$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft File: xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft (raw, json) Hash identifier: NHC0t9wGC9EOOmOZYPn7jKQuLLbD/a034eb3Qj/Pe14= Subject key identifier: 91:B7:A9:95:36:1A:EC:4A:65:DC:37:92:96:AD:4A:C0:58:AC:C7:9A Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 Certificate issuer: /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft Manifest number: 0171 Signing time: Sat 31 May 2025 03:28:37 +0000 Manifest this update: Sat 31 May 2025 03:28:37 +0000 Manifest next update: Sat 07 Jun 2025 03:28:37 +0000 Files and hashes: 1: xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl (hash: Y4+q0TkkXcO3V5Ep2r+xuJmqJc/u/N2nYhIJSQOM4+I=) 2: CD377A6C06B411EE841D6C4AC4F9AE02.roa (hash: eGRq+1XhrILN9pC7Bu29wtZG2xTxwIWpAe96/Tzv+yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A750, serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Validity Not Before: May 31 03:28:37 2025 GMT Not After : Jun 7 03:28:37 2025 GMT Subject: CN=683a7765-0a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:06:c2:3a:fe:b5:4c:92:5f:fc:80:05:79: e8:8e:e0:af:6b:ae:40:1f:34:ef:21:3d:b7:5a:36: 10:93:71:58:65:b1:ed:92:8f:09:ed:45:c4:73:ef: 9c:b8:40:e3:1d:5a:d8:3a:e0:13:4a:65:82:a9:3b: d0:9d:63:52:18:be:45:c0:a6:43:f0:79:a2:55:f0: 6a:51:2e:9f:b1:9c:ca:ff:c5:cf:e5:e8:09:16:ab: e4:cc:9d:5b:be:b0:18:6e:cc:6b:0e:5f:67:76:37: fb:61:2b:aa:4e:96:4f:f7:1a:2e:80:23:a5:a2:59: 0d:29:60:2c:52:6d:5a:ed:71:1a:3f:aa:2e:b9:6f: 00:8b:1a:21:2a:a7:ef:6f:fe:df:48:4c:d9:0d:a4: 59:d3:ad:c4:11:cf:c2:c6:61:bc:5f:e7:f7:d1:8c: 15:6a:cd:96:c7:45:d1:98:47:fc:02:39:4c:48:be: 3d:09:6a:84:c4:10:c2:25:87:33:38:81:b6:7c:ea: 0b:7c:15:45:96:9f:14:18:ac:84:e3:49:e9:0f:cd: 04:cb:95:9c:ff:df:08:39:7d:92:72:30:98:b2:45: 14:11:38:69:9f:2a:64:7e:c9:fa:21:e8:7d:d2:60: 76:a2:50:8a:bb:10:77:79:bf:8b:e8:0a:a2:24:31: 1a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B7:A9:95:36:1A:EC:4A:65:DC:37:92:96:AD:4A:C0:58:AC:C7:9A X509v3 Authority Key Identifier: keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:d9:67:f4:3d:f4:8b:68:14:a1:a2:a2:1d:e9:d6:6a:ae:59: dc:88:5e:41:e9:4b:79:eb:b6:d0:97:75:5b:67:ee:f0:71:36: 67:bc:cf:57:e2:e2:33:d1:ad:2c:22:72:d9:89:b6:34:2b:1b: 6f:ab:03:07:5e:95:bc:4d:c2:48:24:70:25:e8:3e:41:70:6c: 2a:1c:c1:09:59:f4:ea:11:8d:dd:c2:df:c5:fb:8b:f6:93:51: 41:b2:4c:80:bf:e6:da:88:3f:5d:73:0b:ab:72:d6:fe:ca:11: 8d:19:51:9b:80:81:5c:84:56:92:e4:80:a6:59:02:22:64:7e: 06:dd:48:96:0c:23:64:e9:fe:fa:4b:81:72:25:0a:d4:39:09: 36:a1:ee:98:14:e6:9f:5d:a7:bc:3f:f4:c4:0b:53:51:3a:19: 4a:8b:a6:23:03:9b:34:b7:ce:76:7c:3a:97:8f:21:b2:60:ea: cc:41:3e:e3:d6:cb:7a:bc:b4:fe:ba:64:14:08:54:f2:9f:a0: 07:d3:a0:da:73:e3:7b:68:39:d7:10:86:b5:05:81:0f:83:d9: 3e:b4:80:55:dd:43:21:ce:8f:3d:2f:8f:c4:63:1a:f9:a3:87: 37:11:b4:ed:9c:02:fb:78:a6:e4:26:4a:b5:09:95:a7:1b:b4: 0b:7b:87:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE3NTAxMTAvBgNVBAUTKEM2NTRGQzQ3NkNERjJFMzA2QkUyNzcwREFFOTEwNDIz NjExQTMxOTIwHhcNMjUwNTMxMDMyODM3WhcNMjUwNjA3MDMyODM3WjAYMRYwFAYD VQQDEw02ODNhNzc2NS0wYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrAGwjr+tUySX/yABXnojuCva65AHzTvIT23WjYQk3FYZbHtko8J7UXEc++c uEDjHVrYOuATSmWCqTvQnWNSGL5FwKZD8HmiVfBqUS6fsZzK/8XP5egJFqvkzJ1b vrAYbsxrDl9ndjf7YSuqTpZP9xougCOlolkNKWAsUm1a7XEaP6ouuW8AixohKqfv b/7fSEzZDaRZ063EEc/CxmG8X+f30YwVas2Wx0XRmEf8AjlMSL49CWqExBDCJYcz OIG2fOoLfBVFlp8UGKyE40npD80Ey5Wc/98IOX2ScjCYskUUEThpnypkfsn6Ieh9 0mB2olCKuxB3eb+L6AqiJDEaYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJG3qZU2 GuxKZdw3kpatSsBYrMeaMB8GA1UdIwQYMBaAFMZU/Eds3y4wa+J3Da6RBCNhGjGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTc1MC80NTFENkE2QTA2 QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6ZkxqQnI0bmNOcnBFRUkyRWFN WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsVDhSMnpmTGpCcjRuY05ycEVFSTJFYU1aSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTc1MC80NTFENkE2QTA2QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6Zkxq QnI0bmNOcnBFRUkyRWFNWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA42Wf0PfSLaBShoqId6dZqrlnciF5B6Ut567bQl3VbZ+7wcTZnvM9X 4uIz0a0sInLZibY0KxtvqwMHXpW8TcJIJHAl6D5BcGwqHMEJWfTqEY3dwt/F+4v2 k1FBskyAv+baiD9dcwurctb+yhGNGVGbgIFchFaS5ICmWQIiZH4G3UiWDCNk6f76 S4FyJQrUOQk2oe6YFOafXae8P/TEC1NROhlKi6YjA5s0t852fDqXjyGyYOrMQT7j 1st6vLT+umQUCFTyn6AH06Dac+N7aDnXEIa1BYEPg9k+tIBV3UMhzo89L4/EYxr5 o4c3EbTtnAL7eKbkJkq1CZWnG7QLe4fC -----END CERTIFICATE-----Generated at Sat May 31 17:46:28 2025 by rpki-client