$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json) Hash identifier: S0KoANTSjhc8r122UEK2to1sglNHrqsHEj/XHyG/uHQ= Subject key identifier: 5C:03:24:DE:E8:5D:CE:E9:AA:66:BF:CF:54:2F:B4:B7:77:B2:10:8D Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 30B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft Manifest number: 3047 Signing time: Wed 04 Jun 2025 15:29:12 +0000 Manifest this update: Wed 04 Jun 2025 15:29:11 +0000 Manifest next update: Wed 11 Jun 2025 15:29:11 +0000 Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: LBobG40drdh81j/nXw0oqEzO8UDdFHJeDuE5EI/hQd8=) 2: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: VA85W2DwFcltrLQso3iWrGCK1p8MpteiBw4nv3k0XAA=) 3: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: wLLmVC0SWl0ZV8inkOYwu+rXfwtuFkyqT9a9NHg4fsQ=) 4: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: u9Tgdh2mj51OfGhJuvlQ1Gy4m51DMyrbUiBF/Y8Vkj0=) 5: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: 7Dey0JGvmlqmWqhli9F4C8bTHZAZtymVOQxhxzYVfX4=) 6: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: aQNQHDH++NuHPMuhQ++m65fQNUDwylkPh47sY3kbEIs=) 7: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: yOrqaE9NockE6FGEvsKt1/X3bfnUWyv76Yj9yl2GGVQ=) 8: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: e7Dy/yrmu0hcKMxT0huel1vNg0CC7+GJucCX8fymY2o=) 9: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: AE5EIx4+Tp7/f50+D6PpmR05HTKi7X3OlU7mCpH4y7o=) 10: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: S5yp4tMLnbSyML+bu0OdmFYzHfjyLDv16/Xr3BO1cSA=) 11: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: egr/0pi0LBVzAfSriSf0oLVb0kHzcxRy+vyO59CHJ/Y=) 12: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: hoEdWJgd+iSbkEJxwwEB2OfxtCPHdbL8GJWAjTC4NaI=) 13: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: 4+IsQGE9DpxrqXHaGDjhfyFcaRugPanxx+iKmCYBXD4=) 14: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: Ak9ulSCBepvFHHWrtvRX78jK7UjLDTIXpbZCAO4ELzg=) 15: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: U9tQePLnZPrszhMNvs/YV6XDVfsxC3+GK3UJVlQgINc=) 16: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: ADGrwVjYVax00+B1Ntoo1NH+4zxjH9qwLNY0BDM8s3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 15:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12468 (0x30b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Jun 4 15:29:11 2025 GMT Not After : Jun 11 15:29:11 2025 GMT Subject: CN=68406647-1259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:03:c8:49:f1:34:0d:92:5b:a6:2c:7c:06: 3c:31:fb:9f:9f:af:7d:6a:59:82:b5:c3:f1:87:cb: d2:7c:f9:b9:a0:9b:24:eb:3c:09:ac:ab:1a:40:ef: e2:2f:16:5c:00:b8:63:a6:0f:e4:c2:35:5e:d2:90: 43:24:9a:b1:17:7f:45:ab:c8:2f:e0:0a:53:e8:5b: 5d:bf:8a:17:6e:3e:c6:2c:41:8f:ae:03:57:f6:79: 36:4c:03:3b:3c:43:6d:a8:76:9d:6e:0e:1b:24:65: 2b:b2:c7:11:3f:1f:94:72:52:08:ec:87:19:7e:7b: 5d:d9:a7:fe:15:89:45:24:cb:84:8c:de:70:bf:26: d2:81:cc:77:a4:a5:97:ce:f3:ee:fd:fa:a5:b5:21: 63:4d:b5:56:a7:9e:7c:23:0b:e3:4a:ec:4f:cd:ec: 82:db:c0:65:70:95:79:d2:82:dc:4b:d7:8a:1c:80: e0:a4:04:ef:5a:9e:e6:36:1c:05:33:bd:29:e5:cc: b3:a3:56:61:d2:37:3a:e7:56:ec:ed:cb:11:90:d5: cc:74:c2:ea:0b:40:f7:65:d0:22:57:39:d5:fc:2e: 97:7a:42:89:42:ed:a6:a5:db:1f:37:1f:04:21:3c: 23:a9:bb:b3:8e:37:b7:28:6d:33:fd:86:09:04:7e: 02:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:03:24:DE:E8:5D:CE:E9:AA:66:BF:CF:54:2F:B4:B7:77:B2:10:8D X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:0e:81:78:f6:c3:7c:5f:8b:ad:9e:4b:2b:af:29:4e:d8:0b: fd:82:de:b6:4e:1d:ec:b0:fc:85:ed:0b:3e:c4:bc:40:d8:10: 56:44:73:c3:70:ab:29:0b:73:e5:ac:2a:be:f7:3f:05:ea:3c: fe:d6:67:f0:68:01:65:29:d5:4b:15:52:07:cd:1f:55:8e:71: 0c:42:d4:b8:d7:d2:09:ae:be:4d:ed:09:5c:f4:82:cb:75:32: 50:52:e1:a8:fa:33:b3:ef:a7:4f:92:b6:9e:13:d8:7b:e8:b2: 82:92:56:d7:36:fa:64:72:6a:bb:27:77:b4:de:4f:67:2a:65: f7:9e:07:d8:af:df:60:78:da:ec:60:c9:d2:67:73:76:e0:fb: a3:23:18:1a:02:b5:81:b4:82:89:c1:ef:23:a9:b1:c5:bf:ad: f7:b7:33:59:23:91:89:ed:af:61:21:b1:f2:25:ba:16:56:40: a5:2c:66:56:dd:ac:43:4c:f9:17:c6:37:0f:75:14:2c:f4:78: 28:65:45:be:dd:3d:fb:c1:70:ae:ca:72:ff:60:4d:ac:63:d0: be:f8:1e:1e:e0:6c:38:54:7d:cc:19:cb:92:05:1e:e0:7f:0e: d2:34:ae:e7:7d:b1:33:30:71:11:fa:db:0e:b6:36:c4:a1:cd: 9b:94:25:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjUwNjA0MTUyOTExWhcNMjUwNjExMTUyOTExWjAYMRYwFAYD VQQDEw02ODQwNjY0Ny0xMjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjIDyEnxNA2SW6YsfAY8Mfufn699almCtcPxh8vSfPm5oJsk6zwJrKsaQO/i LxZcALhjpg/kwjVe0pBDJJqxF39Fq8gv4ApT6Ftdv4oXbj7GLEGPrgNX9nk2TAM7 PENtqHadbg4bJGUrsscRPx+UclII7IcZfntd2af+FYlFJMuEjN5wvybSgcx3pKWX zvPu/fqltSFjTbVWp558IwvjSuxPzeyC28BlcJV50oLcS9eKHIDgpATvWp7mNhwF M70p5cyzo1Zh0jc651bs7csRkNXMdMLqC0D3ZdAiVznV/C6XekKJQu2mpdsfNx8E ITwjqbuzjje3KG0z/YYJBH4CawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwDJN7o Xc7pqma/z1QvtLd3shCNMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTVDOC85Q0QzRThGNkZGNTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAw WjA5ZlhyX0wtakc3bGs5a3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3DoF49sN8X4utnksrrylO2Av9gt62Th3ssPyF7Qs+xLxA2BBWRHPD cKspC3PlrCq+9z8F6jz+1mfwaAFlKdVLFVIHzR9VjnEMQtS419IJrr5N7Qlc9ILL dTJQUuGo+jOz76dPkraeE9h76LKCklbXNvpkcmq7J3e03k9nKmX3ngfYr99geNrs YMnSZ3N24PujIxgaArWBtIKJwe8jqbHFv633tzNZI5GJ7a9hIbHyJboWVkClLGZW 3axDTPkXxjcPdRQs9HgoZUW+3T37wXCuynL/YE2sY9C++B4e4Gw4VH3MGcuSBR7g fw7SNK7nfbEzMHER+tsOtjbEoc2blCXH -----END CERTIFICATE-----Generated at Thu Jun 5 19:56:31 2025 by rpki-client