$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: udCmSLDp69vNd2C+B3rAxqQFkaX7TzsCGaJpWjiP7a4= Subject key identifier: CE:B8:BE:B7:01:46:2F:86:A7:38:49:60:E8:A6:43:8E:4E:6E:60:F1 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 0330 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 031A Signing time: Sat 31 May 2025 01:25:09 +0000 Manifest this update: Sat 31 May 2025 01:25:09 +0000 Manifest next update: Sat 07 Jun 2025 01:25:09 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: JDARkFxJ1Fo8BBaJbAJlw4QmTSxw5K3eOHbVsRPsDtM=) 2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: +2b/qGdWsAWR/BKJskTGfjOIk8WF3Jjfuxvh9LPPuaA=) 3: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: QkUOxUdOqeDJq40oU7W9ZvA1XabLukGzl2cHkw2yMIw=) 4: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: 6J35YVUmzZ1s4Ice2keaYAnPdVe/zMmpQD23cIxvFqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816 (0x330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: May 31 01:25:09 2025 GMT Not After : Jun 7 01:25:09 2025 GMT Subject: CN=683a5a75-d5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:df:f0:cb:79:2e:ac:48:9b:1e:ae:1d:f0: e8:93:0d:64:d5:c8:63:47:80:9d:d5:83:c6:90:b6: a6:cf:80:ec:64:45:5a:fe:9b:4a:b1:9e:a9:76:20: 86:cd:33:d4:67:de:7c:ec:14:00:4f:f4:e8:a1:0e: fb:8b:8f:8c:18:20:e2:a4:16:0c:4e:5b:a9:5e:df: 28:8d:49:f4:a0:02:b7:34:22:ec:56:89:9c:f5:a5: 91:4c:49:94:56:56:80:e7:51:cc:d9:06:c5:bf:aa: f8:76:c2:30:1e:c7:ec:15:a6:e3:76:3e:08:3e:75: f1:f4:38:f1:77:83:a4:c6:05:d3:c7:b0:f5:c2:f8: 71:a1:9f:b7:c5:71:38:a7:2a:1f:c0:74:cb:65:8e: 4a:9a:2a:ea:72:6a:fa:e3:16:69:f8:f2:95:a4:aa: 68:64:2c:65:0b:f1:41:c1:8e:fd:86:81:cf:13:c0: a8:fd:cc:ab:8e:30:0c:e4:2b:0c:56:8a:c6:cf:aa: 06:42:41:d4:e0:69:35:3f:4a:8a:48:73:d9:90:42: e9:5f:c0:37:b7:98:35:13:93:3f:2e:76:5b:76:31: 0a:b8:1b:17:86:93:cb:05:11:9e:ef:90:ab:7f:c2: 6a:49:a5:86:32:00:0b:a9:03:d4:6c:d3:06:66:86: 3a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B8:BE:B7:01:46:2F:86:A7:38:49:60:E8:A6:43:8E:4E:6E:60:F1 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:7a:66:63:bf:49:22:d5:6a:7f:cd:b7:85:ce:f9:6a:8c:b5: fd:bd:1a:da:b9:c8:4f:3c:1c:6d:71:ea:76:46:a5:cc:0e:d9: d1:ea:9f:8f:6a:cc:7d:63:6c:4a:89:dd:c8:b4:eb:54:24:5d: 68:17:30:ba:38:9e:32:ce:33:a7:0d:cd:2a:58:27:c2:9e:60: 41:a1:9d:31:59:44:cb:a5:91:f4:06:87:68:4d:21:a8:d1:78: 78:db:0b:d1:3b:44:d6:aa:50:0e:0c:27:2e:d1:81:0b:38:6f: 09:df:d8:5c:4e:65:23:a1:c9:2f:f5:c7:d3:c6:21:27:25:73: 8f:ef:6b:93:bc:20:0b:ce:0a:4c:52:70:83:7e:86:97:09:dd: 39:77:8e:f4:ab:d5:7f:fc:d3:5d:67:0b:c7:e5:05:60:c5:fe: ca:64:e3:e0:fe:de:93:a3:25:5a:16:85:17:8f:36:65:07:10: 8d:d7:9a:ce:47:f8:8a:cd:74:26:38:e4:09:84:53:1b:c7:44: b6:eb:d9:f9:7a:3a:e0:e3:ab:ee:74:e3:c1:59:a9:7d:e5:db: 58:a2:b8:e0:72:37:b0:9d:5a:a8:d2:35:ba:1a:38:7a:5f:28: a0:aa:b9:07:ab:08:ec:ab:b0:b0:83:b2:5b:00:fa:ac:82:08: d3:4a:a4:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjUwNTMxMDEyNTA5WhcNMjUwNjA3MDEyNTA5WjAYMRYwFAYD VQQDEw02ODNhNWE3NS1kNWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyr3f8Mt5LqxImx6uHfDokw1k1chjR4Cd1YPGkLamz4DsZEVa/ptKsZ6pdiCG zTPUZ9587BQAT/TooQ77i4+MGCDipBYMTlupXt8ojUn0oAK3NCLsVomc9aWRTEmU VlaA51HM2QbFv6r4dsIwHsfsFabjdj4IPnXx9Djxd4OkxgXTx7D1wvhxoZ+3xXE4 pyofwHTLZY5Kmirqcmr64xZp+PKVpKpoZCxlC/FBwY79hoHPE8Co/cyrjjAM5CsM VorGz6oGQkHU4Gk1P0qKSHPZkELpX8A3t5g1E5M/LnZbdjEKuBsXhpPLBRGe75Cr f8JqSaWGMgALqQPUbNMGZoY6JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM64vrcB Ri+GpzhJYOimQ45ObmDxMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDemZjv0ki1Wp/zbeFzvlqjLX9vRrauchPPBxtcep2RqXMDtnR6p+P asx9Y2xKid3ItOtUJF1oFzC6OJ4yzjOnDc0qWCfCnmBBoZ0xWUTLpZH0BodoTSGo 0Xh42wvRO0TWqlAODCcu0YELOG8J39hcTmUjockv9cfTxiEnJXOP72uTvCALzgpM UnCDfoaXCd05d470q9V//NNdZwvH5QVgxf7KZOPg/t6ToyVaFoUXjzZlBxCN15rO R/iKzXQmOOQJhFMbx0S269n5ejrg46vudOPBWal95dtYorjgcjewnVqo0jW6Gjh6 XyigqrkHqwjsq7Cwg7JbAPqsggjTSqTy -----END CERTIFICATE-----Generated at Sat May 31 15:01:21 2025 by rpki-client