$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json) Hash identifier: If8tzgOqif320OesUHtCRE148Dh9fjobdc4pzXm7/Yk= Subject key identifier: AD:B0:9D:5F:29:4D:22:F2:02:D3:65:1B:24:28:D9:3F:63:3A:A3:44 Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Certificate serial: 251E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft Manifest number: 2510 Signing time: Thu 08 May 2025 15:45:02 +0000 Manifest this update: Thu 08 May 2025 15:45:02 +0000 Manifest next update: Thu 15 May 2025 15:45:02 +0000 Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: IhTqtAWUWMZR6KLVrn66QmHD6+ec2hAit+mvGtSrwR8=) 2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: bILzWIi7SfN0oZ29P+We7rkWjU1abIhmL+TRmVZttNg=) 3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: A+fjTwtG6/7wteTJpdAw9ZNsTS7E+yeIkAmgl1S9yHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 15:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9502 (0x251e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Validity Not Before: May 8 15:45:02 2025 GMT Not After : May 15 15:45:02 2025 GMT Subject: CN=681cd17e-fb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:81:c6:e6:b0:15:4c:7b:fe:77:0b:22:68: 9f:39:7d:2a:71:6f:91:2f:c5:a8:a3:b5:29:09:49: 6c:d8:37:e4:af:b3:f7:97:1c:7f:5c:cf:ca:07:ea: e0:fa:77:ca:0f:04:18:01:0e:99:26:5b:3f:ae:f9: 75:23:1a:bd:fb:76:a7:68:2e:0a:50:f8:bd:72:bf: 66:69:a4:9e:cf:b7:77:79:99:ce:d4:d1:39:54:37: 74:34:38:18:b0:95:db:c5:0c:18:9a:43:d1:76:67: 6d:8b:81:ef:a3:c5:e7:f3:c9:aa:d1:56:dd:c2:b2: bc:77:03:fe:f4:c8:8d:48:c7:91:0d:21:c8:11:bb: 28:ab:51:e9:28:aa:21:d4:1b:79:62:0c:65:4a:36: 34:6d:c2:ed:d7:82:ef:76:f7:d2:8a:f6:01:4b:3e: 91:23:f6:dc:ad:7e:92:c5:e1:39:f5:9a:7a:03:3c: 2a:37:4a:d7:48:ec:ff:c7:00:6c:e3:0e:02:73:da: 2b:02:f0:42:ad:16:06:6b:87:0b:c3:c0:77:a2:f5: fa:1f:d0:26:c1:b3:21:a6:97:ef:76:1a:29:46:10: 33:28:4e:93:15:c6:e1:b4:80:2d:8a:95:a6:00:36: 48:e6:63:cf:ae:2f:be:4d:e0:69:34:dd:3e:79:af: b0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B0:9D:5F:29:4D:22:F2:02:D3:65:1B:24:28:D9:3F:63:3A:A3:44 X509v3 Authority Key Identifier: keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:6c:1f:5d:64:0c:54:ec:34:5a:b9:64:69:00:7f:ae:8f:04: c7:88:eb:a3:6f:e1:d1:d5:6d:fa:44:d2:02:dd:f3:ec:8f:d2: 06:57:fe:79:bc:ca:07:9d:54:68:bc:fb:4a:66:89:f5:18:e6: 70:b7:98:a6:0b:37:d3:2d:12:a4:38:c7:41:87:fb:a9:da:86: 4d:a1:55:e1:47:88:cd:39:df:d5:d3:be:de:0e:a1:a0:9d:bf: 15:5b:db:0b:0c:50:86:ac:67:52:26:18:01:e2:e9:29:33:33: b0:fa:02:a3:9b:40:6f:25:63:a3:80:54:82:74:72:0a:98:02: 1b:90:fc:f0:2b:2f:af:f2:d2:96:03:fd:1a:c8:8d:b8:f8:98: 45:0e:74:db:5d:25:6a:5c:1a:fd:68:45:18:7d:37:c6:01:3f: e0:0f:1f:e1:a2:c4:71:a1:8b:76:68:f6:f8:60:7f:28:ec:12: 50:1f:5e:5f:e0:26:0e:7f:36:bc:96:75:79:8f:bb:ac:cf:fb: 3d:1d:f3:1b:d3:f5:18:7d:51:38:b9:45:82:c4:53:0d:dd:11: a5:ff:0c:62:66:49:26:67:d9:bb:2d:47:47:cc:f6:73:3d:f8: 8a:ec:7a:a5:8c:c9:aa:51:9e:a2:d9:f8:ce:72:d9:8d:a8:b5: 87:55:d9:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND MjdFQUQ4RUQwHhcNMjUwNTA4MTU0NTAyWhcNMjUwNTE1MTU0NTAyWjAYMRYwFAYD VQQDEw02ODFjZDE3ZS1mYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0iBxuawFUx7/ncLImifOX0qcW+RL8Woo7UpCUls2Dfkr7P3lxx/XM/KB+rg +nfKDwQYAQ6ZJls/rvl1Ixq9+3anaC4KUPi9cr9maaSez7d3eZnO1NE5VDd0NDgY sJXbxQwYmkPRdmdti4Hvo8Xn88mq0VbdwrK8dwP+9MiNSMeRDSHIEbsoq1HpKKoh 1Bt5YgxlSjY0bcLt14LvdvfSivYBSz6RI/bcrX6SxeE59Zp6AzwqN0rXSOz/xwBs 4w4Cc9orAvBCrRYGa4cLw8B3ovX6H9AmwbMhppfvdhopRhAzKE6TFcbhtIAtipWm ADZI5mPPri++TeBpNN0+ea+wSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2wnV8p TSLyAtNlGyQo2T9jOqNEMB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2 RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx V2JBU3llaVpxdFBDZnEyTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFbB9dZAxU7DRauWRpAH+ujwTHiOujb+HR1W36RNIC3fPsj9IGV/55 vMoHnVRovPtKZon1GOZwt5imCzfTLRKkOMdBh/up2oZNoVXhR4jNOd/V077eDqGg nb8VW9sLDFCGrGdSJhgB4ukpMzOw+gKjm0BvJWOjgFSCdHIKmAIbkPzwKy+v8tKW A/0ayI24+JhFDnTbXSVqXBr9aEUYfTfGAT/gDx/hosRxoYt2aPb4YH8o7BJQH15f 4CYOfza8lnV5j7usz/s9HfMb0/UYfVE4uUWCxFMN3RGl/wxiZkkmZ9m7LUdHzPZz PfiK7HqljMmqUZ6i2fjOctmNqLWHVdkA -----END CERTIFICATE-----Generated at Fri May 9 09:27:45 2025 by rpki-client