$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json) Hash identifier: 2sfVH3SUjOPHwg+aSsFD5xhWdICy4wFOYyZkkBf4jXQ= Subject key identifier: 78:38:DE:27:D1:C1:2B:6A:F5:98:CC:DD:AA:2F:DF:9A:58:09:FA:ED Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7D72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft Manifest number: 482E Signing time: Fri 30 May 2025 17:12:41 +0000 Manifest this update: Fri 30 May 2025 17:12:41 +0000 Manifest next update: Fri 06 Jun 2025 17:12:41 +0000 Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: 3O6eB+/tvbcCDPYLHu/whjmvPEUSKHXlFPWLooMDbXY=) 2: 93933F8EB8E311EF94962C19C4F9AE02.roa (hash: oYu2WZprVxTGWmaXSTiX/1vi0KQUS49PpwwkujTaQnM=) 3: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: DKjdHPHX9uK/7sXdnl0CnoAUxvUfxg2iDv7piZLbE+g=) 4: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: bo2MU7FnWVB61bLgSeX3nMyKR524oPoEbjubyqJ1GeY=) 5: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: vN9wyIhoEAvL0Ppx9rHt6RaOh++3jtvNmxs0UWEaa1k=) 6: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: CbTGgfEWFtslvO2wALZJ+DSTt60SxWMiq0xTARE85r4=) 7: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: IaM5JoKkMFAzjZpn+sEYIwIyVW6+qhIz6t87EVXHjEI=) 8: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: aTECUl8KOBHDuvj6RQo/fOOhivuGrPAhZR0mAtm2uuY=) 9: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: fq/qWIdl/zMbQPXZZ52zcLgyQibFEjxrMjtOCJGOy18=) 10: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: zvj9UK8T+8CC31S1QfeLyCh52ggJamqXxF9Th/UxIhc=) 11: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: colPM8HZ1vvIi6XidfSQJiOmkoAqKV69tfTn2aphAGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32114 (0x7d72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: May 30 17:12:41 2025 GMT Not After : Jun 6 17:12:41 2025 GMT Subject: CN=6839e709-7b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:97:71:40:db:34:2f:81:39:1d:eb:cf:a0: a3:7b:32:3c:3f:2f:85:c0:ed:c4:cd:cf:38:8f:02: 3c:10:ad:d7:e8:6b:42:81:73:cc:2d:a9:4b:af:d8: 18:56:bb:35:86:e7:8e:6c:12:43:00:dc:1d:bb:52: 92:35:09:a9:e7:4e:da:9e:46:db:53:a5:5d:df:63: 99:23:23:5e:df:af:2b:86:61:ef:1f:0b:c9:63:f0: 4e:3f:7c:cd:7f:2a:0e:1f:e6:1f:1f:ea:8f:17:6f: 92:a1:cd:f5:41:ea:f9:3c:59:9d:36:d3:43:be:e3: a1:20:17:6a:d0:10:1d:cd:29:10:df:88:2b:2d:3b: 5f:f8:56:2a:82:10:48:49:2f:e6:65:6e:8a:47:6e: 4e:bc:45:e9:e9:75:53:86:5c:a7:1c:76:98:69:ec: ec:2e:0e:b2:0d:9d:58:8e:29:9b:bd:ed:a4:4c:d3: 29:4d:51:2e:c9:17:f6:4c:18:f9:53:60:a2:c9:da: d5:0b:41:d8:77:7b:60:f4:c8:a4:a3:72:17:67:b8: 48:86:d0:6e:1e:84:78:b9:43:3b:03:02:a3:bc:4e: eb:3d:99:29:4e:be:2e:9b:ea:d7:61:e1:b5:b3:87: 55:7c:2b:c7:2c:48:d6:ad:ac:d7:d0:00:e1:73:7f: 7b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:38:DE:27:D1:C1:2B:6A:F5:98:CC:DD:AA:2F:DF:9A:58:09:FA:ED X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:9b:af:24:fb:60:d7:c0:4e:de:80:76:2e:db:3c:a7:9d:49: 5d:30:15:cd:fd:09:3e:8c:c5:57:fd:e5:c3:5e:25:ff:d1:45: 06:c9:1d:9d:bb:eb:2b:c6:97:ae:f9:e4:4c:43:5f:8b:f0:67: fb:22:03:cb:5d:a1:89:b9:96:91:a1:f3:57:f3:f8:7c:88:36: 62:1b:c3:1d:78:ab:d6:92:86:e2:2a:55:78:68:0a:ac:55:14: 9b:63:f7:a6:0f:3e:e1:7c:87:62:73:d1:7c:71:0b:7a:21:8f: ab:99:89:cc:c2:35:19:ba:bf:c0:b6:cf:3c:08:14:5e:19:ff: 3f:55:86:46:d7:0e:de:49:0f:89:aa:de:8d:bf:f6:d3:46:4c: 57:e8:05:14:64:e1:bf:62:bd:de:45:b7:c9:d4:1e:0f:26:61: 76:88:ce:1a:79:41:32:a4:0e:3c:81:76:a4:d7:3a:ff:ec:7c: 9e:62:dc:e0:45:61:59:23:68:4d:b0:d8:aa:99:32:f8:54:15: 23:11:9e:f4:c0:8a:0b:93:db:4f:65:54:61:14:48:8c:69:62: 8d:03:b2:e0:93:2a:32:9a:ce:66:6a:5f:63:63:82:46:88:92: c8:ab:57:c5:0f:71:b2:b0:56:6b:41:b8:3b:81:63:58:34:1e: fe:e5:1f:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICfXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjUwNTMwMTcxMjQxWhcNMjUwNjA2MTcxMjQxWjAYMRYwFAYD VQQDEw02ODM5ZTcwOS03YjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApReXcUDbNC+BOR3rz6CjezI8Py+FwO3Ezc84jwI8EK3X6GtCgXPMLalLr9gY Vrs1hueObBJDANwdu1KSNQmp507ankbbU6Vd32OZIyNe368rhmHvHwvJY/BOP3zN fyoOH+YfH+qPF2+Soc31Qer5PFmdNtNDvuOhIBdq0BAdzSkQ34grLTtf+FYqghBI SS/mZW6KR25OvEXp6XVThlynHHaYaezsLg6yDZ1Yjimbve2kTNMpTVEuyRf2TBj5 U2CiydrVC0HYd3tg9Miko3IXZ7hIhtBuHoR4uUM7AwKjvE7rPZkpTr4um+rXYeG1 s4dVfCvHLEjWrazX0ADhc3970QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHg43ifR wStq9ZjM3aov35pYCfrtMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTAwRC9GQ0RDRDNBMEFDOUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJC Sk9kWkx1MG9tZTlYaVNFUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGm68k+2DXwE7egHYu2zynnUldMBXN/Qk+jMVX/eXDXiX/0UUGyR2d u+srxpeu+eRMQ1+L8Gf7IgPLXaGJuZaRofNX8/h8iDZiG8MdeKvWkobiKlV4aAqs VRSbY/emDz7hfIdic9F8cQt6IY+rmYnMwjUZur/Ats88CBReGf8/VYZG1w7eSQ+J qt6Nv/bTRkxX6AUUZOG/Yr3eRbfJ1B4PJmF2iM4aeUEypA48gXak1zr/7HyeYtzg RWFZI2hNsNiqmTL4VBUjEZ70wIoLk9tPZVRhFEiMaWKNA7Lgkyoyms5mal9jY4JG iJLIq1fFD3GysFZrQbg7gWNYNB7+5R+g -----END CERTIFICATE-----Generated at Sat May 31 16:38:59 2025 by rpki-client