$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: Zv2ww0qk+s7XnFhV4+PrTT8lKR4TC4sxWKueo4tcE/c= Subject key identifier: 70:60:C4:48:AD:90:93:E0:7B:B6:F0:B6:8B:2A:4A:B4:BD:0A:1E:02 Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 0159 Signing time: Tue 13 May 2025 03:19:50 +0000 Manifest this update: Tue 13 May 2025 03:19:50 +0000 Manifest next update: Tue 20 May 2025 03:19:50 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: ROkyXjJp2bdXW2XrWG9w1tzmDfXDaUhNynEEKmkXvVU=) 2: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: DCf9qWND7QA7KzN3251dDDXozk2L05NK9fYFAhwBS80=) 3: CA1D2934296011EEB6BB2647C4F9AE02.roa (hash: PB+Fwr7+OFv5312gtz53yebHRvlqOj9H0ezMU/u7UvY=) 4: 302B59C64EEF11EFB111F530C4F9AE02.roa (hash: aQ/AH7PdJFNkSR1Nh6TGi7Jf84xG8OlYq5cmgQwsJ0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: May 13 03:19:50 2025 GMT Not After : May 20 03:19:50 2025 GMT Subject: CN=6822ba56-97f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:41:dd:32:de:6d:ae:dc:92:8e:17:08:0f:96: e5:24:f0:1a:77:cd:de:dd:8d:1f:01:d6:43:50:29: ea:e3:ab:cb:94:50:17:71:27:a2:f6:bd:02:f9:69: 39:18:59:92:bf:fa:09:d4:25:b9:89:3d:fa:b2:d4: c6:9e:97:54:0a:d8:e5:af:01:b0:e3:3d:9c:f7:d7: 77:f3:49:47:17:94:4b:b4:4b:d8:20:89:7c:e8:38: 7f:44:8f:9e:37:51:89:4a:5c:4b:2e:1e:33:4e:ca: 20:b4:b2:88:14:9d:78:3e:64:20:0b:55:27:bc:ad: 28:d2:24:11:0d:28:b0:55:b2:65:d1:42:03:12:73: 92:cb:5d:2b:8e:d4:ae:08:c8:93:b9:e6:8a:ee:e9: 11:52:d1:c6:02:a6:76:f5:95:f4:85:36:51:76:2b: 79:ba:30:f1:3c:64:69:fe:1e:ff:9a:23:1b:7b:9d: 3b:b0:56:f9:7b:86:e7:ad:2d:99:fe:13:b8:24:f5: e8:d6:4f:99:62:da:d4:f9:ec:77:77:2f:5b:6c:1d: 30:08:54:8a:6d:7c:76:ed:80:04:42:61:fa:20:71: 85:08:ea:de:e8:bc:53:b7:b6:94:36:7e:5d:ba:ce: 01:fa:7d:49:cb:da:d5:ec:8f:37:1a:61:9d:24:d8: ce:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:60:C4:48:AD:90:93:E0:7B:B6:F0:B6:8B:2A:4A:B4:BD:0A:1E:02 X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:0a:cf:69:34:db:6f:21:5d:c0:49:72:dd:8a:38:5e:84:cb: e4:80:60:92:51:ee:a6:b1:f2:62:ff:fc:b6:60:84:6b:20:27: f2:69:18:14:8b:7c:d0:af:d0:c1:44:12:cc:c4:cd:fe:e6:f4: fe:25:b8:ca:1e:98:b8:ff:99:a1:16:17:48:39:97:d5:86:36: 36:a6:7b:19:51:b6:b3:20:0d:6e:9d:ae:2b:a7:39:52:47:6f: 02:4c:78:cd:ca:b5:b0:5e:c8:cc:ff:ce:07:93:80:fb:dd:38: 7d:f1:3b:51:c4:88:a1:a8:d3:e7:be:0b:d7:33:94:ff:95:f3: 58:24:cd:5e:67:18:3d:da:a8:51:fe:92:47:e0:2b:c1:a4:71: c3:e2:fb:d5:f6:6c:0e:ea:27:9b:fb:db:3f:5a:75:48:2d:09: 52:83:fa:c5:82:aa:a5:f4:ca:f6:d0:a9:80:bb:78:df:33:2b: 62:eb:88:78:14:be:d3:20:05:8b:15:1a:78:4d:c7:80:d2:2e: c6:a6:d5:ac:0a:f4:b6:22:e7:4e:8e:75:5b:82:04:f9:37:2e: 0d:70:ec:09:81:b7:83:29:1b:58:55:26:97:23:8a:fb:c8:a9: 8c:25:af:e9:0b:18:3e:96:47:a4:a3:77:61:7e:de:05:05:db: 8d:74:08:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjUwNTEzMDMxOTUwWhcNMjUwNTIwMDMxOTUwWjAYMRYwFAYD VQQDEw02ODIyYmE1Ni05N2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0HdMt5trtySjhcID5blJPAad83e3Y0fAdZDUCnq46vLlFAXcSei9r0C+Wk5 GFmSv/oJ1CW5iT36stTGnpdUCtjlrwGw4z2c99d380lHF5RLtEvYIIl86Dh/RI+e N1GJSlxLLh4zTsogtLKIFJ14PmQgC1UnvK0o0iQRDSiwVbJl0UIDEnOSy10rjtSu CMiTueaK7ukRUtHGAqZ29ZX0hTZRdit5ujDxPGRp/h7/miMbe507sFb5e4bnrS2Z /hO4JPXo1k+ZYtrU+ex3dy9bbB0wCFSKbXx27YAEQmH6IHGFCOre6LxTt7aUNn5d us4B+n1Jy9rV7I83GmGdJNjOvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBgxEit kJPge7bwtosqSrS9Ch4CMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpCs9pNNtvIV3ASXLdijhehMvkgGCSUe6msfJi//y2YIRrICfyaRgU i3zQr9DBRBLMxM3+5vT+JbjKHpi4/5mhFhdIOZfVhjY2pnsZUbazIA1una4rpzlS R28CTHjNyrWwXsjM/84Hk4D73Th98TtRxIihqNPnvgvXM5T/lfNYJM1eZxg92qhR /pJH4CvBpHHD4vvV9mwO6ieb+9s/WnVILQlSg/rFgqql9Mr20KmAu3jfMyti64h4 FL7TIAWLFRp4TceA0i7GptWsCvS2IudOjnVbggT5Ny4NcOwJgbeDKRtYVSaXI4r7 yKmMJa/pCxg+lkeko3dhft4FBduNdAiZ -----END CERTIFICATE-----Generated at Thu May 15 00:14:47 2025 by rpki-client