$ rpki-client -vvf rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft File: xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft (raw, json) Hash identifier: vgat6xpzGR1n5vR/8SIgZrnk6tWKvC8RdKX7Guhijw0= Subject key identifier: D3:4A:D3:B7:69:AF:C7:0A:FC:BE:DD:79:B2:A0:F9:DA:D7:28:D6:16 Authority key identifier: C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF Certificate issuer: /CN=A91E37D1/serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft Manifest number: 0189 Signing time: Sat 31 May 2025 03:14:32 +0000 Manifest this update: Sat 31 May 2025 03:14:31 +0000 Manifest next update: Sat 07 Jun 2025 03:14:31 +0000 Files and hashes: 1: xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl (hash: 5rWTTyzpPBz8I3xpY5oCRK7iyazoWCwiF7pqTJhPoYw=) 2: 59A00A402C7111EFA821586AC4F9AE02.roa (hash: 0JcJhlyjlF7wNse9vwSRpqDIz9jgkXs09QG/XtA+FYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E37D1, serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Validity Not Before: May 31 03:14:31 2025 GMT Not After : Jun 7 03:14:31 2025 GMT Subject: CN=683a7417-2f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:79:87:a3:e4:99:77:54:8c:58:52:72:9c: e8:14:0e:92:77:c5:cb:3c:ca:53:e3:ad:f5:c6:75: cd:5a:0c:80:2b:e1:43:53:e4:17:8d:36:73:6b:fc: df:8d:c2:f4:44:7c:a2:54:25:ea:b3:53:ef:de:c9: c3:28:39:ad:20:b0:07:ac:5c:b4:38:e2:62:8d:5a: b8:35:03:12:6a:ff:99:16:c1:96:86:18:1c:8b:b2: dd:52:ef:72:97:b6:aa:95:3d:65:45:97:65:49:6d: f3:79:56:81:5e:6d:ff:3f:a2:d3:6a:77:05:9c:4d: 1c:cb:92:25:60:5a:5a:ee:ad:25:57:72:5a:83:28: 1f:d3:ba:67:82:5f:6c:75:5b:dc:0c:a6:f3:b0:0d: eb:79:5b:88:df:ea:96:40:5b:41:1c:c3:92:16:01: 49:76:12:ef:c6:5e:d5:02:56:1c:cb:77:72:a7:db: a5:1f:da:74:80:d0:28:86:79:fc:56:06:d5:1a:04: dc:46:ef:55:ce:2b:f5:31:ca:9a:74:b9:32:06:48: e1:8e:0d:fc:15:85:9d:9a:dd:e5:9e:ec:a3:a3:a5: fe:17:4d:a8:bc:53:b0:89:1d:15:a1:e4:04:a6:39: 29:02:bc:0c:41:e1:e3:c7:d9:11:eb:e1:d9:ca:e9: d7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4A:D3:B7:69:AF:C7:0A:FC:BE:DD:79:B2:A0:F9:DA:D7:28:D6:16 X509v3 Authority Key Identifier: keyid:C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:df:43:d7:02:2e:e4:1d:ed:1e:42:59:7a:96:a4:d2:9b:6f: 56:1e:60:92:a0:ef:3a:04:f1:6b:75:98:95:d2:bc:26:c6:7d: ab:79:41:ce:dc:50:aa:be:3f:fc:86:aa:10:71:46:ec:6d:06: 8b:10:3f:37:8c:b8:31:cf:41:e6:7f:45:c4:69:94:73:3b:d9: d4:3c:02:ac:17:ed:d4:3d:cb:c4:e7:7f:9b:bb:b8:45:a7:6c: 8d:6c:47:de:ad:f1:4a:d9:0e:de:cc:44:c3:39:3f:da:b7:cb: 16:b2:86:0f:2d:32:c2:80:15:15:27:3a:8c:4e:ec:82:01:01: f1:f0:41:7e:52:08:d4:2b:87:10:04:e3:9d:98:8a:39:73:9e: 78:19:5e:f2:c6:24:8b:b0:96:a3:3a:99:90:39:53:c3:6c:cd: b7:a2:c1:19:55:00:ca:03:95:57:9d:53:b1:0a:2e:87:c1:10: 32:f6:b0:6c:df:b8:2a:08:4a:93:3f:17:de:82:c8:bc:82:c4: 25:9b:06:f5:34:16:01:b3:f0:f1:a0:40:de:92:7a:3f:a8:98: 18:56:9c:4f:87:1f:22:36:0b:1a:4d:c4:5d:0a:72:a7:48:99: d7:a4:96:54:ee:83:0f:9a:08:e6:57:74:31:65:c4:8a:ac:dd: ee:9d:73:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3RDExMTAvBgNVBAUTKEM1QkQ4QTUwQ0FENUEwNUVGRTU3N0M0OUM0NzE0RTVE OUFCQjdGRUYwHhcNMjUwNTMxMDMxNDMxWhcNMjUwNjA3MDMxNDMxWjAYMRYwFAYD VQQDEw02ODNhNzQxNy0yZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqr95h6PkmXdUjFhScpzoFA6Sd8XLPMpT4631xnXNWgyAK+FDU+QXjTZza/zf jcL0RHyiVCXqs1Pv3snDKDmtILAHrFy0OOJijVq4NQMSav+ZFsGWhhgci7LdUu9y l7aqlT1lRZdlSW3zeVaBXm3/P6LTancFnE0cy5IlYFpa7q0lV3Jagygf07pngl9s dVvcDKbzsA3reVuI3+qWQFtBHMOSFgFJdhLvxl7VAlYcy3dyp9ulH9p0gNAohnn8 VgbVGgTcRu9Vziv1McqadLkyBkjhjg38FYWdmt3lnuyjo6X+F02ovFOwiR0VoeQE pjkpArwMQeHjx9kR6+HZyunXgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNK07dp r8cK/L7debKg+drXKNYWMB8GA1UdIwQYMBaAFMW9ilDK1aBe/ld8ScRxTl2au3/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzdEMS8wNUE5OEYwRUUz QjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9GNy1WM3hKeEhGT1hacTdm LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hiMktVTXJWb0Y3LVYzeEp4SEZPWFpxN2YtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzdEMS8wNUE5OEYwRUUzQjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9G Ny1WM3hKeEhGT1hacTdmLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq30PXAi7kHe0eQll6lqTSm29WHmCSoO86BPFrdZiV0rwmxn2reUHO 3FCqvj/8hqoQcUbsbQaLED83jLgxz0Hmf0XEaZRzO9nUPAKsF+3UPcvE53+bu7hF p2yNbEferfFK2Q7ezETDOT/at8sWsoYPLTLCgBUVJzqMTuyCAQHx8EF+UgjUK4cQ BOOdmIo5c554GV7yxiSLsJajOpmQOVPDbM23osEZVQDKA5VXnVOxCi6HwRAy9rBs 37gqCEqTPxfegsi8gsQlmwb1NBYBs/DxoEDekno/qJgYVpxPhx8iNgsaTcRdCnKn SJnXpJZU7oMPmgjmV3QxZcSKrN3unXP3 -----END CERTIFICATE-----Generated at Sat May 31 16:46:56 2025 by rpki-client