$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: EUdXmyDNYis/TfWYqSlgqqq76HtcPx4BUOpU/w27Sio= Subject key identifier: 3A:DE:2D:A7:B3:EE:50:EC:19:02:FA:F7:0A:8D:75:4D:E1:32:4E:AD Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 011D Signing time: Sun 01 Jun 2025 04:53:23 +0000 Manifest this update: Sun 01 Jun 2025 04:53:22 +0000 Manifest next update: Sun 08 Jun 2025 04:53:22 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: VJx47h31t6i3/HJRdSsSfZxkXZRETDmxkyWCx24Uno8=) 2: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: aOphwoAXL9FkkZUfHxiPd8GBXzpRzX5FSynk8bgMuYk=) 3: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: XfIHm/MhIPSh6jZecIK72twugLDWV563OBM4HVySVuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 04:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: Jun 1 04:53:22 2025 GMT Not After : Jun 8 04:53:22 2025 GMT Subject: CN=683bdcc2-bbf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cd:d2:3c:34:df:43:d9:af:44:55:ee:0b:18: 06:8f:10:74:46:86:d9:f6:22:f3:05:5e:56:f6:ec: 37:3d:fb:d5:53:9e:4b:73:ee:a0:c2:61:1f:3c:7f: ab:2b:09:6e:88:50:7f:af:e0:ce:30:6f:35:22:a9: cd:27:69:47:2c:27:21:53:b4:82:0b:6e:a9:85:4a: 16:d6:96:a7:16:d8:23:28:f7:4f:81:8e:de:a5:1f: 53:80:ad:07:96:8b:f1:5a:70:f0:d6:9c:9f:96:c3: e6:b6:cc:25:cb:9c:96:66:05:79:d2:ff:7a:3d:22: 39:4f:fa:17:98:d5:02:21:ff:cf:e1:b7:fa:5c:d7: 61:d7:ae:f5:70:ae:0c:e8:cb:ee:71:31:02:d0:d1: 2b:c6:0f:7a:ea:7a:b0:0f:f5:87:9c:6a:0b:41:98: 10:62:f4:3c:76:b9:89:65:52:13:ca:db:17:6c:a6: 1a:d0:50:64:2e:45:02:ca:a1:a7:bb:fe:de:4d:ff: 2e:5c:0c:1e:5b:89:80:64:08:74:52:0a:da:1f:0f: 53:2f:25:62:1d:a6:f1:8f:6d:63:32:04:80:73:ce: 10:4c:fb:9b:65:93:59:73:62:a0:54:84:7c:b5:a8: 2c:4c:a8:d7:12:29:00:a0:b8:a9:98:6b:fb:43:b1: c6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DE:2D:A7:B3:EE:50:EC:19:02:FA:F7:0A:8D:75:4D:E1:32:4E:AD X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bc:c5:f9:63:8c:30:05:07:e8:cf:5b:a0:43:1c:ce:22:68: 60:e5:4c:3b:2f:9d:e2:c1:81:9d:4c:fb:c1:67:d2:d2:82:50: 5f:74:60:ac:b5:1f:39:e2:90:73:9f:b6:5b:cb:a7:0d:7c:ea: cc:9d:02:f3:06:66:aa:67:52:18:e2:f7:c7:c0:0e:08:a0:f4: 50:d3:ba:c4:91:a4:ca:1f:c4:bc:2e:17:91:21:6b:d7:2b:88: fe:e9:77:d1:61:60:34:36:81:ad:bb:77:b1:24:e5:77:7c:3f: 23:fd:d3:b7:07:f3:e4:76:51:3f:cf:93:c3:9b:ba:8f:6e:94: f6:de:dd:a9:95:ff:ab:5c:92:1d:e2:db:6e:45:ce:be:40:f4: ca:d7:0a:68:77:6d:07:e1:a4:7c:71:44:29:a6:34:dd:0c:08: 8f:c9:bd:17:c3:72:a5:bf:4f:2c:20:5b:ab:0d:b3:dd:97:f3: 03:72:33:3d:ee:60:29:3d:1a:6c:9d:b8:fe:0d:84:22:49:05: 91:3e:f5:2f:19:f3:0e:c7:ea:8f:ce:89:ec:b3:33:11:a3:83: b2:e8:47:b5:94:c2:a3:7f:9a:45:97:ea:01:f3:0c:f0:ba:7b: e0:e1:77:96:e1:9d:05:51:5a:40:58:6a:35:cf:82:ca:6e:f0: eb:0c:f5:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjUwNjAxMDQ1MzIyWhcNMjUwNjA4MDQ1MzIyWjAYMRYwFAYD VQQDEw02ODNiZGNjMi1iYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA183SPDTfQ9mvRFXuCxgGjxB0RobZ9iLzBV5W9uw3PfvVU55Lc+6gwmEfPH+r KwluiFB/r+DOMG81IqnNJ2lHLCchU7SCC26phUoW1panFtgjKPdPgY7epR9TgK0H lovxWnDw1pyflsPmtswly5yWZgV50v96PSI5T/oXmNUCIf/P4bf6XNdh1671cK4M 6MvucTEC0NErxg966nqwD/WHnGoLQZgQYvQ8drmJZVITytsXbKYa0FBkLkUCyqGn u/7eTf8uXAweW4mAZAh0UgraHw9TLyViHabxj21jMgSAc84QTPubZZNZc2KgVIR8 tagsTKjXEikAoLipmGv7Q7HGcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDreLaez 7lDsGQL69wqNdU3hMk6tMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtvMX5Y4wwBQfoz1ugQxzOImhg5Uw7L53iwYGdTPvBZ9LSglBfdGCs tR854pBzn7Zby6cNfOrMnQLzBmaqZ1IY4vfHwA4IoPRQ07rEkaTKH8S8LheRIWvX K4j+6XfRYWA0NoGtu3exJOV3fD8j/dO3B/PkdlE/z5PDm7qPbpT23t2plf+rXJId 4ttuRc6+QPTK1wpod20H4aR8cUQppjTdDAiPyb0Xw3Klv08sIFurDbPdl/MDcjM9 7mApPRpsnbj+DYQiSQWRPvUvGfMOx+qPzonsszMRo4Oy6Ee1lMKjf5pFl+oB8wzw unvg4XeW4Z0FUVpAWGo1z4LKbvDrDPV6 -----END CERTIFICATE-----Generated at Mon Jun 2 19:55:26 2025 by rpki-client