$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: Yux8EcT3LzYs8wQxo0A3Lk6RrYbDfBUfqc/8gKM7MF8= Subject key identifier: EB:43:C2:4C:8F:2C:88:42:5E:B9:B2:0C:1D:27:85:50:05:39:00:65 Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0C6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0C47 Signing time: Fri 30 May 2025 18:45:08 +0000 Manifest this update: Fri 30 May 2025 18:45:08 +0000 Manifest next update: Fri 06 Jun 2025 18:45:08 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: /2YlhTX8VuKD03zcpN+tjJ1XuG92DmniYRSuTR4DgM4=) 2: 2C1A71D81A9B11EFA4886942C4F9AE02.roa (hash: UTQp4c4ErG5PlENypT/6nQS39iV0gb18Daq4T/Ea0Ug=) 3: 022432421A9B11EF8C724E37C4F9AE02.roa (hash: dm8SxeGSmUIEnKBAxZSYW3Vlgy+3VExTf1YjJz0ds5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3178 (0xc6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: May 30 18:45:08 2025 GMT Not After : Jun 6 18:45:08 2025 GMT Subject: CN=6839fcb4-5c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:b3:75:c9:9d:42:65:0c:df:83:4e:1a:63: 07:2b:bb:9a:ae:6d:8d:c8:29:fd:85:ac:b3:b4:25: 39:51:31:67:ae:b3:24:3a:a2:51:e0:a3:71:20:aa: 70:63:62:a4:7f:10:56:8e:8e:e1:74:0b:cf:d3:cf: 69:b3:fe:e9:94:2e:83:f6:22:84:fb:4f:47:b8:c3: 0d:22:7b:2f:ba:6e:69:10:86:7c:5d:a6:58:68:46: f7:cf:31:3f:01:8c:20:24:fe:3c:05:e0:a2:e8:91: 43:f1:ce:a8:78:3e:67:32:02:bd:70:a2:ab:a8:89: 7f:ab:24:cc:d0:8b:e8:da:9a:d0:b0:e3:f7:f0:cb: 76:cc:b9:1f:21:f8:87:bd:65:d1:7c:9b:2a:ec:84: 4a:f5:82:33:c8:aa:16:40:67:47:c3:77:6b:f8:2d: f2:d5:16:cb:8f:53:ea:bf:ab:a6:10:cb:07:91:48: 7f:a8:49:31:ad:7c:0f:5e:3c:89:73:54:62:e8:44: 93:16:7b:8d:dc:f6:35:66:e0:25:a8:0c:25:2f:0c: 12:82:c6:12:b5:47:9e:80:ef:cc:81:c2:e1:01:2c: 53:50:4e:86:27:8f:35:81:dc:55:ea:30:e9:ca:6d: a2:39:32:60:51:52:f6:4c:42:4b:ca:bd:7a:c7:12: ad:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:43:C2:4C:8F:2C:88:42:5E:B9:B2:0C:1D:27:85:50:05:39:00:65 X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:14:ff:c0:02:a4:d8:5e:1d:b6:ac:ff:e4:3d:6c:98:06:56: 00:24:9d:b4:c2:94:a2:a3:93:b3:d5:b8:0d:f5:13:30:48:a6: b6:15:5c:dc:fe:35:58:20:62:65:fa:1b:1b:3c:df:31:4e:9d: 3b:a2:50:c5:73:4b:ef:4d:45:a4:94:94:af:50:1f:ad:b7:80: 9a:e7:b0:06:96:07:2a:d6:e4:8c:f0:9b:d3:6b:f9:57:8c:e4: 93:f6:39:c3:4c:52:cf:c9:43:df:52:c9:2d:ad:f5:9e:95:39: 6b:08:4d:bc:92:b8:e8:0a:10:cd:a3:33:70:db:64:e0:dd:a3: 57:5a:af:b3:55:31:92:43:c5:85:da:c1:fd:98:90:e5:06:8a: 63:52:b2:70:25:bb:af:8e:02:b0:16:98:b9:d8:00:ff:b2:f1: 16:d9:8f:ba:52:50:19:35:84:5e:e3:ce:16:07:25:93:56:c0: bf:63:13:10:95:d5:ef:d9:eb:e3:a8:5f:c7:4d:e2:d2:50:7b: 0e:8d:5f:7a:34:95:1d:b2:a9:ff:68:9c:ea:56:27:85:66:12: b8:42:9b:ee:24:b3:d7:69:92:32:1d:ec:2b:21:90:d7:07:44: 6d:a3:33:54:21:1b:87:01:31:d3:11:cb:66:10:3d:4c:3e:a2: 24:06:e9:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjUwNTMwMTg0NTA4WhcNMjUwNjA2MTg0NTA4WjAYMRYwFAYD VQQDEw02ODM5ZmNiNC01Yzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9+zdcmdQmUM34NOGmMHK7uarm2NyCn9hayztCU5UTFnrrMkOqJR4KNxIKpw Y2KkfxBWjo7hdAvP089ps/7plC6D9iKE+09HuMMNInsvum5pEIZ8XaZYaEb3zzE/ AYwgJP48BeCi6JFD8c6oeD5nMgK9cKKrqIl/qyTM0Ivo2prQsOP38Mt2zLkfIfiH vWXRfJsq7IRK9YIzyKoWQGdHw3dr+C3y1RbLj1Pqv6umEMsHkUh/qEkxrXwPXjyJ c1Ri6ESTFnuN3PY1ZuAlqAwlLwwSgsYStUeegO/MgcLhASxTUE6GJ481gdxV6jDp ym2iOTJgUVL2TEJLyr16xxKtgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtDwkyP LIhCXrmyDB0nhVAFOQBlMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9FP/AAqTYXh22rP/kPWyYBlYAJJ20wpSio5Oz1bgN9RMwSKa2FVzc /jVYIGJl+hsbPN8xTp07olDFc0vvTUWklJSvUB+tt4Ca57AGlgcq1uSM8JvTa/lX jOST9jnDTFLPyUPfUsktrfWelTlrCE28krjoChDNozNw22Tg3aNXWq+zVTGSQ8WF 2sH9mJDlBopjUrJwJbuvjgKwFpi52AD/svEW2Y+6UlAZNYRe484WByWTVsC/YxMQ ldXv2evjqF/HTeLSUHsOjV96NJUdsqn/aJzqVieFZhK4QpvuJLPXaZIyHewrIZDX B0RtozNUIRuHATHTEctmED1MPqIkBukO -----END CERTIFICATE-----Generated at Sat May 31 16:08:59 2025 by rpki-client