$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: 3mKyGle38TJhb5MHs/d7cOu6uu5ELfFm47rBOyXNEf0= Subject key identifier: 52:0A:6E:92:4A:48:32:61:B7:F7:FF:15:B7:7B:EB:EE:43:21:D1:DC Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 0163 Signing time: Sat 31 May 2025 03:41:02 +0000 Manifest this update: Sat 31 May 2025 03:41:01 +0000 Manifest next update: Sat 07 Jun 2025 03:41:01 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: PPGUitQY8PpqVhzMN2A8Y3uZtlccMNV8DgngNxkWewo=) 2: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: 0HLdia6d694d6rIqd0yRB5FR0PZ3pegZtpnN857kKGw=) 3: CA1D2934296011EEB6BB2647C4F9AE02.roa (hash: GgalYjkY1TSQEVBeTqrV+j4tzZy8hdDlsyXixDM61Sw=) 4: 302B59C64EEF11EFB111F530C4F9AE02.roa (hash: scffRYc0fctIE4i3P8gIvlUcNEVTHSWwJA+vVFplTH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: May 31 03:41:01 2025 GMT Not After : Jun 7 03:41:01 2025 GMT Subject: CN=683a7a4d-204a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:de:a2:79:0d:a9:6d:27:30:63:da:0f:e4: 76:3b:e8:2b:88:dd:85:c1:c0:22:89:d3:ae:2c:a6: 4e:fe:f3:1c:23:55:e8:ee:57:8d:31:11:de:17:46: 42:e9:ac:ec:2f:32:07:98:15:27:03:0e:52:5c:c4: 47:ea:ee:5c:ce:bb:a8:bc:d4:75:41:d7:1c:71:3f: f7:7f:99:43:55:95:a1:90:2b:d8:dd:8a:98:f3:9d: 2d:21:9e:2d:1d:df:bf:db:be:bd:16:d1:10:9c:7b: 70:ea:00:74:0a:45:9a:be:e2:ca:dc:30:37:37:0e: 18:87:ce:de:a8:76:f4:97:bb:51:94:9e:e6:51:ae: 71:61:70:cf:7d:07:3b:4a:5c:e6:53:4b:3d:4d:79: 1a:5b:28:d1:79:70:22:7c:de:25:4b:63:75:9a:98: c4:c8:fd:0c:e1:38:20:09:88:4e:9b:5a:13:d8:df: b4:c4:00:3a:0a:32:76:3d:94:a0:3c:ad:dd:06:eb: 4f:d6:0a:ca:57:73:69:64:f0:47:a0:84:bd:ac:71: cc:5a:87:61:fa:57:ad:c1:f0:c4:75:00:e6:b8:bf: c5:2f:21:73:31:5b:16:ce:1d:10:8c:15:e5:3f:28: db:b9:b8:c1:8a:c7:ea:29:c4:9c:e6:01:03:73:35: 45:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0A:6E:92:4A:48:32:61:B7:F7:FF:15:B7:7B:EB:EE:43:21:D1:DC X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:62:04:73:99:6f:ed:6e:02:58:76:ec:c2:7b:03:d5:39:a0: 70:d1:16:78:38:3e:b6:b5:8c:d8:b8:aa:5c:7d:4b:01:3e:5f: 72:c7:d3:df:e8:68:91:82:b8:67:7a:bb:4f:cf:80:30:26:75: 6b:f2:e8:83:d8:e1:76:d0:b9:7f:23:c2:35:30:bd:a1:a0:25: 11:a6:b2:29:15:0c:ae:a4:64:07:43:1f:3d:b0:93:85:cd:94: 01:39:25:fc:1f:65:8f:3e:f0:e6:da:93:b1:54:ef:2e:4a:25: cd:f8:cf:3f:ad:b0:41:12:2e:0a:bd:6b:3a:a0:29:3a:32:89: 8a:8d:76:92:db:40:14:7f:30:eb:93:0b:fd:82:6d:e4:9e:8b: fc:85:0d:b5:62:fd:b4:21:c2:38:90:5c:78:dc:1b:99:74:e2: 4d:cc:3d:e7:2d:b2:5a:82:a2:75:c2:02:8b:b1:20:93:26:58: 0a:7f:f0:7f:21:a9:73:2f:00:08:dd:75:99:43:a6:ea:d1:ac: 0b:cc:f7:d8:d3:0c:ce:05:da:17:95:90:86:6d:50:d4:e7:ea: 7f:1a:ba:13:7c:a8:e1:8e:44:8c:27:40:3d:5c:00:27:65:63: e3:e2:62:a1:c2:99:4a:9c:b1:45:47:6e:39:b9:84:e5:fb:ba: ad:ab:45:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjUwNTMxMDM0MTAxWhcNMjUwNjA3MDM0MTAxWjAYMRYwFAYD VQQDEw02ODNhN2E0ZC0yMDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbXeonkNqW0nMGPaD+R2O+griN2FwcAiidOuLKZO/vMcI1Xo7leNMRHeF0ZC 6azsLzIHmBUnAw5SXMRH6u5czruovNR1QdcccT/3f5lDVZWhkCvY3YqY850tIZ4t Hd+/2769FtEQnHtw6gB0CkWavuLK3DA3Nw4Yh87eqHb0l7tRlJ7mUa5xYXDPfQc7 SlzmU0s9TXkaWyjReXAifN4lS2N1mpjEyP0M4TggCYhOm1oT2N+0xAA6CjJ2PZSg PK3dButP1grKV3NpZPBHoIS9rHHMWodh+letwfDEdQDmuL/FLyFzMVsWzh0QjBXl PyjbubjBisfqKcSc5gEDczVFZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIKbpJK SDJht/f/Fbd76+5DIdHcMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAYgRzmW/tbgJYduzCewPVOaBw0RZ4OD62tYzYuKpcfUsBPl9yx9Pf 6GiRgrhnertPz4AwJnVr8uiD2OF20Ll/I8I1ML2hoCURprIpFQyupGQHQx89sJOF zZQBOSX8H2WPPvDm2pOxVO8uSiXN+M8/rbBBEi4KvWs6oCk6MomKjXaS20AUfzDr kwv9gm3knov8hQ21Yv20IcI4kFx43BuZdOJNzD3nLbJagqJ1wgKLsSCTJlgKf/B/ IalzLwAI3XWZQ6bq0awLzPfY0wzOBdoXlZCGbVDU5+p/GroTfKjhjkSMJ0A9XAAn ZWPj4mKhwplKnLFFR245uYTl+7qtq0WB -----END CERTIFICATE-----Generated at Sat May 31 17:24:51 2025 by rpki-client