$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft File: XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft (raw, json) Hash identifier: NyWG4kCms2ic/3JFvd7n4307+WEfBdJN8RQrpQIwBB8= Subject key identifier: FD:80:CA:85:85:1F:7F:E5:A5:09:80:60:90:76:1C:71:34:54:59:F5 Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Certificate serial: 09B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft Manifest number: 098F Signing time: Fri 30 May 2025 20:19:38 +0000 Manifest this update: Fri 30 May 2025 20:19:37 +0000 Manifest next update: Fri 06 Jun 2025 20:19:37 +0000 Files and hashes: 1: XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl (hash: o6+9qXsN15yL0hUxz/huM9UF2HcdR5OV6SxL35fP0v4=) 2: 6569BF24997F11ECA6C7F481C4F9AE02.roa (hash: ihZ46zaKKgYFbsQZJpUcfwGNcLq0WYivOzEHAfXlcfs=) 3: 3818D9A09A9011EFB14F1729C4F9AE02.roa (hash: 2HuzCk6S18IuIuNY88Jnmogc9ez8HXD2AaJ8nr4dsM0=) 4: 2109DFF2EFBB11EC95A1FD0DC4F9AE02.roa (hash: 2XvjAuC6Hirm3HWv88SHGUEeMWi9XgXjvYQVlXNxZVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2481 (0x9b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23B3, serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1 Validity Not Before: May 30 20:19:37 2025 GMT Not After : Jun 6 20:19:37 2025 GMT Subject: CN=683a12d9-d781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5a:f0:88:b7:eb:99:b5:c5:09:33:09:89:d1: 0b:58:a0:fb:82:b5:5e:87:ba:82:38:ae:70:14:10: 4b:6f:87:93:2d:0d:f5:c9:4f:4e:89:dc:7f:22:8f: c4:0a:63:96:10:eb:3f:e2:94:99:59:c8:61:f5:c5: 8f:6a:04:39:4b:de:61:67:ae:3a:7f:d3:c1:6a:a9: 7d:3a:54:13:51:3b:09:97:51:e0:92:f7:b2:24:63: 40:fe:64:d3:34:2d:28:73:86:c5:24:4c:3b:4a:1e: 4c:43:2f:c9:22:09:51:17:50:b2:25:0e:4e:46:55: 67:08:f9:5f:c6:20:34:e9:bf:cf:d7:58:71:35:af: 00:3d:f8:bc:63:f9:34:55:65:ca:5e:ee:8c:ef:ef: e5:1c:c4:8b:64:ea:d2:0e:e7:84:42:e6:98:93:0b: fc:10:cd:09:bf:c1:70:43:75:91:08:69:18:90:b2: 28:3b:d2:16:f6:e2:50:8c:fb:4f:72:03:d9:81:d3: 4e:4c:6c:8c:ac:65:58:9e:21:bc:8b:e8:1a:41:c0: 74:d8:f8:13:ca:0a:69:c6:ab:eb:6a:61:a1:01:6a: bf:96:06:8e:91:f7:bc:df:7b:29:58:ff:96:fd:75: 35:96:4d:98:8d:53:54:00:cd:d7:e3:2f:68:bf:21: d6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:80:CA:85:85:1F:7F:E5:A5:09:80:60:90:76:1C:71:34:54:59:F5 X509v3 Authority Key Identifier: keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b4:86:04:e7:fe:d7:0e:ba:4e:91:72:15:ae:e7:32:ee:1f: 65:0a:b0:ef:7d:c8:38:ae:75:82:e4:b1:ea:a1:f6:b5:4a:e3: bd:e4:92:bc:20:a2:0b:95:22:54:ea:b4:fa:f9:7f:7a:19:2f: e5:94:05:3b:8e:48:3c:66:1a:a1:0a:3d:34:d0:7b:d8:85:16: 39:8a:3b:6e:53:fb:32:3c:d5:1a:e2:69:b2:5c:30:f7:a9:42: 72:c0:d6:40:9e:b2:ed:06:44:0e:c3:69:b6:3a:c0:8a:b1:f2: 53:1a:05:64:8b:66:a2:50:db:d9:bb:69:6e:5b:56:39:24:44: cb:80:24:06:2e:40:5b:34:42:43:06:66:2a:c3:c1:5c:67:57: cf:6c:dd:d0:03:78:50:6b:cb:a3:bf:ec:bc:7a:0f:61:99:4e: 47:3b:b9:f5:38:2c:d7:ae:b0:3a:8f:2e:70:8c:84:0c:a7:2c: 68:2a:89:7e:16:e8:42:f9:eb:ee:89:e6:15:96:9d:fc:2d:3f: 21:c5:b5:af:64:6e:37:4e:28:c1:58:91:f6:6a:07:a4:3b:eb: 8e:2e:62:3f:7d:e3:bb:f3:ab:dd:d5:35:08:8c:0c:38:79:ea: b5:82:36:1e:fd:84:09:29:a0:67:b5:94:3e:16:45:db:3d:fa: 4b:e3:97:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIzQjMxMTAvBgNVBAUTKDVDMzY4NDM5Q0JDNUY1QTQ1NzE1RDY0NzZCRUFBNjY4 NkQwOTUxQjEwHhcNMjUwNTMwMjAxOTM3WhcNMjUwNjA2MjAxOTM3WjAYMRYwFAYD VQQDEw02ODNhMTJkOS1kNzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVrwiLfrmbXFCTMJidELWKD7grVeh7qCOK5wFBBLb4eTLQ31yU9Oidx/Io/E CmOWEOs/4pSZWchh9cWPagQ5S95hZ646f9PBaql9OlQTUTsJl1HgkveyJGNA/mTT NC0oc4bFJEw7Sh5MQy/JIglRF1CyJQ5ORlVnCPlfxiA06b/P11hxNa8APfi8Y/k0 VWXKXu6M7+/lHMSLZOrSDueEQuaYkwv8EM0Jv8FwQ3WRCGkYkLIoO9IW9uJQjPtP cgPZgdNOTGyMrGVYniG8i+gaQcB02PgTygppxqvramGhAWq/lgaOkfe833spWP+W /XU1lk2YjVNUAM3X4y9ovyHWOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2AyoWF H3/lpQmAYJB2HHE0VFn1MB8GA1UdIwQYMBaAFFw2hDnLxfWkVxXWR2vqpmhtCVGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjNCMy9FNjQ2NUExMDhF OTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2RjlhUlhGZFpIYS1xbWFHMEpV YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEYUVPY3ZGOWFSWEZkWkhhLXFtYUcwSlViRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjNCMy9FNjQ2NUExMDhFOTgxMUVBQUI1OEJEM0FDNEY5QUUwMi9YRGFFT2N2Rjlh UlhGZFpIYS1xbWFHMEpVYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCntIYE5/7XDrpOkXIVrucy7h9lCrDvfcg4rnWC5LHqofa1SuO95JK8 IKILlSJU6rT6+X96GS/llAU7jkg8ZhqhCj000HvYhRY5ijtuU/syPNUa4mmyXDD3 qUJywNZAnrLtBkQOw2m2OsCKsfJTGgVki2aiUNvZu2luW1Y5JETLgCQGLkBbNEJD BmYqw8FcZ1fPbN3QA3hQa8ujv+y8eg9hmU5HO7n1OCzXrrA6jy5wjIQMpyxoKol+ FuhC+evuieYVlp38LT8hxbWvZG43TijBWJH2agekO+uOLmI/feO786vd1TUIjAw4 eeq1gjYe/YQJKaBntZQ+FkXbPfpL45eN -----END CERTIFICATE-----Generated at Sat May 31 16:53:39 2025 by rpki-client