$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: 1yV+75hgylgpKMl1JZ4YP0URKwLNVT3tufZdkoOuCzE= Subject key identifier: 99:1C:2E:0D:41:12:62:28:6E:F0:66:22:6F:59:70:B7:9C:0A:FE:BC Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 2317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 22E5 Signing time: Mon 12 May 2025 15:49:19 +0000 Manifest this update: Mon 12 May 2025 15:49:18 +0000 Manifest next update: Mon 19 May 2025 15:49:18 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: 4vDRpDIV3lDWxzYymKXa+cwwpgEamgei2XcVt9hPVSs=) 2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ceQW0pBKYX0iNvGIXu+d5odgS50V86e35zycTc8Ud5M=) 3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: XQc3pF8G20Y24MbmGRMd8iGWGDKIE6b3RdlXoHLAo9o=) 4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: aAotkUpTu/+JybhkWBN3FLBD+6K9gZJwPXhnau7EH7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8983 (0x2317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: May 12 15:49:18 2025 GMT Not After : May 19 15:49:18 2025 GMT Subject: CN=6822187e-9a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:76:8b:df:b3:50:cb:6c:57:30:44:63:94:27: 01:f6:30:fb:39:1a:64:9f:8f:bd:f4:58:0f:49:68: bd:c4:ac:fe:ee:f2:b0:b3:aa:75:6f:97:94:cf:94: 00:16:e7:e4:d3:95:96:65:99:41:7e:59:ad:a9:a9: a3:a9:5d:ab:63:ff:a1:d6:9e:fd:ff:d2:e2:07:c6: 4b:38:b4:1c:65:78:cf:05:ba:da:c1:60:c3:30:9b: 0f:4e:2d:fa:d2:07:56:cb:fa:fb:ca:fe:be:1b:19: 3b:de:9b:10:f6:e2:e6:8b:bc:ce:fc:dc:8b:f6:00: 5b:29:aa:f9:83:c1:97:df:40:c0:70:9e:cd:f5:d4: a0:bf:03:db:f2:5e:fb:2d:5d:89:f9:5e:b2:e5:c5: 07:8f:f1:d8:76:be:41:4a:58:78:5d:1e:47:47:b0: 34:e9:5f:65:3a:75:60:c7:12:00:61:a1:2c:66:61: b1:0c:46:a7:c8:d9:63:54:f9:48:66:a8:8f:40:a8: 6d:6b:5c:7a:8f:9e:18:45:0e:77:c7:f7:a0:ab:b4: 20:fc:79:3a:42:13:61:8c:b4:9a:7e:36:9e:09:2d: b4:24:cc:2c:b4:4f:95:db:70:09:3e:1d:05:29:af: ec:4c:a3:ac:9e:e6:c2:c3:e6:18:cb:25:a4:9e:c0: 80:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1C:2E:0D:41:12:62:28:6E:F0:66:22:6F:59:70:B7:9C:0A:FE:BC X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:20:df:ae:51:8f:be:85:47:fa:31:dd:c9:23:a7:40:c2:d5: 75:a6:74:37:99:21:12:8e:21:3d:c1:df:17:3b:87:24:42:c5: 64:19:07:9e:27:d8:6e:6d:14:c0:ad:a1:f4:41:0c:43:c2:d8: 30:13:30:fc:94:38:8e:6c:26:6c:36:7d:a6:a2:b1:6b:30:8f: 1f:e1:b2:2e:20:03:20:26:bf:08:95:f5:53:18:8b:f6:c6:1c: 5c:e0:a2:ed:2c:21:a9:0a:57:8d:39:f1:85:51:b9:d0:e5:1c: 9c:0b:b6:47:ca:34:c0:da:43:69:47:21:16:21:b4:70:31:3f: f8:cc:5b:4b:ea:2b:b6:8b:3a:c3:9f:6e:6d:ad:02:c4:17:4d: 2b:dd:fe:d2:79:dc:da:98:f4:f1:b7:e9:9f:bc:f8:f6:64:65: a9:79:58:f1:f2:0b:7a:89:f8:89:ec:21:82:46:eb:20:5a:06: 14:a3:8f:36:9e:d5:87:fd:d4:25:38:93:a5:76:9e:f5:23:cf: 99:1d:ef:7c:ad:41:06:45:63:51:64:2e:23:db:c3:be:ed:eb: 25:00:31:2d:6d:b8:68:7f:20:69:0d:7d:31:66:c2:78:d2:b9: 4d:7f:3d:d8:21:90:77:4d:61:5c:9d:68:d3:c0:32:06:f3:c3: 4c:b2:10:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjUwNTEyMTU0OTE4WhcNMjUwNTE5MTU0OTE4WjAYMRYwFAYD VQQDEw02ODIyMTg3ZS05YTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1naL37NQy2xXMERjlCcB9jD7ORpkn4+99FgPSWi9xKz+7vKws6p1b5eUz5QA Fufk05WWZZlBflmtqamjqV2rY/+h1p79/9LiB8ZLOLQcZXjPBbrawWDDMJsPTi36 0gdWy/r7yv6+Gxk73psQ9uLmi7zO/NyL9gBbKar5g8GX30DAcJ7N9dSgvwPb8l77 LV2J+V6y5cUHj/HYdr5BSlh4XR5HR7A06V9lOnVgxxIAYaEsZmGxDEanyNljVPlI ZqiPQKhta1x6j54YRQ53x/egq7Qg/Hk6QhNhjLSafjaeCS20JMwstE+V23AJPh0F Ka/sTKOsnubCw+YYyyWknsCAmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkcLg1B EmIobvBmIm9ZcLecCv68MB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0IN+uUY++hUf6Md3JI6dAwtV1pnQ3mSESjiE9wd8XO4ckQsVkGQee J9hubRTAraH0QQxDwtgwEzD8lDiObCZsNn2morFrMI8f4bIuIAMgJr8IlfVTGIv2 xhxc4KLtLCGpCleNOfGFUbnQ5RycC7ZHyjTA2kNpRyEWIbRwMT/4zFtL6iu2izrD n25trQLEF00r3f7SedzamPTxt+mfvPj2ZGWpeVjx8gt6ifiJ7CGCRusgWgYUo482 ntWH/dQlOJOldp71I8+ZHe98rUEGRWNRZC4j28O+7eslADEtbbhofyBpDX0xZsJ4 0rlNfz3YIZB3TWFcnWjTwDIG88NMshAr -----END CERTIFICATE-----Generated at Mon May 12 22:44:10 2025 by rpki-client