$ rpki-client -vvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft File: -XyNrMJ-n8zTOuuFNQsmpIFfELc.mft (raw, json) Hash identifier: j7s680mKNpawP6kzaVUxPSXqnsN6djo3z5FmfHkfRLw= Subject key identifier: 74:38:C0:0A:6F:4E:9D:84:CF:73:FE:A0:51:BF:3D:99:9B:45:C4:14 Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Certificate serial: 2356 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft Manifest number: 233C Signing time: Fri 30 May 2025 16:01:22 +0000 Manifest this update: Fri 30 May 2025 16:01:21 +0000 Manifest next update: Fri 06 Jun 2025 16:01:21 +0000 Files and hashes: 1: -XyNrMJ-n8zTOuuFNQsmpIFfELc.crl (hash: sMDRCfe44Ywv/ZeEzC6bcJFM2CmqKa2EShDpj3FjS6o=) 2: A768E6B6FB0811ED860A5143C4F9AE02.roa (hash: SVFtlSzgsbl94LKJE/MqOpvXoyEaSOVfShQjoppkD5M=) 3: C73BE8A654F311E7AC64ED3AC4F9AE02.roa (hash: SmF6p3k95KsM+SMEI2F1sl2qA3ioWO3N9renwiZgrBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9046 (0x2356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7 Validity Not Before: May 30 16:01:21 2025 GMT Not After : Jun 6 16:01:21 2025 GMT Subject: CN=6839d652-2a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:3d:a4:50:05:a4:31:f6:98:63:ab:2c:b2: 68:35:da:7d:33:b4:2c:43:0d:c5:da:f6:30:79:f4: 81:b2:07:d4:1f:7b:58:b5:61:11:6a:26:f3:d5:9a: cd:c5:90:7e:69:ee:21:7c:80:12:ed:f0:df:32:ef: 4a:d0:1f:00:23:65:00:a2:78:f8:1b:6b:9b:b6:54: eb:f1:ff:8f:0c:05:58:2c:f8:47:d3:b8:e0:30:23: 76:2f:cd:73:5f:ca:7a:36:6e:ef:84:18:4c:73:ec: ff:32:79:7e:fd:f6:6a:6e:1a:23:32:a6:a5:08:b3: 03:0d:d2:6e:a0:5b:c4:6f:c6:e8:bb:7f:7c:80:e4: cd:db:73:e8:6f:72:0b:9e:ce:0f:5c:12:1a:bb:f4: af:81:98:67:a7:c7:02:15:b8:bf:86:e9:0a:79:b7: 24:66:e1:b1:93:0e:32:ef:20:12:1a:04:6d:e7:b5: fe:17:5a:f8:03:8a:57:b1:b4:75:15:ec:04:11:c0: 94:51:66:e4:bc:1a:61:26:73:04:5a:da:1d:b8:51: 27:f2:e9:d9:dc:f1:23:39:ce:f1:de:d6:32:86:a1: 52:de:77:9a:34:cc:81:7d:d0:37:3a:d2:5f:9f:96: 78:6d:5d:b6:a3:54:37:6f:76:ab:78:63:fa:d9:7c: 38:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:38:C0:0A:6F:4E:9D:84:CF:73:FE:A0:51:BF:3D:99:9B:45:C4:14 X509v3 Authority Key Identifier: keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:af:40:ec:4f:b2:f1:0b:88:6e:34:15:66:46:b7:a1:54:8a: 47:39:9e:72:08:ea:c6:f8:3c:42:90:30:10:4e:5e:5a:94:d1: e4:ed:51:56:79:a7:66:b8:40:3b:e4:f6:e3:24:15:7a:6f:e8: 21:ae:b7:1b:83:94:ba:14:a6:81:de:7b:95:07:77:75:e4:f1: bd:34:be:eb:94:6b:af:21:46:db:05:d5:f9:cb:83:ca:38:33: a1:8e:e7:97:de:42:20:7c:fa:8d:34:90:a2:92:c3:4d:aa:91: 8b:92:24:10:2f:2d:c6:1b:c2:94:68:e8:cb:0b:2a:a2:72:22: 98:5b:33:83:44:fb:09:c3:fa:6c:ef:69:f4:1e:1c:e0:b9:10: 1f:f6:c3:ab:34:ff:7b:e4:77:68:19:5f:ed:f6:2c:c9:04:e0: 5f:bd:ae:ae:2d:f1:6e:a6:0a:2c:26:cc:66:16:82:4a:bf:43: 91:80:d3:62:a2:ff:05:26:f9:5e:ae:06:98:36:ca:fc:d3:af: 5e:13:bf:f2:39:20:3b:f4:e3:6d:8b:66:4a:3a:5d:2b:11:ec: 57:be:de:83:f6:7d:07:fe:3e:aa:91:14:74:9f:e1:5e:c5:bb: 01:df:5a:59:7b:4c:49:65:8e:0e:f5:1b:40:00:b0:98:20:68: 12:08:33:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0 ODE1RjEwQjcwHhcNMjUwNTMwMTYwMTIxWhcNMjUwNjA2MTYwMTIxWjAYMRYwFAYD VQQDEw02ODM5ZDY1Mi0yYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzg89pFAFpDH2mGOrLLJoNdp9M7QsQw3F2vYwefSBsgfUH3tYtWERaibz1ZrN xZB+ae4hfIAS7fDfMu9K0B8AI2UAonj4G2ubtlTr8f+PDAVYLPhH07jgMCN2L81z X8p6Nm7vhBhMc+z/Mnl+/fZqbhojMqalCLMDDdJuoFvEb8bou398gOTN23Pob3IL ns4PXBIau/SvgZhnp8cCFbi/hukKebckZuGxkw4y7yASGgRt57X+F1r4A4pXsbR1 FewEEcCUUWbkvBphJnMEWtoduFEn8unZ3PEjOc7x3tYyhqFS3neaNMyBfdA3OtJf n5Z4bV22o1Q3b3areGP62Xw4zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQ4wApv Tp2Ez3P+oFG/PZmbRcQUMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3 QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkJEOC9DNTgzRDIzMjg3QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44 elRPdXVGTlFzbXBJRmZFTGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBr0DsT7LxC4huNBVmRrehVIpHOZ5yCOrG+DxCkDAQTl5alNHk7VFW eadmuEA75PbjJBV6b+ghrrcbg5S6FKaB3nuVB3d15PG9NL7rlGuvIUbbBdX5y4PK ODOhjueX3kIgfPqNNJCiksNNqpGLkiQQLy3GG8KUaOjLCyqiciKYWzODRPsJw/ps 72n0HhzguRAf9sOrNP975HdoGV/t9izJBOBfva6uLfFupgosJsxmFoJKv0ORgNNi ov8FJvlergaYNsr8069eE7/yOSA79ONti2ZKOl0rEexXvt6D9n0H/j6qkRR0n+Fe xbsB31pZe0xJZY4O9RtAALCYIGgSCDPx -----END CERTIFICATE-----Generated at Sat May 31 15:45:20 2025 by rpki-client