$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json) Hash identifier: wyEXtmay9evLLy7zjVsOdVmjxveU04NWQpa4L4/bZqY= Subject key identifier: F1:68:76:A6:15:E5:78:B8:48:DE:62:05:DB:E3:75:44:B3:37:BA:6E Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Certificate serial: 0425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft Manifest number: 03F9 Signing time: Sun 11 May 2025 00:08:35 +0000 Manifest this update: Sun 11 May 2025 00:08:35 +0000 Manifest next update: Sun 18 May 2025 00:08:35 +0000 Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: HR1rpEjHykNGut9AKPdFvqISdXUVyoSNIlO5xipi1F8=) 2: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: JDhvBxRe3WYJ1iKQKnxqCUD2z2C21JJ9nqsXsWXBpYM=) 3: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: QNRRPIEXpBXbzOjvogyb/5EofzlDIH5pOqmalYkDTHw=) 4: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: pOC7yi76swQlUgILehboMwNcNI7fxV+UlNvd0wZTls0=) 5: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: QSRbYccf6zSEHa0HsQVgKCVz5nS1O8L5U8Elot2Xz40=) 6: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: R3jOsVUDlgPUNcLVjE2JxsnxeughPhg0TvY+Ytf4478=) 7: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: 8STPYAJJhsqxveLpZRzmdl9yhMuww2dhMQO1WbQeNbU=) 8: 5F14A15442D111EF8424E65BC4F9AE02.roa (hash: +sir/1Ip5eUjrTrKzP4T0efIjhcNSv/WtmTYay9OtXs=) 9: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: 7KI+xGonwsZRICria/4CZwlDNlRIuXU/wVts22Crf9U=) 10: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: fPCfFsxMUqOAvLJmkWjc+RPsiCNLjQ233XGNCqOiY/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1061 (0x425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Validity Not Before: May 11 00:08:35 2025 GMT Not After : May 18 00:08:35 2025 GMT Subject: CN=681fea83-3aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:33:ab:cf:e6:7e:a2:ef:6f:f2:00:de:0e:d4: 64:0c:53:14:90:01:73:8c:a0:63:2c:0a:53:b8:d7: f4:4a:bf:68:62:ed:10:db:47:fc:45:5f:25:14:50: 97:de:56:6a:e4:7d:78:ad:af:7c:1b:fc:b7:69:d2: 97:6d:db:8a:04:e1:76:45:64:80:0d:40:a7:70:ad: a8:17:3a:c3:54:0a:ff:e2:ba:f3:5b:87:37:28:40: fc:07:22:99:62:d9:53:e5:0e:9c:d9:37:92:03:9a: 58:1b:5e:d6:44:75:0e:56:73:8e:c3:d7:b1:9f:35: 52:3b:57:25:04:75:0b:82:05:4e:40:4e:cf:0a:de: bc:10:db:cf:9a:b1:3b:4e:41:1c:4d:5d:9a:81:34: 15:bc:7e:16:20:0e:4c:43:51:61:2c:7c:9f:1a:f1: d2:43:56:b4:04:4a:64:03:7e:84:1d:31:c0:a6:36: 50:31:fb:90:ab:8f:df:ec:d7:37:14:da:08:ae:8f: 77:ab:ec:d7:d6:be:40:b8:9a:ce:d6:86:aa:2f:8d: be:de:ff:fe:d8:1d:f8:f0:78:8c:f4:75:51:2d:53: 90:82:ff:8f:87:e7:7e:19:f4:75:17:ff:02:aa:af: ca:0d:0d:e6:6f:29:e8:d9:06:bc:ea:0d:ca:ab:a8: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:68:76:A6:15:E5:78:B8:48:DE:62:05:DB:E3:75:44:B3:37:BA:6E X509v3 Authority Key Identifier: keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:83:39:1e:b8:99:db:94:56:26:45:6e:09:b7:7b:8d:4c:f7: a6:77:b4:bb:55:63:08:0a:71:30:70:d5:5c:a1:a1:33:e7:f3: e9:9b:42:dd:91:3b:07:2e:16:11:40:a2:5f:d3:1b:da:6f:ea: 22:28:1f:d2:1e:06:24:7a:76:28:b6:cc:e7:64:ba:09:09:43: d6:38:a4:01:60:d8:29:00:a4:9d:57:0a:54:93:1c:01:9e:31: 00:02:ea:5d:fc:53:18:0d:a6:e7:92:72:e6:ca:13:2e:b8:29: cf:97:4b:ec:0e:fe:9e:2f:79:7f:04:3e:83:8f:f2:81:5f:5a: e5:7a:45:16:e5:b1:76:31:fd:fc:e2:8c:3d:aa:d5:04:39:90: 3d:e9:c6:33:44:35:50:e0:57:e6:13:d8:db:61:c8:1e:5b:da: 9f:59:3d:92:b3:99:ad:03:c1:31:99:60:8b:49:37:99:9a:a3: f2:43:0e:92:3c:9b:cf:69:c4:0e:63:ec:74:3f:a9:15:ff:40: 30:fb:45:58:bc:d7:2e:ee:37:53:75:1b:22:fc:9e:05:84:46: f4:0a:2a:20:af:53:eb:60:12:e5:1b:30:d8:bb:31:bc:ed:1f: 65:db:d5:35:c2:e5:90:16:f2:e5:83:35:ef:8f:08:08:3e:8f: 8c:c8:9b:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC Mzk5OTI1MzkwHhcNMjUwNTExMDAwODM1WhcNMjUwNTE4MDAwODM1WjAYMRYwFAYD VQQDEw02ODFmZWE4My0zYWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzOrz+Z+ou9v8gDeDtRkDFMUkAFzjKBjLApTuNf0Sr9oYu0Q20f8RV8lFFCX 3lZq5H14ra98G/y3adKXbduKBOF2RWSADUCncK2oFzrDVAr/4rrzW4c3KED8ByKZ YtlT5Q6c2TeSA5pYG17WRHUOVnOOw9exnzVSO1clBHULggVOQE7PCt68ENvPmrE7 TkEcTV2agTQVvH4WIA5MQ1FhLHyfGvHSQ1a0BEpkA36EHTHApjZQMfuQq4/f7Nc3 FNoIro93q+zX1r5AuJrO1oaqL42+3v/+2B348HiM9HVRLVOQgv+Ph+d+GfR1F/8C qq/KDQ3mbyno2Qa86g3Kq6h5yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFodqYV 5Xi4SN5iBdvjdUSzN7puMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1 TERMaHhNdmhSOC16bVpKVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCggzkeuJnblFYmRW4Jt3uNTPemd7S7VWMICnEwcNVcoaEz5/Ppm0Ld kTsHLhYRQKJf0xvab+oiKB/SHgYkenYotsznZLoJCUPWOKQBYNgpAKSdVwpUkxwB njEAAupd/FMYDabnknLmyhMuuCnPl0vsDv6eL3l/BD6Dj/KBX1rlekUW5bF2Mf38 4ow9qtUEOZA96cYzRDVQ4FfmE9jbYcgeW9qfWT2Ss5mtA8ExmWCLSTeZmqPyQw6S PJvPacQOY+x0P6kV/0Aw+0VYvNcu7jdTdRsi/J4FhEb0Ciogr1PrYBLlGzDYuzG8 7R9l29U1wuWQFvLlgzXvjwgIPo+MyJsl -----END CERTIFICATE-----Generated at Mon May 12 07:24:45 2025 by rpki-client