$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft File: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json) Hash identifier: K3D+qglc8paFX+4zpfD2VD0iv/8dZ6THwG8Lj+jyUkE= Subject key identifier: 5B:80:70:B3:AC:C8:3A:12:19:12:BC:9F:4D:1B:5F:95:97:34:EE:B7 Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft Manifest number: 01C0 Signing time: Sat 31 May 2025 02:43:42 +0000 Manifest this update: Sat 31 May 2025 02:43:41 +0000 Manifest next update: Sat 07 Jun 2025 02:43:41 +0000 Files and hashes: 1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: 1ANFudTeMqb1e1T4hfPC7jTtdXuKC1GQMUFHY3fAHic=) 2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: RmJtDMkcxfQ3eQrKn0Yy1kaaLYDY2h9Y7DjrNYqUSm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA19, serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Validity Not Before: May 31 02:43:41 2025 GMT Not After : Jun 7 02:43:41 2025 GMT Subject: CN=683a6cdd-f29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:36:a5:19:4a:72:40:62:2a:0c:3a:a0:8d:f9: 76:2a:32:12:a2:02:21:d0:5e:b4:58:88:ab:a8:9d: fd:78:a0:d5:dc:fd:c4:f0:62:76:a7:65:78:8f:7b: 70:16:05:b9:8f:fa:eb:a5:0e:01:ff:0b:aa:64:0e: ca:cc:20:81:16:29:9a:ac:0a:12:55:32:7c:00:2a: 86:8a:11:8a:f9:72:5e:c3:c8:ed:84:70:1d:5c:1f: 40:4f:ee:15:0f:80:37:97:97:c6:85:b1:9b:7c:1a: c3:33:31:60:e4:32:87:b2:ce:4f:bf:93:49:31:f0: f0:85:24:57:3b:17:af:46:70:04:90:3b:4d:a4:b8: 37:ea:66:2c:5f:f1:cb:1c:1e:63:03:81:3e:17:92: 27:81:68:e4:7f:ef:19:04:2c:55:4f:6c:5f:89:c8: 7d:aa:54:31:af:6d:fc:d1:a2:f4:6c:3e:92:7a:d8: d2:4f:a3:bf:9b:6a:2d:6f:7a:91:9d:0c:f8:db:a9: 73:57:e9:c8:95:91:2e:37:4b:11:03:8f:90:4a:bf: 20:3e:1d:f5:b1:cd:0e:dd:aa:ad:de:9d:49:e9:49: ad:06:c2:ff:68:79:74:18:fa:3e:2b:c8:94:44:c6: 82:ac:ee:64:61:23:4d:41:4a:dd:f5:cd:de:bb:9c: 1c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:80:70:B3:AC:C8:3A:12:19:12:BC:9F:4D:1B:5F:95:97:34:EE:B7 X509v3 Authority Key Identifier: keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:4c:fc:ff:ac:be:34:a0:ee:2d:24:e4:b5:d8:03:71:a7:a2: 13:b7:b1:f8:9b:4e:5c:68:13:23:ba:ef:30:fd:4b:87:a5:b0: a7:7c:e0:27:12:d0:43:1d:d2:f2:e0:b7:dc:a1:4f:26:84:ed: ae:ad:55:a4:fb:98:de:02:2e:aa:b4:23:31:28:dc:52:eb:7e: 7f:25:e5:ea:bf:37:61:f0:0a:25:ed:4c:d6:01:84:55:b0:28: 8d:f6:d8:5d:64:0f:dd:4a:16:8c:f4:c4:a8:19:f0:43:46:65: f7:d6:b6:d5:0f:62:fa:cb:95:1e:e8:97:94:83:bf:57:c9:d5: 4a:96:36:10:2e:9b:1a:8c:4f:2f:dc:ba:1f:0b:6f:dc:8c:ea: b7:e4:ca:c8:6d:d0:48:d5:6d:6b:bc:00:e3:ea:0d:b9:0d:68: 50:cb:32:e0:db:a1:92:4b:1d:8c:f9:8f:82:7d:78:45:c0:de: ca:d7:91:7b:f0:40:22:7b:df:6c:03:65:92:0a:09:2c:14:ea: 0d:21:b3:0d:06:4d:1f:09:87:d3:0f:eb:82:65:4b:22:ca:fe: ef:2e:bc:92:b5:d3:24:24:b4:05:a5:b4:6d:4e:6f:5c:17:f5: 18:0b:af:0b:64:13:4e:1d:ad:29:85:bf:b0:e1:08:3d:c6:03: 4f:8d:03:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMTkxMTAvBgNVBAUTKEM0RjkzMjJFRUU5NjcwOUU0MjIxQzZERDNDRUNCODQw Mzg0RjAyMDEwHhcNMjUwNTMxMDI0MzQxWhcNMjUwNjA3MDI0MzQxWjAYMRYwFAYD VQQDEw02ODNhNmNkZC1mMjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jalGUpyQGIqDDqgjfl2KjISogIh0F60WIirqJ39eKDV3P3E8GJ2p2V4j3tw FgW5j/rrpQ4B/wuqZA7KzCCBFimarAoSVTJ8ACqGihGK+XJew8jthHAdXB9AT+4V D4A3l5fGhbGbfBrDMzFg5DKHss5Pv5NJMfDwhSRXOxevRnAEkDtNpLg36mYsX/HL HB5jA4E+F5IngWjkf+8ZBCxVT2xfich9qlQxr2380aL0bD6SetjST6O/m2otb3qR nQz426lzV+nIlZEuN0sRA4+QSr8gPh31sc0O3aqt3p1J6UmtBsL/aHl0GPo+K8iU RMaCrO5kYSNNQUrd9c3eu5wcUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuAcLOs yDoSGRK8n00bX5WXNO63MB8GA1UdIwQYMBaAFMT5Mi7ulnCeQiHG3TzsuEA4TwIB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ExOS9GODAyQTQyNDhD RDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NKNUNJY2JkUE95NFFEaFBB Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQa3lMdTZXY0o1Q0ljYmRQT3k0UURoUEFnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ExOS9GODAyQTQyNDhDRDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NK NUNJY2JkUE95NFFEaFBBZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASTPz/rL40oO4tJOS12ANxp6ITt7H4m05caBMjuu8w/UuHpbCnfOAn EtBDHdLy4LfcoU8mhO2urVWk+5jeAi6qtCMxKNxS635/JeXqvzdh8Aol7UzWAYRV sCiN9thdZA/dShaM9MSoGfBDRmX31rbVD2L6y5Ue6JeUg79XydVKljYQLpsajE8v 3LofC2/cjOq35MrIbdBI1W1rvADj6g25DWhQyzLg26GSSx2M+Y+CfXhFwN7K15F7 8EAie99sA2WSCgksFOoNIbMNBk0fCYfTD+uCZUsiyv7vLryStdMkJLQFpbRtTm9c F/UYC68LZBNOHa0phb+w4Qg9xgNPjQP7 -----END CERTIFICATE-----Generated at Sat May 31 17:16:11 2025 by rpki-client