$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft File: xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json) Hash identifier: brck7hqG8ZNHBZgDA6Izs/DWeZkAo2CDgsrpQ9FRgJ8= Subject key identifier: D1:D0:8F:4F:72:88:42:6F:01:CF:79:E0:1B:97:54:78:DF:AD:E2:4E Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D Certificate issuer: /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft Manifest number: 0A Signing time: Sat 31 May 2025 07:40:30 +0000 Manifest this update: Sat 31 May 2025 07:40:29 +0000 Manifest next update: Sat 07 Jun 2025 07:40:29 +0000 Files and hashes: 1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: AjIoD76z7HsOskzHGjYmR1Rjc4WO0FmAk1dD+KRysGI=) 2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: C2K9dK4do/Lq7H5EaXQP1EBA+uUbAkgLMeJKgVTTBgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D Validity Not Before: May 31 07:40:29 2025 GMT Not After : Jun 7 07:40:29 2025 GMT Subject: CN=683ab26e-3ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:4f:e5:74:f8:8d:83:81:37:dd:4f:94:54: eb:e6:50:fc:90:e5:eb:b6:35:a1:ac:17:b7:40:b0: 64:49:88:ba:df:a7:75:d4:69:d9:7d:ea:6c:0d:12: a0:a2:d7:2f:ba:2f:e2:f3:c5:02:bf:c1:dd:c1:11: e8:15:cc:6a:bf:ed:fe:77:0b:5a:da:ed:1e:76:0a: de:97:96:cb:04:05:16:f1:cc:ba:1c:af:3e:c2:56: 2c:f0:02:c4:ce:3a:db:de:bb:36:3c:00:c6:9d:a3: 89:ee:4e:b3:69:2b:44:d4:68:37:09:83:b6:4e:bd: 6f:36:48:41:e5:1a:e8:65:9f:df:7f:d6:2c:01:54: a7:48:48:e9:40:03:e9:d9:8c:cd:6b:2f:59:5a:5b: 4e:8c:26:89:ba:3b:d9:b0:0c:4f:00:f1:2e:1c:a0: 4a:cb:26:67:aa:e8:ed:ba:a9:f2:3c:8a:ff:66:0e: 54:fa:52:40:8a:14:d9:b4:a6:82:9b:22:15:bb:67: 22:77:59:a8:aa:d4:3b:2d:94:0c:df:34:2f:10:b2: 40:5f:b8:61:51:08:18:a8:b6:b2:4b:a6:93:66:da: e8:21:e4:9a:6b:f9:e4:d3:aa:c3:e1:6c:98:7a:63: a5:fa:64:d0:3d:3a:de:e1:bf:78:4d:af:06:10:72: 9a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D0:8F:4F:72:88:42:6F:01:CF:79:E0:1B:97:54:78:DF:AD:E2:4E X509v3 Authority Key Identifier: keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:16:6f:0c:1c:1f:a2:bd:69:de:4a:54:d4:72:75:e4:83:71: 6c:9b:98:c9:79:5d:b2:6c:b7:61:18:43:6d:5d:0e:07:2a:59: 1d:6c:d8:45:b3:73:65:02:85:3c:ee:c7:c1:1c:d9:f3:27:39: d4:75:11:4d:9f:bd:90:81:df:20:d1:bd:ba:5e:e7:a8:77:38: 14:59:eb:9d:bc:6e:d1:4c:be:7a:ce:aa:1d:ad:6c:9c:32:7f: d6:26:38:f5:62:bb:37:c9:2a:0d:8e:ac:5a:31:42:e7:d8:d0: 08:d9:4b:71:61:2d:2d:8e:a7:47:a5:92:0a:9d:41:31:be:48: d5:23:af:95:4b:61:53:6d:16:f5:f7:31:3e:3c:4d:ea:72:b2: 14:16:19:e3:27:94:3a:4e:a3:d7:2d:32:a9:ea:94:b0:04:ca: 8a:46:81:d0:a1:4d:d2:ac:12:7f:c5:4b:3b:10:d5:c6:9f:b6: a8:07:2e:77:1c:2c:13:f1:c7:af:67:8a:8f:54:cb:63:9f:48: 04:8c:86:bf:70:32:a2:d8:fd:67:94:82:38:8c:0c:0b:4b:3d: a2:f2:8a:6c:cd:9a:12:88:6e:98:af:67:22:7c:59:13:e1:b1: 58:1a:c0:8e:48:24:e8:50:ef:34:14:9b:76:9b:9e:9f:8c:22: 24:6e:ef:5f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QzMxMTExMC8GA1UEBRMoQzZERTM2QTRFNDVFN0E5OTFGQzQ0NEY4Q0IxQjQ1NUYx NzQ2MkM4RDAeFw0yNTA1MzEwNzQwMjlaFw0yNTA2MDcwNzQwMjlaMBgxFjAUBgNV BAMTDTY4M2FiMjZlLTNlYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJqU/ldPiNg4E33U+UVOvmUPyQ5eu2NaGsF7dAsGRJiLrfp3XUadl96mwNEqCi 1y+6L+LzxQK/wd3BEegVzGq/7f53C1ra7R52Ct6XlssEBRbxzLocrz7CVizwAsTO OtveuzY8AMado4nuTrNpK0TUaDcJg7ZOvW82SEHlGuhln99/1iwBVKdISOlAA+nZ jM1rL1laW06MJom6O9mwDE8A8S4coErLJmeq6O26qfI8iv9mDlT6UkCKFNm0poKb IhW7ZyJ3Waiq1DstlAzfNC8QskBfuGFRCBiotrJLppNm2ugh5Jpr+eTTqsPhbJh6 Y6X6ZNA9Ot7hv3hNrwYQcpotAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0dCPT3KI Qm8Bz3ngG5dUeN+t4k4wHwYDVR0jBBgwFoAUxt42pOReepkfxET4yxtFXxdGLI0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDMzExL0YxRjdBRjI2MkZC RjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBrZnhFVDR5eHRGWHhkR0xJ MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHQ0MnBPUmVlcGtmeEVUNHl4dEZYeGRHTEkwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND MzExL0YxRjdBRjI2MkZCRjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBr ZnhFVDR5eHRGWHhkR0xJMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL8WbwwcH6K9ad5KVNRydeSDcWybmMl5XbJst2EYQ21dDgcqWR1s2EWz c2UChTzux8Ec2fMnOdR1EU2fvZCB3yDRvbpe56h3OBRZ6528btFMvnrOqh2tbJwy f9YmOPViuzfJKg2OrFoxQufY0AjZS3FhLS2Op0elkgqdQTG+SNUjr5VLYVNtFvX3 MT48TepyshQWGeMnlDpOo9ctMqnqlLAEyopGgdChTdKsEn/FSzsQ1caftqgHLncc LBPxx69nio9Uy2OfSASMhr9wMqLY/WeUgjiMDAtLPaLyimzNmhKIbpivZyJ8WRPh sVgawI5IJOhQ7zQUm3abnp+MIiRu718= -----END CERTIFICATE-----Generated at Sat May 31 15:28:23 2025 by rpki-client