$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json) Hash identifier: MnPlPEk/90qhwb9FCZ/5Sua6H7EXHNStjn6U/QfZCUU= Subject key identifier: 03:FA:2D:1D:43:11:96:5B:30:48:11:CF:52:CF:42:05:2F:24:F9:39 Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Certificate serial: 099C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft Manifest number: 0995 Signing time: Fri 30 May 2025 20:16:46 +0000 Manifest this update: Fri 30 May 2025 20:16:46 +0000 Manifest next update: Fri 06 Jun 2025 20:16:46 +0000 Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: HDz3B3w1j+rt/61AgaJfvrygd61f4yHx/Xdv3aTtUdM=) 2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: 5OuJk3wuVixq/unKPrRmS/rEXR6rqWNJ7lk0q2nqJD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2460 (0x99c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Validity Not Before: May 30 20:16:46 2025 GMT Not After : Jun 6 20:16:46 2025 GMT Subject: CN=683a122e-9b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:e8:f5:01:21:00:00:1d:37:36:43:e9:4b: 2e:f8:68:0b:75:e2:26:5d:4c:28:11:e0:dd:22:04: 93:16:49:93:dd:4f:fd:f4:a1:28:13:b3:1a:a4:66: 92:5a:d3:8b:20:48:8f:3f:59:28:2a:87:30:cf:a3: 30:d3:6d:5b:66:f1:f7:5d:47:48:db:1a:49:e2:ea: b4:62:ef:de:fd:61:a4:26:34:18:28:ae:1f:87:25: 1b:45:9e:6c:a9:c1:0b:79:76:39:12:37:a4:52:90: 09:21:1c:b7:f7:4c:82:df:4d:ff:56:09:21:e5:fe: 38:0d:b3:b5:62:8d:90:e6:a5:a0:d5:a0:ac:f9:d1: af:20:ae:51:d9:eb:f8:28:ce:81:05:0a:60:a5:19: f0:d0:af:9f:b3:03:8d:27:94:7b:ad:b1:1a:15:e0: 54:7a:f2:78:62:e1:a2:8a:44:3f:50:ce:66:38:93: 5b:39:88:d6:a7:90:f4:e8:37:8c:3f:7d:1a:bf:68: e2:78:7a:0e:68:ce:1d:36:5f:ec:30:d8:ba:56:1c: 34:42:96:17:0d:7e:b2:59:8f:33:53:9a:a2:ce:48: 94:b6:31:24:71:4b:d2:c3:38:64:46:ea:14:9a:4a: 7e:a4:c9:7c:64:59:47:57:7a:26:6f:36:16:1c:a8: cb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FA:2D:1D:43:11:96:5B:30:48:11:CF:52:CF:42:05:2F:24:F9:39 X509v3 Authority Key Identifier: keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:14:5c:69:5e:1d:45:42:c3:d8:61:9b:8a:37:cb:64:9e:f8: ec:c2:a8:77:65:9f:73:b3:1d:b3:50:59:dd:b9:6b:4c:bc:61: 42:79:fa:00:67:9a:d8:18:7e:b5:08:f2:36:af:6d:44:94:e1: 6d:48:4e:0f:10:7f:c5:5b:a7:19:8f:68:1b:c8:7f:bf:0f:cc: 66:8b:ec:43:c2:3e:f6:8f:a1:3a:21:7d:bd:f6:be:a2:6d:b0: 86:67:e5:a1:32:81:83:3b:10:5e:da:a1:02:b8:7d:aa:a1:23: cf:c1:4c:5c:48:de:00:6b:c3:c9:c2:17:16:d9:97:ac:3a:8c: d7:a6:d1:0c:00:d6:35:b3:15:c9:b4:18:33:9e:c0:7d:6f:75: ec:09:dd:97:d2:bc:e7:38:09:1b:16:e8:e7:62:81:4b:ac:cf: 21:23:66:d8:c0:d6:bd:9b:65:0a:3a:ea:2b:87:c5:20:fa:d7: bc:79:c8:8d:0b:bd:67:2d:97:6a:d7:31:3f:4e:de:6c:14:b1: 95:e8:38:5b:ab:76:ad:bf:5c:64:f6:d8:5e:70:5b:a5:a6:68: a4:24:52:e6:79:96:93:9e:fa:62:72:d3:d6:53:a8:18:24:88: 5b:e3:d5:08:d4:48:62:2c:7c:90:3c:e6:7e:e0:5d:df:74:8e: 67:78:7e:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzQjMxMTAvBgNVBAUTKDVFMDU3NDQ2QzQ5NjFFNEQyNkMzN0ZGRUE4QUMzRjdB QUREODNCMzIwHhcNMjUwNTMwMjAxNjQ2WhcNMjUwNjA2MjAxNjQ2WjAYMRYwFAYD VQQDEw02ODNhMTIyZS05YjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEDo9QEhAAAdNzZD6Usu+GgLdeImXUwoEeDdIgSTFkmT3U/99KEoE7MapGaS WtOLIEiPP1koKocwz6Mw021bZvH3XUdI2xpJ4uq0Yu/e/WGkJjQYKK4fhyUbRZ5s qcELeXY5EjekUpAJIRy390yC303/Vgkh5f44DbO1Yo2Q5qWg1aCs+dGvIK5R2ev4 KM6BBQpgpRnw0K+fswONJ5R7rbEaFeBUevJ4YuGiikQ/UM5mOJNbOYjWp5D06DeM P30av2jieHoOaM4dNl/sMNi6Vhw0QpYXDX6yWY8zU5qizkiUtjEkcUvSwzhkRuoU mkp+pMl8ZFlHV3ombzYWHKjLRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAP6LR1D EZZbMEgRz1LPQgUvJPk5MB8GA1UdIwQYMBaAFF4FdEbElh5NJsN//qisP3qt2Dsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNCMy9BM0QzRDgyMjhB MEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hrMG13M18tcUt3X2VxM1lP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hnVjBSc1NXSGswbXczXy1xS3dfZXEzWU96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNCMy9BM0QzRDgyMjhBMEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hr MG13M18tcUt3X2VxM1lPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQFFxpXh1FQsPYYZuKN8tknvjswqh3ZZ9zsx2zUFnduWtMvGFCefoA Z5rYGH61CPI2r21ElOFtSE4PEH/FW6cZj2gbyH+/D8xmi+xDwj72j6E6IX299r6i bbCGZ+WhMoGDOxBe2qECuH2qoSPPwUxcSN4Aa8PJwhcW2ZesOozXptEMANY1sxXJ tBgznsB9b3XsCd2X0rznOAkbFujnYoFLrM8hI2bYwNa9m2UKOuorh8Ug+te8eciN C71nLZdq1zE/Tt5sFLGV6Dhbq3atv1xk9thecFulpmikJFLmeZaTnvpictPWU6gY JIhb49UI1EhiLHyQPOZ+4F3fdI5neH63 -----END CERTIFICATE-----Generated at Sat May 31 17:14:43 2025 by rpki-client