$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft File: xVznjEX0hWCLgkNgYAPYCooWzNY.mft (raw, json) Hash identifier: GC+DRXh+INzKA4VTF3Y3C//xv75ssA+m8ZlfMVcufUg= Subject key identifier: 57:BF:77:C0:CB:D1:9B:37:B0:52:21:79:00:1C:12:5B:96:2D:C0:4A Authority key identifier: C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6 Certificate issuer: /CN=A91E6E96/serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6 Certificate serial: 049B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft Manifest number: 0497 Signing time: Sat 31 May 2025 00:11:33 +0000 Manifest this update: Sat 31 May 2025 00:11:33 +0000 Manifest next update: Sat 07 Jun 2025 00:11:33 +0000 Files and hashes: 1: xVznjEX0hWCLgkNgYAPYCooWzNY.crl (hash: IlcwFK7bqhYM8E3y/OFIWBCar0X0/cKeecDTib+HCO4=) 2: 64DE26F6386011EC83DC2E23C4F9AE02.roa (hash: U5GEFoFbAoED1KEx2xWUb5hktSCjTMeSRDs24OHWcTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1179 (0x49b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6E96, serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6 Validity Not Before: May 31 00:11:33 2025 GMT Not After : Jun 7 00:11:33 2025 GMT Subject: CN=683a4935-ed37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:9f:ce:62:1a:5b:99:6f:64:65:d9:4e:14: d3:0e:18:b0:78:41:f1:fe:40:23:77:a1:07:9b:ad: 0c:90:b9:06:97:8f:4c:3a:e1:4d:0f:c6:d0:6a:88: c9:b3:af:a1:11:80:fb:5d:48:93:70:59:b8:42:23: f6:cd:4f:82:a5:44:47:44:06:55:d7:3f:b4:d2:52: f2:b2:8f:6f:fc:c1:9e:3f:38:8e:67:55:28:e4:3c: 7e:cb:14:25:c6:0d:86:6b:fb:ec:07:73:f8:b9:75: 2e:84:8d:69:75:c4:31:ed:7c:8a:bd:d2:d5:c6:f7: 0c:8d:a4:df:5a:05:63:f7:3e:26:51:86:38:7d:b7: bf:16:13:b5:e2:61:56:2a:56:93:59:4b:77:80:57: 42:71:a4:ed:90:f5:34:b5:8b:53:6d:37:81:6d:e7: b8:15:bf:e0:39:5c:18:b4:90:7c:9d:32:7b:26:8d: f6:87:d3:c8:0d:06:b2:02:82:22:df:01:04:64:58: 2f:6f:bd:13:15:52:4f:ec:35:d0:3c:c3:7f:86:b5: 10:2a:ec:fb:ab:c9:d1:2f:22:6d:ce:a3:38:f8:63: d1:a5:fd:1d:c7:89:bb:5d:ce:33:93:f8:a2:8b:02: 08:09:fc:d0:37:97:21:e2:27:29:47:9a:c5:ab:cf: 4e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BF:77:C0:CB:D1:9B:37:B0:52:21:79:00:1C:12:5B:96:2D:C0:4A X509v3 Authority Key Identifier: keyid:C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2c:95:93:dc:4a:9c:6f:eb:6b:27:fb:f5:8e:79:ef:ed:55: 8e:dc:8e:52:fe:70:e8:bb:ac:74:86:fe:68:47:4c:7e:ec:07: e8:8d:30:81:c4:ad:54:0c:2f:07:c8:c3:64:9f:96:8e:ea:84: c6:69:97:c9:40:8d:95:97:35:5e:58:b7:3b:81:23:a7:e7:4f: cc:df:08:ad:ac:ac:1d:36:59:e4:1e:6d:53:32:79:c4:4b:3b: bb:66:de:d1:a9:78:ea:5d:4a:e4:bf:57:90:0a:12:b2:a0:11: b9:fc:94:e6:5f:26:ef:cb:ab:3f:6e:99:8e:b9:ec:9b:66:4a: fb:e4:ac:d3:6a:44:dd:0d:1d:e9:17:f4:d4:cc:98:02:67:34: c3:71:b4:83:f7:0f:7a:56:3d:3d:ca:4e:5a:d8:f1:bf:e4:a0: de:51:ed:41:05:9d:ae:4f:2c:bf:f2:d6:71:9a:60:0a:a9:80: d0:a6:bf:f8:77:ff:a6:5b:47:89:94:d4:11:6b:56:26:ab:56: 4a:e0:8c:9c:f8:08:be:10:2f:81:e7:7d:7f:ed:2e:5c:9a:fd: a4:82:82:12:cf:0f:f0:1a:72:d9:cf:e4:e0:d6:92:90:93:6f: 63:d8:e0:5e:4f:00:ea:08:f6:a4:de:bf:0d:1f:6a:75:83:49: 86:d8:5e:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFOTYxMTAvBgNVBAUTKEM1NUNFNzhDNDVGNDg1NjA4QjgyNDM2MDYwMDNEODBB OEExNkNDRDYwHhcNMjUwNTMxMDAxMTMzWhcNMjUwNjA3MDAxMTMzWjAYMRYwFAYD VQQDEw02ODNhNDkzNS1lZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAss6fzmIaW5lvZGXZThTTDhiweEHx/kAjd6EHm60MkLkGl49MOuFND8bQaojJ s6+hEYD7XUiTcFm4QiP2zU+CpURHRAZV1z+00lLyso9v/MGePziOZ1Uo5Dx+yxQl xg2Ga/vsB3P4uXUuhI1pdcQx7XyKvdLVxvcMjaTfWgVj9z4mUYY4fbe/FhO14mFW KlaTWUt3gFdCcaTtkPU0tYtTbTeBbee4Fb/gOVwYtJB8nTJ7Jo32h9PIDQayAoIi 3wEEZFgvb70TFVJP7DXQPMN/hrUQKuz7q8nRLyJtzqM4+GPRpf0dx4m7Xc4zk/ii iwIICfzQN5ch4icpR5rFq89OdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFe/d8DL 0Zs3sFIheQAcEluWLcBKMB8GA1UdIwQYMBaAFMVc54xF9IVgi4JDYGAD2AqKFszW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkU5Ni83QjlEM0RFQTM4 NUMxMUVDOUMyNTg3NzhDNEY5QUUwMi94VnpuakVYMGhXQ0xna05nWUFQWUNvb1d6 TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hWem5qRVgwaFdDTGdrTmdZQVBZQ29vV3pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkU5Ni83QjlEM0RFQTM4NUMxMUVDOUMyNTg3NzhDNEY5QUUwMi94VnpuakVYMGhX Q0xna05nWUFQWUNvb1d6TlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7LJWT3Eqcb+trJ/v1jnnv7VWO3I5S/nDou6x0hv5oR0x+7AfojTCB xK1UDC8HyMNkn5aO6oTGaZfJQI2VlzVeWLc7gSOn50/M3witrKwdNlnkHm1TMnnE Szu7Zt7RqXjqXUrkv1eQChKyoBG5/JTmXybvy6s/bpmOueybZkr75KzTakTdDR3p F/TUzJgCZzTDcbSD9w96Vj09yk5a2PG/5KDeUe1BBZ2uTyy/8tZxmmAKqYDQpr/4 d/+mW0eJlNQRa1Ymq1ZK4Iyc+Ai+EC+B531/7S5cmv2kgoISzw/wGnLZz+Tg1pKQ k29j2OBeTwDqCPak3r8NH2p1g0mG2F7Q -----END CERTIFICATE-----Generated at Sat May 31 17:04:57 2025 by rpki-client