$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft File: xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft (raw, json) Hash identifier: NIc5x+LXN8UfHFmHtOndIIAV9b95XB8MZE7YE+C6LTs= Subject key identifier: 35:91:71:1E:C8:F5:C9:3E:CA:D0:6F:1B:2B:97:B0:92:1B:2E:5D:1D Authority key identifier: C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61 Certificate issuer: /CN=A91D7E61/serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661 Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft Manifest number: 0482 Signing time: Sat 31 May 2025 00:14:49 +0000 Manifest this update: Sat 31 May 2025 00:14:48 +0000 Manifest next update: Sat 07 Jun 2025 00:14:48 +0000 Files and hashes: 1: xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl (hash: MSAF72n+pO2vjymsYVpEdaegz3AJuoE1LaJXdfTXJfA=) 2: 073DC606407F11EC87F77579C4F9AE02.roa (hash: KhOuOM0Hy/s5cLutXXqmoIGycTqYNiIVdRfd5kJumPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7E61, serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661 Validity Not Before: May 31 00:14:48 2025 GMT Not After : Jun 7 00:14:48 2025 GMT Subject: CN=683a49f9-0c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c6:d8:58:36:42:54:9a:71:ac:44:73:7c:f0: b1:d8:5a:45:33:ff:a0:8c:0c:e4:44:af:83:a6:65: 97:db:a7:66:98:e3:a9:21:7c:b3:f7:fb:b4:de:aa: 1a:f9:9e:85:ae:09:57:8a:7d:e1:5f:70:e1:48:06: cb:98:69:aa:79:4a:53:3f:d4:70:0f:c0:35:55:ae: 9c:5d:02:a2:bf:76:7c:34:7b:3c:65:9c:6b:74:ae: f9:b7:8a:7f:39:1c:c4:92:d3:80:ee:ef:3a:ed:66: 16:3b:ca:5e:66:c7:a6:2d:95:84:5f:e0:5a:b5:78: a4:50:91:77:44:0d:57:90:b4:64:39:b7:2a:50:c1: e3:49:55:e7:25:8b:fb:11:c6:6f:93:05:54:31:41: ca:f0:36:83:b4:de:18:17:2c:f1:0e:9a:40:87:2a: 09:f8:aa:e7:eb:c9:35:ad:7f:53:74:84:91:17:21: 28:be:a6:d3:37:cb:4a:87:0b:56:33:10:7f:c7:53: 5f:c2:c8:5f:64:8e:d7:47:5d:fc:ae:72:f1:77:6a: eb:b6:a5:fa:9e:0d:73:16:12:c1:81:d8:18:c6:55: b8:bd:96:33:e5:62:bf:92:6e:1e:30:2a:94:86:3b: fa:3d:47:4a:fc:78:67:35:30:70:0a:43:82:ae:88: 95:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:91:71:1E:C8:F5:C9:3E:CA:D0:6F:1B:2B:97:B0:92:1B:2E:5D:1D X509v3 Authority Key Identifier: keyid:C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:11:ac:7d:ff:68:9e:4d:7b:94:53:f3:35:cd:b3:0d:82:7e: 6a:d7:70:1f:67:5d:ff:6a:5d:2c:64:97:4d:6b:0e:5d:ad:06: 9b:ea:16:fc:99:a0:20:03:65:59:84:62:d8:3f:23:07:a0:cb: 0e:e9:fc:a1:59:c7:68:39:35:16:8e:2f:7f:56:75:65:90:ff: dd:76:9f:27:16:95:d3:7c:97:ee:cb:e4:09:dc:80:8d:47:9a: 87:10:e0:82:2c:dc:93:e7:ef:dd:44:f3:15:73:db:a9:09:ba: 6d:d1:5b:ef:98:3b:34:c5:0b:aa:13:3d:d9:62:fa:c2:2f:f0: c6:1b:67:c0:65:66:c3:5f:b2:78:6c:a8:a9:85:98:5a:9e:f0: e1:5c:dc:99:98:4d:d2:9b:41:90:47:d5:c5:ee:41:89:10:47: 35:28:7c:03:9b:20:df:89:1d:00:63:4e:14:b5:ea:4a:93:5b: 73:45:4b:ae:a1:5e:ae:ae:8b:0d:3e:57:0b:12:7b:c5:52:7d: 13:b5:62:67:3f:82:fc:fb:28:7c:ad:d0:dc:73:3b:1f:7d:31: 3d:e5:12:40:79:05:08:42:3f:96:b9:b2:93:b5:d2:ad:e5:2d: ff:bb:ab:d4:bc:5b:a9:28:98:3d:90:f7:1a:a3:ad:28:ea:71: c7:e6:e3:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdFNjExMTAvBgNVBAUTKEM2NDE4OUY1OENGNzJDMUY3M0JFQjI0MDdBNTIyN0I2 QTJDRTk2NjEwHhcNMjUwNTMxMDAxNDQ4WhcNMjUwNjA3MDAxNDQ4WjAYMRYwFAYD VQQDEw02ODNhNDlmOS0wYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMbYWDZCVJpxrERzfPCx2FpFM/+gjAzkRK+DpmWX26dmmOOpIXyz9/u03qoa +Z6FrglXin3hX3DhSAbLmGmqeUpTP9RwD8A1Va6cXQKiv3Z8NHs8ZZxrdK75t4p/ ORzEktOA7u867WYWO8peZsemLZWEX+BatXikUJF3RA1XkLRkObcqUMHjSVXnJYv7 EcZvkwVUMUHK8DaDtN4YFyzxDppAhyoJ+Krn68k1rX9TdISRFyEovqbTN8tKhwtW MxB/x1NfwshfZI7XR138rnLxd2rrtqX6ng1zFhLBgdgYxlW4vZYz5WK/km4eMCqU hjv6PUdK/HhnNTBwCkOCroiVEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWRcR7I 9ck+ytBvGyuXsJIbLl0dMB8GA1UdIwQYMBaAFMZBifWM9ywfc76yQHpSJ7aizpZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0U2MS9GNTk0REM4MDQw N0IxMUVDQkYzOEI0NTJDNEY5QUUwMi94a0dKOVl6M0xCOXp2ckpBZWxJbnRxTE9s bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrR0o5WXozTEI5enZySkFlbEludHFMT2xtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0U2MS9GNTk0REM4MDQwN0IxMUVDQkYzOEI0NTJDNEY5QUUwMi94a0dKOVl6M0xC OXp2ckpBZWxJbnRxTE9sbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDEax9/2ieTXuUU/M1zbMNgn5q13AfZ13/al0sZJdNaw5drQab6hb8 maAgA2VZhGLYPyMHoMsO6fyhWcdoOTUWji9/VnVlkP/ddp8nFpXTfJfuy+QJ3ICN R5qHEOCCLNyT5+/dRPMVc9upCbpt0VvvmDs0xQuqEz3ZYvrCL/DGG2fAZWbDX7J4 bKiphZhanvDhXNyZmE3Sm0GQR9XF7kGJEEc1KHwDmyDfiR0AY04UtepKk1tzRUuu oV6urosNPlcLEnvFUn0TtWJnP4L8+yh8rdDcczsffTE95RJAeQUIQj+WubKTtdKt 5S3/u6vUvFupKJg9kPcao60o6nHH5uNb -----END CERTIFICATE-----Generated at Sat May 31 16:57:48 2025 by rpki-client