$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: UKpaFRYh2uEF6S8Qz3BhFirMzgmlMBxdbC3qZ2gjTuc= Subject key identifier: 6D:DD:55:E9:E5:30:10:AE:41:27:CA:ED:B2:FA:B0:85:BD:DC:A5:6C Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0A0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 09D5 Signing time: Fri 30 May 2025 20:12:15 +0000 Manifest this update: Fri 30 May 2025 20:12:15 +0000 Manifest next update: Fri 06 Jun 2025 20:12:15 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: wbGuZuIrj9CXC+sOwDLSYrJrdjstNV0qJnyV+NOqVi8=) 2: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: fT5I6I+PgWW4dacN3a4Ms0RKDB8N3MNCREMj8FDesrg=) 3: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 2Dd7cd8I4OSARGKZ0mccoyZW6iVZIc9ObRTGe4O/Dcc=) 4: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: NOfiYVkjVgVKJdndF7rjEsZWLBXmxcXaA+rDg1JFfcI=) 5: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: eb8Dxmgs1pJ56B+p/g4fWelI2bfJeXR9VvaW0O1EVCY=) 6: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Fh5T2BpUHXj8z7zvCSIDzf9GCkAnUEieH5BE04K3ZeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2571 (0xa0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: May 30 20:12:15 2025 GMT Not After : Jun 6 20:12:15 2025 GMT Subject: CN=683a111f-8f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:91:77:96:a7:dc:eb:d9:1d:af:41:d3:17:49: c4:92:cb:6c:f0:c7:aa:1b:a1:b1:1c:93:1f:3e:24: e9:cc:7f:67:0d:31:27:61:6e:29:84:c6:68:34:f1: 0e:c2:14:b7:4d:da:2e:31:7c:a5:9b:18:d4:33:2d: 2e:f3:f8:7d:22:a1:4a:ba:e5:39:20:cc:15:9b:a5: 61:e7:d4:e5:a7:5c:55:8b:e9:05:8d:8f:19:72:2f: 78:24:96:31:40:56:80:df:99:44:da:6c:7e:f8:cf: 6a:d5:5e:e0:90:1d:01:5e:cf:af:c1:ea:ea:cb:08: e6:3e:60:e1:17:4d:b5:62:3e:a8:36:5c:98:23:2f: 29:7c:8e:ee:34:4d:0e:13:bf:ba:81:45:7e:6f:ca: c7:cc:d1:4a:a7:0f:c8:81:55:61:60:3a:04:67:59: e1:1a:f6:3b:50:76:da:d3:be:1a:b1:0c:a6:1f:7b: 96:90:00:53:6c:23:4a:89:1d:28:74:13:49:95:e4: 8d:12:e9:f5:fb:6f:9c:a7:62:b2:9f:98:8d:a7:ba: 85:b8:8f:41:0a:cd:f5:38:a1:f0:a3:5a:03:b2:8b: 30:60:02:94:bc:63:a4:85:99:70:56:4f:9b:7a:9e: 53:c8:ef:ef:90:42:50:8a:e4:ca:0d:0e:a6:36:83: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DD:55:E9:E5:30:10:AE:41:27:CA:ED:B2:FA:B0:85:BD:DC:A5:6C X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:91:c9:02:53:43:1a:95:fc:e1:28:56:96:a7:c8:78:f8:df: e2:b6:8d:0c:13:1e:83:78:1d:1e:e8:35:6b:d6:35:ab:e2:77: 6f:29:f1:26:fc:f4:a1:f9:54:c1:1e:e3:e4:c8:2d:66:ce:81: 16:b1:f8:50:44:17:83:14:19:e7:d9:fd:3a:a3:8c:7d:c0:04: d2:b7:f5:18:58:ae:06:21:49:8b:7c:2b:6a:a6:e9:dd:32:74: 91:2f:8e:91:30:96:e3:54:70:7b:be:ba:3e:f3:a1:7d:48:ed: f5:f7:ff:07:56:d5:12:4e:9b:64:6c:3d:77:48:54:ca:24:53: 99:06:40:43:b7:1e:52:4e:ff:f9:d6:1d:2d:e7:7f:d8:c2:f1: e0:d0:2d:8b:ce:05:ee:44:32:22:04:54:93:3b:4f:66:45:f7: fe:54:b7:45:1b:de:2e:e9:84:43:90:83:f6:08:b1:1d:f9:73: 82:3f:40:6f:f2:09:6b:b4:67:ac:29:bf:51:22:2b:e9:8e:0b: 3a:b0:94:29:4e:36:d2:be:a3:7c:47:e6:95:71:a9:a3:13:c6: 7f:e8:cd:f0:d1:17:41:c2:ae:65:d4:b2:17:a2:43:f1:bc:38: b1:1b:81:cd:05:71:d3:be:cd:80:44:5f:65:1a:ca:9d:0d:6a: 2f:e2:82:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjUwNTMwMjAxMjE1WhcNMjUwNjA2MjAxMjE1WjAYMRYwFAYD VQQDEw02ODNhMTExZi04ZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypF3lqfc69kdr0HTF0nEksts8MeqG6GxHJMfPiTpzH9nDTEnYW4phMZoNPEO whS3TdouMXylmxjUMy0u8/h9IqFKuuU5IMwVm6Vh59Tlp1xVi+kFjY8Zci94JJYx QFaA35lE2mx++M9q1V7gkB0BXs+vwerqywjmPmDhF021Yj6oNlyYIy8pfI7uNE0O E7+6gUV+b8rHzNFKpw/IgVVhYDoEZ1nhGvY7UHba074asQymH3uWkABTbCNKiR0o dBNJleSNEun1+2+cp2Kyn5iNp7qFuI9BCs31OKHwo1oDsoswYAKUvGOkhZlwVk+b ep5TyO/vkEJQiuTKDQ6mNoPZxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3dVenl MBCuQSfK7bL6sIW93KVsMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwkckCU0MalfzhKFaWp8h4+N/ito0MEx6DeB0e6DVr1jWr4ndvKfEm /PSh+VTBHuPkyC1mzoEWsfhQRBeDFBnn2f06o4x9wATSt/UYWK4GIUmLfCtqpund MnSRL46RMJbjVHB7vro+86F9SO319/8HVtUSTptkbD13SFTKJFOZBkBDtx5STv/5 1h0t53/YwvHg0C2LzgXuRDIiBFSTO09mRff+VLdFG94u6YRDkIP2CLEd+XOCP0Bv 8glrtGesKb9RIivpjgs6sJQpTjbSvqN8R+aVcamjE8Z/6M3w0RdBwq5l1LIXokPx vDixG4HNBXHTvs2ARF9lGsqdDWov4oIZ -----END CERTIFICATE-----Generated at Sat May 31 17:00:22 2025 by rpki-client