$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json) Hash identifier: wgdIxYMH7ehqHG3B7eShMxpm+OuTEDKeiuu3u6ksaLI= Subject key identifier: D2:81:D8:EE:BD:4A:66:5B:0B:C0:C6:D1:DD:75:4E:BE:5D:B2:2E:A9 Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Certificate serial: 042E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft Manifest number: 0402 Signing time: Sat 31 May 2025 00:44:08 +0000 Manifest this update: Sat 31 May 2025 00:44:07 +0000 Manifest next update: Sat 07 Jun 2025 00:44:07 +0000 Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: q4zhpKC1UXylU5cUu+drHTq6XDrQPDBU5rkwJUHpmwk=) 2: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: JDhvBxRe3WYJ1iKQKnxqCUD2z2C21JJ9nqsXsWXBpYM=) 3: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: QNRRPIEXpBXbzOjvogyb/5EofzlDIH5pOqmalYkDTHw=) 4: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: pOC7yi76swQlUgILehboMwNcNI7fxV+UlNvd0wZTls0=) 5: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: QSRbYccf6zSEHa0HsQVgKCVz5nS1O8L5U8Elot2Xz40=) 6: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: R3jOsVUDlgPUNcLVjE2JxsnxeughPhg0TvY+Ytf4478=) 7: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: 8STPYAJJhsqxveLpZRzmdl9yhMuww2dhMQO1WbQeNbU=) 8: 5F14A15442D111EF8424E65BC4F9AE02.roa (hash: +sir/1Ip5eUjrTrKzP4T0efIjhcNSv/WtmTYay9OtXs=) 9: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: 7KI+xGonwsZRICria/4CZwlDNlRIuXU/wVts22Crf9U=) 10: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: fPCfFsxMUqOAvLJmkWjc+RPsiCNLjQ233XGNCqOiY/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1070 (0x42e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Validity Not Before: May 31 00:44:07 2025 GMT Not After : Jun 7 00:44:07 2025 GMT Subject: CN=683a50d7-d91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:53:d5:29:26:b4:b5:6b:6a:5f:f7:05:db:aa: f6:89:60:f2:e6:90:07:fa:5b:94:07:28:b9:ed:1f: 04:3c:c9:2c:c2:79:57:c4:32:af:19:ba:15:77:ec: f6:fd:ef:c0:83:15:cf:37:45:c5:cd:cd:3b:89:41: e5:e2:97:c0:cb:c1:23:2c:00:82:96:21:f0:29:7d: 0d:a2:ca:ed:2c:49:5b:4f:7a:ff:f6:17:c3:07:d4: eb:b0:e1:2a:c4:74:3b:31:c2:d9:e0:26:d5:d3:63: f1:4c:f7:f0:1f:24:e9:ea:a4:30:66:73:39:fe:75: 84:96:e4:e0:eb:25:2d:35:e4:12:ad:33:16:50:a8: 87:68:2d:ce:2a:83:ed:ae:c5:99:cb:db:9a:a3:06: 25:ca:a5:e9:ae:ee:d8:c6:94:13:fe:84:10:c0:b1: 52:d9:99:07:e3:a7:f5:e8:43:24:d0:c1:23:50:a2: c5:57:32:46:d0:22:f3:2d:04:3c:11:2d:d9:f7:f7: 43:84:21:c2:f5:09:d8:e5:a5:72:fc:7e:6b:05:ee: c4:ea:bd:b3:b8:57:6b:07:d2:a5:f9:7c:40:a7:f6: a0:44:82:32:3d:65:68:65:88:b9:e4:10:02:84:d5: 71:a6:b0:9e:8c:18:cf:51:10:b0:b7:8a:7f:3b:6f: 19:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:81:D8:EE:BD:4A:66:5B:0B:C0:C6:D1:DD:75:4E:BE:5D:B2:2E:A9 X509v3 Authority Key Identifier: keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:26:67:a5:bc:6d:c9:bb:06:bb:2e:a2:7c:73:0b:47:71:d0: 1c:75:8e:1a:31:d4:19:2a:e6:87:63:78:80:56:35:9b:9d:24: 23:f5:62:b5:c3:6a:5e:ff:76:f5:51:66:72:46:7d:46:a2:5f: 3e:53:4a:b9:b4:0f:2c:36:36:59:19:23:c8:a0:ab:a2:c3:7c: f9:b4:00:b8:41:e9:04:3f:ab:30:be:d1:ed:2a:cc:1e:d3:98: d0:dd:84:ab:b6:4d:35:81:29:09:8b:c5:d9:50:60:6d:08:27: da:69:c6:b0:11:58:3d:0f:e6:57:20:6e:05:a0:28:8a:cc:86: c7:af:dd:16:58:9b:f9:4e:a1:ea:36:b8:21:53:86:32:0a:f3: 4b:8e:3d:36:0f:b7:a7:20:d9:84:37:b1:20:2c:cd:57:ad:2c: 39:b8:eb:35:ca:d7:fc:e1:bb:17:88:5e:ee:5b:22:94:b6:30: bb:66:6f:74:b6:2d:51:75:bd:80:0e:50:c2:13:57:11:25:8d: 8f:ec:2a:28:33:e6:f9:51:b4:7c:db:0f:61:98:61:e7:01:10: 34:f5:b8:41:59:0f:b9:dd:0f:73:3c:19:be:80:22:2d:fe:f3: e1:65:d9:85:91:fc:f5:d5:1b:99:dc:35:63:f7:9f:6d:82:6b: c9:57:e5:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC Mzk5OTI1MzkwHhcNMjUwNTMxMDA0NDA3WhcNMjUwNjA3MDA0NDA3WjAYMRYwFAYD VQQDEw02ODNhNTBkNy1kOTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslPVKSa0tWtqX/cF26r2iWDy5pAH+luUByi57R8EPMkswnlXxDKvGboVd+z2 /e/AgxXPN0XFzc07iUHl4pfAy8EjLACCliHwKX0NosrtLElbT3r/9hfDB9TrsOEq xHQ7McLZ4CbV02PxTPfwHyTp6qQwZnM5/nWEluTg6yUtNeQSrTMWUKiHaC3OKoPt rsWZy9uaowYlyqXpru7YxpQT/oQQwLFS2ZkH46f16EMk0MEjUKLFVzJG0CLzLQQ8 ES3Z9/dDhCHC9QnY5aVy/H5rBe7E6r2zuFdrB9Kl+XxAp/agRIIyPWVoZYi55BAC hNVxprCejBjPURCwt4p/O28ZpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKB2O69 SmZbC8DG0d11Tr5dsi6pMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1 TERMaHhNdmhSOC16bVpKVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwJmelvG3Juwa7LqJ8cwtHcdAcdY4aMdQZKuaHY3iAVjWbnSQj9WK1 w2pe/3b1UWZyRn1Gol8+U0q5tA8sNjZZGSPIoKuiw3z5tAC4QekEP6swvtHtKswe 05jQ3YSrtk01gSkJi8XZUGBtCCfaacawEVg9D+ZXIG4FoCiKzIbHr90WWJv5TqHq NrghU4YyCvNLjj02D7enINmEN7EgLM1XrSw5uOs1ytf84bsXiF7uWyKUtjC7Zm90 ti1Rdb2ADlDCE1cRJY2P7CooM+b5UbR82w9hmGHnARA09bhBWQ+53Q9zPBm+gCIt /vPhZdmFkfz11RuZ3DVj959tgmvJV+Wf -----END CERTIFICATE-----Generated at Sat May 31 16:50:40 2025 by rpki-client