$ rpki-client -vvf rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft File: XPuiiRbqwHsjWQlIVdieFqCBS6w.mft (raw, json) Hash identifier: 3MM2YjrPnaT/ccJFOU4c2yMOxTACqYw6NDDz4j8zYCw= Subject key identifier: E0:AE:B7:BA:62:68:9B:75:2F:83:B9:E1:CB:2B:42:B0:A9:10:7D:FC Authority key identifier: 5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC Certificate issuer: /CN=A918E843/serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Certificate serial: 0B47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft Manifest number: 0B38 Signing time: Fri 30 May 2025 19:21:58 +0000 Manifest this update: Fri 30 May 2025 19:21:58 +0000 Manifest next update: Fri 06 Jun 2025 19:21:58 +0000 Files and hashes: 1: XPuiiRbqwHsjWQlIVdieFqCBS6w.crl (hash: Trgrud+yQDnO7lDrbCvhqKY1pScp18KLZzbQvqcQXJw=) 2: 3EA26CE6396011EABC88BD55C4F9AE02.roa (hash: z+/TKQAcf6VE8NuqmnIeG+tuqaOl0QxpRj3ReMN+jL0=) 3: 01553E10396311EAB24C5A5FC4F9AE02.roa (hash: Jhq/OLItI0gDhEIBYho+XP9iO0Y/7Srvb27SpQGuffU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2887 (0xb47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E843, serialNumber=5CFBA28916EAC07B2359094855D89E16A0814BAC Validity Not Before: May 30 19:21:58 2025 GMT Not After : Jun 6 19:21:58 2025 GMT Subject: CN=683a0556-0c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:08:3a:b4:90:55:51:66:93:7b:ee:c5:ce:a4: de:1e:8e:d8:ac:a9:a0:3d:cc:b5:0e:57:33:33:dd: 85:b2:16:8c:5c:85:1c:3e:46:0c:01:b1:a5:d2:10: 39:0d:98:14:37:7b:5e:dc:6a:c6:e0:28:d3:40:61: 52:bc:d2:62:b6:b8:69:36:1a:c5:fd:20:38:cf:c1: 88:46:74:62:8a:bd:56:71:56:98:d2:44:45:33:0a: d0:b0:f8:1d:9f:47:a0:38:3a:2c:75:45:32:0d:e7: 96:ff:d7:86:c6:eb:f8:88:f6:f3:97:ea:a0:66:5e: ba:5c:54:45:13:cc:94:6b:00:1a:ca:fa:6e:ee:45: a5:7a:47:c0:36:25:96:4b:bb:31:2e:f2:c9:88:22: 94:69:ee:8a:f2:fd:30:5f:12:95:a3:a5:1d:c9:a9: 02:57:64:8b:06:c9:27:85:e2:01:9e:7c:cd:6b:d5: ea:71:bf:9d:1a:0e:df:7f:23:0d:ab:1f:ec:a8:ce: e7:3b:1c:13:3e:33:a7:62:92:b7:8a:40:9f:6b:0b: 35:75:be:c2:ef:5a:e7:54:2b:35:45:99:12:34:2d: 53:e2:aa:38:d1:c4:65:90:22:c2:39:1f:c4:d8:2d: 7f:0d:3e:be:d8:19:05:9f:d3:38:2f:c6:65:e5:5d: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AE:B7:BA:62:68:9B:75:2F:83:B9:E1:CB:2B:42:B0:A9:10:7D:FC X509v3 Authority Key Identifier: keyid:5C:FB:A2:89:16:EA:C0:7B:23:59:09:48:55:D8:9E:16:A0:81:4B:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPuiiRbqwHsjWQlIVdieFqCBS6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E843/957BCB44395F11EABB854755C4F9AE02/XPuiiRbqwHsjWQlIVdieFqCBS6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:e8:cd:69:b2:60:27:cc:05:3d:67:7f:cf:f7:76:69:63:fb: 22:7e:76:f0:6a:8a:1a:49:44:07:6e:be:3e:d0:c0:46:83:03: 2c:98:fa:8c:7f:cd:f1:b0:fd:f5:6f:8e:c2:1e:25:39:74:88: 97:79:3e:9a:df:b1:b0:3a:95:48:91:96:01:0c:93:12:c3:3a: 9f:09:d2:f4:f5:4b:22:04:3c:07:93:dc:2f:81:37:1a:6a:29: 0b:c1:4d:f7:54:99:55:8b:9c:ad:84:f0:5f:7b:7d:27:b4:d9: 2f:dc:ad:46:89:e4:05:04:ff:4b:61:e7:ac:23:d4:13:5f:8b: 46:47:36:9c:4b:45:33:ba:5e:50:3c:11:a1:8b:cb:60:19:42: b9:a9:54:72:d7:1e:88:02:ec:6d:d0:56:ee:25:6a:46:d8:fc: 2b:f3:32:60:31:f0:81:2e:35:b0:43:dd:c3:68:60:21:ea:73: df:7b:43:49:9f:61:21:ff:57:79:62:78:60:b5:b6:70:74:99: ca:b9:96:4c:f2:57:86:19:7d:6b:71:07:79:24:5e:de:65:54: 10:55:0f:98:a7:cf:85:2f:ab:a2:20:64:53:39:45:14:fb:23: c7:17:48:c8:62:6e:ac:dd:a0:86:fd:91:e1:1d:b7:10:63:4a: b3:4c:d8:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4NDMxMTAvBgNVBAUTKDVDRkJBMjg5MTZFQUMwN0IyMzU5MDk0ODU1RDg5RTE2 QTA4MTRCQUMwHhcNMjUwNTMwMTkyMTU4WhcNMjUwNjA2MTkyMTU4WjAYMRYwFAYD VQQDEw02ODNhMDU1Ni0wYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ag6tJBVUWaTe+7FzqTeHo7YrKmgPcy1DlczM92FshaMXIUcPkYMAbGl0hA5 DZgUN3te3GrG4CjTQGFSvNJitrhpNhrF/SA4z8GIRnRiir1WcVaY0kRFMwrQsPgd n0egODosdUUyDeeW/9eGxuv4iPbzl+qgZl66XFRFE8yUawAayvpu7kWlekfANiWW S7sxLvLJiCKUae6K8v0wXxKVo6UdyakCV2SLBsknheIBnnzNa9Xqcb+dGg7ffyMN qx/sqM7nOxwTPjOnYpK3ikCfaws1db7C71rnVCs1RZkSNC1T4qo40cRlkCLCOR/E 2C1/DT6+2BkFn9M4L8Zl5V0zbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCut7pi aJt1L4O54csrQrCpEH38MB8GA1UdIwQYMBaAFFz7ookW6sB7I1kJSFXYnhaggUus MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg0My85NTdCQ0I0NDM5 NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdIc2pXUWxJVmRpZUZxQ0JT NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hQdWlpUmJxd0hzaldRbElWZGllRnFDQlM2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg0My85NTdCQ0I0NDM5NUYxMUVBQkI4NTQ3NTVDNEY5QUUwMi9YUHVpaVJicXdI c2pXUWxJVmRpZUZxQ0JTNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZ6M1psmAnzAU9Z3/P93ZpY/sifnbwaooaSUQHbr4+0MBGgwMsmPqM f83xsP31b47CHiU5dIiXeT6a37GwOpVIkZYBDJMSwzqfCdL09UsiBDwHk9wvgTca aikLwU33VJlVi5ythPBfe30ntNkv3K1GieQFBP9LYeesI9QTX4tGRzacS0Uzul5Q PBGhi8tgGUK5qVRy1x6IAuxt0FbuJWpG2Pwr8zJgMfCBLjWwQ93DaGAh6nPfe0NJ n2Eh/1d5YnhgtbZwdJnKuZZM8leGGX1rcQd5JF7eZVQQVQ+Yp8+FL6uiIGRTOUUU +yPHF0jIYm6s3aCG/ZHhHbcQY0qzTNh6 -----END CERTIFICATE-----Generated at Sat May 31 17:47:27 2025 by rpki-client