$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft File: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft (raw, json) Hash identifier: Rv/VZVnAzMLgVF3NnB4RewDCQtbf+E6gUJGTfkh44Ek= Subject key identifier: 7E:F8:45:B6:2C:12:72:E7:47:D5:DC:6B:5C:2A:6C:1A:3B:8D:B2:DE Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 Certificate issuer: /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft Manifest number: 0118 Signing time: Sat 31 May 2025 04:31:57 +0000 Manifest this update: Sat 31 May 2025 04:31:57 +0000 Manifest next update: Sat 07 Jun 2025 04:31:57 +0000 Files and hashes: 1: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl (hash: /PC9HjNParKdX4gteBvdkpQXGtThzhOOySU9/No1vrk=) 2: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (hash: oApvSZT8Sv3uSmM9SxIKbWqw6D6WWZsa1SWpMmDS0a4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Validity Not Before: May 31 04:31:57 2025 GMT Not After : Jun 7 04:31:57 2025 GMT Subject: CN=683a863d-2736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:d3:2f:25:ac:e0:fa:c2:25:8e:b7:ce:a1: da:16:2f:f4:6e:f6:53:bc:49:9f:ca:91:f5:a6:14: e4:22:84:90:5c:cf:32:87:42:07:41:4a:2e:0d:42: 3e:22:87:cd:65:61:0f:c5:d9:d8:fc:49:d0:d1:7a: b8:b2:51:0c:bc:88:ee:7f:b0:c8:09:18:f9:24:08: ad:d0:c7:f4:d0:60:75:00:a6:79:d0:51:cc:ab:c0: 86:7d:82:43:dc:e1:4e:52:88:98:af:90:bb:9a:16: 48:01:57:20:83:78:e0:81:bf:b8:ca:b2:20:fb:b2: 92:d0:08:64:6a:ce:31:1f:4c:f8:eb:45:03:69:13: 27:30:95:7e:d3:1c:5b:5a:91:37:60:d1:8a:c9:bd: 32:81:37:99:12:06:c5:c0:1b:0d:5f:45:bc:f9:c2: dc:65:51:33:dc:91:d5:44:ca:42:5f:31:cf:74:43: a9:f6:7d:1a:2c:c8:9f:c4:3a:be:96:d5:e9:52:49: 32:d1:5c:12:a5:e2:0b:67:69:20:4e:f5:04:a0:0e: aa:a8:38:4b:13:c4:e4:aa:32:d9:5e:c9:4a:4b:a9: 9b:77:6b:d5:8f:dd:1e:46:fe:c1:0c:2f:90:51:0c: 5d:39:65:16:a9:ba:df:b5:c5:d8:40:fe:27:9d:49: b5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F8:45:B6:2C:12:72:E7:47:D5:DC:6B:5C:2A:6C:1A:3B:8D:B2:DE X509v3 Authority Key Identifier: keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:75:b5:d3:b4:f2:66:a3:ef:ba:9f:1d:8b:0c:e3:25:20:57: 58:8d:b2:04:a5:ad:4c:76:8a:3e:fb:0c:b6:6b:25:58:ac:dc: 23:2f:53:fb:ee:d5:4e:7c:7c:ff:44:db:37:05:d8:8b:4f:95: bc:6f:13:85:2c:e8:3f:20:0e:cc:09:9a:94:28:be:8b:32:7a: fc:d2:8d:82:62:0a:8c:91:d5:07:37:fa:34:63:2e:af:5b:fa: 39:2e:53:5a:cd:e7:b6:8b:04:b1:6a:4b:6a:66:fa:26:67:2b: 72:3d:f9:86:4d:bc:7d:b5:a1:b1:aa:a7:fc:de:40:93:3f:bf: f9:8c:49:e2:47:dd:18:be:33:0f:07:38:a2:ae:3a:6d:35:73: 9f:f6:a4:99:be:93:ae:dd:56:b4:97:70:d5:fb:b1:81:88:ad: d1:a2:75:dc:cd:ce:bc:47:46:d0:92:c8:af:1d:51:e6:cf:20: e6:28:f6:59:b2:d0:f2:6b:5f:2d:ff:ae:27:b2:13:5e:e6:4b: 31:2c:27:3f:ba:5a:21:eb:af:9c:46:e6:bc:d9:39:d7:15:b5: 98:60:31:67:db:5b:d6:4d:8d:e5:f1:e1:3f:84:b2:96:c8:15: 6c:46:0b:2a:81:e5:fe:e4:dd:db:a9:4a:df:19:b1:a1:f0:01: c2:5a:74:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRjIxMTAvBgNVBAUTKDVDQzkxQUZENUI4QjM3RUQ4QzUwOUY2MTE4OUY0NDhF NzMxMjFGOTcwHhcNMjUwNTMxMDQzMTU3WhcNMjUwNjA3MDQzMTU3WjAYMRYwFAYD VQQDEw02ODNhODYzZC0yNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIDTLyWs4PrCJY63zqHaFi/0bvZTvEmfypH1phTkIoSQXM8yh0IHQUouDUI+ IofNZWEPxdnY/EnQ0Xq4slEMvIjuf7DICRj5JAit0Mf00GB1AKZ50FHMq8CGfYJD 3OFOUoiYr5C7mhZIAVcgg3jggb+4yrIg+7KS0Ahkas4xH0z460UDaRMnMJV+0xxb WpE3YNGKyb0ygTeZEgbFwBsNX0W8+cLcZVEz3JHVRMpCXzHPdEOp9n0aLMifxDq+ ltXpUkky0VwSpeILZ2kgTvUEoA6qqDhLE8TkqjLZXslKS6mbd2vVj90eRv7BDC+Q UQxdOWUWqbrftcXYQP4nnUm1pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH74RbYs EnLnR9Xca1wqbBo7jbLeMB8GA1UdIwQYMBaAFFzJGv1bizftjFCfYRifRI5zEh+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNGMi8wMDUxREJDQzk3 RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4tMk1VSjloR0o5RWpuTVNI NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hNa2FfVnVMTi0yTVVKOWhHSjlFam5NU0g1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNGMi8wMDUxREJDQzk3RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4t Mk1VSjloR0o5RWpuTVNINWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgdbXTtPJmo++6nx2LDOMlIFdYjbIEpa1Mdoo++wy2ayVYrNwjL1P7 7tVOfHz/RNs3BdiLT5W8bxOFLOg/IA7MCZqUKL6LMnr80o2CYgqMkdUHN/o0Yy6v W/o5LlNazee2iwSxaktqZvomZytyPfmGTbx9taGxqqf83kCTP7/5jEniR90YvjMP BziirjptNXOf9qSZvpOu3Va0l3DV+7GBiK3RonXczc68R0bQksivHVHmzyDmKPZZ stDya18t/64nshNe5ksxLCc/uloh66+cRua82TnXFbWYYDFn21vWTY3l8eE/hLKW yBVsRgsqgeX+5N3bqUrfGbGh8AHCWnQT -----END CERTIFICATE-----Generated at Sat May 31 17:08:53 2025 by rpki-client