$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft File: xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json) Hash identifier: vMPIHzsYDpJ4BBunJxcyRbBDBNqzvWYgDS4Oxpy2zdU= Subject key identifier: A3:8D:D0:AB:F9:B3:C4:4E:32:8B:05:95:BB:95:A1:B0:BD:B0:C3:7E Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft Manifest number: 013E Signing time: Sat 17 May 2025 03:57:52 +0000 Manifest this update: Sat 17 May 2025 03:57:52 +0000 Manifest next update: Sat 24 May 2025 03:57:52 +0000 Files and hashes: 1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: TMOUGooTIqvpvv1X210znEZazRv1LYEX9l0ZB9HsxDI=) 2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: ocnHIom5bfqYmJrUux5YVIb0Vcn2/L2ylLJbcgISr0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 03:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Validity Not Before: May 17 03:57:52 2025 GMT Not After : May 24 03:57:52 2025 GMT Subject: CN=68280940-9360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:0e:0b:97:d3:d3:e5:f2:b7:0a:fd:bc:ad: 2f:5c:9c:c6:08:cd:27:0b:4d:61:44:16:06:67:be: 88:41:4c:f7:e0:91:9e:a1:68:e8:36:50:97:39:46: 19:93:9f:07:46:b7:e9:49:b7:db:65:e6:44:1e:ed: 2e:ea:01:e5:e1:82:8a:af:3e:d0:29:7e:9a:91:0d: 60:27:4b:dc:83:8f:50:ca:67:99:6d:43:6a:4d:e3: 9d:7f:ad:de:25:6a:eb:34:23:de:4d:70:fc:9e:a4: 36:19:d0:24:59:9c:51:8b:4f:4a:1a:af:9f:f8:b5: 18:b2:de:0b:00:dc:df:05:52:32:a4:af:ab:b1:8a: 9a:1d:91:8f:af:a6:cb:84:2a:b1:de:cb:7f:4a:5f: bf:42:e6:90:7d:f2:cf:60:15:0e:aa:26:29:2a:74: 41:c4:28:e4:ed:46:d1:d1:47:c5:0c:b2:41:3a:de: 70:5e:f1:f5:9c:ed:e3:e0:bb:48:65:76:6d:df:58: 57:b5:72:34:d1:f6:1c:36:e3:43:f0:98:65:f1:f1: d7:81:b9:bd:53:bb:df:53:0e:9e:d7:ed:14:c4:25: ed:40:56:98:9d:a4:29:a9:02:e5:fd:2b:02:b0:57: a6:a9:2e:12:75:14:82:1a:84:44:db:7a:d4:39:b4: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8D:D0:AB:F9:B3:C4:4E:32:8B:05:95:BB:95:A1:B0:BD:B0:C3:7E X509v3 Authority Key Identifier: keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:9c:65:5f:d7:ed:86:a6:19:a6:6f:81:ad:4d:ed:16:eb:7c: d5:e1:bc:13:a4:2c:91:44:82:9f:30:64:27:e6:13:78:7f:16: cf:7b:16:fa:96:cc:a6:fe:d7:ef:77:81:8f:51:c3:67:4c:9f: 4a:b1:33:0b:3a:b7:8f:f1:14:54:93:3f:c5:22:8c:f2:6d:fb: a4:b2:f4:a7:4b:0d:d5:2a:13:02:3e:21:f7:91:ba:6b:45:1d: 7b:40:e4:0a:df:ee:dc:f2:df:ed:1b:02:27:36:d9:24:f0:2c: aa:df:99:52:62:eb:ae:39:d4:61:e0:b1:23:67:2a:1d:e1:28: 74:ed:8a:61:08:86:6b:9e:50:9a:5f:fb:47:c9:16:98:86:43: 42:50:88:02:50:b8:8b:b9:ae:f5:ca:33:a6:bb:32:6e:b3:af: 03:38:f4:e1:18:7c:74:bb:80:50:8f:8a:43:09:ee:16:1c:f5: 2e:9b:e2:bf:f8:39:ad:db:da:bb:27:a3:8e:2f:34:fc:eb:5c: 1a:04:99:f6:75:60:53:32:a9:ce:55:16:ef:ee:65:16:fe:83: f3:26:84:72:d7:97:b5:1e:40:10:33:1b:74:2c:7b:ad:d1:d9: c9:aa:9b:be:07:20:cd:bd:9e:b1:b6:fe:7c:f0:2f:d7:64:35: e2:bc:ed:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzRkYxMTAvBgNVBAUTKEM2QTU3NkYwOENENEE3M0VBOUREOTc1MDNCQzlEMjhC MDU5MTFCOUMwHhcNMjUwNTE3MDM1NzUyWhcNMjUwNTI0MDM1NzUyWjAYMRYwFAYD VQQDEw02ODI4MDk0MC05MzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7MOC5fT0+Xytwr9vK0vXJzGCM0nC01hRBYGZ76IQUz34JGeoWjoNlCXOUYZ k58HRrfpSbfbZeZEHu0u6gHl4YKKrz7QKX6akQ1gJ0vcg49QymeZbUNqTeOdf63e JWrrNCPeTXD8nqQ2GdAkWZxRi09KGq+f+LUYst4LANzfBVIypK+rsYqaHZGPr6bL hCqx3st/Sl+/QuaQffLPYBUOqiYpKnRBxCjk7UbR0UfFDLJBOt5wXvH1nO3j4LtI ZXZt31hXtXI00fYcNuND8Jhl8fHXgbm9U7vfUw6e1+0UxCXtQFaYnaQpqQLl/SsC sFemqS4SdRSCGoRE23rUObSpoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKON0Kv5 s8ROMosFlbuVobC9sMN+MB8GA1UdIwQYMBaAFMaldvCM1Kc+qd2XUDvJ0osFkRuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNGRi9EODVBMEI3QzRE RjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6NnAzWmRRTzhuU2l3V1JH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxVjI4SXpVcHo2cDNaZFFPOG5TaXdXUkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNGRi9EODVBMEI3QzRERjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6 NnAzWmRRTzhuU2l3V1JHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTnGVf1+2Gphmmb4GtTe0W63zV4bwTpCyRRIKfMGQn5hN4fxbPexb6 lsym/tfvd4GPUcNnTJ9KsTMLOreP8RRUkz/FIozybfuksvSnSw3VKhMCPiH3kbpr RR17QOQK3+7c8t/tGwInNtkk8Cyq35lSYuuuOdRh4LEjZyod4Sh07YphCIZrnlCa X/tHyRaYhkNCUIgCULiLua71yjOmuzJus68DOPThGHx0u4BQj4pDCe4WHPUum+K/ +Dmt29q7J6OOLzT861waBJn2dWBTMqnOVRbv7mUW/oPzJoRy15e1HkAQMxt0LHut 0dnJqpu+ByDNvZ6xtv588C/XZDXivO02 -----END CERTIFICATE-----Generated at Sat May 17 15:26:55 2025 by rpki-client