$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json) Hash identifier: znPKo2VgiPi/W8E1UpxHEYFnTPZt23XKZJUUZL13Frw= Subject key identifier: 07:8C:B9:F9:D0:2A:A6:DE:78:C1:85:E9:EF:5D:1A:D4:B7:C3:56:AD Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7D68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft Manifest number: 4824 Signing time: Sat 10 May 2025 16:56:07 +0000 Manifest this update: Sat 10 May 2025 16:56:06 +0000 Manifest next update: Sat 17 May 2025 16:56:06 +0000 Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: jH5z2n7DpVKKg+yk9eeL2jLHapkCNmljnH//SogsbPE=) 2: 93933F8EB8E311EF94962C19C4F9AE02.roa (hash: oYu2WZprVxTGWmaXSTiX/1vi0KQUS49PpwwkujTaQnM=) 3: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: DKjdHPHX9uK/7sXdnl0CnoAUxvUfxg2iDv7piZLbE+g=) 4: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: bo2MU7FnWVB61bLgSeX3nMyKR524oPoEbjubyqJ1GeY=) 5: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: vN9wyIhoEAvL0Ppx9rHt6RaOh++3jtvNmxs0UWEaa1k=) 6: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: CbTGgfEWFtslvO2wALZJ+DSTt60SxWMiq0xTARE85r4=) 7: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: IaM5JoKkMFAzjZpn+sEYIwIyVW6+qhIz6t87EVXHjEI=) 8: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: aTECUl8KOBHDuvj6RQo/fOOhivuGrPAhZR0mAtm2uuY=) 9: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: fq/qWIdl/zMbQPXZZ52zcLgyQibFEjxrMjtOCJGOy18=) 10: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: zvj9UK8T+8CC31S1QfeLyCh52ggJamqXxF9Th/UxIhc=) 11: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: colPM8HZ1vvIi6XidfSQJiOmkoAqKV69tfTn2aphAGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32104 (0x7d68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: May 10 16:56:06 2025 GMT Not After : May 17 16:56:06 2025 GMT Subject: CN=681f8526-e318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:ef:31:48:45:82:25:ef:1f:84:0e:19:42: 30:af:88:45:10:19:ee:21:24:30:f9:4b:97:09:81: bb:5c:2c:65:e3:67:4e:14:65:24:fe:7f:40:5e:e4: 16:04:02:b4:d5:55:fb:b6:bb:d3:df:ae:77:93:f4: e0:27:19:79:d0:41:8d:dc:f0:21:51:46:a0:9d:7b: 5d:85:3c:55:16:df:24:75:80:5f:41:2e:aa:4a:b0: 16:cd:31:d3:2e:37:c6:21:6b:70:6a:c5:66:69:80: 2f:79:e2:4c:a9:d8:56:67:5a:06:c0:51:35:ca:20: 2b:6b:f0:db:84:1c:c2:14:f3:4c:b1:56:3a:c6:28: c8:c7:0c:a1:73:eb:56:66:27:99:86:37:e0:3b:5d: 7a:b4:d4:9d:36:ee:ff:51:44:17:c8:d4:c0:7b:1e: f0:69:49:68:01:f5:53:37:d7:2c:97:45:b9:88:75: 14:da:50:46:87:79:bc:50:8d:2a:79:70:0b:5e:74: 6d:9b:1e:5c:ca:b4:ac:ab:8e:79:55:a6:80:a8:b7: 70:00:8b:89:49:9d:6d:1a:ee:16:7b:a4:85:e2:d1: b6:d3:d8:00:34:a5:ba:c2:19:7c:e5:bd:ca:63:b1: dd:be:ef:29:07:ec:39:99:6e:d8:08:ae:8a:c0:1a: 2d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8C:B9:F9:D0:2A:A6:DE:78:C1:85:E9:EF:5D:1A:D4:B7:C3:56:AD X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:49:82:fd:38:52:17:a4:fd:16:60:4c:6d:8a:38:eb:ea:60: 35:80:2f:a2:dc:b4:96:c0:68:8f:15:e1:36:d1:2a:a7:f5:5f: 3a:e5:b1:ab:c0:ef:f0:f6:cc:31:9a:f0:40:7e:80:02:c0:d5: f8:16:29:16:b0:d8:89:1c:b2:77:9c:7e:86:5a:24:32:bd:6b: b7:2e:a1:98:68:8e:81:13:22:f2:b6:a3:86:b4:18:aa:bb:bf: b4:ad:40:a0:46:01:e1:55:76:f0:bd:c5:ae:3c:65:db:70:b9: 66:2d:8f:31:85:14:1d:21:d7:fa:3f:c7:78:32:90:9f:dd:7b: af:2a:f0:63:8d:17:6d:01:35:f8:ec:91:ba:60:52:6c:4e:19: 5d:61:de:5b:f4:b3:56:e6:42:a1:a9:60:36:d6:84:df:af:73: dc:73:e7:2c:85:60:e6:9a:30:fb:16:c2:5f:06:0a:d3:a4:b4: ce:8d:a4:c2:f5:95:c1:9f:7b:a4:af:48:9e:80:7a:73:87:e1: 57:52:fc:6f:a4:e4:cc:56:73:4e:0f:19:82:5d:d0:94:df:d4: 7e:00:03:b4:b6:30:bd:b2:4b:ab:a8:80:37:63:eb:ee:67:7c: 16:43:ce:99:e3:4c:3c:ff:98:44:57:34:eb:d8:73:c6:b9:eb: c8:13:7e:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICfWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjUwNTEwMTY1NjA2WhcNMjUwNTE3MTY1NjA2WjAYMRYwFAYD VQQDEw02ODFmODUyNi1lMzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJvvMUhFgiXvH4QOGUIwr4hFEBnuISQw+UuXCYG7XCxl42dOFGUk/n9AXuQW BAK01VX7trvT3653k/TgJxl50EGN3PAhUUagnXtdhTxVFt8kdYBfQS6qSrAWzTHT LjfGIWtwasVmaYAveeJMqdhWZ1oGwFE1yiAra/DbhBzCFPNMsVY6xijIxwyhc+tW ZieZhjfgO116tNSdNu7/UUQXyNTAex7waUloAfVTN9csl0W5iHUU2lBGh3m8UI0q eXALXnRtmx5cyrSsq455VaaAqLdwAIuJSZ1tGu4We6SF4tG209gANKW6whl85b3K Y7Hdvu8pB+w5mW7YCK6KwBotwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeMufnQ KqbeeMGF6e9dGtS3w1atMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTAwRC9GQ0RDRDNBMEFDOUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJC Sk9kWkx1MG9tZTlYaVNFUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNSYL9OFIXpP0WYExtijjr6mA1gC+i3LSWwGiPFeE20Sqn9V865bGr wO/w9swxmvBAfoACwNX4FikWsNiJHLJ3nH6GWiQyvWu3LqGYaI6BEyLytqOGtBiq u7+0rUCgRgHhVXbwvcWuPGXbcLlmLY8xhRQdIdf6P8d4MpCf3XuvKvBjjRdtATX4 7JG6YFJsThldYd5b9LNW5kKhqWA21oTfr3Pcc+cshWDmmjD7FsJfBgrTpLTOjaTC 9ZXBn3ukr0iegHpzh+FXUvxvpOTMVnNODxmCXdCU39R+AAO0tjC9skurqIA3Y+vu Z3wWQ86Z40w8/5hEVzTr2HPGuevIE34P -----END CERTIFICATE-----Generated at Sun May 11 10:33:10 2025 by rpki-client