$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: caWjzv9I+OwDPWDPm+3rsypScxnb9Py9aSg/Eo7+wtk= Subject key identifier: 0C:46:7A:2D:5B:64:67:A7:F3:29:6D:8E:78:56:DE:EB:07:EC:C9:AB Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 01E0 Signing time: Tue 13 May 2025 01:59:21 +0000 Manifest this update: Tue 13 May 2025 01:59:21 +0000 Manifest next update: Tue 20 May 2025 01:59:21 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: /AI5Y/dJxxGpSKh34d7agFShKQP2EYPOHxitVTkllLA=) 2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: 41cGdysFB7ELok3zBoJln9hijehCtCniAdRLT6XAhVQ=) 3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: 9MrQo9vUmAekuiwNJY8bO0MSIs29CkXwLMPEFiKNA44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: May 13 01:59:21 2025 GMT Not After : May 20 01:59:21 2025 GMT Subject: CN=6822a779-7856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:82:d1:e4:2e:5c:59:2c:e9:95:32:b3:b3:b1: 55:f4:62:d0:a8:49:4c:d5:cf:ce:4b:46:40:e3:60: 59:6c:1c:21:0e:75:f9:d4:49:75:f9:91:08:0f:85: d5:d1:3c:15:c6:b1:0e:a1:05:65:83:d5:1f:a7:8b: 0e:5f:32:3f:3c:c0:c2:ad:db:69:11:58:13:50:75: e8:c7:cf:29:5d:c4:bd:4e:44:46:bf:80:83:f3:09: 8c:2a:49:a6:ce:78:04:aa:2b:74:e8:7c:60:ba:41: 4f:4d:26:68:54:19:bb:86:7a:d4:f0:4f:28:08:73: 0a:09:75:41:51:10:cc:9e:be:67:38:24:c1:d1:81: 83:ff:ff:4d:b5:54:bb:11:2f:5c:f9:8c:9a:fe:44: f6:b9:ee:65:d7:19:c0:e9:82:1d:15:af:f1:ac:71: c7:ef:c5:f4:90:38:aa:c0:c9:9c:f7:02:c6:61:be: 4f:2b:26:f2:f4:d4:ce:22:e2:0a:44:83:d1:eb:5a: 98:0f:5c:a8:11:e3:25:b9:13:82:c3:b7:a8:3a:8c: 05:47:f4:55:bd:84:b3:31:bd:2c:a0:6f:8d:e5:ea: 1f:ed:57:80:c8:00:7d:54:e3:93:54:75:55:6d:f7: 41:d6:bc:fe:53:06:b5:8b:f6:8e:65:99:c7:ab:cd: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:46:7A:2D:5B:64:67:A7:F3:29:6D:8E:78:56:DE:EB:07:EC:C9:AB X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b0:a0:bb:6c:43:87:0f:74:b1:25:a9:48:2c:f0:a4:37:17: 81:d2:cd:ca:8e:82:29:5d:cd:58:fa:a6:b0:4a:c8:d0:f4:17: 95:b4:24:af:4f:2e:f8:15:18:17:c7:3c:08:b0:28:60:09:b5: 5d:e5:f7:55:6d:41:01:b2:1f:6e:8c:a4:ad:4c:c0:8b:7b:1c: f4:8f:80:49:c1:22:e6:0e:67:82:ed:9d:12:dc:2c:f2:fe:bb: de:90:0e:cc:da:fe:26:45:aa:1f:09:90:9c:e0:e5:65:80:1a: b1:78:39:05:73:5f:9d:0d:67:b6:10:3b:5c:bd:e2:6f:f1:96: 72:bb:2d:c2:2c:2b:24:0d:64:1a:82:c8:d3:a7:62:a4:15:62: ce:12:15:71:04:be:5e:7f:a9:ab:42:85:82:09:99:04:03:b6: 5f:8c:9a:57:cb:cc:76:f1:86:7c:97:68:95:f3:e0:52:6d:9a: 5d:62:82:81:8d:46:10:d6:32:a1:02:27:d2:a5:de:a3:ed:ab: f5:6f:42:b4:23:f7:ca:52:ca:44:b1:8a:a5:2c:fb:79:34:4d: 44:40:75:79:d0:40:62:42:3e:14:ac:ed:4a:73:38:df:a6:92: e7:3c:9a:22:f5:b4:b8:ee:44:1a:06:b6:20:5f:1a:38:f8:c7: 9b:a3:5c:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjUwNTEzMDE1OTIxWhcNMjUwNTIwMDE1OTIxWjAYMRYwFAYD VQQDEw02ODIyYTc3OS03ODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYLR5C5cWSzplTKzs7FV9GLQqElM1c/OS0ZA42BZbBwhDnX51El1+ZEID4XV 0TwVxrEOoQVlg9Ufp4sOXzI/PMDCrdtpEVgTUHXox88pXcS9TkRGv4CD8wmMKkmm zngEqit06HxgukFPTSZoVBm7hnrU8E8oCHMKCXVBURDMnr5nOCTB0YGD//9NtVS7 ES9c+Yya/kT2ue5l1xnA6YIdFa/xrHHH78X0kDiqwMmc9wLGYb5PKyby9NTOIuIK RIPR61qYD1yoEeMluROCw7eoOowFR/RVvYSzMb0soG+N5eof7VeAyAB9VOOTVHVV bfdB1rz+Uwa1i/aOZZnHq82tNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxGei1b ZGen8yltjnhW3usH7MmrMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfsKC7bEOHD3SxJalILPCkNxeB0s3KjoIpXc1Y+qawSsjQ9BeVtCSv Ty74FRgXxzwIsChgCbVd5fdVbUEBsh9ujKStTMCLexz0j4BJwSLmDmeC7Z0S3Czy /rvekA7M2v4mRaofCZCc4OVlgBqxeDkFc1+dDWe2EDtcveJv8ZZyuy3CLCskDWQa gsjTp2KkFWLOEhVxBL5ef6mrQoWCCZkEA7ZfjJpXy8x28YZ8l2iV8+BSbZpdYoKB jUYQ1jKhAifSpd6j7av1b0K0I/fKUspEsYqlLPt5NE1EQHV50EBiQj4UrO1Kczjf ppLnPJoi9bS47kQaBrYgXxo4+Mebo1wG -----END CERTIFICATE-----Generated at Tue May 13 17:53:55 2025 by rpki-client