$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft File: xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json) Hash identifier: dHHcMp94lf2NBzFrGY28dFtYuucNN+39oqmug4KxGjc= Subject key identifier: ED:77:DB:2F:DE:2D:F1:74:C6:9E:A0:F7:E6:18:EE:78:5D:CC:1B:AF Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft Manifest number: 071A Signing time: Fri 30 May 2025 22:06:18 +0000 Manifest this update: Fri 30 May 2025 22:06:17 +0000 Manifest next update: Fri 06 Jun 2025 22:06:17 +0000 Files and hashes: 1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: k+0jWd7vO02VjvlJRJR3IlXXaiZApgHfdulNVScwGOA=) 2: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: qHbtyOGNfvy85AlmzO8CEnT5fTz9AwvvFi0y6XbFwG0=) 3: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: SFXCFjWV3nIjHDr4Y0nX1h+ByORJe0z+8s0nBYc0bds=) 4: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: ZsYDlTfdZ4GWQgL9mV+7VPUB+1RhWLSObaxg0y98Kxs=) 5: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: aIhdOoGq/5IV6Mhns4F3omRFw08MxMY0t1LOWZhYXz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Validity Not Before: May 30 22:06:17 2025 GMT Not After : Jun 6 22:06:17 2025 GMT Subject: CN=683a2bda-9a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:78:9a:b7:49:ba:d8:90:5a:84:8b:c9:0c: e5:52:50:10:34:bd:8f:a0:57:5b:c8:7c:14:0a:b6: 80:73:cd:2c:a4:43:eb:c2:11:15:38:ad:37:49:4a: 10:2b:1a:44:1e:3b:06:43:3d:12:8a:98:48:6f:4d: 23:9a:f3:0f:75:65:f3:8f:b6:45:21:60:e0:27:4a: 9d:b7:00:7e:96:63:0b:57:69:75:66:a0:8b:49:40: 69:b3:92:7b:63:a8:9e:6e:ad:d1:9e:9f:1f:4a:28: 76:56:b3:6b:24:61:69:99:ca:a0:5c:3a:2a:ce:72: 3f:ed:c6:e2:4f:42:de:93:63:b8:c3:92:ec:65:c6: d7:01:0a:74:dd:09:ed:50:94:96:c9:af:2a:6e:37: 68:38:b1:cd:d9:33:f1:50:ee:a7:64:f5:b0:9d:c8: 04:20:8e:ed:57:25:48:ba:4b:23:c7:06:6b:f4:ac: 9a:b7:fa:be:68:22:bf:3e:36:05:35:b3:00:ea:10: 00:8e:4c:d5:de:fd:53:40:98:62:b5:e1:29:20:76: 8d:3c:f6:d6:4a:68:61:e7:5e:0a:95:e6:dc:06:8d: 4b:ea:97:08:3e:df:0e:ab:73:c9:42:eb:5e:9a:8b: 11:f7:cb:52:88:d0:b5:2e:35:76:37:a7:63:12:2c: 98:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:77:DB:2F:DE:2D:F1:74:C6:9E:A0:F7:E6:18:EE:78:5D:CC:1B:AF X509v3 Authority Key Identifier: keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:24:7b:97:9e:ea:e5:79:06:cf:e6:bd:b1:3b:05:f2:c5:4f: c2:2a:7b:6f:9a:a1:b2:3c:ce:f4:38:12:30:3a:a6:a6:7f:df: cf:58:91:26:24:8d:f8:30:98:1e:84:54:d1:3a:65:e7:03:eb: 3a:1b:5c:de:d8:3d:81:f3:70:c7:59:e8:3b:d7:02:86:8d:91: 98:ad:b4:20:4a:29:a2:07:0b:d9:a6:63:d3:0a:eb:13:ef:5a: ff:65:a9:6e:14:2f:cc:12:f2:73:d3:55:83:ea:56:e6:1e:31: 91:8f:ea:cd:6c:5c:a5:43:94:2e:8a:ba:bc:1f:d2:f1:d0:73: 05:93:28:c6:63:7c:94:2e:4d:4a:fa:f2:17:84:49:66:09:a5: 63:45:24:b0:d5:a9:80:06:bd:8e:9c:67:51:c0:0c:52:33:8b: 4b:89:a5:c0:be:06:0d:13:d2:a0:1d:3a:55:78:58:63:20:90: ae:51:0f:34:da:2f:17:11:c0:0f:97:04:b5:a9:85:7f:af:02: 44:27:55:40:33:9b:b1:0d:5e:e8:ba:1e:b5:15:b4:62:50:73: db:16:34:b2:53:15:45:b9:a5:cb:32:a1:9b:fc:fa:0a:e5:d3: ee:19:3b:94:ce:c4:58:76:2a:28:1b:a8:6d:ae:38:3e:4c:71: b8:a8:8f:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4MzNEREJERDYy NEVDMjRFOTIwHhcNMjUwNTMwMjIwNjE3WhcNMjUwNjA2MjIwNjE3WjAYMRYwFAYD VQQDEw02ODNhMmJkYS05YTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGV4mrdJutiQWoSLyQzlUlAQNL2PoFdbyHwUCraAc80spEPrwhEVOK03SUoQ KxpEHjsGQz0SiphIb00jmvMPdWXzj7ZFIWDgJ0qdtwB+lmMLV2l1ZqCLSUBps5J7 Y6iebq3Rnp8fSih2VrNrJGFpmcqgXDoqznI/7cbiT0Lek2O4w5LsZcbXAQp03Qnt UJSWya8qbjdoOLHN2TPxUO6nZPWwncgEII7tVyVIuksjxwZr9Kyat/q+aCK/PjYF NbMA6hAAjkzV3v1TQJhiteEpIHaNPPbWSmhh514KlebcBo1L6pcIPt8Oq3PJQute mosR98tSiNC1LjV2N6djEiyYAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO132y/e LfF0xp6g9+YY7nhdzBuvMB8GA1UdIwQYMBaAFMUEVlV3rpn2GRyXgz3b3WJOwk6S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDEyOC85MERFOUM2NjNF QTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1mWVpISmVEUGR2ZFlrN0NU cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRUldWWGV1bWZZWkhKZURQZHZkWWs3Q1RwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDEyOC85MERFOUM2NjNFQTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1m WVpISmVEUGR2ZFlrN0NUcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARJHuXnurleQbP5r2xOwXyxU/CKntvmqGyPM70OBIwOqamf9/PWJEm JI34MJgehFTROmXnA+s6G1ze2D2B83DHWeg71wKGjZGYrbQgSimiBwvZpmPTCusT 71r/ZaluFC/MEvJz01WD6lbmHjGRj+rNbFylQ5Quirq8H9Lx0HMFkyjGY3yULk1K +vIXhElmCaVjRSSw1amABr2OnGdRwAxSM4tLiaXAvgYNE9KgHTpVeFhjIJCuUQ80 2i8XEcAPlwS1qYV/rwJEJ1VAM5uxDV7ouh61FbRiUHPbFjSyUxVFuaXLMqGb/PoK 5dPuGTuUzsRYdiooG6htrjg+THG4qI+e -----END CERTIFICATE-----Generated at Sat May 31 17:07:36 2025 by rpki-client