$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json) Hash identifier: ZF/Msw3qowVHX5/tHSUFMgI4c7GprnOlu3G/x9koh+Y= Subject key identifier: 14:67:A5:49:A3:9F:B2:EA:39:02:45:26:4C:C6:D8:D0:9C:18:8F:70 Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Certificate serial: 040D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft Manifest number: 03F0 Signing time: Sat 31 May 2025 00:44:56 +0000 Manifest this update: Sat 31 May 2025 00:44:55 +0000 Manifest next update: Sat 07 Jun 2025 00:44:55 +0000 Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: qaiPA6RORkFiDoKuSDKHtAnY+aCPALNYyl+i9fKbXGA=) 2: 07C047B28BE911EF9DF25F0BC4F9AE02.roa (hash: AN4hBiZx1+tVHoaN/LazZ9dbBGKvWOUI1wRt7z4HbB0=) 3: 50F671067CC411EF8589DF32C4F9AE02.roa (hash: 2ORnkhzshra5gFpyLproOPD3/repbchwTxkXJLvaYUk=) 4: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: wgX+EMzgoKfrAVdDz/48mCSLSDU8m2MWUYcABpMkNSU=) 5: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: Hb+mhjOnUiRcLYwNjTfwnpK/Ky2Nkaju8DZXLfXW14s=) 6: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: Cfsk+t84ibLo+fkUEG7hLT0dawrjqPaFJly7xspE4TQ=) 7: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: PGtYjaqkpIprbzlxtBJWh83LZS83/aciT2SXNSejhqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1037 (0x40d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Validity Not Before: May 31 00:44:55 2025 GMT Not After : Jun 7 00:44:55 2025 GMT Subject: CN=683a5108-fc0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:bf:dc:e9:0a:28:e1:51:fb:2a:94:cd:00: 3e:db:fb:82:3e:eb:5f:91:16:ac:2b:3d:7a:39:48: 4d:8c:01:f5:fb:61:36:60:12:a0:39:67:5c:0d:c2: 1c:b3:3f:02:42:f4:c9:25:a7:b1:88:86:0d:86:ec: 65:f2:df:b0:14:37:b2:2f:1d:41:c9:e5:3e:18:9f: 4a:0c:28:67:63:fc:bd:af:99:a4:62:c5:b7:a9:42: e6:f0:6f:b8:93:dd:7b:3c:4f:af:54:88:cc:68:0c: 47:ee:5e:c3:0f:fd:5d:4c:49:29:85:0f:c2:c2:90: 3a:67:f0:10:49:39:ad:61:e1:a9:1b:0a:56:fa:98: af:80:76:70:ce:76:d7:57:ed:b1:d9:9e:a5:7a:43: 0e:ff:2f:8c:ef:f6:8b:da:8b:c2:f3:f2:2f:07:70: 4f:a8:bc:d6:f3:8e:b6:01:fe:46:9f:80:c4:02:b1: 6e:fa:b1:27:1c:fa:bf:bb:d1:05:8d:da:9b:5b:c5: d3:79:c0:0d:a0:8f:33:bd:e7:fb:3d:80:0e:be:e2: 1b:8b:4b:8e:90:79:ac:7a:ea:ec:9a:82:4f:6d:bf: 86:97:f1:da:6f:04:f4:36:3b:f1:40:a6:14:64:17: 3d:c3:7c:39:ec:54:08:71:fe:20:0f:7e:34:48:a7: 8d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:67:A5:49:A3:9F:B2:EA:39:02:45:26:4C:C6:D8:D0:9C:18:8F:70 X509v3 Authority Key Identifier: keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:0c:39:4f:ea:be:ef:b5:97:23:6e:dc:1c:9e:1f:5a:13:a9: 74:44:aa:f6:14:d0:38:f0:1c:db:08:5b:c3:01:a2:5a:b1:15: f8:81:cd:e6:7e:9d:bc:de:82:fc:78:09:9a:f5:bd:1a:a1:2b: fc:8c:c4:93:12:d2:43:2c:b1:a7:8a:19:bc:d5:eb:6a:ea:81: e0:2a:2e:0a:33:32:90:f2:7d:1e:0d:58:09:ad:d5:48:f7:9d: 85:e7:79:2b:f0:64:68:09:df:81:23:8a:b7:b8:e4:fa:62:b4: 79:d1:8d:be:dd:ba:86:b8:09:86:56:a3:ca:36:d2:81:35:3e: 7d:f3:5e:c2:3a:80:de:20:d0:6d:74:a6:0f:bb:86:eb:a9:ed: 75:b7:b3:8e:ae:b0:15:53:87:c1:21:d7:be:e9:8b:23:a8:e8: f4:ce:6b:74:e0:c7:15:7f:c1:40:64:72:1e:78:7b:11:f0:4c: 37:63:51:02:8d:08:f4:4f:7b:82:49:34:93:24:0e:33:25:70: b7:17:81:84:5a:c0:75:e3:f0:29:ce:de:10:e2:c8:d3:3e:68: 22:23:7e:2a:c8:be:a4:dc:bc:56:42:9e:a0:30:30:41:35:e7: cf:50:3e:34:cd:3b:35:49:72:c9:6a:93:98:f6:72:44:6e:50: cc:ca:f5:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTQxMTAvBgNVBAUTKEM0RDRGQjBGRjAyNzc5NkU5REFBMTdCNzU1NTFGRDBC NzdGMTk4MkYwHhcNMjUwNTMxMDA0NDU1WhcNMjUwNjA3MDA0NDU1WjAYMRYwFAYD VQQDEw02ODNhNTEwOC1mYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhe/3OkKKOFR+yqUzQA+2/uCPutfkRasKz16OUhNjAH1+2E2YBKgOWdcDcIc sz8CQvTJJaexiIYNhuxl8t+wFDeyLx1ByeU+GJ9KDChnY/y9r5mkYsW3qULm8G+4 k917PE+vVIjMaAxH7l7DD/1dTEkphQ/CwpA6Z/AQSTmtYeGpGwpW+pivgHZwznbX V+2x2Z6lekMO/y+M7/aL2ovC8/IvB3BPqLzW8462Af5Gn4DEArFu+rEnHPq/u9EF jdqbW8XTecANoI8zvef7PYAOvuIbi0uOkHmseursmoJPbb+Gl/HabwT0NjvxQKYU ZBc9w3w57FQIcf4gD340SKeNYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRnpUmj n7LqOQJFJkzG2NCcGI9wMB8GA1UdIwQYMBaAFMTU+w/wJ3lunaoXt1VR/Qt38Zgv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5NC9FM0NDMjVEODgx MUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVXNmRxaGUzVlZIOUMzZnht QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOVDdEX0FuZVc2ZHFoZTNWVkg5QzNmeG1DOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI5NC9FM0NDMjVEODgxMUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVX NmRxaGUzVlZIOUMzZnhtQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVDDlP6r7vtZcjbtwcnh9aE6l0RKr2FNA48BzbCFvDAaJasRX4gc3m fp283oL8eAma9b0aoSv8jMSTEtJDLLGnihm81etq6oHgKi4KMzKQ8n0eDVgJrdVI 952F53kr8GRoCd+BI4q3uOT6YrR50Y2+3bqGuAmGVqPKNtKBNT59817COoDeINBt dKYPu4brqe11t7OOrrAVU4fBIde+6YsjqOj0zmt04McVf8FAZHIeeHsR8Ew3Y1EC jQj0T3uCSTSTJA4zJXC3F4GEWsB14/Apzt4Q4sjTPmgiI34qyL6k3LxWQp6gMDBB NefPUD40zTs1SXLJapOY9nJEblDMyvU+ -----END CERTIFICATE-----Generated at Sat May 31 16:36:51 2025 by rpki-client