$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json) Hash identifier: PMsWef1sDXvnYC7RUkeGhgCGNBKXLF/oqwRr8OuJ4po= Subject key identifier: FC:92:D5:BA:AE:15:D6:ED:96:BD:E4:32:1D:26:31:9E:78:9D:50:1E Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Certificate serial: 0472 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft Manifest number: 0466 Signing time: Sat 31 May 2025 00:20:37 +0000 Manifest this update: Sat 31 May 2025 00:20:36 +0000 Manifest next update: Sat 07 Jun 2025 00:20:36 +0000 Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: 5TVw++rJJowMHSW4zl2y4jnoDCrMtkZzpssIv8grVeo=) 2: 11330A4663F611ECB344F979C4F9AE02.roa (hash: EUhD1CogfYx019LqOHk5ZADPXKjO2pURWvfLLk3fqG8=) 3: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: 0C7V986gHLfF3RPO5trmAPFLdLtlvzlCJ3+47YeVJHU=) 4: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: CMOccFw4JW9T0ieBo3En9p6kBriebw6aKjGeEamJ19Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1138 (0x472) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Validity Not Before: May 31 00:20:36 2025 GMT Not After : Jun 7 00:20:36 2025 GMT Subject: CN=683a4b55-3061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:72:4b:4c:ad:84:6b:a4:30:c7:b0:06:74:26: 77:89:0e:22:b0:ae:05:25:12:fd:e3:ce:58:dd:86: 8c:70:ce:3a:d0:a2:71:e6:27:65:50:8a:0b:b5:68: 69:67:41:2f:4d:36:b7:03:9e:a3:d5:d1:11:8f:df: e2:ea:0f:17:b0:b6:b5:a3:60:95:0b:30:3a:4f:0b: 24:e5:7b:39:35:de:71:d0:8f:de:85:46:24:f5:bd: d2:b3:7c:01:c5:91:24:74:9e:c3:3d:b2:4b:2c:d1: d8:97:17:96:4f:9c:04:29:90:ce:85:8c:d3:96:16: cf:24:d6:eb:9b:3d:0c:cf:df:77:df:66:56:48:c0: 03:f2:85:b1:a2:27:94:54:86:00:91:db:68:c9:e3: 69:9b:a1:71:e3:be:65:0c:8d:6b:4a:39:c9:3a:b8: 25:bd:64:d1:b2:f3:6b:ac:b6:73:5e:f9:8a:13:e1: 1f:5b:0b:de:ff:26:61:41:93:c4:c6:74:4e:79:7a: 12:f4:f5:62:62:f1:9d:17:73:a3:f1:4c:0f:01:02: ca:0f:79:f3:a5:e5:d7:f6:64:f9:42:22:f8:aa:39: a3:64:ec:c8:49:fa:8e:09:a0:87:a1:49:70:dd:5e: 45:93:82:a9:7b:e8:f3:a2:f0:bf:fd:a2:97:d5:7f: 0a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:92:D5:BA:AE:15:D6:ED:96:BD:E4:32:1D:26:31:9E:78:9D:50:1E X509v3 Authority Key Identifier: keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:4d:29:af:e1:32:6a:95:a1:3a:e5:08:4b:5b:a0:16:81:3b: 84:71:c0:3b:15:bf:c9:d0:af:2d:2f:0e:bc:49:d6:11:8a:28: 33:8e:6f:b9:68:a4:57:00:06:4e:b9:53:10:d2:8e:44:54:70: 6f:56:50:5c:de:eb:5c:c8:67:3e:66:20:a2:cb:cf:e0:cd:1d: 6e:86:d3:0c:56:33:3b:12:2d:77:09:97:87:57:8a:1c:e4:36: 2a:6e:f0:18:4b:ae:81:48:1f:bb:89:bb:51:41:77:25:8a:d6: d4:5c:ba:ce:73:56:bc:79:c7:9b:2a:2a:35:f2:f0:68:07:3e: 7c:cf:da:b0:84:f4:2d:a6:44:1d:7b:d9:c7:58:a5:b1:b9:c3: 3f:01:4d:f0:dc:4c:66:e0:8c:e1:e0:fa:03:eb:c7:5d:5d:bb: e0:5e:79:9b:bf:71:00:a7:67:cc:0b:c7:35:14:51:53:99:b3: 58:2f:3a:1c:b9:f3:d3:d9:ae:01:49:48:ff:e5:f1:d9:65:04: 69:62:1d:01:5f:21:e0:ce:29:fb:e3:fe:d7:21:c5:d7:30:10: 72:e5:ca:1c:29:bb:ed:d6:c0:01:8c:e1:5a:3b:62:c4:6b:58: 99:a4:c2:53:79:8b:68:6c:8d:e1:8a:24:68:91:e2:96:8c:98: 01:6a:05:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2 OTM4NUU2NTUwHhcNMjUwNTMxMDAyMDM2WhcNMjUwNjA3MDAyMDM2WjAYMRYwFAYD VQQDEw02ODNhNGI1NS0zMDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXJLTK2Ea6Qwx7AGdCZ3iQ4isK4FJRL9485Y3YaMcM460KJx5idlUIoLtWhp Z0EvTTa3A56j1dERj9/i6g8XsLa1o2CVCzA6Twsk5Xs5Nd5x0I/ehUYk9b3Ss3wB xZEkdJ7DPbJLLNHYlxeWT5wEKZDOhYzTlhbPJNbrmz0Mz99332ZWSMAD8oWxoieU VIYAkdtoyeNpm6Fx475lDI1rSjnJOrglvWTRsvNrrLZzXvmKE+EfWwve/yZhQZPE xnROeXoS9PViYvGdF3Oj8UwPAQLKD3nzpeXX9mT5QiL4qjmjZOzISfqOCaCHoUlw 3V5Fk4Kpe+jzovC//aKX1X8KQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyS1bqu Fdbtlr3kMh0mMZ54nVAeMB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0 SE1DdmtKa04yZ05wT0Y1bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnTSmv4TJqlaE65QhLW6AWgTuEccA7Fb/J0K8tLw68SdYRiigzjm+5 aKRXAAZOuVMQ0o5EVHBvVlBc3utcyGc+ZiCiy8/gzR1uhtMMVjM7Ei13CZeHV4oc 5DYqbvAYS66BSB+7ibtRQXclitbUXLrOc1a8ecebKio18vBoBz58z9qwhPQtpkQd e9nHWKWxucM/AU3w3Exm4Izh4PoD68ddXbvgXnmbv3EAp2fMC8c1FFFTmbNYLzoc ufPT2a4BSUj/5fHZZQRpYh0BXyHgzin74/7XIcXXMBBy5cocKbvt1sABjOFaO2LE a1iZpMJTeYtobI3hiiRokeKWjJgBagVd -----END CERTIFICATE-----Generated at Sat May 31 16:26:50 2025 by rpki-client