$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json) Hash identifier: 6kRtr7ekXPlHYZdUtmy+t8eGTgG1IcKZGWEEiJRmTEc= Subject key identifier: 6E:2C:9B:26:6A:DE:C2:CE:F6:49:94:02:08:89:61:56:D7:0E:B6:D2 Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft Manifest number: DB Signing time: Sun 11 May 2025 04:21:41 +0000 Manifest this update: Sun 11 May 2025 04:21:41 +0000 Manifest next update: Sun 18 May 2025 04:21:41 +0000 Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: lq+Y//3nCCFsLQ3ukZGa0Gh3inbjQO+Rt4pWREddOS4=) 2: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: osmG47ejUnqAfJKuMkDqKj8NyV5CxVCxx93M/mU6AGU=) 3: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: tXFOS4K6NP0mWp2yqDrG4Mk0xH2TKVaPDDMjLQ6peHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Validity Not Before: May 11 04:21:41 2025 GMT Not After : May 18 04:21:41 2025 GMT Subject: CN=682025d5-1d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:49:6e:3d:b3:51:75:56:c9:e7:22:37:64:59: 66:67:66:4e:f6:15:9c:0c:25:b3:91:b9:1a:1f:ed: 2e:cd:19:ba:f2:ba:49:09:bc:1c:1e:6f:97:c1:bc: 60:a8:87:82:a5:72:14:68:09:9f:d5:de:d2:a4:60: c4:ab:ae:c4:d5:70:bf:0d:27:84:6d:7f:23:dc:fe: 40:8f:27:af:f7:4d:8f:8c:eb:ee:b9:39:0b:9d:c6: 16:6f:7d:26:26:99:19:ec:9d:1a:1e:f8:00:17:b7: 1e:80:bd:78:8a:f0:f8:52:f0:6a:19:08:a4:bf:57: 6a:bf:e1:7e:00:3a:9b:7b:bd:c7:cb:da:7f:21:f3: 82:31:7c:06:a3:0c:07:cb:14:89:7e:1c:70:17:03: 44:c9:3b:ae:f9:0f:6a:a5:04:6d:67:30:8a:e2:b6: 0a:2f:72:fa:46:66:1f:fd:b0:7a:54:40:2a:1d:fb: 7d:7a:7e:4e:10:76:e9:76:4e:31:7d:92:53:39:23: b6:3b:c8:ab:29:b6:03:c8:2d:26:34:02:76:ba:0c: 08:99:9d:a0:11:d9:f7:b9:2b:30:ca:3f:cf:f5:f0: c1:91:c8:33:e9:fe:7c:69:51:fa:2e:d2:16:5e:34: 17:1f:50:a5:93:dd:c5:30:97:04:5d:c3:6f:dd:4d: 7f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2C:9B:26:6A:DE:C2:CE:F6:49:94:02:08:89:61:56:D7:0E:B6:D2 X509v3 Authority Key Identifier: keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:84:17:3d:68:fb:d2:57:80:79:ab:31:36:e2:54:87:a9:65: ea:f3:87:11:aa:2c:d1:c8:47:58:ed:7a:3f:e1:70:72:be:bf: 88:8c:58:fb:76:4a:6a:74:46:b3:1e:b4:f0:74:f6:af:29:a9: 8a:7c:f4:c1:6c:ce:ad:41:e4:d8:7c:9c:ef:15:6d:c6:8f:50: 18:a0:70:d1:d4:1c:d4:d7:b2:33:9c:1d:41:1a:f1:d3:61:6d: 09:40:0f:6f:1d:c2:9c:27:8a:07:9e:c8:a8:21:dd:c9:8d:0c: ac:aa:4e:ea:0b:98:80:0c:44:2a:17:62:0e:7c:88:22:ad:47: c3:d1:53:c9:e7:a7:5f:3d:b6:e9:12:4a:6c:70:54:52:a3:8f: 88:5e:0d:58:47:21:e1:de:88:f4:6a:ab:87:1b:f2:43:db:5e: 7a:0e:e1:ce:8e:52:78:bd:2e:db:de:4e:0d:07:67:46:04:da: 4d:5c:11:c5:b8:05:84:0e:10:66:98:e1:8f:f7:4b:f7:73:a8: 20:e6:f0:4a:ae:3b:ce:a3:a0:70:45:fa:8f:46:96:2d:61:74: 2f:b4:68:cf:56:c1:6e:de:c0:24:a0:8d:98:83:f4:c2:0f:98: 15:e7:c1:cf:95:75:a1:3b:2f:38:a7:20:57:52:17:77:23:ee: 53:80:ee:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyRkQxMTAvBgNVBAUTKDVGMkI1ODIxREQ0M0MyOTQzOUQyQkFFRTVCREMwNDMy OTFDNDdCQUYwHhcNMjUwNTExMDQyMTQxWhcNMjUwNTE4MDQyMTQxWjAYMRYwFAYD VQQDEw02ODIwMjVkNS0xZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30luPbNRdVbJ5yI3ZFlmZ2ZO9hWcDCWzkbkaH+0uzRm68rpJCbwcHm+Xwbxg qIeCpXIUaAmf1d7SpGDEq67E1XC/DSeEbX8j3P5Ajyev902PjOvuuTkLncYWb30m JpkZ7J0aHvgAF7cegL14ivD4UvBqGQikv1dqv+F+ADqbe73Hy9p/IfOCMXwGowwH yxSJfhxwFwNEyTuu+Q9qpQRtZzCK4rYKL3L6RmYf/bB6VEAqHft9en5OEHbpdk4x fZJTOSO2O8irKbYDyC0mNAJ2ugwImZ2gEdn3uSswyj/P9fDBkcgz6f58aVH6LtIW XjQXH1Clk93FMJcEXcNv3U1/EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4smyZq 3sLO9kmUAgiJYVbXDrbSMB8GA1UdIwQYMBaAFF8rWCHdQ8KUOdK67lvcBDKRxHuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJGRC82MzhENjJBMEUx MTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdwUTUwcnJ1Vzl3RU1wSEVl NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjJGRC82MzhENjJBMEUxMTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdw UTUwcnJ1Vzl3RU1wSEVlNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkhBc9aPvSV4B5qzE24lSHqWXq84cRqizRyEdY7Xo/4XByvr+IjFj7 dkpqdEazHrTwdPavKamKfPTBbM6tQeTYfJzvFW3Gj1AYoHDR1BzU17IznB1BGvHT YW0JQA9vHcKcJ4oHnsioId3JjQysqk7qC5iADEQqF2IOfIgirUfD0VPJ56dfPbbp EkpscFRSo4+IXg1YRyHh3oj0aquHG/JD2156DuHOjlJ4vS7b3k4NB2dGBNpNXBHF uAWEDhBmmOGP90v3c6gg5vBKrjvOo6BwRfqPRpYtYXQvtGjPVsFu3sAkoI2Yg/TC D5gV58HPlXWhOy84pyBXUhd3I+5TgO4O -----END CERTIFICATE-----Generated at Sun May 11 22:44:56 2025 by rpki-client