$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft File: xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json) Hash identifier: MKH12BkbfQex3hyYmMPTKKx8CIF8wAFfZg3wihcHpag= Subject key identifier: 14:06:73:CD:94:D9:FC:49:5C:B9:8C:27:36:7F:F6:50:18:42:21:27 Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B Certificate issuer: /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Certificate serial: 1909 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft Manifest number: 18FF Signing time: Fri 30 May 2025 16:37:51 +0000 Manifest this update: Fri 30 May 2025 16:37:50 +0000 Manifest next update: Fri 06 Jun 2025 16:37:50 +0000 Files and hashes: 1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: OIlI8VIKrGA4odcfmpWjKiFB2qgI6wiTs2A7+svKbG8=) 2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: ee6x0IQnWxU26dMdjthmXNqeRQ+45nsz1rLe7eGNses=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6409 (0x1909) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B Validity Not Before: May 30 16:37:50 2025 GMT Not After : Jun 6 16:37:50 2025 GMT Subject: CN=6839dede-4c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:b3:61:cb:37:61:09:c1:d3:29:f0:1b:db: a0:6d:8c:91:06:32:4c:26:4d:74:5a:4d:b1:bf:4a: 8b:2b:ab:ea:a2:f3:bb:33:62:48:b2:2e:e4:69:0a: 44:7e:35:06:7b:08:77:b5:9f:88:5d:ab:00:46:31: f6:b3:c0:95:21:31:28:b7:93:48:73:6f:53:f9:ec: c3:68:d2:85:18:ba:fb:77:20:3f:40:ac:33:d4:dd: a7:2a:c5:d3:df:75:29:bb:f9:0b:82:e8:29:a5:91: 99:86:af:7b:e8:fb:42:8c:ee:bc:dc:8b:21:26:30: c8:d6:e0:35:8b:6d:ca:5d:31:5f:77:9a:e8:7a:90: c0:b1:71:b7:81:8e:ef:aa:5a:3e:77:d2:5a:e7:6b: ee:9e:cf:72:fd:df:47:84:2d:eb:e9:e7:e5:57:0e: 2d:74:6d:d0:6d:3e:24:cb:0b:27:71:17:c7:1d:41: bc:95:bc:6c:db:7d:19:a6:82:cc:c7:76:35:58:55: 18:f1:02:76:a1:d4:6e:a2:58:98:1c:c3:ff:db:6c: 11:19:6f:26:e0:1a:4b:d2:72:95:03:ab:41:35:a1: f8:c1:af:c4:94:24:68:a8:31:3c:71:c9:f8:16:ff: 85:38:fb:0e:43:5e:9d:05:db:da:04:4a:60:20:f6: 7e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:06:73:CD:94:D9:FC:49:5C:B9:8C:27:36:7F:F6:50:18:42:21:27 X509v3 Authority Key Identifier: keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:17:54:bc:4c:15:d8:c1:f7:2b:54:ae:bc:e4:16:83:6b:b3: d5:e7:b1:c7:ba:5c:40:52:02:54:fd:63:b5:d7:01:e9:75:fd: 9e:0d:1b:68:52:6f:df:88:7e:80:9a:8d:20:51:74:11:f5:38: be:c6:4f:32:98:98:fd:93:87:b3:63:c1:9c:07:85:1f:ed:64: 53:32:3d:d1:9d:87:30:5c:1d:b7:2e:26:ee:f8:ec:44:67:2a: 61:35:cd:d0:c0:d4:7f:40:c7:c3:19:fd:70:2c:72:73:14:cb: da:70:92:ce:12:e5:4c:64:8e:5e:03:88:e2:85:49:4f:cf:5c: c0:ef:d7:52:94:c0:ae:35:14:2e:ff:e7:97:c1:a3:7a:51:91: 88:eb:97:a1:2b:7f:37:c9:70:ab:b1:07:c7:ff:9a:51:39:66: 6c:44:7f:35:a9:9c:a2:2e:1e:20:ca:80:b4:6b:e4:d4:d4:8d: eb:e9:1c:50:56:79:7f:ec:62:f3:f3:73:7d:28:be:66:0a:2b: 67:23:00:62:5e:ca:c9:c2:03:28:cb:39:a9:15:46:d9:78:6a: bc:22:ec:42:dc:b7:8a:87:38:3b:1b:b0:92:05:1a:eb:95:80: 3a:45:74:56:b4:a2:cd:22:5e:1e:5f:2d:56:8a:44:cd:b8:69: d4:28:30:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGNjExMTAvBgNVBAUTKEM0OEFBQ0VCNEREQUVFM0M2MDQyRTY2MjE2QUQ3OTE1 MDdCNDdDNkIwHhcNMjUwNTMwMTYzNzUwWhcNMjUwNjA2MTYzNzUwWjAYMRYwFAYD VQQDEw02ODM5ZGVkZS00YzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3izYcs3YQnB0ynwG9ugbYyRBjJMJk10Wk2xv0qLK6vqovO7M2JIsi7kaQpE fjUGewh3tZ+IXasARjH2s8CVITEot5NIc29T+ezDaNKFGLr7dyA/QKwz1N2nKsXT 33Upu/kLgugppZGZhq976PtCjO683IshJjDI1uA1i23KXTFfd5roepDAsXG3gY7v qlo+d9Ja52vuns9y/d9HhC3r6eflVw4tdG3QbT4kywsncRfHHUG8lbxs230ZpoLM x3Y1WFUY8QJ2odRuoliYHMP/22wRGW8m4BpL0nKVA6tBNaH4wa/ElCRoqDE8ccn4 Fv+FOPsOQ16dBdvaBEpgIPZ+5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQGc82U 2fxJXLmMJzZ/9lAYQiEnMB8GA1UdIwQYMBaAFMSKrOtN2u48YELmYhateRUHtHxr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY2MS8xNkE2REM2MDgz REExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdqeGdRdVppRnExNUZRZTBm R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJcXM2MDNhN2p4Z1F1WmlGcTE1RlFlMGZHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY2MS8xNkE2REM2MDgzREExMUU3QTAwMzczNkJDNEY5QUUwMi94SXFzNjAzYTdq eGdRdVppRnExNUZRZTBmR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7F1S8TBXYwfcrVK685BaDa7PV57HHulxAUgJU/WO11wHpdf2eDRto Um/fiH6Amo0gUXQR9Ti+xk8ymJj9k4ezY8GcB4Uf7WRTMj3RnYcwXB23Libu+OxE ZyphNc3QwNR/QMfDGf1wLHJzFMvacJLOEuVMZI5eA4jihUlPz1zA79dSlMCuNRQu /+eXwaN6UZGI65ehK383yXCrsQfH/5pROWZsRH81qZyiLh4gyoC0a+TU1I3r6RxQ Vnl/7GLz83N9KL5mCitnIwBiXsrJwgMoyzmpFUbZeGq8IuxC3LeKhzg7G7CSBRrr lYA6RXRWtKLNIl4eXy1WikTNuGnUKDCv -----END CERTIFICATE-----Generated at Sat May 31 17:04:50 2025 by rpki-client