$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft File: xvdY7N3EybD3LwZcNa1UaXQycRs.mft (raw, json) Hash identifier: akvYolxMXTF5AuY/w+vNVJbpOv+LA7nLTN33Fyp4beo= Subject key identifier: 6C:51:34:1F:CD:82:A6:37:44:CA:3B:52:71:CD:FB:77:DF:40:E9:46 Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft Manifest number: 06 Signing time: Thu 13 Mar 2025 06:15:55 +0000 Manifest this update: Thu 13 Mar 2025 06:15:55 +0000 Manifest next update: Thu 20 Mar 2025 06:15:55 +0000 Files and hashes: 1: xvdY7N3EybD3LwZcNa1UaXQycRs.crl (hash: Vf4I+T/ADJ1kG3rIwDQWwmHi9908YCrPMGXQtZHFJmc=) 2: 8F9B067EF96011EF89D9E37DC4F9AE02.roa (hash: 4xicYTfIpBlcbT4bo30LC6Nm4HBJiuCMbWamLoO1Mxw=) 3: 8F350932F96011EF89D9E37DC4F9AE02.roa (hash: QrMwRSBguV4orNsh3cQZbQ07gQlvv90Dwbi2fjX1Q5w=) 4: 8EB1E9BCF96011EF89D9E37DC4F9AE02.roa (hash: uACmOb3DyJDXLeU+cbuId37JJps39u5/fEOUHNceFpo=) 5: 8E321A2AF96011EF89D9E37DC4F9AE02.roa (hash: c/khpR0D5Q+6xT3VzBLeSnoQ2dSS6+k6yToKP9EsAdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 05:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF5 Validity Not Before: Mar 13 06:15:55 2025 GMT Not After : Mar 20 06:15:55 2025 GMT Subject: CN=67d2781b-bc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:09:52:0e:3c:b1:8d:f2:ee:1d:06:08:7b: ea:21:84:e6:91:ce:fb:71:34:53:f6:22:85:f3:c7: 4c:1b:14:b9:bd:9a:20:bb:4e:f3:8e:82:49:36:7d: ad:da:27:96:7f:fb:50:cf:5c:80:fd:d4:9d:bf:bc: c0:c6:a0:84:70:12:a2:50:e7:b0:ac:dd:a9:1f:7a: 41:89:77:82:58:76:75:26:c8:ed:2c:cc:4e:25:75: 70:63:42:b9:a5:a2:db:d6:b9:c5:43:d6:39:ec:ae: 30:cc:70:db:e9:2a:18:6d:0e:5d:1a:67:8b:d6:bc: ea:c4:8f:13:6c:ec:25:82:ed:42:c0:4b:df:f8:e1: ef:6f:43:3d:29:c2:10:91:a7:d1:d3:0d:be:22:e4: 38:07:e4:fc:a5:c2:b0:be:f9:a9:44:20:a4:49:26: ef:ef:63:87:f6:c9:6b:df:83:96:a5:85:5f:ba:d0: 23:23:df:41:28:46:53:64:55:09:a1:50:86:e2:88: 32:de:35:e3:82:17:b4:07:d7:3c:f6:48:6c:52:65: 02:3d:47:41:48:18:ac:dc:ec:cf:34:b7:63:8c:5b: 0e:15:92:41:61:a6:0a:c5:2c:fe:65:c0:a2:c1:b3: 19:17:e6:8f:68:88:c1:3b:af:32:d4:e5:95:ea:6a: c8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:51:34:1F:CD:82:A6:37:44:CA:3B:52:71:CD:FB:77:DF:40:E9:46 X509v3 Authority Key Identifier: keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:1e:13:76:fc:4f:8d:ae:59:f7:4f:2e:c2:95:0e:cc:d7:2d: 50:3d:f2:5b:38:1a:9c:f5:94:27:cf:71:5d:a8:c6:c8:95:28: 87:cd:1e:ec:57:02:80:30:ba:d6:40:f2:a6:12:0c:42:8b:ca: d0:9a:d2:4c:99:34:a7:75:46:61:1c:17:54:b0:10:34:12:a9: be:d6:93:90:35:3f:5f:c2:ae:a0:f2:b6:46:57:ae:2e:90:bf: 1c:de:00:7c:f4:4b:26:08:36:2e:0f:04:9f:d4:6f:78:36:83: de:71:15:2d:f0:81:73:e1:a0:c4:d4:07:60:6c:cd:ed:b3:72: b5:80:17:d1:b4:2b:4c:06:97:bb:71:bd:41:d8:87:7b:78:e5: 5c:60:c3:75:b7:c8:93:6e:5e:3c:8b:a8:ac:4e:a0:93:dd:aa: e0:e3:f9:14:37:b4:a4:86:0c:e7:94:c8:12:6a:e5:66:92:58: b3:d5:dd:f7:b3:17:56:4b:03:02:d1:34:49:ec:f2:3c:d6:e5: ee:88:3e:4b:15:23:89:5f:b5:b6:6b:4c:ad:e8:9b:1f:4a:32: 4b:e5:3b:43:c0:67:99:aa:e5:7e:81:a3:cf:50:9a:39:7f:4c: 38:c5:d4:9d:09:9f:2b:d2:ec:00:77:61:ca:70:89:42:ac:7e: 97:40:b3:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OERGNTExMC8GA1UEBRMoQzZGNzU4RUNEREM0QzlCMEY3MkYwNjVDMzVBRDU0Njk3 NDMyNzExQjAeFw0yNTAzMTMwNjE1NTVaFw0yNTAzMjAwNjE1NTVaMBgxFjAUBgNV BAMTDTY3ZDI3ODFiLWJjNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8LAlSDjyxjfLuHQYIe+ohhOaRzvtxNFP2IoXzx0wbFLm9miC7TvOOgkk2fa3a J5Z/+1DPXID91J2/vMDGoIRwEqJQ57Cs3akfekGJd4JYdnUmyO0szE4ldXBjQrml otvWucVD1jnsrjDMcNvpKhhtDl0aZ4vWvOrEjxNs7CWC7ULAS9/44e9vQz0pwhCR p9HTDb4i5DgH5PylwrC++alEIKRJJu/vY4f2yWvfg5alhV+60CMj30EoRlNkVQmh UIbiiDLeNeOCF7QH1zz2SGxSZQI9R0FIGKzc7M80t2OMWw4VkkFhpgrFLP5lwKLB sxkX5o9oiME7rzLU5ZXqasi1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbFE0H82C pjdEyjtScc37d99A6UYwHwYDVR0jBBgwFoAUxvdY7N3EybD3LwZcNa1UaXQycRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4REY1LzMxRTBGMTZBRjk2 MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHZkWTdOM0V5YkQzTHdaY05hMVVhWFF5Y1JzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 REY1LzMxRTBGMTZBRjk2MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJE M0x3WmNOYTFVYVhReWNScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABMeE3b8T42uWfdPLsKVDszXLVA98ls4Gpz1lCfPcV2oxsiVKIfNHuxX AoAwutZA8qYSDEKLytCa0kyZNKd1RmEcF1SwEDQSqb7Wk5A1P1/CrqDytkZXri6Q vxzeAHz0SyYINi4PBJ/Ub3g2g95xFS3wgXPhoMTUB2Bsze2zcrWAF9G0K0wGl7tx vUHYh3t45Vxgw3W3yJNuXjyLqKxOoJPdquDj+RQ3tKSGDOeUyBJq5WaSWLPV3fez F1ZLAwLRNEns8jzW5e6IPksVI4lftbZrTK3omx9KMkvlO0PAZ5mq5X6Bo89Qmjl/ TDjF1J0JnyvS7AB3YcpwiUKsfpdAs/U= -----END CERTIFICATE-----Generated at Thu Mar 13 09:36:27 2025 by rpki-client