$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft File: XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft (raw, json) Hash identifier: kAmbIrjXgekEPoUKRzUDamXOpGt9BnpIR+l8LnF2G1M= Subject key identifier: 0D:06:19:BA:04:D6:C8:1A:FA:A6:9A:41:E0:6A:5D:40:29:4B:EF:05 Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 Certificate issuer: /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft Manifest number: 0112 Signing time: Sat 31 May 2025 04:34:37 +0000 Manifest this update: Sat 31 May 2025 04:34:36 +0000 Manifest next update: Sat 07 Jun 2025 04:34:36 +0000 Files and hashes: 1: XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl (hash: w0vmA0ag/9nUKeRXK1K38ZJ4TifIHHFExZJjCy4Xd2o=) 2: 262FD0CEFE5C11EFA373D67EC4F9AE02.roa (hash: VFctWPQwbtoig1M0ZyXvaaJ8FzDcDhRRe13XKfb+93w=) 3: 55D387BCFE5C11EFAC82C181C4F9AE02.roa (hash: BXDB9E72EwnR8CUZxXbSk5J1hAgTnGg/I9qirr0mHEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F54, serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Validity Not Before: May 31 04:34:36 2025 GMT Not After : Jun 7 04:34:36 2025 GMT Subject: CN=683a86dc-8450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d1:e5:74:29:96:27:cf:42:94:c5:c9:42:68: 65:f0:06:6f:5c:e6:f5:6c:04:88:79:94:18:4d:5d: cb:39:41:3d:67:dc:de:fb:dd:1d:33:d2:48:9a:75: 3e:92:93:2f:fc:10:91:e1:60:6f:4c:d9:3e:30:50: 48:96:13:ae:ae:b6:9e:de:e8:74:44:94:32:7c:16: 19:62:54:13:9f:7f:e6:6f:50:ba:81:53:8e:c6:29: c9:03:b5:bd:d1:c1:79:52:7e:8c:ca:a2:b5:0e:a2: 47:9b:01:b4:13:54:5a:e2:6d:20:1b:25:3c:d6:5d: a1:59:71:6f:4a:44:d2:59:96:e6:e1:77:d7:dc:ea: 1f:a6:bd:1f:33:a1:dd:28:80:40:c5:b4:9c:c2:09: cd:77:8a:01:5f:b3:4d:22:05:17:35:f5:68:1f:8d: 6f:0c:de:b8:c5:18:42:ec:f6:9e:2c:e7:0c:f7:af: cb:27:63:e3:a6:0c:30:29:66:62:9e:20:bd:45:a1: ef:9c:e0:14:54:8d:f8:ca:a9:4d:33:9c:63:a2:ec: 86:c1:e5:2f:7f:e2:40:91:75:9d:a6:a3:34:cb:a1: f9:c7:67:f4:14:b3:be:1f:ef:0d:26:32:77:f7:96: 6a:1f:9e:ea:53:19:3c:fd:ea:10:a4:9c:ef:29:ef: ef:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:06:19:BA:04:D6:C8:1A:FA:A6:9A:41:E0:6A:5D:40:29:4B:EF:05 X509v3 Authority Key Identifier: keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ea:51:41:d5:e5:59:d4:cb:dc:7f:0e:7c:3e:2e:54:19:20: b5:4f:fc:ab:c2:62:f9:a3:50:38:6f:06:b1:97:3b:4c:ca:21: 7a:23:99:da:2f:a7:5f:80:ef:0d:a3:79:a0:ad:08:88:21:80: 58:70:2b:f3:13:23:83:d7:88:bf:de:2f:d7:ae:09:09:bf:91: b2:9f:a1:80:b5:c0:e3:5d:f1:10:7a:78:19:ad:d0:9e:9f:59: 1a:b4:b6:f9:e9:92:bb:4e:d0:ef:d4:7b:52:80:5d:00:ed:5d: 68:f0:78:0d:46:54:e1:0c:60:8d:c0:2d:c3:3f:7c:9a:63:99: 20:df:7a:23:46:f5:e2:18:a9:5d:04:79:68:c9:bc:bf:b3:80: 94:16:ab:5e:e1:d3:f5:ff:fa:e0:d5:7d:da:4f:ae:9b:99:11: c9:6e:31:11:0b:cb:16:93:83:ff:d9:da:43:93:c8:ca:7c:db: b4:51:99:9f:2d:96:ce:3b:0c:8d:78:1e:6c:89:1a:2e:9c:a1: 2d:77:44:7f:c3:c8:83:b3:2b:c2:61:99:37:c0:d4:7f:53:fc: 2a:c1:8a:49:8d:46:46:3f:41:ac:7b:2e:3d:58:ab:99:1c:e6: ae:69:78:11:9b:91:59:a4:b5:26:b7:e6:5d:2d:0e:70:64:9a: 3e:1b:0b:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNTQxMTAvBgNVBAUTKDVEQjU3RUQzODYwMzlFQTY2NEQxRUZGNzU3MDczNkQ2 RjlGMDRDNDQwHhcNMjUwNTMxMDQzNDM2WhcNMjUwNjA3MDQzNDM2WjAYMRYwFAYD VQQDEw02ODNhODZkYy04NDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9HldCmWJ89ClMXJQmhl8AZvXOb1bASIeZQYTV3LOUE9Z9ze+90dM9JImnU+ kpMv/BCR4WBvTNk+MFBIlhOurrae3uh0RJQyfBYZYlQTn3/mb1C6gVOOxinJA7W9 0cF5Un6MyqK1DqJHmwG0E1Ra4m0gGyU81l2hWXFvSkTSWZbm4XfX3Oofpr0fM6Hd KIBAxbScwgnNd4oBX7NNIgUXNfVoH41vDN64xRhC7PaeLOcM96/LJ2PjpgwwKWZi niC9RaHvnOAUVI34yqlNM5xjouyGweUvf+JAkXWdpqM0y6H5x2f0FLO+H+8NJjJ3 95ZqH57qUxk8/eoQpJzvKe/v1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0GGboE 1sga+qaaQeBqXUApS+8FMB8GA1UdIwQYMBaAFF21ftOGA56mZNHv91cHNtb58ExE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1NC81MUI2RUNFNDlG MjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5xWmswZV8zVndjMjF2bndU RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hiVi0wNFlEbnFaazBlXzNWd2MyMXZud1RFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1NC81MUI2RUNFNDlGMjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5x WmswZV8zVndjMjF2bndURVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI6lFB1eVZ1Mvcfw58Pi5UGSC1T/yrwmL5o1A4bwaxlztMyiF6I5na L6dfgO8No3mgrQiIIYBYcCvzEyOD14i/3i/XrgkJv5Gyn6GAtcDjXfEQengZrdCe n1katLb56ZK7TtDv1HtSgF0A7V1o8HgNRlThDGCNwC3DP3yaY5kg33ojRvXiGKld BHloyby/s4CUFqte4dP1//rg1X3aT66bmRHJbjERC8sWk4P/2dpDk8jKfNu0UZmf LZbOOwyNeB5siRounKEtd0R/w8iDsyvCYZk3wNR/U/wqwYpJjUZGP0Gsey49WKuZ HOauaXgRm5FZpLUmt+ZdLQ5wZJo+GwtZ -----END CERTIFICATE-----Generated at Sat May 31 16:38:02 2025 by rpki-client