$ rpki-client -vvf rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft File: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft (raw, json) Hash identifier: PrwkcB9j1RQq3bTSc2c2RIPJam8v/X5VUOPRNMl22YE= Subject key identifier: 23:26:AA:1E:A9:97:BE:C6:FA:5E:19:48:94:7F:A0:E1:C9:7F:96:98 Authority key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 Certificate issuer: /CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Certificate serial: 0676 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft Manifest number: 0671 Signing time: Fri 30 May 2025 22:33:07 +0000 Manifest this update: Fri 30 May 2025 22:33:07 +0000 Manifest next update: Fri 06 Jun 2025 22:33:07 +0000 Files and hashes: 1: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl (hash: JNJeJ+TrrJ8dMGE5ZR1uEHflmJa7Xsn4OWIEJfxXGcs=) 2: 546C2E447BD711EB8DB97853C4F9AE02.roa (hash: LymCYpP9ODjDnMZgIvd8/QCM8E6rGc1JYF+pBCdV8o4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1654 (0x676) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D05C, serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Validity Not Before: May 30 22:33:07 2025 GMT Not After : Jun 6 22:33:07 2025 GMT Subject: CN=683a3223-ad04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:f4:11:3d:8c:e4:1f:27:06:44:14:b8:8d: 4f:fb:33:03:3f:cb:10:23:45:05:88:b7:8d:a8:9f: 68:f4:44:1f:97:f2:82:17:67:2c:a0:7a:3f:16:86: e7:4d:44:5d:af:80:aa:33:c3:33:97:91:35:dd:97: a8:ae:dd:e1:5c:98:24:89:aa:66:60:6c:13:54:6d: 7f:20:19:9a:fb:4c:b1:21:6e:1d:a4:b3:2e:cb:55: 5b:30:2a:08:86:6d:0c:f1:c7:70:33:6f:41:28:60: c0:a7:ba:9b:a0:12:19:02:04:26:d3:e5:0d:70:e1: 4e:19:cd:3a:71:1b:6b:d5:38:3e:6e:2a:6e:a7:85: 7a:e1:f8:50:aa:98:2f:af:bc:f3:04:d3:9d:e0:93: f1:49:01:13:40:22:90:16:df:d1:54:8c:bc:93:11: b9:3e:40:d4:de:88:21:74:6d:fc:58:57:dd:ec:22: 7e:a0:9d:72:18:5b:02:08:9f:2b:1a:3a:5b:8b:f5: 7b:24:32:6a:86:e4:45:6a:a9:68:d2:fa:2f:7b:81: 3c:22:d8:f1:10:a0:c2:12:f4:6a:e9:eb:af:02:17: 33:94:f7:ae:a4:86:ca:5a:dc:e2:a8:c4:1f:bc:ae: 6e:5c:7f:36:78:b2:77:5a:90:00:be:5f:7d:49:b9: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:26:AA:1E:A9:97:BE:C6:FA:5E:19:48:94:7F:A0:E1:C9:7F:96:98 X509v3 Authority Key Identifier: keyid:C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:15:5f:55:24:76:b4:f4:57:b5:b1:79:32:a6:fd:db:1d:4e: c0:7a:40:3d:fa:7a:02:f2:f9:db:79:7d:4b:20:64:49:d8:3f: ab:0e:8d:3c:86:9e:f1:e4:cd:fb:d2:5e:52:05:65:5d:c7:d3: bd:a6:bc:54:a7:d3:88:58:b9:db:03:9e:7a:22:22:73:8b:6b: 8f:57:f3:f3:0d:c1:9d:19:a4:be:8a:03:9e:1a:26:40:fe:70: cb:d5:e8:ee:40:ff:84:b1:23:03:8b:fe:3b:8f:ce:19:2b:65: 2c:88:72:f9:22:91:46:fb:69:fc:6b:94:04:e8:ff:d2:06:af: 1c:99:8b:de:c8:dd:2c:d2:db:68:95:31:99:c9:04:96:bf:1b: 8c:8b:b1:58:84:7f:8a:3c:1b:61:66:6b:bb:e5:1a:9d:82:28: a0:19:25:c1:35:21:1b:39:22:db:6c:e8:d5:12:4d:c7:fc:7f: e8:a1:1d:76:a8:32:bd:f9:b5:cf:8e:59:ea:ad:a7:f3:8c:73: a4:40:61:af:c4:8e:fa:bc:77:54:ec:01:af:2e:3f:ad:97:ef: f9:54:51:8f:ea:bc:75:e6:43:28:1d:4d:2b:d4:3f:d6:2e:11: c2:3b:c7:54:b7:ed:ad:66:26:cc:3f:50:36:33:0b:91:c5:2c: e8:6c:2b:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwNUMxMTAvBgNVBAUTKEM2OTM5OUIxMzJFMUFFNkIyRUEzMTE2RTE0QjEwMDFD MDgxOUREQTkwHhcNMjUwNTMwMjIzMzA3WhcNMjUwNjA2MjIzMzA3WjAYMRYwFAYD VQQDEw02ODNhMzIyMy1hZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoD/0ET2M5B8nBkQUuI1P+zMDP8sQI0UFiLeNqJ9o9EQfl/KCF2csoHo/Fobn TURdr4CqM8Mzl5E13Zeort3hXJgkiapmYGwTVG1/IBma+0yxIW4dpLMuy1VbMCoI hm0M8cdwM29BKGDAp7qboBIZAgQm0+UNcOFOGc06cRtr1Tg+bipup4V64fhQqpgv r7zzBNOd4JPxSQETQCKQFt/RVIy8kxG5PkDU3oghdG38WFfd7CJ+oJ1yGFsCCJ8r Gjpbi/V7JDJqhuRFaqlo0vove4E8ItjxEKDCEvRq6euvAhczlPeupIbKWtziqMQf vK5uXH82eLJ3WpAAvl99Sbni6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMmqh6p l77G+l4ZSJR/oOHJf5aYMB8GA1UdIwQYMBaAFMaTmbEy4a5rLqMRbhSxABwIGd2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDA1Qy9ERUNFMEYwQTdC RDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJtc3VveEZ1RkxFQUhBZ1oz YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwT1pzVExocm1zdW94RnVGTEVBSEFnWjNhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDA1Qy9ERUNFMEYwQTdCRDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJt c3VveEZ1RkxFQUhBZ1ozYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZFV9VJHa09Fe1sXkypv3bHU7AekA9+noC8vnbeX1LIGRJ2D+rDo08 hp7x5M370l5SBWVdx9O9prxUp9OIWLnbA556IiJzi2uPV/PzDcGdGaS+igOeGiZA /nDL1ejuQP+EsSMDi/47j84ZK2UsiHL5IpFG+2n8a5QE6P/SBq8cmYveyN0s0tto lTGZyQSWvxuMi7FYhH+KPBthZmu75RqdgiigGSXBNSEbOSLbbOjVEk3H/H/ooR12 qDK9+bXPjlnqrafzjHOkQGGvxI76vHdU7AGvLj+tl+/5VFGP6rx15kMoHU0r1D/W LhHCO8dUt+2tZibMP1A2MwuRxSzobCvH -----END CERTIFICATE-----Generated at Sat May 31 17:14:42 2025 by rpki-client