$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json) Hash identifier: Ez9pCEn+glI97VLrQtEl0LVDBMTYSAPz9qaKAvsvb3I= Subject key identifier: 8E:21:84:FA:C7:C4:FD:D2:E8:8A:62:A8:4F:53:17:7F:D5:46:D8:63 Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 069D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft Manifest number: 0695 Signing time: Fri 30 May 2025 22:27:24 +0000 Manifest this update: Fri 30 May 2025 22:27:24 +0000 Manifest next update: Fri 06 Jun 2025 22:27:24 +0000 Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: hkn8msoGtQc1IMiWYSO7DGcU8hW/6XuAgm51rvMrd2I=) 2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: FREW3BYIhAyr82gwSpG+aXABGrdd/q2DunYmdFOCRY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1693 (0x69d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: May 30 22:27:24 2025 GMT Not After : Jun 6 22:27:24 2025 GMT Subject: CN=683a30cc-19c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ff:b6:71:97:27:82:a7:41:a5:75:3f:c0:83: 39:00:f2:d1:27:92:02:90:fd:08:a7:3c:80:a3:f1: 11:04:9c:be:e9:1c:24:eb:23:7e:9c:88:91:60:31: 34:dd:e7:52:ce:e5:eb:2c:36:3a:d1:2e:da:f5:68: a1:c5:f7:29:d6:4f:2a:c6:6e:8f:d3:28:93:d4:c1: 17:7b:e3:bc:66:57:8a:c2:89:76:bf:4a:0a:8c:f5: e7:e8:1c:56:5f:64:0d:5b:04:8a:d7:1d:f3:a7:ed: b5:e5:fa:bb:ad:26:82:4a:e5:c4:02:a0:8b:d9:05: 1f:87:e2:12:9c:ee:20:0e:86:91:21:bc:81:bc:83: d6:35:fb:d3:bf:8a:e7:29:e3:7b:f2:27:b4:56:69: 7b:76:cd:ce:41:81:9b:62:08:75:7b:77:2e:db:03: 0f:66:c8:b6:9d:1f:52:1a:a9:04:ea:31:24:d2:f1: e3:94:03:e4:67:4c:5a:01:06:ef:25:60:68:7c:1b: a1:f0:f8:bf:dc:77:60:fd:47:fb:a1:4a:98:c9:45: 7f:cb:88:39:4a:a7:02:ad:b6:1c:79:90:ac:26:48: 06:26:56:e2:64:ce:2b:c6:b0:6a:cd:6b:49:80:d4: d7:df:9d:4b:4f:f8:91:42:93:72:fc:fc:c5:97:a8: 88:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:21:84:FA:C7:C4:FD:D2:E8:8A:62:A8:4F:53:17:7F:D5:46:D8:63 X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:85:77:9b:68:13:d3:36:aa:fe:cd:f8:d9:4b:f0:36:89:f0: 22:08:6b:bb:8e:dd:b2:0f:e6:ed:a1:55:ef:da:fe:42:ff:6f: 5e:4e:42:49:86:6d:c3:94:bf:29:75:51:96:73:a8:a3:4a:c0: e2:77:bb:3d:a8:4c:63:6e:4b:b2:96:d9:9f:b8:cb:5a:4e:35: 40:0a:19:40:83:8f:97:86:dd:bb:e7:13:ea:e2:8f:c0:63:cb: fc:fe:5b:6b:86:50:29:a1:21:b4:3e:e2:9e:7d:1c:71:10:35: 0a:25:7f:0b:a4:40:23:7e:b3:6b:1c:d4:cb:ad:96:ac:ff:fe: c1:e3:b8:07:31:56:df:a5:18:1d:fc:5f:13:f8:a3:6d:28:99: 7a:d9:43:49:1d:20:88:18:ab:87:40:10:be:a1:c6:75:dd:93: b1:33:6d:96:8a:c8:ee:53:9f:e5:a8:fe:dd:c7:0f:cb:3d:af: 20:75:40:a2:98:28:5a:0d:59:0a:5f:0a:72:04:33:28:51:2c: 0d:8b:48:92:39:08:5a:91:70:b1:4c:6f:96:02:6d:36:ca:d3: 09:0f:bb:de:96:6c:b1:eb:ef:c4:79:61:30:8b:21:8f:1e:0e: aa:a8:b8:ac:00:1f:f6:e5:b8:4e:b1:cd:ab:80:ce:30:19:01: 07:63:4d:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjUwNTMwMjIyNzI0WhcNMjUwNjA2MjIyNzI0WjAYMRYwFAYD VQQDEw02ODNhMzBjYy0xOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2f+2cZcngqdBpXU/wIM5APLRJ5ICkP0IpzyAo/ERBJy+6Rwk6yN+nIiRYDE0 3edSzuXrLDY60S7a9Wihxfcp1k8qxm6P0yiT1MEXe+O8ZleKwol2v0oKjPXn6BxW X2QNWwSK1x3zp+215fq7rSaCSuXEAqCL2QUfh+ISnO4gDoaRIbyBvIPWNfvTv4rn KeN78ie0Vml7ds3OQYGbYgh1e3cu2wMPZsi2nR9SGqkE6jEk0vHjlAPkZ0xaAQbv JWBofBuh8Pi/3Hdg/Uf7oUqYyUV/y4g5SqcCrbYceZCsJkgGJlbiZM4rxrBqzWtJ gNTX351LT/iRQpNy/PzFl6iIYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4hhPrH xP3S6IpiqE9TF3/VRthjMB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVEOC81MUM5RjZBRTcwNUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JT dXlBMU1jUmdTYTFBTllqOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByhXebaBPTNqr+zfjZS/A2ifAiCGu7jt2yD+btoVXv2v5C/29eTkJJ hm3DlL8pdVGWc6ijSsDid7s9qExjbkuyltmfuMtaTjVAChlAg4+Xht275xPq4o/A Y8v8/ltrhlApoSG0PuKefRxxEDUKJX8LpEAjfrNrHNTLrZas//7B47gHMVbfpRgd /F8T+KNtKJl62UNJHSCIGKuHQBC+ocZ13ZOxM22WisjuU5/lqP7dxw/LPa8gdUCi mChaDVkKXwpyBDMoUSwNi0iSOQhakXCxTG+WAm02ytMJD7velmyx6+/EeWEwiyGP Hg6qqLisAB/25bhOsc2rgM4wGQEHY02j -----END CERTIFICATE-----Generated at Sat May 31 17:14:43 2025 by rpki-client