$ rpki-client -vvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft File: XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft (raw, json) Hash identifier: eBrELWiKgWqed9dkw3dMU8rzdezwKBpaLyRuxNPwmgw= Subject key identifier: 92:A5:6B:16:F7:13:48:AB:13:BE:22:E3:D1:9B:6F:F7:0F:5C:E2:4E Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4 Certificate issuer: /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft Manifest number: 017D Signing time: Sat 31 May 2025 03:23:49 +0000 Manifest this update: Sat 31 May 2025 03:23:48 +0000 Manifest next update: Sat 07 Jun 2025 03:23:48 +0000 Files and hashes: 1: XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl (hash: TkKUjsMGqW6MyL9wm00hhdZKl03VE/C0Mhmj9/TtVwY=) 2: 80F75824FAAD11EDB0C98683C4F9AE02.roa (hash: SO9SbWUjXyJ9Yb5w7Q+6mTlLwT6ktJsJ2PGUdf4nf50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923A9, serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4 Validity Not Before: May 31 03:23:48 2025 GMT Not After : Jun 7 03:23:48 2025 GMT Subject: CN=683a7645-d442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:57:0d:56:12:3a:34:5f:f0:13:87:70:86: f0:8c:2c:9b:b9:14:5c:7d:23:03:e0:06:6c:a7:48: d8:57:ae:25:27:8e:92:51:98:94:56:12:fb:74:57: ea:61:a5:33:2a:d5:23:b3:29:ec:85:a0:4f:e7:05: eb:83:7b:0b:a5:bf:c6:5d:dd:34:88:5d:41:8b:1f: a0:84:b1:0b:64:91:51:95:cd:bd:68:b6:c2:b3:be: 86:64:fc:f5:9b:e0:04:2f:04:14:1e:bc:bd:c5:be: ad:bd:e5:75:fc:78:67:0f:3a:65:3b:98:41:eb:1f: 6d:af:b3:0c:00:77:b0:25:1a:7b:4f:7a:ce:08:c1: 49:7c:ad:e9:ec:48:37:8f:b2:0d:d0:d5:0e:22:46: cd:0b:e0:b8:db:ec:8d:ee:4f:91:04:8a:e2:b4:b0: c2:cf:1c:4b:af:18:ca:f9:4d:ea:c1:12:b8:02:2c: 16:c8:cc:cc:19:be:6e:aa:52:0d:0c:62:ff:ce:a4: 1d:1a:1b:d8:3d:a2:a6:a0:8d:f9:3a:69:79:57:51: 36:6d:4d:3f:15:65:57:da:31:13:a6:5f:20:9c:01: 6a:a0:ef:e2:d0:5c:f0:3f:71:85:f1:8e:7e:27:e9: 42:38:c9:cb:2b:9a:ae:86:e6:3c:c6:62:56:93:64: 66:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A5:6B:16:F7:13:48:AB:13:BE:22:E3:D1:9B:6F:F7:0F:5C:E2:4E X509v3 Authority Key Identifier: keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:78:76:32:2f:26:dd:f1:1b:46:64:74:68:d9:5e:2d:15:19: ba:c1:14:f7:f6:ed:40:88:31:65:55:ca:b2:85:8f:c0:f0:f5: a8:48:b9:04:a4:da:d9:98:b2:99:78:f0:e3:53:e1:78:1a:30: 85:fa:ae:f2:43:fd:65:17:8d:07:ba:5a:9c:2b:a8:e2:27:9b: b0:91:46:1e:e1:dd:a5:45:55:f3:2d:d8:47:3a:b3:45:a3:cc: 72:8e:7e:ed:9e:5c:d5:38:ca:5c:9b:88:c8:b1:63:83:95:8e: b5:6a:10:ab:cb:b6:8b:64:71:76:ed:21:ec:8d:60:fb:27:cc: 4b:f6:c5:01:fb:54:48:2a:bb:4d:96:63:3a:9e:d1:30:78:5f: 19:92:74:e3:3c:da:1d:cd:da:5e:2c:89:39:c3:2b:e8:15:ac: 11:14:66:a2:7b:97:d0:a6:03:23:af:e9:c2:d3:ce:77:82:11: 4b:ef:bd:3c:c2:9a:3d:51:e8:d9:1c:05:bf:c0:2b:1d:ca:ff: 91:f6:ec:10:f3:85:35:84:86:f5:21:17:dc:69:20:c6:6e:3c: 73:bd:86:19:6b:3f:94:75:d8:0d:dd:4a:8e:ca:ed:cc:c9:ff: ba:24:5f:f8:18:b9:a6:6b:4a:81:5f:4d:97:c3:1b:2a:75:01: b2:2f:38:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzQTkxMTAvBgNVBAUTKDVDMTdBRjJFMEFBRjQ5MENFQUE4NEUyQUFBNzE0ODNE MDM5NUYxRTQwHhcNMjUwNTMxMDMyMzQ4WhcNMjUwNjA3MDMyMzQ4WjAYMRYwFAYD VQQDEw02ODNhNzY0NS1kNDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2r5XDVYSOjRf8BOHcIbwjCybuRRcfSMD4AZsp0jYV64lJ46SUZiUVhL7dFfq YaUzKtUjsynshaBP5wXrg3sLpb/GXd00iF1Bix+ghLELZJFRlc29aLbCs76GZPz1 m+AELwQUHry9xb6tveV1/HhnDzplO5hB6x9tr7MMAHewJRp7T3rOCMFJfK3p7Eg3 j7IN0NUOIkbNC+C42+yN7k+RBIritLDCzxxLrxjK+U3qwRK4AiwWyMzMGb5uqlIN DGL/zqQdGhvYPaKmoI35Oml5V1E2bU0/FWVX2jETpl8gnAFqoO/i0FzwP3GF8Y5+ J+lCOMnLK5quhuY8xmJWk2Rm3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKlaxb3 E0irE74i49Gbb/cPXOJOMB8GA1UdIwQYMBaAFFwXry4Kr0kM6qhOKqpxSD0DlfHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNBOS9BNjM4NzY4NEZB QTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNRenFxRTRxcW5GSVBRT1Y4 ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCZXZMZ3F2U1F6cXFFNHFxbkZJUFFPVjhlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNBOS9BNjM4NzY4NEZBQTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNR enFxRTRxcW5GSVBRT1Y4ZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAveHYyLybd8RtGZHRo2V4tFRm6wRT39u1AiDFlVcqyhY/A8PWoSLkE pNrZmLKZePDjU+F4GjCF+q7yQ/1lF40HulqcK6jiJ5uwkUYe4d2lRVXzLdhHOrNF o8xyjn7tnlzVOMpcm4jIsWODlY61ahCry7aLZHF27SHsjWD7J8xL9sUB+1RIKrtN lmM6ntEweF8ZknTjPNodzdpeLIk5wyvoFawRFGaie5fQpgMjr+nC0853ghFL7708 wpo9UejZHAW/wCsdyv+R9uwQ84U1hIb1IRfcaSDGbjxzvYYZaz+UddgN3UqOyu3M yf+6JF/4GLmma0qBX02XwxsqdQGyLzh7 -----END CERTIFICATE-----Generated at Sat May 31 17:49:43 2025 by rpki-client