$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json) Hash identifier: Rrb6C6tb93ehRrI+865uX/P3z3sJplfMWp4mggxs66E= Subject key identifier: 4E:2E:B8:D7:16:8F:CB:2F:97:C5:C6:B7:74:5C:79:2C:FE:65:A3:3D Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 06C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft Manifest number: 06B4 Signing time: Fri 30 May 2025 22:22:30 +0000 Manifest this update: Fri 30 May 2025 22:22:29 +0000 Manifest next update: Fri 06 Jun 2025 22:22:29 +0000 Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: 3W3UQNqQLtkAyDFIujll9CwwDwICb4LERSYrWN/NGmQ=) 2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: SQlrc6PCUPjaaBm+jKtjnbQxZYJxO/Vi8PJnTLD4+DE=) 3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: ez5zyisrlhzGt4msn6K1G9iNl7wli7TiUZuA1FWHYm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1731 (0x6c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Validity Not Before: May 30 22:22:29 2025 GMT Not After : Jun 6 22:22:29 2025 GMT Subject: CN=683a2fa5-f329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a8:a3:d2:0a:ca:98:9a:95:50:3b:73:c4:44: 29:f6:1a:90:94:dd:a3:f4:f7:c8:fa:c3:c6:9e:20: fb:9d:05:38:51:2e:6d:28:13:ae:9f:80:30:7c:c9: f0:91:0c:e2:18:e6:e4:27:59:3f:4a:a7:73:bb:9b: ec:0d:2c:ef:57:d4:87:fa:d8:1e:99:e3:d8:5c:81: ba:d8:86:f1:e9:21:8a:3b:ba:35:c8:34:1a:bd:d6: 9b:c8:b7:e2:c7:ae:24:bb:f3:06:21:95:4c:7e:48: 61:cf:1f:db:91:40:11:8c:af:20:82:c9:f9:7a:72: 71:32:4a:25:d2:d8:f7:b8:a6:40:b1:f2:13:68:fa: 15:93:97:91:a6:ef:e9:50:72:32:9c:c1:7d:bb:8f: ad:ff:b9:ea:0b:c1:da:e2:78:55:02:8c:e6:fb:c2: b4:fa:c3:cc:8d:a7:a0:3d:b3:f8:27:e3:77:bc:a1: 63:92:18:be:24:f7:40:09:a1:1a:5d:21:70:5c:34: 3e:1c:37:72:f7:97:27:2d:7d:9c:f6:fa:b5:36:c5: 6a:d6:7a:05:e2:f7:05:69:56:19:94:a5:29:55:47: b5:95:96:89:d5:a7:2c:2f:98:6a:18:11:18:7c:18: ed:6e:c7:4a:75:96:9e:24:51:5f:3e:d6:f2:9e:53: 88:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2E:B8:D7:16:8F:CB:2F:97:C5:C6:B7:74:5C:79:2C:FE:65:A3:3D X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:36:9f:c6:73:09:38:fd:39:ce:03:63:33:c3:bd:08:14:e5: a7:4e:ac:57:88:be:d7:73:90:73:f8:73:90:15:ad:cc:27:1a: 53:e2:9c:2a:65:ef:8e:22:0f:31:8e:0c:55:a7:26:99:1e:58: f0:82:09:4c:12:ba:ef:ca:4c:03:c1:6f:a1:2f:82:85:ba:d0: 4d:4d:33:35:e5:9d:27:cc:99:72:0e:5b:d2:02:64:b3:d8:71: aa:c0:b3:6d:02:e7:60:e5:57:c0:38:bf:2b:62:b0:9e:2c:aa: ec:43:18:a9:65:af:5e:bc:60:c8:34:ee:c2:f4:11:a6:ce:8a: 83:c4:90:4c:95:e4:a7:ba:59:0e:56:a2:b6:b6:78:d6:23:f6: 78:64:e5:7a:a8:a0:29:f2:53:b2:29:08:8f:e9:98:bf:5d:e5: 3e:63:d5:ef:ee:1e:20:2e:68:cd:f7:2c:d4:42:0d:35:4a:b3: 2e:a3:2d:de:60:05:2f:35:90:be:cf:02:26:f3:64:5f:5e:9a: c2:67:cb:bf:a5:34:58:3e:cc:a7:3b:51:0b:4d:7b:65:37:7b: 84:f3:39:f1:d8:a4:4f:30:21:23:66:05:61:a1:a8:a6:ea:58: 6c:58:c3:05:d7:a5:e7:49:41:8e:bf:38:aa:3a:1d:40:77:3d: b8:ee:05:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjUwNTMwMjIyMjI5WhcNMjUwNjA2MjIyMjI5WjAYMRYwFAYD VQQDEw02ODNhMmZhNS1mMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKij0grKmJqVUDtzxEQp9hqQlN2j9PfI+sPGniD7nQU4US5tKBOun4AwfMnw kQziGObkJ1k/Sqdzu5vsDSzvV9SH+tgemePYXIG62Ibx6SGKO7o1yDQavdabyLfi x64ku/MGIZVMfkhhzx/bkUARjK8ggsn5enJxMkol0tj3uKZAsfITaPoVk5eRpu/p UHIynMF9u4+t/7nqC8Ha4nhVAozm+8K0+sPMjaegPbP4J+N3vKFjkhi+JPdACaEa XSFwXDQ+HDdy95cnLX2c9vq1NsVq1noF4vcFaVYZlKUpVUe1lZaJ1acsL5hqGBEY fBjtbsdKdZaeJFFfPtbynlOI3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4uuNcW j8svl8XGt3RceSz+ZaM9MB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5 WDZPV2hCdTNjOW9WOXdCb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaNp/Gcwk4/TnOA2Mzw70IFOWnTqxXiL7Xc5Bz+HOQFa3MJxpT4pwq Ze+OIg8xjgxVpyaZHljwgglMErrvykwDwW+hL4KFutBNTTM15Z0nzJlyDlvSAmSz 2HGqwLNtAudg5VfAOL8rYrCeLKrsQxipZa9evGDINO7C9BGmzoqDxJBMleSnulkO VqK2tnjWI/Z4ZOV6qKAp8lOyKQiP6Zi/XeU+Y9Xv7h4gLmjN9yzUQg01SrMuoy3e YAUvNZC+zwIm82RfXprCZ8u/pTRYPsynO1ELTXtlN3uE8znx2KRPMCEjZgVhoaim 6lhsWMMF16XnSUGOvziqOh1Adz247gU7 -----END CERTIFICATE-----Generated at Sat May 31 17:34:20 2025 by rpki-client