$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft File: Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json) Hash identifier: egploNHiZyhnO8UmesRbu92+BYWG0Svi3o1v7Q19DEk= Subject key identifier: B3:C8:4F:AD:17:00:46:08:D3:21:46:91:8F:01:18:13:48:22:94:CC Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E Certificate issuer: /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft Manifest number: AB Signing time: Tue 03 Jun 2025 05:54:21 +0000 Manifest this update: Tue 03 Jun 2025 05:54:21 +0000 Manifest next update: Tue 10 Jun 2025 05:54:21 +0000 Files and hashes: 1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: jkRc8g/5Ma9OPbp836z7w1ssN3hOZlI4wmUUyNMIAOY=) 2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: tpxknLltESXlXvrC8XRzEEbUw6cbAqdQTGW1X5phwoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A, serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E Validity Not Before: Jun 3 05:54:21 2025 GMT Not After : Jun 10 05:54:21 2025 GMT Subject: CN=683e8e0d-68a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:da:03:f8:25:c7:c6:92:d6:11:dd:f3:8f: 28:86:0a:e3:b0:f9:ed:64:d3:33:90:a4:cc:41:a2: 33:3b:8b:cb:ee:d4:41:c8:99:e9:bb:0e:ad:02:d1: 0c:4d:ee:3c:5e:ac:b0:fe:36:fd:5a:ce:21:c5:3f: 03:69:1e:87:06:ef:d5:88:c0:56:83:82:23:72:c9: d7:89:b2:46:a0:c2:f8:98:2a:91:e7:c3:40:a8:0f: b4:07:35:33:1a:24:32:d4:08:c7:4a:15:bd:32:d8: bd:e0:06:90:3c:7d:79:8b:c6:b2:ee:94:e7:89:8d: 94:26:d2:a3:c1:e1:b3:dc:16:8f:35:50:ff:09:94: 75:8a:c1:2a:35:c3:26:93:7f:44:83:9a:00:05:4e: f2:54:d8:f9:d4:cf:14:3a:80:e5:8c:1f:96:8c:7c: 65:4e:0b:cd:c6:1e:7b:35:f4:d3:19:0d:eb:25:e4: 53:29:85:e1:73:55:88:42:e4:ae:33:1c:8f:35:16: 2d:df:3a:1b:8f:e7:bd:25:b2:d9:95:9a:1a:99:ad: a5:0f:40:7e:91:7d:43:eb:a2:38:48:16:b8:ed:35: 75:5b:00:cb:86:0d:1d:68:09:6c:c1:af:b4:5b:b2: c9:12:5a:23:b0:df:2e:be:dc:df:0e:7b:d4:ee:30: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C8:4F:AD:17:00:46:08:D3:21:46:91:8F:01:18:13:48:22:94:CC X509v3 Authority Key Identifier: keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:59:0e:e9:fd:a9:74:cc:60:9c:37:18:93:bd:d7:ff:19:ef: d0:66:f5:2c:76:0c:b9:02:1e:be:55:69:88:bc:e4:1d:f7:fa: 1f:4d:ea:0b:d5:ce:b7:c3:38:79:f1:c0:51:d9:71:ec:c2:36: 94:d1:0e:3d:57:1c:5f:67:19:82:d7:3f:c2:7f:05:a7:38:4b: cf:18:45:9b:fc:36:a1:2a:cf:8a:a2:dc:ba:ca:cf:17:28:4e: e4:df:f2:2f:ba:75:db:8b:17:21:c3:58:f0:bb:2a:9c:fa:3f: f5:65:db:c8:29:c0:3d:4a:e0:50:e0:5d:f1:2b:d8:3e:65:1a: 08:44:cc:a1:76:55:d4:ae:cb:b7:c8:be:e6:16:3f:ce:1c:27: bf:ed:5c:91:bd:1b:b9:ba:57:d2:85:7d:ef:3c:91:31:b0:02: 74:4f:d5:7e:7b:f2:da:ba:2c:88:15:98:01:7b:eb:8b:95:0f: a6:29:0f:b8:7c:fb:77:44:28:7b:29:c3:4d:81:90:65:5b:e6: 46:68:ae:83:f5:51:c2:4c:fd:2b:39:fc:ba:1a:fb:1b:7c:5d: a7:64:05:56:11:81:d6:b1:f8:6d:6c:6f:0a:35:d7:48:cb:77: 18:0f:b4:99:19:94:25:a9:6e:10:4a:bc:e9:cc:8a:f3:82:99: df:64:0f:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDVGMUVFODJCRjcwOUEyNkNDMDAwOTk1QjQ3NDgxRTU0 RjZGMzgwNkUwHhcNMjUwNjAzMDU1NDIxWhcNMjUwNjEwMDU1NDIxWjAYMRYwFAYD VQQDEw02ODNlOGUwZC02OGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZnaA/glx8aS1hHd848ohgrjsPntZNMzkKTMQaIzO4vL7tRByJnpuw6tAtEM Te48Xqyw/jb9Ws4hxT8DaR6HBu/ViMBWg4IjcsnXibJGoML4mCqR58NAqA+0BzUz GiQy1AjHShW9Mti94AaQPH15i8ay7pTniY2UJtKjweGz3BaPNVD/CZR1isEqNcMm k39Eg5oABU7yVNj51M8UOoDljB+WjHxlTgvNxh57NfTTGQ3rJeRTKYXhc1WIQuSu MxyPNRYt3zobj+e9JbLZlZoama2lD0B+kX1D66I4SBa47TV1WwDLhg0daAlswa+0 W7LJElojsN8uvtzfDnvU7jD1KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPIT60X AEYI0yFGkY8BGBNIIpTMMB8GA1UdIwQYMBaAFF8e6Cv3CaJswACZW0dIHlT284Bu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wM0IwNTJENDNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9YeDdvS19jSm9tekFBSmxiUjBnZVZQYnpn RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1h4N29LX2NKb216QUFKbGJSMGdlVlBiemdHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wM0IwNTJENDNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9YeDdvS19jSm9t ekFBSmxiUjBnZVZQYnpnRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6WQ7p/al0zGCcNxiTvdf/Ge/QZvUsdgy5Ah6+VWmIvOQd9/ofTeoL 1c63wzh58cBR2XHswjaU0Q49VxxfZxmC1z/CfwWnOEvPGEWb/DahKs+Koty6ys8X KE7k3/IvunXbixchw1jwuyqc+j/1ZdvIKcA9SuBQ4F3xK9g+ZRoIRMyhdlXUrsu3 yL7mFj/OHCe/7VyRvRu5ulfShX3vPJExsAJ0T9V+e/LauiyIFZgBe+uLlQ+mKQ+4 fPt3RCh7KcNNgZBlW+ZGaK6D9VHCTP0rOfy6GvsbfF2nZAVWEYHWsfhtbG8KNddI y3cYD7SZGZQlqW4QSrzpzIrzgpnfZA+S -----END CERTIFICATE-----Generated at Wed Jun 4 00:00:30 2025 by rpki-client