$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: tV4bAEJ9mbIJOqocqwQHxB3e4AgN3/xRsrjVzSFvyDk= Subject key identifier: A5:2B:83:1E:9B:52:FD:BA:93:FA:CA:74:32:8F:FA:47:5B:3A:3A:21 Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 0193 Signing time: Sat 17 May 2025 03:09:21 +0000 Manifest this update: Sat 17 May 2025 03:09:21 +0000 Manifest next update: Sat 24 May 2025 03:09:21 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: 5Kiz9/lI2925yiUxb2+X7tvPaxiaE7Pga1ZOnFshOq4=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: 2K9kOKHGwBClsOCjMWjBt/lsIDrWFOJQCQhQXvkzECo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 03:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: May 17 03:09:21 2025 GMT Not After : May 24 03:09:21 2025 GMT Subject: CN=6827fde1-7449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:4d:fb:23:79:10:e5:e4:45:d8:b7:da:db: da:0e:31:1a:0d:57:eb:f4:f7:9e:00:20:95:54:27: c3:d1:82:64:25:61:a0:3a:6f:09:33:fd:5f:15:54: 8e:d0:e1:0d:d8:6f:da:85:51:7e:67:40:fc:05:5e: 5b:31:ef:b3:7b:af:af:84:71:2c:98:7c:81:2e:ab: 93:dd:5e:aa:5f:2b:d8:75:d9:b0:d7:51:54:dd:0d: 97:02:07:78:fe:81:5e:84:f8:73:45:18:c4:82:81: cd:7f:48:4f:fa:28:5e:ce:92:72:96:9b:59:8f:2b: f7:25:ae:65:74:93:ef:ee:5e:21:84:a3:2e:58:81: f9:a6:e6:8f:8e:22:c0:73:d9:43:ab:41:ad:b2:92: 8b:fa:ec:b2:ea:7d:1c:be:8d:9e:f0:aa:bd:20:0f: 47:4e:0b:6e:33:6a:ae:f3:5b:f2:8f:f8:c5:6b:8d: e8:ec:3c:0a:7d:52:62:4b:80:2b:9a:af:0b:f4:cf: 2f:5b:42:11:21:15:a0:78:db:ae:20:47:c6:4e:9a: 83:6d:8e:69:ca:bd:68:e0:6c:07:5a:e8:a3:ab:93: db:c1:46:db:35:2d:44:17:35:80:d8:20:17:2b:0a: c3:72:f1:30:02:50:3d:e3:2f:42:50:e4:42:a2:91: 4b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2B:83:1E:9B:52:FD:BA:93:FA:CA:74:32:8F:FA:47:5B:3A:3A:21 X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ac:65:42:f7:2c:d5:bb:fe:15:91:22:7b:3f:a3:c9:14:16: 20:7e:ae:91:37:5a:65:30:fa:4b:3c:0e:bc:12:f9:10:e3:21: b7:38:29:a2:89:bb:c7:22:b1:45:a3:c0:a3:ce:5e:52:a5:8d: 31:ff:65:28:1c:cd:b5:94:7d:a9:0c:6f:2e:d3:aa:38:76:bf: 91:e5:22:b7:03:fc:a4:18:20:0f:62:62:29:dd:aa:99:14:e6: 2a:f1:ce:8a:7f:54:a7:b5:23:5a:07:36:b6:c9:0d:fd:ae:c3: 9a:45:eb:4c:22:8b:25:81:c3:79:93:2a:e0:d4:23:db:41:47: 0a:bb:c4:36:cf:b5:37:91:29:b9:d3:b1:90:85:e0:58:c9:c0: c1:36:56:e2:6f:ef:01:52:c5:53:6c:4f:db:5c:46:3e:06:e2: c8:20:e2:a7:5f:33:7a:9f:dd:fb:fc:b6:2f:d0:79:33:48:04: 5f:ce:0c:e4:4a:cb:06:46:25:59:37:79:4d:55:d0:7f:ad:c3: f5:76:cf:18:b3:69:89:55:43:e7:ac:a4:64:33:03:97:98:d1: d8:69:7d:23:3e:78:5b:b3:a6:5e:35:31:d5:11:d4:68:ed:5a: 02:7f:6b:4a:09:fd:d1:cb:bc:56:02:5c:bc:70:bc:2e:3f:62: 72:61:68:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjUwNTE3MDMwOTIxWhcNMjUwNTI0MDMwOTIxWjAYMRYwFAYD VQQDEw02ODI3ZmRlMS03NDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsP1N+yN5EOXkRdi32tvaDjEaDVfr9PeeACCVVCfD0YJkJWGgOm8JM/1fFVSO 0OEN2G/ahVF+Z0D8BV5bMe+ze6+vhHEsmHyBLquT3V6qXyvYddmw11FU3Q2XAgd4 /oFehPhzRRjEgoHNf0hP+ihezpJylptZjyv3Ja5ldJPv7l4hhKMuWIH5puaPjiLA c9lDq0GtspKL+uyy6n0cvo2e8Kq9IA9HTgtuM2qu81vyj/jFa43o7DwKfVJiS4Ar mq8L9M8vW0IRIRWgeNuuIEfGTpqDbY5pyr1o4GwHWuijq5PbwUbbNS1EFzWA2CAX KwrDcvEwAlA94y9CUORCopFLfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUrgx6b Uv26k/rKdDKP+kdbOjohMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCerGVC9yzVu/4VkSJ7P6PJFBYgfq6RN1plMPpLPA68EvkQ4yG3OCmi ibvHIrFFo8Cjzl5SpY0x/2UoHM21lH2pDG8u06o4dr+R5SK3A/ykGCAPYmIp3aqZ FOYq8c6Kf1SntSNaBza2yQ39rsOaRetMIoslgcN5kyrg1CPbQUcKu8Q2z7U3kSm5 07GQheBYycDBNlbib+8BUsVTbE/bXEY+BuLIIOKnXzN6n937/LYv0HkzSARfzgzk SssGRiVZN3lNVdB/rcP1ds8Ys2mJVUPnrKRkMwOXmNHYaX0jPnhbs6ZeNTHVEdRo 7VoCf2tKCf3Ry7xWAly8cLwuP2JyYWhn -----END CERTIFICATE-----Generated at Sat May 17 13:06:04 2025 by rpki-client