$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft File: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json) Hash identifier: agb8WGs2JXD2eWevgBsJy3OXDWPW3xdz45CZYmV+ZYI= Subject key identifier: D7:BA:59:38:86:30:59:D6:28:C2:BF:A3:39:42:B3:FD:DE:60:41:E9 Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Certificate serial: 06D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft Manifest number: 06D1 Signing time: Fri 30 May 2025 22:16:09 +0000 Manifest this update: Fri 30 May 2025 22:16:09 +0000 Manifest next update: Fri 06 Jun 2025 22:16:09 +0000 Files and hashes: 1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: NWJMAB7/KPhsPxcw34sMOeDCeB5YZtAKVm64kzUcJls=) 2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: +cH8RmJhdymM82G2tjdg2T5wIUQwcB/rD1A615a7HRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1750 (0x6d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Validity Not Before: May 30 22:16:09 2025 GMT Not After : Jun 6 22:16:09 2025 GMT Subject: CN=683a2e29-1cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ee:d8:4d:4c:56:4f:3f:30:0b:1b:48:1d:69: 5a:20:7f:62:85:ba:2e:f1:2c:4d:ea:41:07:8c:6b: 75:cf:ff:ff:fa:c9:16:d9:51:03:8a:47:fc:d0:c6: cd:6a:91:d0:2b:15:29:ee:18:50:1a:40:21:fe:54: 3e:b3:df:36:80:ff:ce:76:bf:1a:4f:2d:2e:22:33: 6a:ec:03:1f:a4:c9:f7:74:1e:b5:02:15:f6:dc:0b: ed:7d:11:5d:ab:21:19:15:ba:35:9b:ec:0a:fb:23: 9b:4f:b9:c3:91:d4:2a:92:64:af:0e:6e:4c:e9:ca: 64:29:2d:87:bb:ea:79:6e:71:0b:48:dd:77:79:b5: 1b:bd:08:1b:fd:61:4c:d9:f5:fd:d3:b3:61:e7:8d: 4b:c7:3b:81:3f:cf:54:cd:2c:b6:16:54:c1:5e:6e: 5f:bf:ce:05:f9:46:00:68:21:11:0b:67:89:7a:e3: 90:88:89:71:3a:07:82:d7:e4:3e:30:ab:a2:03:e1: 6f:e3:86:03:17:8b:56:ae:ac:98:46:db:84:7c:d3: 73:3f:05:ac:11:15:a5:ee:b1:fc:ef:39:6c:e6:3a: 50:a6:34:75:62:54:37:98:df:d5:e0:15:40:14:b0: 2d:86:3d:9d:83:a8:8b:04:93:72:a4:1a:1e:58:a8: 77:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BA:59:38:86:30:59:D6:28:C2:BF:A3:39:42:B3:FD:DE:60:41:E9 X509v3 Authority Key Identifier: keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:57:f5:65:a8:da:49:05:bf:c2:4e:a8:e6:15:0b:8d:bb:aa: 46:30:1e:21:3f:41:20:f2:83:ba:27:82:57:a6:e8:23:5c:49: ff:1a:68:cc:f9:a3:31:0d:72:1c:95:2b:18:53:7e:06:6f:1f: 24:13:40:0d:de:38:69:69:50:f7:b4:6d:12:70:01:42:1c:52: 7c:2b:66:ce:cc:77:d6:24:a4:b8:22:9e:f0:6f:93:45:4e:09: 1f:ab:28:14:3f:f9:1a:bd:6f:e3:45:27:c0:a0:ee:e1:46:53: 86:99:8b:0a:7f:19:9a:92:c6:f7:6e:9c:0a:76:c8:e9:40:0c: a0:69:1e:80:ef:6b:8a:10:00:c5:20:b2:84:7a:e6:f9:ea:7d: 35:13:16:ee:2f:48:fb:93:68:8c:d5:c7:c2:b9:9b:d8:0b:1a: 9c:a6:06:b6:2e:65:9a:ad:7a:69:59:96:c3:b0:44:ee:0d:bb: c6:20:7c:c7:b9:dd:58:16:8c:3f:f2:5d:7d:bc:86:7b:3d:a9: 5a:5b:1a:60:8c:bb:fd:38:b1:dd:e4:56:8d:28:f9:ff:07:28: 07:11:ac:ef:a8:4c:e8:af:5a:3a:16:cc:97:9c:87:e9:14:b1: 41:5f:e5:c3:cc:0b:54:b7:51:ff:0a:7b:76:7a:fe:ae:2a:2f: c5:4d:1d:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0 QTUyOUQwOUEwHhcNMjUwNTMwMjIxNjA5WhcNMjUwNjA2MjIxNjA5WjAYMRYwFAYD VQQDEw02ODNhMmUyOS0xY2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+7YTUxWTz8wCxtIHWlaIH9ihbou8SxN6kEHjGt1z///+skW2VEDikf80MbN apHQKxUp7hhQGkAh/lQ+s982gP/Odr8aTy0uIjNq7AMfpMn3dB61AhX23AvtfRFd qyEZFbo1m+wK+yObT7nDkdQqkmSvDm5M6cpkKS2Hu+p5bnELSN13ebUbvQgb/WFM 2fX907Nh541LxzuBP89UzSy2FlTBXm5fv84F+UYAaCERC2eJeuOQiIlxOgeC1+Q+ MKuiA+Fv44YDF4tWrqyYRtuEfNNzPwWsERWl7rH87zls5jpQpjR1YlQ3mN/V4BVA FLAthj2dg6iLBJNypBoeWKh3SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNe6WTiG MFnWKMK/ozlCs/3eYEHpMB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1 RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFDMC9COTYwMzc1ODU1RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05 ckFqTU1OZEtaZjlLVXAwSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaV/VlqNpJBb/CTqjmFQuNu6pGMB4hP0Eg8oO6J4JXpugjXEn/GmjM +aMxDXIclSsYU34Gbx8kE0AN3jhpaVD3tG0ScAFCHFJ8K2bOzHfWJKS4Ip7wb5NF TgkfqygUP/kavW/jRSfAoO7hRlOGmYsKfxmaksb3bpwKdsjpQAygaR6A72uKEADF ILKEeub56n01ExbuL0j7k2iM1cfCuZvYCxqcpga2LmWarXppWZbDsETuDbvGIHzH ud1YFow/8l19vIZ7PalaWxpgjLv9OLHd5FaNKPn/BygHEazvqEzor1o6FsyXnIfp FLFBX+XDzAtUt1H/Cnt2ev6uKi/FTR1Q -----END CERTIFICATE-----Generated at Sat May 31 17:00:16 2025 by rpki-client