$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft File: _XxIEch8Vm71Xtqw50P_BmufqGY.mft (raw, json) Hash identifier: FCmYOSmH/LTfBd9QjCg1MQXZJ3AQfI/H4aBUj/sldBg= Subject key identifier: 6B:05:C1:F4:6D:E7:DF:29:41:C5:E4:51:29:56:F8:CC:1A:FC:E6:89 Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Certificate serial: 168E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft Manifest number: 1682 Signing time: Sat 10 May 2025 16:35:47 +0000 Manifest this update: Sat 10 May 2025 16:35:47 +0000 Manifest next update: Sat 17 May 2025 16:35:47 +0000 Files and hashes: 1: _XxIEch8Vm71Xtqw50P_BmufqGY.crl (hash: 9FnTU1RNu+mShsc0PG8Lidr+gjRzbMQa+KkZkyfmPbs=) 2: 01B2AC1E064111E8A62EF586C4F9AE02.roa (hash: rgg5mb9NaJrKC43B9kmiIIRXNUmpRJVP8cl+RRNBMZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5774 (0x168e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91935EA, serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Validity Not Before: May 10 16:35:47 2025 GMT Not After : May 17 16:35:47 2025 GMT Subject: CN=681f8063-e78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ab:85:17:88:52:57:45:30:21:8d:70:1f:6d: 7c:88:7f:7e:62:5a:6e:e3:68:bd:ec:fa:70:8f:01: 27:8f:99:0d:3d:18:09:25:e5:c5:ee:b1:66:2e:c3: 3a:15:cb:34:65:bc:ee:05:92:15:ed:ba:ba:2f:be: bb:c8:a9:24:35:33:10:cd:14:e5:db:f1:9f:e6:50: fc:81:56:83:25:d8:b7:f0:26:f7:8b:95:1b:5f:5e: df:b7:c0:fb:08:d3:03:9e:07:ed:06:e2:4c:c1:df: 4f:a1:35:0a:01:9b:44:11:a6:96:b9:9a:11:13:5c: ed:b6:b8:c3:02:4e:bb:b2:48:21:9d:db:0d:30:67: 64:35:e3:48:c9:2e:5a:6e:2a:88:7a:ff:cc:3d:16: 58:20:48:b2:cb:12:fe:56:98:00:eb:c7:88:68:3a: 29:fd:2b:88:ce:9b:d0:79:54:bb:f2:3c:91:cf:a2: 44:43:11:21:4c:15:91:7e:66:37:12:a5:92:8a:41: 19:7a:d3:79:b3:61:20:b6:02:ef:84:ab:5e:a2:61: 81:2f:b0:ba:f1:4a:1d:64:bc:8f:9c:8b:79:01:09: 18:4f:c6:e9:39:8b:93:f9:c8:42:19:8e:5f:d2:b1: 33:c5:b2:bf:74:61:d8:47:91:91:cb:f9:eb:60:4f: 2f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:05:C1:F4:6D:E7:DF:29:41:C5:E4:51:29:56:F8:CC:1A:FC:E6:89 X509v3 Authority Key Identifier: keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:6c:ca:1d:1a:18:2e:f5:fc:fd:5a:f2:51:b1:52:df:23:21: bb:00:bf:63:8f:2e:f8:4c:e5:57:14:7f:89:f3:b1:96:f5:77: 99:a4:2e:68:8f:c8:a4:84:fa:cd:ab:e2:77:f4:58:79:aa:4e: fb:8f:ba:7b:25:0d:a5:77:bd:52:66:d4:0b:f5:a6:a4:44:16: 59:9e:ff:d5:72:1c:56:f0:be:88:8c:83:a4:de:ed:c9:71:a8: cd:26:b1:ed:19:e7:5f:53:ba:5c:b6:ee:f4:ad:3a:5f:87:b7: 82:10:0c:99:b5:a3:1a:2a:c9:c8:65:dd:05:f6:92:b8:a3:bf: 19:2b:4d:b6:5a:9c:01:6e:2e:03:81:46:c2:d4:40:6a:26:d4: 56:c6:9b:ef:18:57:cf:45:b0:a3:82:b1:ae:2c:87:ee:f3:64: 58:f7:27:fe:6d:54:e1:75:fc:b0:16:6f:ff:13:b8:bd:79:d3: 0e:fc:25:fc:65:42:67:b6:12:ee:89:7a:60:b3:1b:85:99:c2: d1:2d:1c:34:5a:d8:fc:7d:ad:49:4d:df:80:eb:6e:19:d4:f4: 6a:8a:c7:69:a9:76:e7:84:53:12:ac:16:73:ee:dd:cb:5f:1c: 40:5d:75:10:4f:d7:a3:14:47:62:9b:a7:ad:6c:71:99:54:e1: 9e:4f:63:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM1RUExMTAvBgNVBAUTKEZEN0M0ODExQzg3QzU2NkVGNTVFREFCMEU3NDNGRjA2 NkI5RkE4NjYwHhcNMjUwNTEwMTYzNTQ3WhcNMjUwNTE3MTYzNTQ3WjAYMRYwFAYD VQQDEw02ODFmODA2My1lNzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0auFF4hSV0UwIY1wH218iH9+Ylpu42i97PpwjwEnj5kNPRgJJeXF7rFmLsM6 Fcs0ZbzuBZIV7bq6L767yKkkNTMQzRTl2/Gf5lD8gVaDJdi38Cb3i5UbX17ft8D7 CNMDngftBuJMwd9PoTUKAZtEEaaWuZoRE1zttrjDAk67skghndsNMGdkNeNIyS5a biqIev/MPRZYIEiyyxL+VpgA68eIaDop/SuIzpvQeVS78jyRz6JEQxEhTBWRfmY3 EqWSikEZetN5s2EgtgLvhKteomGBL7C68UodZLyPnIt5AQkYT8bpOYuT+chCGY5f 0rEzxbK/dGHYR5GRy/nrYE8vLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsFwfRt 598pQcXkUSlW+Mwa/OaJMB8GA1UdIwQYMBaAFP18SBHIfFZu9V7asOdD/wZrn6hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzVFQS8xOURENDY3MDAw QUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZtNzFYdHF3NTBQX0JtdWZx R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YeElFY2g4Vm03MVh0cXc1MFBfQm11ZnFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzVFQS8xOURENDY3MDAwQUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZt NzFYdHF3NTBQX0JtdWZxR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBubModGhgu9fz9WvJRsVLfIyG7AL9jjy74TOVXFH+J87GW9XeZpC5o j8ikhPrNq+J39Fh5qk77j7p7JQ2ld71SZtQL9aakRBZZnv/VchxW8L6IjIOk3u3J cajNJrHtGedfU7pctu70rTpfh7eCEAyZtaMaKsnIZd0F9pK4o78ZK022WpwBbi4D gUbC1EBqJtRWxpvvGFfPRbCjgrGuLIfu82RY9yf+bVThdfywFm//E7i9edMO/CX8 ZUJnthLuiXpgsxuFmcLRLRw0Wtj8fa1JTd+A624Z1PRqisdpqXbnhFMSrBZz7t3L XxxAXXUQT9ejFEdim6etbHGZVOGeT2Na -----END CERTIFICATE-----Generated at Mon May 12 08:50:20 2025 by rpki-client