$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json) Hash identifier: xUxlnZt60ZZZ7/AsBRn3+qNE5YI44E9XqWWuz/fUxsg= Subject key identifier: 1D:A7:18:39:AE:8C:4C:25:D0:03:7E:D9:4D:86:60:7D:12:87:EF:23 Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft Manifest number: 0152 Signing time: Sat 31 May 2025 03:49:33 +0000 Manifest this update: Sat 31 May 2025 03:49:32 +0000 Manifest next update: Sat 07 Jun 2025 03:49:32 +0000 Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: 2LF4s9aX2N6ESRikgfg4iX3W6LVfbZpnbf7/PV+il+U=) 2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: 40lvaLr1gKHAad8xOy7yfS2hh56AhlCYkcilzIpf0Sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192BCF, serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Validity Not Before: May 31 03:49:32 2025 GMT Not After : Jun 7 03:49:32 2025 GMT Subject: CN=683a7c4d-4ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:40:22:63:f9:de:b3:b4:92:36:70:a9:72:e6: 28:c5:5d:33:15:67:46:92:5a:42:03:34:fa:02:8d: d9:e8:0d:4d:bc:c2:3e:29:1d:da:60:4d:a1:98:32: 03:9f:b3:5f:34:43:ee:75:b6:e2:c4:89:f3:48:5c: 36:2d:a5:cf:93:5e:7f:44:98:b1:c6:f1:37:f5:15: 37:69:bc:1e:64:27:dd:1f:aa:3f:99:f3:b3:19:a1: 9b:14:0c:e2:66:37:3b:bf:dc:31:c1:b7:1e:6e:d0: 64:53:d0:52:ef:d5:54:cd:6e:80:d4:d2:70:30:15: c5:71:19:8b:da:75:6c:1d:85:db:1b:37:52:1b:1b: f8:23:86:d3:e5:80:98:2d:04:8e:29:ea:8d:3a:b0: 8c:17:77:00:ca:8c:6c:9d:17:f6:46:2d:59:3c:54: 87:82:c5:48:b8:6f:3e:da:03:85:ab:5c:94:2b:12: 5a:bf:29:7e:15:e5:38:75:cf:a3:0d:c5:71:f1:91: dc:6f:bb:48:46:5b:75:2f:0d:e7:86:93:6d:03:23: b2:84:fc:06:71:b9:19:f5:ec:39:d2:47:17:d3:56: d5:02:d0:b5:a6:84:4b:a1:9e:cb:d4:6f:64:ba:12: c9:9e:5a:c7:b1:b5:bf:55:cd:b6:c5:52:78:ac:e3: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A7:18:39:AE:8C:4C:25:D0:03:7E:D9:4D:86:60:7D:12:87:EF:23 X509v3 Authority Key Identifier: keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:ed:26:c2:e5:a0:ad:50:49:7f:1a:c4:99:1e:dc:07:78:0b: 37:44:a4:65:3f:14:78:e9:29:1d:97:7e:d9:03:6c:51:49:40: 1a:27:bb:9d:b2:14:da:eb:74:9b:8c:b8:e2:78:5d:cd:6c:9d: d3:53:b2:00:4d:cb:27:d7:54:55:e2:89:ed:e9:60:23:80:ed: 04:0a:c1:60:ff:fc:ee:d5:fa:aa:73:4d:a4:31:8e:27:6d:77: f4:66:57:0d:25:ab:50:27:f8:b3:02:c1:e1:92:b0:b6:cb:e4: 18:bb:cc:93:08:c5:0b:3d:e0:4a:29:b0:91:d7:31:92:e4:cc: 94:e4:27:26:75:39:fa:59:93:ad:95:8b:9c:b9:be:c6:a0:10: 5c:ae:e3:30:19:f6:19:0e:fd:20:b7:98:20:ec:4a:de:e6:2d: cc:58:10:d3:8c:01:2b:c1:1b:18:26:2a:19:bc:8f:86:32:44: 96:08:cf:d2:67:cf:7e:ad:06:6c:8a:d4:05:6d:3b:14:18:b9: 90:9b:69:a9:07:b5:80:e6:56:f6:3c:71:0f:9b:da:be:d6:d1: ca:9d:7e:1a:10:15:f7:3b:73:12:65:7e:64:c8:2e:d7:02:69: a5:5e:75:ec:e8:98:00:82:42:28:3b:e7:a9:0b:fd:3d:4f:d5: a8:37:6b:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCQ0YxMTAvBgNVBAUTKDVEQTRBRDdBMEQxOTI0NTUxNUU1QTJEODRBMEM2NzQ3 MDBBNDNGQ0QwHhcNMjUwNTMxMDM0OTMyWhcNMjUwNjA3MDM0OTMyWjAYMRYwFAYD VQQDEw02ODNhN2M0ZC00Y2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkAiY/nes7SSNnCpcuYoxV0zFWdGklpCAzT6Ao3Z6A1NvMI+KR3aYE2hmDID n7NfNEPudbbixInzSFw2LaXPk15/RJixxvE39RU3abweZCfdH6o/mfOzGaGbFAzi Zjc7v9wxwbcebtBkU9BS79VUzW6A1NJwMBXFcRmL2nVsHYXbGzdSGxv4I4bT5YCY LQSOKeqNOrCMF3cAyoxsnRf2Ri1ZPFSHgsVIuG8+2gOFq1yUKxJavyl+FeU4dc+j DcVx8ZHcb7tIRlt1Lw3nhpNtAyOyhPwGcbkZ9ew50kcX01bVAtC1poRLoZ7L1G9k uhLJnlrHsbW/Vc22xVJ4rOM6PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2nGDmu jEwl0AN+2U2GYH0Sh+8jMB8GA1UdIwQYMBaAFF2krXoNGSRVFeWi2EoMZ0cApD/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkJDRi8zMDUyQ0NBNjNC NEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpGVVY1YUxZU2d4blJ3Q2tQ ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hhU3RlZzBaSkZVVjVhTFlTZ3huUndDa1A4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkJDRi8zMDUyQ0NBNjNCNEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpG VVY1YUxZU2d4blJ3Q2tQODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQ7SbC5aCtUEl/GsSZHtwHeAs3RKRlPxR46Skdl37ZA2xRSUAaJ7ud shTa63SbjLjieF3NbJ3TU7IATcsn11RV4ont6WAjgO0ECsFg//zu1fqqc02kMY4n bXf0ZlcNJatQJ/izAsHhkrC2y+QYu8yTCMULPeBKKbCR1zGS5MyU5CcmdTn6WZOt lYucub7GoBBcruMwGfYZDv0gt5gg7Ere5i3MWBDTjAErwRsYJioZvI+GMkSWCM/S Z89+rQZsitQFbTsUGLmQm2mpB7WA5lb2PHEPm9q+1tHKnX4aEBX3O3MSZX5kyC7X AmmlXnXs6JgAgkIoO+epC/09T9WoN2vw -----END CERTIFICATE-----Generated at Sat May 31 16:49:11 2025 by rpki-client