$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft File: xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json) Hash identifier: BiFmrPKMzBguQtzKIOekz9SKESK/JbKpwu+5it/9WkE= Subject key identifier: C8:5B:CD:E9:2C:F1:DE:8D:BE:C5:B5:69:9E:DC:52:36:B6:F2:5D:8F Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Certificate serial: 0739 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft Manifest number: 0712 Signing time: Mon 12 May 2025 21:42:15 +0000 Manifest this update: Mon 12 May 2025 21:42:15 +0000 Manifest next update: Mon 19 May 2025 21:42:15 +0000 Files and hashes: 1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: LxxTT0tkz+p8y177ZsUpqSNIEhIodhFE5qzm6f8c4ng=) 2: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: qHbtyOGNfvy85AlmzO8CEnT5fTz9AwvvFi0y6XbFwG0=) 3: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: SFXCFjWV3nIjHDr4Y0nX1h+ByORJe0z+8s0nBYc0bds=) 4: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: ZsYDlTfdZ4GWQgL9mV+7VPUB+1RhWLSObaxg0y98Kxs=) 5: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: aIhdOoGq/5IV6Mhns4F3omRFw08MxMY0t1LOWZhYXz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1849 (0x739) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92 Validity Not Before: May 12 21:42:15 2025 GMT Not After : May 19 21:42:15 2025 GMT Subject: CN=68226b37-c2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:8a:32:10:71:92:7b:98:76:6b:3a:2a:be: 39:64:bf:09:6f:b9:24:dc:e7:99:73:f8:66:b1:1c: 34:f8:25:dc:8c:e9:d5:ff:ac:6a:b3:ff:24:63:53: cd:4b:1a:33:30:56:d3:23:88:7a:ee:64:04:c3:09: 55:6f:cb:d7:d7:8f:a9:5d:5f:50:1e:6b:5c:5f:82: 67:e0:29:5b:7f:13:44:c6:71:ae:e0:e7:d6:11:a5: c6:b0:47:44:d9:70:40:2b:6d:af:83:92:57:14:18: ff:8b:d7:62:1e:ef:2b:70:bc:79:ff:81:0c:2a:64: 1d:93:ab:6f:2a:19:d2:58:81:a3:af:4f:80:54:50: 44:38:3d:cb:d5:ca:73:b2:db:e3:69:2b:f7:d8:d2: 82:ad:a6:d0:db:6d:ba:c6:70:f2:6d:44:7a:da:79: 04:b1:a2:b2:7f:84:fb:26:1b:51:a6:18:bc:25:88: 7f:56:17:e7:be:8f:7e:cb:a4:d8:0c:68:a1:c8:c3: 4a:45:5d:9f:9c:63:39:82:42:e5:3c:a4:9b:2e:48: a9:1f:fc:a5:44:48:fb:af:d7:e4:ee:32:fd:00:d9: 1e:7b:84:db:57:f1:24:1b:ab:da:fc:c6:98:d1:10: a3:3f:aa:79:bc:4b:ab:f0:ce:b0:90:a8:2e:e5:2e: 14:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5B:CD:E9:2C:F1:DE:8D:BE:C5:B5:69:9E:DC:52:36:B6:F2:5D:8F X509v3 Authority Key Identifier: keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a9:2c:e5:82:96:b6:9b:27:49:00:d2:52:18:68:77:70:d4: 08:1f:39:74:d4:f4:3f:92:9a:d1:be:f2:aa:d9:47:38:d8:01: 24:42:81:4a:05:3d:8b:85:1e:40:e4:6e:bc:fc:bc:3b:64:90: 10:5a:d7:3f:57:3c:3e:0c:d6:36:4a:86:9a:65:de:34:b5:45: 1d:63:11:9d:91:42:89:18:03:26:1c:d0:f0:f8:68:dc:4e:83: d7:9a:82:d7:72:5a:6f:88:b4:98:b1:87:93:45:6f:a3:4a:72: 80:48:95:58:ed:f5:27:7b:7a:d0:42:5f:ea:22:41:f6:0f:ad: 0c:b7:bc:36:3f:6d:42:51:a3:d9:60:26:59:e7:d3:17:07:97: 49:bf:25:71:e3:65:2c:3a:94:cb:46:53:e7:ab:37:3e:ab:ed: 79:e9:fc:56:bf:91:6d:81:3b:4b:d7:34:79:56:76:3f:43:f9: df:b6:b6:8a:6e:28:9c:c8:88:01:87:f9:73:b3:26:8e:9d:6f: 3b:fc:ec:f3:a1:83:6f:e9:9b:91:43:0a:8a:9c:9d:28:7d:9c: c8:ff:ad:72:d6:df:d0:4a:4e:08:3a:f2:91:26:7a:f0:ac:6e: d4:22:c4:19:ae:ff:14:81:e3:da:f0:cd:40:bd:7c:42:0c:f8: ad:75:cf:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4MzNEREJERDYy NEVDMjRFOTIwHhcNMjUwNTEyMjE0MjE1WhcNMjUwNTE5MjE0MjE1WjAYMRYwFAYD VQQDEw02ODIyNmIzNy1jMmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArieKMhBxknuYdms6Kr45ZL8Jb7kk3OeZc/hmsRw0+CXcjOnV/6xqs/8kY1PN SxozMFbTI4h67mQEwwlVb8vX14+pXV9QHmtcX4Jn4ClbfxNExnGu4OfWEaXGsEdE 2XBAK22vg5JXFBj/i9diHu8rcLx5/4EMKmQdk6tvKhnSWIGjr0+AVFBEOD3L1cpz stvjaSv32NKCrabQ2226xnDybUR62nkEsaKyf4T7JhtRphi8JYh/Vhfnvo9+y6TY DGihyMNKRV2fnGM5gkLlPKSbLkipH/ylREj7r9fk7jL9ANkee4TbV/EkG6va/MaY 0RCjP6p5vEur8M6wkKgu5S4UPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhbzeks 8d6NvsW1aZ7cUja28l2PMB8GA1UdIwQYMBaAFMUEVlV3rpn2GRyXgz3b3WJOwk6S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDEyOC85MERFOUM2NjNF QTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1mWVpISmVEUGR2ZFlrN0NU cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRUldWWGV1bWZZWkhKZURQZHZkWWs3Q1RwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDEyOC85MERFOUM2NjNFQTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1m WVpISmVEUGR2ZFlrN0NUcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbqSzlgpa2mydJANJSGGh3cNQIHzl01PQ/kprRvvKq2Uc42AEkQoFK BT2LhR5A5G68/Lw7ZJAQWtc/Vzw+DNY2SoaaZd40tUUdYxGdkUKJGAMmHNDw+Gjc ToPXmoLXclpviLSYsYeTRW+jSnKASJVY7fUne3rQQl/qIkH2D60Mt7w2P21CUaPZ YCZZ59MXB5dJvyVx42UsOpTLRlPnqzc+q+156fxWv5FtgTtL1zR5VnY/Q/nftraK biicyIgBh/lzsyaOnW87/OzzoYNv6ZuRQwqKnJ0ofZzI/61y1t/QSk4IOvKRJnrw rG7UIsQZrv8UgePa8M1AvXxCDPitdc8N -----END CERTIFICATE-----Generated at Tue May 13 15:05:46 2025 by rpki-client