$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json) Hash identifier: sYKaMdE6lrv2xEKmtVxcy6+ZIuK6/SSzrRiQNf/keSY= Subject key identifier: 3F:9B:BA:59:59:C8:AF:F4:DC:BE:C8:44:38:D7:EB:41:91:3C:D2:74 Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 06BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft Manifest number: 06AC Signing time: Wed 14 May 2025 22:14:36 +0000 Manifest this update: Wed 14 May 2025 22:14:36 +0000 Manifest next update: Wed 21 May 2025 22:14:36 +0000 Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: vIcQ4EzNAKqj1VFFmXm8+tAz9PIUwxXAVAHcNv1gLDk=) 2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: SQlrc6PCUPjaaBm+jKtjnbQxZYJxO/Vi8PJnTLD4+DE=) 3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: ez5zyisrlhzGt4msn6K1G9iNl7wli7TiUZuA1FWHYm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1723 (0x6bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Validity Not Before: May 14 22:14:36 2025 GMT Not After : May 21 22:14:36 2025 GMT Subject: CN=682515cc-eaf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:20:18:9c:df:11:73:cf:c9:8c:58:f1:10: 9b:cb:65:43:c0:c3:f3:7e:00:b4:11:d7:2d:59:ef: b2:aa:d4:fd:68:56:8f:c5:f8:ae:ab:2b:9f:c0:f4: 92:ac:04:62:bb:09:1a:68:2a:e4:f8:bc:f3:e0:f4: 3e:6e:a3:75:8e:43:13:bb:8b:0d:67:6f:95:ad:38: 71:7d:92:2c:8c:e8:81:61:5a:96:d7:6a:2f:45:b1: 33:f9:c9:3e:f6:1c:02:0b:65:2a:2d:b3:1c:8a:ed: bf:7d:de:49:68:42:2c:3d:c3:0b:8c:25:33:2e:3e: a3:6b:af:35:42:d9:3b:a1:6d:bb:ae:b4:33:78:fe: 9b:86:9b:7c:55:a0:8f:2a:f2:65:34:05:03:53:35: d9:22:f8:56:ff:8c:1c:60:79:d5:67:c9:42:79:03: f3:56:2c:e5:9f:78:7e:88:51:45:d8:b0:02:3e:39: 9b:20:80:e8:c3:94:91:d2:31:1d:4e:64:1f:82:fa: ba:55:9b:5c:a0:f6:63:41:d9:8c:c1:f2:c5:d5:4f: 75:32:39:f0:14:71:71:2c:ea:67:1d:e7:30:58:58: bf:e9:fd:7f:b6:d7:52:a6:bc:5c:7c:25:10:c5:58: e2:89:10:77:31:b8:7f:b4:b4:37:99:cc:41:b6:dc: 67:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:9B:BA:59:59:C8:AF:F4:DC:BE:C8:44:38:D7:EB:41:91:3C:D2:74 X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c9:b9:ae:91:c6:a7:3a:0d:f2:1e:29:8c:ee:3f:19:f9:02: 57:05:35:34:42:44:f1:ba:f6:22:3f:e4:e5:48:0d:1b:f1:93: 83:c4:95:5a:d6:b5:be:c5:46:ad:d3:2c:60:f8:f3:b8:f9:fd: f5:f0:37:0d:6b:3b:f4:99:2b:b2:48:34:10:fb:69:85:6f:81: 33:e6:cc:ce:5e:8c:bd:59:d4:87:2e:e6:21:46:42:7c:ac:5d: f8:62:57:e2:b8:53:aa:cf:91:dc:f2:92:b3:8b:f4:33:b8:f2: 2e:f5:b6:92:87:e0:57:77:18:24:39:89:a5:76:17:55:60:a9: 38:54:e0:3a:39:9c:94:0c:60:c7:62:cc:23:25:2f:27:cc:9a: 95:73:bc:03:ed:10:a9:bb:c2:16:03:59:ac:a1:c1:31:1d:9c: 5c:0b:3a:b9:1e:4a:96:d9:11:32:84:b8:fd:b5:35:e8:b1:24: 67:1c:30:88:1f:87:7d:52:7f:8d:96:ff:74:dc:8f:2f:c7:2b: c9:d0:ba:1e:fd:4f:ce:6a:08:32:ff:9f:83:4d:30:de:da:c3: 6f:8c:69:32:e6:d9:c6:53:bb:96:ff:fa:06:54:c7:28:5e:5b: 3f:d9:34:0a:a3:80:e2:af:af:5c:d2:09:de:ca:fc:14:f3:90: 74:09:fb:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjUwNTE0MjIxNDM2WhcNMjUwNTIxMjIxNDM2WjAYMRYwFAYD VQQDEw02ODI1MTVjYy1lYWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtL8gGJzfEXPPyYxY8RCby2VDwMPzfgC0EdctWe+yqtT9aFaPxfiuqyufwPSS rARiuwkaaCrk+Lzz4PQ+bqN1jkMTu4sNZ2+VrThxfZIsjOiBYVqW12ovRbEz+ck+ 9hwCC2UqLbMciu2/fd5JaEIsPcMLjCUzLj6ja681Qtk7oW27rrQzeP6bhpt8VaCP KvJlNAUDUzXZIvhW/4wcYHnVZ8lCeQPzVizln3h+iFFF2LACPjmbIIDow5SR0jEd TmQfgvq6VZtcoPZjQdmMwfLF1U91MjnwFHFxLOpnHecwWFi/6f1/ttdSprxcfCUQ xVjiiRB3Mbh/tLQ3mcxBttxniwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+bullZ yK/03L7IRDjX60GRPNJ0MB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5 WDZPV2hCdTNjOW9WOXdCb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNybmukcanOg3yHimM7j8Z+QJXBTU0QkTxuvYiP+TlSA0b8ZODxJVa 1rW+xUat0yxg+PO4+f318DcNazv0mSuySDQQ+2mFb4Ez5szOXoy9WdSHLuYhRkJ8 rF34YlfiuFOqz5Hc8pKzi/QzuPIu9baSh+BXdxgkOYmldhdVYKk4VOA6OZyUDGDH YswjJS8nzJqVc7wD7RCpu8IWA1msocExHZxcCzq5HkqW2REyhLj9tTXosSRnHDCI H4d9Un+Nlv903I8vxyvJ0Loe/U/Oaggy/5+DTTDe2sNvjGky5tnGU7uW//oGVMco Xls/2TQKo4Dir69c0gneyvwU85B0Cfta -----END CERTIFICATE-----Generated at Thu May 15 18:18:15 2025 by rpki-client