$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: uGzjzrhCwH1ZevSQZk2RZVyLKifDO35dBvA6l3fMshg= Subject key identifier: BB:4B:8B:C9:15:94:7D:5F:83:CA:9F:C4:9E:BD:2D:F7:5C:A8:0E:18 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 0386 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 037D Signing time: Fri 09 May 2025 00:41:06 +0000 Manifest this update: Fri 09 May 2025 00:41:06 +0000 Manifest next update: Fri 16 May 2025 00:41:06 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: WW55J2Q63W+sM+6owoJ0vwkS1ST9Wp7hQJ7d2aEotdU=) 2: 0484BF6EF76311EC93951455C4F9AE02.roa (hash: ycFGkMxe7h4Ku30iu/P421qHyOaZ/lm2w5Y03BcYNz8=) 3: 3F7E8DCAA45C11EC845FEA36C4F9AE02.roa (hash: DbGKbMecwcykqDAfU21+x6Kvm9Z6g5WTzg4SdqXRisc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 00:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 902 (0x386) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: May 9 00:41:06 2025 GMT Not After : May 16 00:41:06 2025 GMT Subject: CN=681d4f22-8d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3c:b8:0d:5b:f0:f8:45:fc:2f:a9:46:92:40: 65:dc:a2:59:44:b3:8f:96:e9:9e:b7:33:64:7c:f0: a6:65:16:95:69:df:a3:5a:ad:52:c6:76:1f:84:5c: 1a:f3:b7:af:5f:99:bf:b7:0a:7a:92:30:82:a6:ac: 10:aa:70:26:18:80:e9:8e:60:0b:9b:6a:2f:41:ae: 3a:8b:9c:1c:07:e8:6f:89:78:91:66:4f:10:a5:16: 67:20:16:a5:be:01:1c:f4:45:4a:0a:df:c3:5d:49: 2b:31:de:96:74:b4:b2:e6:cc:62:46:b4:79:3a:35: 30:f1:5a:49:79:20:a5:cc:af:71:9f:40:b4:79:1d: b1:37:71:22:b2:ec:a7:e1:fd:14:38:a4:5b:8f:c3: ae:77:5c:2e:ea:89:33:f3:50:07:82:19:8e:f2:ea: 0a:9d:e7:53:54:fc:05:ea:b6:cc:fe:2c:5c:a9:eb: 30:9c:72:4f:a5:1c:3d:b3:a6:d4:29:e5:74:11:bb: ab:87:f8:3a:88:33:04:d3:20:ee:30:23:d4:f6:8a: 68:95:bc:5a:25:63:9b:0e:d1:e5:4c:b1:ab:60:f4: 42:63:17:fa:67:ff:46:61:5e:d7:83:99:12:8a:d8: b2:78:6e:b9:79:ee:61:8c:d0:d6:ad:3e:f1:45:b4: 30:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4B:8B:C9:15:94:7D:5F:83:CA:9F:C4:9E:BD:2D:F7:5C:A8:0E:18 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d9:9f:ff:fd:14:79:d7:10:d7:33:9f:f9:5f:bf:e4:71:26: 6e:57:9f:76:f7:cc:69:75:78:90:62:49:92:54:af:ad:16:cf: 11:ad:0f:86:48:6d:dd:68:0b:25:8c:20:ef:79:c7:76:d2:60: f6:0d:1f:65:7a:0a:cf:54:e5:99:48:bc:57:b9:2b:0d:e4:56: a1:e6:e1:65:9f:6d:f0:3c:f9:4a:c5:62:ec:39:a5:f1:2d:f5: cd:0e:18:25:1f:4e:5a:fd:e5:6f:39:5f:52:7b:c1:bc:cf:58: 11:45:bf:35:b4:c8:62:ef:55:fb:da:9c:fb:4c:c9:33:f0:e0: d7:eb:1d:16:d5:08:54:83:32:50:f7:7f:e4:05:ca:62:b4:95: e0:90:34:a6:97:79:0a:91:ae:21:d0:75:05:bd:7c:8f:dc:d6: c1:e3:09:2d:bf:4b:36:3d:0e:7d:ff:b1:32:fe:43:f3:91:4d: c1:31:7e:75:58:f1:cc:67:e9:17:0f:d7:f1:2a:9a:9c:0e:43: 10:5c:48:aa:dc:23:e2:86:1f:e6:03:8e:a4:ee:00:ec:e3:f3: a9:c2:90:1c:ce:2d:18:19:a0:18:19:03:0f:98:ed:6c:6c:36: a6:ee:b3:04:1f:9d:48:70:17:4f:bc:28:96:41:f3:ac:94:db: 05:cb:79:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjUwNTA5MDA0MTA2WhcNMjUwNTE2MDA0MTA2WjAYMRYwFAYD VQQDEw02ODFkNGYyMi04ZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjy4DVvw+EX8L6lGkkBl3KJZRLOPlumetzNkfPCmZRaVad+jWq1SxnYfhFwa 87evX5m/twp6kjCCpqwQqnAmGIDpjmALm2ovQa46i5wcB+hviXiRZk8QpRZnIBal vgEc9EVKCt/DXUkrMd6WdLSy5sxiRrR5OjUw8VpJeSClzK9xn0C0eR2xN3Eisuyn 4f0UOKRbj8Oud1wu6okz81AHghmO8uoKnedTVPwF6rbM/ixcqeswnHJPpRw9s6bU KeV0Eburh/g6iDME0yDuMCPU9opolbxaJWObDtHlTLGrYPRCYxf6Z/9GYV7Xg5kS itiyeG65ee5hjNDWrT7xRbQwWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtLi8kV lH1fg8qfxJ69LfdcqA4YMB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe2Z///RR51xDXM5/5X7/kcSZuV59298xpdXiQYkmSVK+tFs8RrQ+G SG3daAsljCDvecd20mD2DR9legrPVOWZSLxXuSsN5Fah5uFln23wPPlKxWLsOaXx LfXNDhglH05a/eVvOV9Se8G8z1gRRb81tMhi71X72pz7TMkz8ODX6x0W1QhUgzJQ 93/kBcpitJXgkDSml3kKka4h0HUFvXyP3NbB4wktv0s2PQ59/7Ey/kPzkU3BMX51 WPHMZ+kXD9fxKpqcDkMQXEiq3CPihh/mA46k7gDs4/OpwpAczi0YGaAYGQMPmO1s bDam7rMEH51IcBdPvCiWQfOslNsFy3lf -----END CERTIFICATE-----Generated at Sun May 11 01:17:52 2025 by rpki-client