$ rpki-client -vvf rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft File: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft (raw, json) Hash identifier: tpygpA66a74YJSmV10OS0JjnVFck16ax2VSAX7ejjhw= Subject key identifier: 11:EF:C8:D8:A7:17:43:B9:58:8C:0A:64:7D:A6:7D:37:EC:78:5D:B2 Authority key identifier: FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51 Certificate issuer: /CN=A912FF6F/serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451 Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft Manifest number: 0264 Signing time: Sat 31 May 2025 01:57:10 +0000 Manifest this update: Sat 31 May 2025 01:57:10 +0000 Manifest next update: Sat 07 Jun 2025 01:57:10 +0000 Files and hashes: 1: -xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl (hash: lzMO77N0sadCIHp+fCMvj2M4rPWBuA/LkHtVSeuJh9o=) 2: 6D5014F2146F11EDB756F727C4F9AE02.roa (hash: rj0KTjzf+DtNN3R81snVNcDYp+a1rWXY0u8rHIUHCk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FF6F, serialNumber=FB11A2D8368C15021A5BF312F51D44CE58FD4451 Validity Not Before: May 31 01:57:10 2025 GMT Not After : Jun 7 01:57:10 2025 GMT Subject: CN=683a61f6-537a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:35:db:2e:15:3a:e2:29:20:8f:ca:7d:f4: c6:ab:a8:8f:2a:37:74:02:e9:3d:a6:5e:65:a6:73: ce:ba:f1:b9:2a:c4:21:45:31:7d:fc:32:87:bf:e6: 26:07:09:54:66:d6:ff:8c:f8:fa:b5:12:18:bc:9f: 70:91:5c:29:a3:80:d8:7c:f6:4f:36:1d:e8:f6:d6: a2:b6:d6:3b:2f:09:8f:8d:ed:5d:38:3e:2b:ef:4c: 12:68:79:54:83:f9:d6:7d:0b:7b:4a:05:19:cd:ee: d7:23:37:47:c0:d5:5e:52:2d:35:8f:08:a2:fa:a6: d5:e0:dc:2f:66:2d:96:3d:86:1d:e2:ea:bd:c9:59: c4:e2:03:78:5c:2c:8a:49:e9:be:94:70:c5:59:bf: 58:f5:82:59:e7:5c:82:df:4b:55:58:35:3f:78:72: 18:7f:cf:f5:03:ee:c7:fa:cc:6e:3a:e8:1d:1c:86: 3a:f8:d7:24:13:81:6c:59:f5:54:b7:a6:a5:67:ce: dc:30:3c:aa:75:f5:bc:c7:86:df:64:ec:d5:b9:8a: 04:83:19:12:56:d6:e2:c2:c4:f1:c9:94:80:e0:a1: 59:f8:04:e3:08:ae:e9:19:9e:e6:c9:be:6a:10:e2: b1:cf:53:c7:06:bd:10:ee:19:61:29:9e:7c:7f:7e: 57:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EF:C8:D8:A7:17:43:B9:58:8C:0A:64:7D:A6:7D:37:EC:78:5D:B2 X509v3 Authority Key Identifier: keyid:FB:11:A2:D8:36:8C:15:02:1A:5B:F3:12:F5:1D:44:CE:58:FD:44:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FF6F/12E2517C146C11EDB7C40A23C4F9AE02/-xGi2DaMFQIaW_MS9R1Ezlj9RFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:b9:d3:fe:f9:fc:0a:21:4a:96:be:bd:33:0e:af:fc:1e:fa: 59:2c:47:33:2e:6f:a5:01:9f:08:86:33:02:ae:ca:9e:1e:7b: 10:e3:4c:a2:a1:bb:52:62:fa:5e:9e:79:b8:73:37:26:c0:0f: 0b:1d:f5:16:61:b9:21:79:81:b3:5e:af:51:72:6f:bc:ef:78: b3:ad:8c:6e:79:30:68:7b:cd:c3:56:41:af:fc:29:b9:20:b0: bf:cd:de:d0:f1:a2:9d:87:7d:03:09:8e:ff:6c:f6:40:7f:93: 16:63:9a:0c:38:d7:41:09:b9:fb:e8:8a:87:cf:a6:4d:cc:a7: b9:07:fc:de:fb:3e:3e:71:19:29:8b:07:e0:af:d2:84:fa:51: 39:30:e4:c0:69:ed:32:e1:bb:05:dd:3b:9c:43:80:e2:5f:13: 87:da:6b:5b:90:93:04:e4:a0:21:f9:3e:5d:2b:01:63:5c:d6: 65:45:a9:0c:c0:74:9d:1e:ca:ea:22:27:05:b4:8d:a4:03:39: 1b:58:4d:bc:24:44:38:a0:48:ec:bb:3f:a7:ba:61:3a:2e:41: 26:bc:3b:55:84:35:7f:be:ab:04:bf:51:70:19:bc:cd:53:38: 3b:ec:8c:24:d0:ce:4b:7d:f9:c3:e6:f0:dd:11:ec:b1:46:8a: e3:d1:79:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZGNkYxMTAvBgNVBAUTKEZCMTFBMkQ4MzY4QzE1MDIxQTVCRjMxMkY1MUQ0NENF NThGRDQ0NTEwHhcNMjUwNTMxMDE1NzEwWhcNMjUwNjA3MDE1NzEwWjAYMRYwFAYD VQQDEw02ODNhNjFmNi01MzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwF012y4VOuIpII/KffTGq6iPKjd0Auk9pl5lpnPOuvG5KsQhRTF9/DKHv+Ym BwlUZtb/jPj6tRIYvJ9wkVwpo4DYfPZPNh3o9taittY7LwmPje1dOD4r70wSaHlU g/nWfQt7SgUZze7XIzdHwNVeUi01jwii+qbV4NwvZi2WPYYd4uq9yVnE4gN4XCyK Sem+lHDFWb9Y9YJZ51yC30tVWDU/eHIYf8/1A+7H+sxuOugdHIY6+NckE4FsWfVU t6alZ87cMDyqdfW8x4bfZOzVuYoEgxkSVtbiwsTxyZSA4KFZ+ATjCK7pGZ7myb5q EOKxz1PHBr0Q7hlhKZ58f35XLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHvyNin F0O5WIwKZH2mfTfseF2yMB8GA1UdIwQYMBaAFPsRotg2jBUCGlvzEvUdRM5Y/URR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkY2Ri8xMkUyNTE3QzE0 NkMxMUVEQjdDNDBBMjNDNEY5QUUwMi8teEdpMkRhTUZRSWFXX01TOVIxRXpsajlS RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14R2kyRGFNRlFJYVdfTVM5UjFFemxqOVJGRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkY2Ri8xMkUyNTE3QzE0NkMxMUVEQjdDNDBBMjNDNEY5QUUwMi8teEdpMkRhTUZR SWFXX01TOVIxRXpsajlSRkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1udP++fwKIUqWvr0zDq/8HvpZLEczLm+lAZ8IhjMCrsqeHnsQ40yi obtSYvpennm4czcmwA8LHfUWYbkheYGzXq9Rcm+873izrYxueTBoe83DVkGv/Cm5 ILC/zd7Q8aKdh30DCY7/bPZAf5MWY5oMONdBCbn76IqHz6ZNzKe5B/ze+z4+cRkp iwfgr9KE+lE5MOTAae0y4bsF3TucQ4DiXxOH2mtbkJME5KAh+T5dKwFjXNZlRakM wHSdHsrqIicFtI2kAzkbWE28JEQ4oEjsuz+numE6LkEmvDtVhDV/vqsEv1FwGbzN Uzg77Iwk0M5LffnD5vDdEeyxRorj0Xm5 -----END CERTIFICATE-----Generated at Sat May 31 17:11:18 2025 by rpki-client