$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft File: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft (raw, json) Hash identifier: sGJe+eOHR6o68RZl5gyu49zHxUi4R6eQPTpN+wEMFMg= Subject key identifier: 09:B1:9E:B3:93:A0:EF:D5:93:F5:47:3E:A1:CF:E4:B3:54:E0:57:70 Authority key identifier: 5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3 Certificate issuer: /CN=A91E4BD2/serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3 Certificate serial: 08F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft Manifest number: 08F3 Signing time: Fri 30 May 2025 20:35:45 +0000 Manifest this update: Fri 30 May 2025 20:35:45 +0000 Manifest next update: Fri 06 Jun 2025 20:35:45 +0000 Files and hashes: 1: XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl (hash: oE6MU5zMerW0T1Ttin93zZqB9VJteHwjmg4cc7AtuTU=) 2: A862F866AA3111EA9E08C324C4F9AE02.roa (hash: 3Ir1IuKRfOTCPGTcqkNhUsK0tdvw53ia+7U41pr4LNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2297 (0x8f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4BD2, serialNumber=5DCA4528B9E40C88E467A43FDC12B78F2B3545E3 Validity Not Before: May 30 20:35:45 2025 GMT Not After : Jun 6 20:35:45 2025 GMT Subject: CN=683a16a1-a713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:50:f3:0b:fb:bd:4c:a4:4f:b4:60:6c:b3: 6f:61:b7:97:85:2e:9e:5f:e4:b7:7a:15:e1:f3:b4: 68:e7:30:e1:b6:4d:8c:59:53:12:f9:ee:92:d1:97: 84:bb:23:0d:ff:5e:ce:90:f5:3a:e2:95:0d:76:03: 24:f3:64:b6:e0:4b:05:af:f9:0f:d7:70:ed:e8:8e: 53:70:a0:79:e7:68:19:90:88:ab:5f:18:b3:b8:4b: 49:fc:59:38:c1:fc:cc:fa:a8:92:24:90:da:f5:d4: 36:12:89:a4:c3:ec:7f:b3:61:45:21:1d:25:a9:1a: 21:17:69:42:ac:f1:bc:59:ff:73:15:3e:e2:43:bf: c8:1a:eb:49:54:28:83:fb:cc:27:f7:32:0f:26:c1: 18:5b:b8:da:36:5c:e0:58:09:21:3a:5e:37:11:c6: 39:f9:75:24:14:83:1f:81:b0:0e:4c:6f:0c:26:b3: 3e:eb:79:33:91:30:ae:5d:12:2b:03:e7:4b:53:05: d9:1d:55:76:8b:36:82:c3:fe:4a:9d:4a:72:81:4b: 09:ba:3c:ef:be:c1:46:d8:b6:b3:e3:40:c4:d1:3b: 92:09:5c:be:0a:76:d9:51:e4:3d:43:55:7d:12:dc: 60:30:23:02:93:70:4b:b1:f3:5c:0e:11:15:7a:7e: 1b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B1:9E:B3:93:A0:EF:D5:93:F5:47:3E:A1:CF:E4:B3:54:E0:57:70 X509v3 Authority Key Identifier: keyid:5D:CA:45:28:B9:E4:0C:88:E4:67:A4:3F:DC:12:B7:8F:2B:35:45:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4BD2/F40B116AAA2F11EA9C29591EC4F9AE02/XcpFKLnkDIjkZ6Q_3BK3jys1ReM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:03:ed:e8:98:74:3f:ab:fc:bf:c1:86:e9:5b:7e:a6:71:07: a5:7e:8a:e1:11:e3:ea:ce:54:93:24:67:0d:0a:50:e9:e4:18: 3c:d4:d6:18:96:47:9c:e2:c3:03:8f:fd:ea:37:ff:14:43:46: 5b:6e:b2:eb:b4:41:c2:98:97:df:9a:1a:46:b4:f9:14:b6:75: 7b:ae:5a:88:f3:1d:bd:8d:c7:69:dc:c7:7d:4e:ee:e9:0d:92: b8:c9:66:13:50:14:5a:f1:c5:c7:0e:ad:1a:b5:65:8e:47:52: 5f:aa:2b:fc:95:f3:3d:e3:06:99:c2:f1:15:4c:8e:9c:72:8f: b1:1a:4f:bc:73:23:ad:fc:2f:cc:b4:2b:ec:e5:c0:29:14:7e: cb:d8:a3:ab:5f:ba:36:e7:bd:84:ad:47:3b:32:b2:58:d0:6c: 40:18:09:2a:06:54:fc:85:da:5f:b5:bd:60:a3:28:7b:83:d9: 4d:92:22:22:3b:e7:a4:fa:d7:d0:6e:42:df:d0:5b:f5:4b:4a: b2:e2:a3:7f:f6:d3:52:79:89:21:05:bd:28:0c:c7:8c:b7:c8: 4c:26:f1:d4:1b:41:b1:9b:dc:51:20:5d:aa:6d:41:d3:73:b1: 57:58:b1:d2:99:48:13:bb:dc:22:7f:75:60:fb:5c:25:0f:68: e6:e4:32:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCRDIxMTAvBgNVBAUTKDVEQ0E0NTI4QjlFNDBDODhFNDY3QTQzRkRDMTJCNzhG MkIzNTQ1RTMwHhcNMjUwNTMwMjAzNTQ1WhcNMjUwNjA2MjAzNTQ1WjAYMRYwFAYD VQQDEw02ODNhMTZhMS1hNzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoJQ8wv7vUykT7RgbLNvYbeXhS6eX+S3ehXh87Ro5zDhtk2MWVMS+e6S0ZeE uyMN/17OkPU64pUNdgMk82S24EsFr/kP13Dt6I5TcKB552gZkIirXxizuEtJ/Fk4 wfzM+qiSJJDa9dQ2Eomkw+x/s2FFIR0lqRohF2lCrPG8Wf9zFT7iQ7/IGutJVCiD +8wn9zIPJsEYW7jaNlzgWAkhOl43EcY5+XUkFIMfgbAOTG8MJrM+63kzkTCuXRIr A+dLUwXZHVV2izaCw/5KnUpygUsJujzvvsFG2Laz40DE0TuSCVy+CnbZUeQ9Q1V9 EtxgMCMCk3BLsfNcDhEVen4bywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmxnrOT oO/Vk/VHPqHP5LNU4FdwMB8GA1UdIwQYMBaAFF3KRSi55AyI5GekP9wSt48rNUXj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEJEMi9GNDBCMTE2QUFB MkYxMUVBOUMyOTU5MUVDNEY5QUUwMi9YY3BGS0xua0RJamtaNlFfM0JLM2p5czFS ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjcEZLTG5rRElqa1o2UV8zQkszanlzMVJlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEJEMi9GNDBCMTE2QUFBMkYxMUVBOUMyOTU5MUVDNEY5QUUwMi9YY3BGS0xua0RJ amtaNlFfM0JLM2p5czFSZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUA+3omHQ/q/y/wYbpW36mcQelforhEePqzlSTJGcNClDp5Bg81NYY lkec4sMDj/3qN/8UQ0ZbbrLrtEHCmJffmhpGtPkUtnV7rlqI8x29jcdp3Md9Tu7p DZK4yWYTUBRa8cXHDq0atWWOR1Jfqiv8lfM94waZwvEVTI6cco+xGk+8cyOt/C/M tCvs5cApFH7L2KOrX7o2572ErUc7MrJY0GxAGAkqBlT8hdpftb1goyh7g9lNkiIi O+ek+tfQbkLf0Fv1S0qy4qN/9tNSeYkhBb0oDMeMt8hMJvHUG0Gxm9xRIF2qbUHT c7FXWLHSmUgTu9wif3Vg+1wlD2jm5DIg -----END CERTIFICATE-----Generated at Sat May 31 16:50:35 2025 by rpki-client