$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json) Hash identifier: JMKrFKGjR8AtCgI1aSzkj7kZnrFdr8yOARZ9jNTaaTg= Subject key identifier: 7C:45:C7:43:60:A8:67:6A:3C:D3:15:15:2C:32:69:F3:A1:A5:4D:49 Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Certificate serial: 2520 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft Manifest number: 2512 Signing time: Mon 12 May 2025 15:39:43 +0000 Manifest this update: Mon 12 May 2025 15:39:43 +0000 Manifest next update: Mon 19 May 2025 15:39:43 +0000 Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: 9tUJWNnO3Z6lqd5LF4bZs2p4V9tTJXlQbdHMYY93oBU=) 2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: bILzWIi7SfN0oZ29P+We7rkWjU1abIhmL+TRmVZttNg=) 3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: A+fjTwtG6/7wteTJpdAw9ZNsTS7E+yeIkAmgl1S9yHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9504 (0x2520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Validity Not Before: May 12 15:39:43 2025 GMT Not After : May 19 15:39:43 2025 GMT Subject: CN=6822163f-4c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:fd:98:27:74:86:6b:ac:49:ef:1a:05:06: 1b:36:2f:3e:4e:9a:be:2b:8d:81:1c:88:04:a2:c0: 62:4c:15:8d:16:e7:8e:1e:96:46:28:e1:f3:b1:d6: 01:63:9e:74:f1:94:79:6c:aa:f3:cd:60:87:4e:93: c6:1e:02:38:25:3b:bc:2f:93:0b:5d:8f:8f:c7:0a: 4e:34:f2:14:39:92:f6:56:34:59:2b:27:a1:90:f2: b0:87:51:8b:81:c1:bf:c6:26:0e:04:54:e4:14:ee: 8b:4a:d8:29:fd:03:3b:ea:ab:4d:e2:a2:bb:22:4a: 1d:c2:86:3e:83:78:e5:22:be:cc:59:81:5d:6a:6e: b9:92:ff:b3:d9:dc:63:20:03:df:28:41:c2:64:af: 8d:5d:78:6e:9b:1e:b0:a2:c3:1c:8c:9c:00:23:24: b3:4e:43:7d:34:92:be:5f:76:86:8d:b6:94:2f:21: 70:6f:5b:a0:5d:5f:4d:a6:ee:86:05:a8:2d:e1:a7: b9:f5:de:a3:85:8d:5f:9d:ac:43:a3:31:45:4f:e7: d9:3d:e4:b2:c6:bc:c9:82:21:7e:9e:fc:33:fe:b7: c6:d6:dc:10:17:f0:3b:5f:36:7f:31:51:34:8a:b8: 82:10:30:e2:43:3f:9b:95:bc:80:1f:61:cb:76:bc: 4e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:45:C7:43:60:A8:67:6A:3C:D3:15:15:2C:32:69:F3:A1:A5:4D:49 X509v3 Authority Key Identifier: keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:a7:1c:df:ab:ae:40:6f:14:14:62:f6:ac:11:0a:c2:27:27: 52:a4:bc:f5:35:d1:c5:45:82:22:b7:d9:82:9b:1a:35:3b:b4: ba:a8:14:65:59:8f:17:fb:cb:25:7c:37:b4:7f:22:c1:06:d2: 81:ab:b6:b4:37:47:17:86:91:fb:d6:75:c8:8b:0a:c3:91:f3: ac:cb:7e:32:00:23:de:ff:2d:0e:97:2e:74:e7:f9:c5:0c:85: 91:ba:1e:29:16:71:78:66:01:e9:df:4d:0d:b1:33:34:8e:2a: d2:e0:da:cb:12:1c:96:79:87:f0:55:28:b9:c7:af:94:9b:1b: 2a:6b:63:67:40:ea:6b:0d:13:c3:d1:25:4b:2c:7d:d9:5f:f6: 54:9e:3a:0c:b3:9d:3d:35:e9:a4:26:bc:e8:28:46:55:48:d0: 1f:91:41:3a:37:9e:6b:34:79:b9:9a:f1:bd:4b:c5:e3:fa:88: 83:04:b7:f5:5f:a5:de:cb:b9:58:b3:6c:29:cc:cc:d1:6c:ba: 17:3d:aa:2e:b5:93:90:b5:e9:10:60:c4:c9:05:11:68:f0:26: 49:5e:86:bf:7a:82:74:1b:eb:9c:81:6e:d8:12:2f:a0:e1:b0: a7:6a:61:c0:3e:33:8f:e3:f5:f6:a6:66:2d:63:5d:03:c8:e1: a9:81:d4:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND MjdFQUQ4RUQwHhcNMjUwNTEyMTUzOTQzWhcNMjUwNTE5MTUzOTQzWjAYMRYwFAYD VQQDEw02ODIyMTYzZi00YzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgz9mCd0hmusSe8aBQYbNi8+Tpq+K42BHIgEosBiTBWNFueOHpZGKOHzsdYB Y5508ZR5bKrzzWCHTpPGHgI4JTu8L5MLXY+PxwpONPIUOZL2VjRZKyehkPKwh1GL gcG/xiYOBFTkFO6LStgp/QM76qtN4qK7IkodwoY+g3jlIr7MWYFdam65kv+z2dxj IAPfKEHCZK+NXXhumx6wosMcjJwAIySzTkN9NJK+X3aGjbaULyFwb1ugXV9Npu6G Bagt4ae59d6jhY1fnaxDozFFT+fZPeSyxrzJgiF+nvwz/rfG1twQF/A7XzZ/MVE0 iriCEDDiQz+blbyAH2HLdrxOTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxFx0Ng qGdqPNMVFSwyafOhpU1JMB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2 RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx V2JBU3llaVpxdFBDZnEyTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7pxzfq65AbxQUYvasEQrCJydSpLz1NdHFRYIit9mCmxo1O7S6qBRl WY8X+8slfDe0fyLBBtKBq7a0N0cXhpH71nXIiwrDkfOsy34yACPe/y0Oly505/nF DIWRuh4pFnF4ZgHp300NsTM0jirS4NrLEhyWeYfwVSi5x6+Umxsqa2NnQOprDRPD 0SVLLH3ZX/ZUnjoMs509NemkJrzoKEZVSNAfkUE6N55rNHm5mvG9S8Xj+oiDBLf1 X6Xey7lYs2wpzMzRbLoXPaoutZOQtekQYMTJBRFo8CZJXoa/eoJ0G+ucgW7YEi+g 4bCnamHAPjOP4/X2pmYtY10DyOGpgdRQ -----END CERTIFICATE-----Generated at Tue May 13 10:06:41 2025 by rpki-client