$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json) Hash identifier: Ab6+/j5Zwqnf7K/1DBK7dwtyZgqdNvTMTTJ+3MZADZw= Subject key identifier: DC:CF:C1:E4:7B:AF:63:29:05:FA:C6:4C:6D:12:30:8F:C2:4C:41:4D Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft Manifest number: 0412 Signing time: Tue 01 Jul 2025 01:02:59 +0000 Manifest this update: Tue 01 Jul 2025 01:02:58 +0000 Manifest next update: Tue 08 Jul 2025 01:02:58 +0000 Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: MvdB9lwzZYVQ/kNhwcAcTZX+FmG/BI4hMxhoTVpVRTY=) 2: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: JDhvBxRe3WYJ1iKQKnxqCUD2z2C21JJ9nqsXsWXBpYM=) 3: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: QNRRPIEXpBXbzOjvogyb/5EofzlDIH5pOqmalYkDTHw=) 4: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: pOC7yi76swQlUgILehboMwNcNI7fxV+UlNvd0wZTls0=) 5: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: QSRbYccf6zSEHa0HsQVgKCVz5nS1O8L5U8Elot2Xz40=) 6: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: R3jOsVUDlgPUNcLVjE2JxsnxeughPhg0TvY+Ytf4478=) 7: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: 8STPYAJJhsqxveLpZRzmdl9yhMuww2dhMQO1WbQeNbU=) 8: 5F14A15442D111EF8424E65BC4F9AE02.roa (hash: +sir/1Ip5eUjrTrKzP4T0efIjhcNSv/WtmTYay9OtXs=) 9: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: 7KI+xGonwsZRICria/4CZwlDNlRIuXU/wVts22Crf9U=) 10: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: fPCfFsxMUqOAvLJmkWjc+RPsiCNLjQ233XGNCqOiY/w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Validity Not Before: Jul 1 01:02:58 2025 GMT Not After : Jul 8 01:02:58 2025 GMT Subject: CN=686333c2-519b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:55:f9:ae:eb:8c:23:a6:f0:90:f7:e7:10:2b: 66:77:c0:58:fe:31:72:94:5f:96:c1:b1:08:26:a8: 49:05:02:2b:32:c8:8e:60:8a:28:84:14:1c:22:c2: 69:c6:b4:64:e0:3c:9a:81:9f:b8:f8:f8:cb:bf:57: da:d9:ca:0e:2b:df:dc:9d:b7:11:d7:99:3d:e8:e8: 68:e2:68:d4:fa:28:33:e9:f2:42:21:88:66:fb:27: 96:e6:c6:e1:93:af:1e:07:87:31:97:26:2f:15:6c: 9a:3e:c7:53:05:e7:2f:d8:57:bd:16:e2:14:40:2c: 78:9f:82:c0:57:66:e6:3d:87:82:a6:73:f2:ff:0d: 6d:75:35:84:02:19:2c:26:63:be:cc:12:05:3a:46: 17:de:05:d8:cd:98:45:36:fc:82:ca:9f:cd:63:79: c7:22:d0:6c:94:9a:cc:80:75:1c:99:2a:e8:e3:86: 4c:69:f6:ab:e3:86:7f:a6:3c:39:de:69:cf:18:ec: e3:26:17:97:0f:9f:70:c7:3f:40:f7:cf:cb:aa:86: 33:99:9d:60:90:97:a9:0c:76:56:86:7f:9d:f3:6c: 70:1d:58:30:02:98:46:11:ab:00:48:d8:54:0c:9c: 7e:18:57:c7:b0:6c:8b:b7:15:2e:d8:21:70:0e:9e: fd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CF:C1:E4:7B:AF:63:29:05:FA:C6:4C:6D:12:30:8F:C2:4C:41:4D X509v3 Authority Key Identifier: keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:7d:73:cd:1f:1c:cd:9f:aa:2b:72:a7:fd:6f:8d:60:60:f2: b0:2b:4f:a1:ec:b4:19:e1:48:97:55:e4:36:42:bd:14:08:ca: 8b:02:a4:1a:0a:ec:c6:a8:17:c7:15:fe:63:f1:fc:ab:c1:d1: 26:68:02:92:cd:ab:e8:d1:d7:1c:f9:a7:23:b3:85:4a:34:e9: 86:47:e3:d0:00:b0:27:5b:43:35:7a:c6:9c:a0:7b:33:02:65: 47:51:56:1f:47:33:5c:6c:c7:1d:57:e5:3c:5c:a8:d4:63:bd: a5:4f:cf:b9:56:62:91:cf:8f:6f:b5:27:a0:7d:ca:54:91:12: 48:12:67:d3:f8:bf:96:a3:80:58:40:b5:d6:c1:50:64:cf:16: b1:73:ba:44:4c:b1:d2:28:5d:53:a3:8b:c9:ae:78:81:3a:9c: 80:89:4f:12:71:a9:0b:ff:a9:e7:02:44:f2:b1:f8:67:ba:65: 45:1c:39:63:92:7c:56:27:6a:31:0f:cf:73:98:54:f3:82:2f: e9:71:78:88:a8:a0:1e:82:a4:dc:58:61:fc:46:bb:26:87:73: 28:77:b9:95:16:6a:7e:bf:f4:27:52:73:b9:af:4e:39:ba:42: 65:5e:eb:0b:13:cd:76:fe:99:82:c9:ec:79:b7:8f:42:00:94: a2:c7:ef:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC Mzk5OTI1MzkwHhcNMjUwNzAxMDEwMjU4WhcNMjUwNzA4MDEwMjU4WjAYMRYwFAYD VQQDEw02ODYzMzNjMi01MTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5VX5ruuMI6bwkPfnECtmd8BY/jFylF+WwbEIJqhJBQIrMsiOYIoohBQcIsJp xrRk4DyagZ+4+PjLv1fa2coOK9/cnbcR15k96Oho4mjU+igz6fJCIYhm+yeW5sbh k68eB4cxlyYvFWyaPsdTBecv2Fe9FuIUQCx4n4LAV2bmPYeCpnPy/w1tdTWEAhks JmO+zBIFOkYX3gXYzZhFNvyCyp/NY3nHItBslJrMgHUcmSro44ZMafar44Z/pjw5 3mnPGOzjJheXD59wxz9A98/LqoYzmZ1gkJepDHZWhn+d82xwHVgwAphGEasASNhU DJx+GFfHsGyLtxUu2CFwDp79ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzPweR7 r2MpBfrGTG0SMI/CTEFNMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1 TERMaHhNdmhSOC16bVpKVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYfXPNHxzNn6orcqf9b41gYPKwK0+h7LQZ4UiXVeQ2Qr0UCMqLAqQa CuzGqBfHFf5j8fyrwdEmaAKSzavo0dcc+acjs4VKNOmGR+PQALAnW0M1esacoHsz AmVHUVYfRzNcbMcdV+U8XKjUY72lT8+5VmKRz49vtSegfcpUkRJIEmfT+L+Wo4BY QLXWwVBkzxaxc7pETLHSKF1To4vJrniBOpyAiU8ScakL/6nnAkTysfhnumVFHDlj knxWJ2oxD89zmFTzgi/pcXiIqKAegqTcWGH8Rrsmh3Mod7mVFmp+v/QnUnO5r045 ukJlXusLE812/pmCyex5t49CAJSix+8q -----END CERTIFICATE-----Generated at Wed Jul 2 13:43:51 2025 by rpki-client