$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: EEMZueGQ9TFWfjuUf/0OXx2xRrCujO4qFFHCNM9JIrw= Subject key identifier: E9:7F:ED:16:D8:80:4E:BD:B7:E7:90:71:AE:87:28:F8:AF:EF:DF:73 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0CFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0CD5 Signing time: Fri 30 May 2025 18:21:31 +0000 Manifest this update: Fri 30 May 2025 18:21:31 +0000 Manifest next update: Fri 06 Jun 2025 18:21:30 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: Kg/TvSwtJ2Nd04jgL7iriNHPf5fCijFF8pYvSwRLCek=) 2: 6EA46446646511EFA9435879C4F9AE02.roa (hash: wKDEdStmrZZfi1N+sozcMYpUpj9M6UZTKjL7qa1uJ/0=) 3: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: gaKPScXkAxsuY8VAZ/bdwS1+gAnXATdqGjlvtSNl84I=) 4: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: 9VMgA4YRxMIjWK/lK97cgRReFAG7X/1dXoRMnmEvJtU=) 5: 49ADA7183C6111F0BB3B1A85C4F9AE02.roa (hash: Xs7PI8yOiwfltHePVx4QJDu9U0Lph/VszEHjm+alpiE=) 6: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: OIcrwBZfO0r9AZzqec0EZieuFLydO0IeQ37B1ozdZjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3325 (0xcfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: May 30 18:21:31 2025 GMT Not After : Jun 6 18:21:30 2025 GMT Subject: CN=6839f72b-b01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cc:3f:3f:b3:42:32:24:f5:9a:a4:41:41:3f: 3f:a1:3b:fe:5d:84:bd:5f:fe:0b:8b:9b:a5:d3:c7: 95:2b:b7:16:4f:01:6f:d2:1c:88:18:87:a2:58:37: 27:58:b9:27:58:6d:36:c7:05:46:02:e8:09:8d:99: 9d:bd:9f:a3:9a:ef:02:fd:71:64:4b:72:bd:6f:88: f0:e8:bb:92:28:45:94:d6:a9:1e:1e:a1:58:4c:36: 82:f2:a8:68:3a:a2:53:9d:b0:e1:5b:91:3b:9c:83: 28:17:0d:4f:88:87:74:e6:43:50:37:64:a8:f3:b1: 0f:05:be:e8:7c:df:01:76:63:40:10:83:82:1f:6a: 31:84:02:59:34:6b:73:7b:a9:bb:39:c4:a1:09:72: eb:02:bd:84:99:be:6e:0b:55:b3:94:f2:a0:02:2b: 7f:7b:00:4a:d2:5e:5c:b1:e1:19:3a:40:c6:3d:a9: e1:0a:7f:27:87:af:34:8d:3b:94:74:5a:a5:94:a8: d7:b8:c9:da:b2:b2:54:6f:05:a8:fa:19:b8:d4:47: 81:e8:85:fa:49:01:00:89:49:44:18:69:ac:66:ea: 3c:03:9d:21:01:60:7c:42:0c:e6:a3:5d:58:0b:15: 32:8d:75:30:26:4c:36:fc:9d:f9:a2:5e:71:4d:6d: 59:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7F:ED:16:D8:80:4E:BD:B7:E7:90:71:AE:87:28:F8:AF:EF:DF:73 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:30:78:19:46:a8:32:ef:2f:5f:d4:2f:9b:4f:f2:72:d0:55: df:ae:12:82:ae:d0:18:96:b2:62:a9:90:ee:6f:5e:09:ae:1d: d1:62:ac:b5:33:e8:26:6f:77:ee:dd:77:36:b7:ec:17:ab:43: a2:75:a8:0e:94:c7:56:07:f5:d5:13:e1:32:8d:b2:ae:28:cd: e7:2c:78:ed:0e:82:e8:0e:ee:06:be:f4:8f:8f:80:b6:75:4a: 09:4c:1c:3a:1d:df:51:15:91:00:e5:5e:e2:1f:6c:ef:db:b6: a1:6a:2c:36:d4:ab:7c:3b:50:2f:59:c8:cb:4d:7f:69:a5:56: 20:6d:c4:c2:b6:27:e2:02:52:1d:62:77:fc:14:0e:9d:b9:59: e6:a2:e6:1e:b1:06:33:ca:15:dd:4c:fa:c5:07:e1:31:27:04: 53:ee:f9:2f:2d:a1:41:77:a6:09:49:54:12:a0:72:9b:ad:fa: 5c:fb:6a:c1:f3:23:5d:b5:ef:97:e9:9b:37:d8:cd:54:d8:d5: 0e:48:4c:3d:4b:41:e7:2c:82:5c:23:f4:93:7a:a4:c3:8e:a6: 47:c6:cd:9a:0a:9d:6b:5c:68:65:31:b0:89:68:c4:eb:e1:ff: 71:56:ef:08:ff:59:44:d4:11:89:b8:0b:5e:26:77:55:5e:03: f6:5b:1c:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjUwNTMwMTgyMTMxWhcNMjUwNjA2MTgyMTMwWjAYMRYwFAYD VQQDEw02ODM5ZjcyYi1iMDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cw/P7NCMiT1mqRBQT8/oTv+XYS9X/4Li5ul08eVK7cWTwFv0hyIGIeiWDcn WLknWG02xwVGAugJjZmdvZ+jmu8C/XFkS3K9b4jw6LuSKEWU1qkeHqFYTDaC8qho OqJTnbDhW5E7nIMoFw1PiId05kNQN2So87EPBb7ofN8BdmNAEIOCH2oxhAJZNGtz e6m7OcShCXLrAr2Emb5uC1WzlPKgAit/ewBK0l5cseEZOkDGPanhCn8nh680jTuU dFqllKjXuMnasrJUbwWo+hm41EeB6IX6SQEAiUlEGGmsZuo8A50hAWB8Qgzmo11Y CxUyjXUwJkw2/J35ol5xTW1ZWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOl/7RbY gE69t+eQca6HKPiv799zMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkMHgZRqgy7y9f1C+bT/Jy0FXfrhKCrtAYlrJiqZDub14Jrh3RYqy1 M+gmb3fu3Xc2t+wXq0OidagOlMdWB/XVE+EyjbKuKM3nLHjtDoLoDu4GvvSPj4C2 dUoJTBw6Hd9RFZEA5V7iH2zv27ahaiw21Kt8O1AvWcjLTX9ppVYgbcTCtifiAlId Ynf8FA6duVnmouYesQYzyhXdTPrFB+ExJwRT7vkvLaFBd6YJSVQSoHKbrfpc+2rB 8yNdte+X6Zs32M1U2NUOSEw9S0HnLIJcI/STeqTDjqZHxs2aCp1rXGhlMbCJaMTr 4f9xVu8I/1lE1BGJuAteJndVXgP2WxyL -----END CERTIFICATE-----Generated at Sat May 31 17:42:36 2025 by rpki-client