$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft File: xvdY7N3EybD3LwZcNa1UaXQycRs.mft (raw, json) Hash identifier: enkCg8n0evE6t9nbGyizK9d1WokR3L2zpblHhttrj2w= Subject key identifier: 24:60:46:BB:D9:87:63:77:51:AD:ED:F2:51:FC:95:69:6F:FB:6C:FB Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft Manifest number: 2F Signing time: Sat 31 May 2025 07:15:28 +0000 Manifest this update: Sat 31 May 2025 07:15:28 +0000 Manifest next update: Sat 07 Jun 2025 07:15:28 +0000 Files and hashes: 1: xvdY7N3EybD3LwZcNa1UaXQycRs.crl (hash: z8d2nqhpOX3d5mAWE+sPuNwdrvhS3Rf8Y/W2jnzLDpg=) 2: 8F9B067EF96011EF89D9E37DC4F9AE02.roa (hash: C4f1DGgr88zvtZI01sEk4X9+P0XVPyTaQ0X1w0t3gJE=) 3: 8F350932F96011EF89D9E37DC4F9AE02.roa (hash: EiButkFaJmxH2f9GmfvH+3lmi0BQDdaX71kUaJ4cIPE=) 4: 8EB1E9BCF96011EF89D9E37DC4F9AE02.roa (hash: ckgf3xD+pqJNwNoVSxIFNqkicDtbDleG9nDMcEDte9Q=) 5: 8E321A2AF96011EF89D9E37DC4F9AE02.roa (hash: /HkRVF6I9zCORm5qImKmX7p9VJKW5R3gl/2f3lxVKBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Validity Not Before: May 31 07:15:28 2025 GMT Not After : Jun 7 07:15:28 2025 GMT Subject: CN=683aac90-251d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:06:4b:0e:4c:d7:c6:d2:c4:3d:b3:fc:d6:05: 84:d5:73:8e:14:75:23:52:91:7c:bd:39:c3:9e:82: fb:9d:8e:23:02:28:07:f4:7a:1c:9c:c0:0c:3f:10: 6a:de:4e:01:28:5f:c0:c8:13:32:a8:58:69:5b:8b: eb:f7:8e:02:1c:22:28:bf:b8:ae:05:51:7f:41:fb: e5:70:cf:3e:a9:e8:18:2f:ff:34:2c:d7:dc:21:96: 8c:81:5a:93:3f:c0:e2:ed:c6:73:4f:6e:76:c4:c7: 2a:f1:b3:35:b0:25:b4:d3:56:63:c7:f7:bd:a8:90: 80:ee:23:71:a8:40:f1:24:7c:26:70:0e:d4:4b:b0: 63:70:e3:ef:37:ff:47:a1:1a:ec:ef:8f:12:bf:c6: 36:83:4d:eb:85:ca:12:5a:93:b1:ca:eb:97:e1:73: 36:c2:be:2a:bf:28:19:5d:35:8b:f8:9c:c5:39:db: 73:ef:6a:d8:3f:86:a4:43:df:2f:16:98:ca:b4:28: e3:85:df:5e:9b:58:29:da:f1:41:48:b6:17:85:14: 25:dc:8b:6a:ea:90:f4:7a:5e:dd:6c:d9:08:07:d3: 68:70:01:bc:08:10:d7:c0:75:a6:eb:22:27:9d:2d: 72:7c:9e:fb:07:85:ca:4f:b4:96:4c:7f:b6:6f:d1: 98:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:60:46:BB:D9:87:63:77:51:AD:ED:F2:51:FC:95:69:6F:FB:6C:FB X509v3 Authority Key Identifier: keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:d8:34:75:73:a5:5b:01:60:a0:50:87:43:a6:ba:01:62:ed: 48:ca:74:c3:61:e8:56:c4:9b:ed:6b:5c:bb:25:7e:32:44:b7: f1:e4:69:31:33:dc:f2:39:0a:35:57:5b:15:f7:75:6e:4d:eb: 91:0e:02:4f:be:3b:c4:e0:93:97:94:de:5e:b5:a9:cd:30:55: 6c:19:33:d8:6a:5d:da:7b:56:19:25:33:cb:fd:63:f6:e0:6e: 38:ae:ce:aa:5b:68:ab:17:5f:35:01:e4:9b:5e:73:b8:01:bd: 3c:dc:cc:40:19:31:42:f1:fd:d3:6a:a5:d2:74:a5:cf:e4:5e: 64:d9:c3:ae:bc:c2:f4:bf:a5:67:7c:22:f3:b6:3b:c9:67:41: ec:b1:dd:d1:45:d8:a3:6a:57:2e:4f:97:66:68:45:c7:1f:0b: 10:1e:c6:eb:7d:bf:91:bc:3e:1e:31:41:96:65:6f:2a:81:1d: 84:58:6d:63:42:6b:66:90:b2:f0:74:ba:58:5e:67:05:11:75: e1:6e:74:d7:3b:af:11:b3:49:65:cb:89:b2:2b:ce:0e:83:0e: 3c:1a:b3:4d:7c:c3:ed:d2:46:11:df:13:9e:f3:c8:48:09:73: b8:e8:0e:dc:53:22:4a:c2:a6:a6:87:51:fd:a9:86:f3:c0:77: a2:fa:eb:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OERGNTExMC8GA1UEBRMoQzZGNzU4RUNEREM0QzlCMEY3MkYwNjVDMzVBRDU0Njk3 NDMyNzExQjAeFw0yNTA1MzEwNzE1MjhaFw0yNTA2MDcwNzE1MjhaMBgxFjAUBgNV BAMTDTY4M2FhYzkwLTI1MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtBksOTNfG0sQ9s/zWBYTVc44UdSNSkXy9OcOegvudjiMCKAf0ehycwAw/EGre TgEoX8DIEzKoWGlbi+v3jgIcIii/uK4FUX9B++Vwzz6p6Bgv/zQs19whloyBWpM/ wOLtxnNPbnbExyrxszWwJbTTVmPH972okIDuI3GoQPEkfCZwDtRLsGNw4+83/0eh GuzvjxK/xjaDTeuFyhJak7HK65fhczbCviq/KBldNYv4nMU523Pvatg/hqRD3y8W mMq0KOOF316bWCna8UFItheFFCXci2rqkPR6Xt1s2QgH02hwAbwIENfAdabrIied LXJ8nvsHhcpPtJZMf7Zv0ZhNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJGBGu9mH Y3dRre3yUfyVaW/7bPswHwYDVR0jBBgwFoAUxvdY7N3EybD3LwZcNa1UaXQycRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4REY1LzMxRTBGMTZBRjk2 MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHZkWTdOM0V5YkQzTHdaY05hMVVhWFF5Y1JzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 REY1LzMxRTBGMTZBRjk2MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJE M0x3WmNOYTFVYVhReWNScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJbYNHVzpVsBYKBQh0OmugFi7UjKdMNh6FbEm+1rXLslfjJEt/HkaTEz 3PI5CjVXWxX3dW5N65EOAk++O8Tgk5eU3l61qc0wVWwZM9hqXdp7VhklM8v9Y/bg bjiuzqpbaKsXXzUB5Jtec7gBvTzczEAZMULx/dNqpdJ0pc/kXmTZw668wvS/pWd8 IvO2O8lnQeyx3dFF2KNqVy5Pl2ZoRccfCxAexut9v5G8Ph4xQZZlbyqBHYRYbWNC a2aQsvB0ulheZwURdeFudNc7rxGzSWXLibIrzg6DDjwas018w+3SRhHfE57zyEgJ c7joDtxTIkrCpqaHUf2phvPAd6L66zY= -----END CERTIFICATE-----Generated at Sat May 31 17:28:51 2025 by rpki-client