64:01:66:77: b5:f5:5f:22:16:77:9f:d1:55:3d:e6:be:39:a8:aa:b9:ea:51: d9:5e:6f:01:0b:f5:04:07:a0:87:08:3a:c8:12:b1:be:90:95: d2:68:7b:72:e0:b2:e0:05:eb:5d:bc:ed:48:53:11:a6:33:7a: 75:28:59:36:13:56:da:d5:37:10:3c:07:09:32:ef:b0:b5:01: 2a:38:1f:08:0d:61:e4:08:ac:bc:b8:84:52:57:a3:fa:bb:cc: 77:33:54:09:a6:f7:3a:39:97:8b:c5:d0:36:c4:93:c8:63:d8: 3d:69:2a:f6:88:ac:e9:9d:74:6d:f4:68:3f:d1:67:a4:68:fb: c8:1e:fa:13:50:65:fb:dd:7a:25:bd:d2:f0:43:5e:ca:e0:e9: 6f:30:62:fd:1b:90:a8:b6:be:1d:e4:24:c6:74:08:94:48:9c: 66:3c:b0:0d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODZDMjExMC8GA1UEBRMoQzYyNjU4MzI5ODU3OEQxRDRBRjcyNzNFQkQ3OTFDNzIz MEEzNzQ0OTAeFw0yNTA2MDEwNzA1MjNaFw0yNTA2MDgwNzA1MjNaMBgxFjAUBgNV BAMTDTY4M2JmYmIzLWVhMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCKAMRDxB/HPhfWN34uCGqoREy9sALidsqMhdyRTeOWhbtQX+pUXZ8Pb9RW4ge my6oly3gOkImnflB/KNntVhGnHV4suON7EVL5cL6eBrvLA5fcbqUfQvP6Rsg4X3s UeNF6h+KFRShA/YAgZZQq+1WR3I5gSiBZpZ9l14KK26wJ4XEPhzfQKcVOW4Jyd33 OeTtlJr9Fxx1J0NvmRy43x1O2Rqv/rJX8CIgTXgMAE7D+HtKeUR47bQgKNu/x+gF pLI59Ot7EwXpmZ0wfFGdkwgBbgRAoka/JSBKxK6vZDYjilCpT6mixhH7bHtSbhW0 oZOSNPhoT/1NoklzlpMlhe0RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO1vBJe0D k1jRrmJ6Kwe5ImZdnq4wHwYDVR0jBBgwFoAUxiZYMphXjR1K9yc+vXkccjCjdEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4NkMyLzFEMkYwNzI0RDE3 RjExRUZCMzg0NjkyOEM0RjlBRTAyL3hpWllNcGhYalIxSzl5Yy12WGtjY2pDamRF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveGlaWU1waFhqUjFLOXljLXZYa2NjakNqZEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 NkMyLzFEMkYwNzI0RDE3RjExRUZCMzg0NjkyOEM0RjlBRTAyL3hpWllNcGhYalIx Szl5Yy12WGtjY2pDamRFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH9GlA9o/5+q6kjp6W8Bcc/wU97gtRGXYMMzohWiNtroFvEyZiiEWDdS KMtkkLITngjgQOFtAQGDu5EHiaq9xkWrUIddtJKo9tbPLTyYc6aGDUIH8XUTZAFm d7X1XyIWd5/RVT3mvjmoqrnqUdlebwEL9QQHoIcIOsgSsb6QldJoe3LgsuAF6128 7UhTEaYzenUoWTYTVtrVNxA8Bwky77C1ASo4HwgNYeQIrLy4hFJXo/q7zHczVAmm 9zo5l4vF0DbEk8hj2D1pKvaIrOmddG30aD/RZ6Ro+8ge+hNQZfvdeiW90vBDXsrg 6W8wYv0bkKi2vh3kJMZ0CJRInGY8sA0= -----END CERTIFICATE-----Generated at Mon Jun 2 20:10:13 2025 by rpki-client