$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json) Hash identifier: SlgVdc0tZoKwKYR+abA/kIWGLllhKWTsQ521Em3g1RQ= Subject key identifier: 6F:6D:91:28:AA:CB:6F:BB:23:1C:ED:99:9C:A2:72:CC:E5:73:30:2F Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Certificate serial: 0993 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft Manifest number: 098C Signing time: Mon 12 May 2025 19:56:18 +0000 Manifest this update: Mon 12 May 2025 19:56:17 +0000 Manifest next update: Mon 19 May 2025 19:56:17 +0000 Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: XRbPdHB8F/RonLv7y2cbMFBU+3QOPLRHPYaHUv1XnXo=) 2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: 5OuJk3wuVixq/unKPrRmS/rEXR6rqWNJ7lk0q2nqJD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2451 (0x993) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Validity Not Before: May 12 19:56:17 2025 GMT Not After : May 19 19:56:17 2025 GMT Subject: CN=68225261-4077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:55:71:2e:06:ab:ed:4c:f7:e9:da:1d:f4: f1:8f:47:d8:0c:c5:33:e3:15:8e:26:22:7b:4f:00: af:90:5b:0e:9a:c1:09:68:d7:de:ea:a3:9b:d4:98: 96:4e:e8:ba:57:e1:c1:4c:9d:f9:8c:f7:52:52:f2: 61:01:bd:4d:93:fc:84:6a:cc:e2:9b:25:81:f1:d2: 3b:c1:aa:0d:af:ed:55:2f:91:f5:65:ae:aa:55:02: 28:b7:aa:55:c4:49:3d:18:c9:32:61:84:09:27:e8: a1:e5:cd:ad:74:9c:2b:09:71:a1:54:6f:14:4c:bd: c8:56:10:9d:f1:07:20:4e:44:d1:4f:ab:c0:54:9b: a2:fc:8c:8d:d1:b3:8c:48:08:df:c3:68:83:91:20: 4a:63:1e:08:87:7f:c8:d0:5a:a7:db:67:40:07:81: b5:c7:b6:55:af:69:35:32:c8:5e:eb:29:11:b6:6a: 04:1f:57:b0:5c:83:9c:e2:8b:8a:c9:2a:c9:d9:f0: ed:ac:b7:a9:32:22:64:3d:5f:50:87:65:05:e5:fc: f5:e6:cf:4c:a1:62:c9:5f:37:bc:0c:c7:d3:2b:78: 9c:cc:4c:b6:27:ec:fd:d7:1b:a6:f3:23:4d:24:18: ba:ae:64:70:0c:c8:27:9a:c0:da:83:3d:62:2f:6c: b3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6D:91:28:AA:CB:6F:BB:23:1C:ED:99:9C:A2:72:CC:E5:73:30:2F X509v3 Authority Key Identifier: keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:36:21:81:79:d7:5a:f7:3e:d1:2d:3c:8b:5f:55:02:4a:e8: 76:29:3c:90:eb:9e:8a:e1:3d:69:54:07:04:fe:e0:b5:c1:ee: 0b:8f:2c:50:e7:3e:74:c8:83:9d:aa:8d:1a:df:e8:31:9a:54: 12:ab:18:a9:60:3c:aa:76:d8:f1:77:e2:fd:b2:3e:65:61:57: a1:58:72:c6:66:35:fd:5a:75:b9:8b:03:8a:6e:30:21:80:37: 08:27:e8:ff:5a:fe:d2:eb:9d:32:26:c5:71:01:ee:4a:f8:43: 83:fc:32:be:09:0c:7d:5d:b1:f7:3d:9d:04:8a:bc:09:91:61: ef:5a:af:78:fe:2d:1c:16:77:b4:19:a7:17:d1:bb:d2:50:cd: d2:46:30:60:aa:5c:cf:03:29:6a:16:37:bc:e7:16:a2:e1:80: 38:72:4c:94:01:9a:e1:13:d0:e7:60:4e:22:c2:7b:45:48:32: 74:9c:9e:3f:75:23:9b:68:ef:1c:0a:ac:82:84:46:b4:de:ee: fc:ad:3a:fa:d1:3f:73:16:42:7a:48:cc:32:83:76:f0:24:fe: 35:40:a3:d6:6b:cb:91:61:cf:68:c9:d8:68:8b:58:f7:16:95: c6:90:7a:e8:92:58:b1:c8:ee:4f:c8:de:7f:4b:21:6b:66:00: e2:ba:ff:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzQjMxMTAvBgNVBAUTKDVFMDU3NDQ2QzQ5NjFFNEQyNkMzN0ZGRUE4QUMzRjdB QUREODNCMzIwHhcNMjUwNTEyMTk1NjE3WhcNMjUwNTE5MTk1NjE3WjAYMRYwFAYD VQQDEw02ODIyNTI2MS00MDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgNVcS4Gq+1M9+naHfTxj0fYDMUz4xWOJiJ7TwCvkFsOmsEJaNfe6qOb1JiW Tui6V+HBTJ35jPdSUvJhAb1Nk/yEaszimyWB8dI7waoNr+1VL5H1Za6qVQIot6pV xEk9GMkyYYQJJ+ih5c2tdJwrCXGhVG8UTL3IVhCd8QcgTkTRT6vAVJui/IyN0bOM SAjfw2iDkSBKYx4Ih3/I0Fqn22dAB4G1x7ZVr2k1Mshe6ykRtmoEH1ewXIOc4ouK ySrJ2fDtrLepMiJkPV9Qh2UF5fz15s9MoWLJXze8DMfTK3iczEy2J+z91xum8yNN JBi6rmRwDMgnmsDagz1iL2yzLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9tkSiq y2+7IxztmZyicszlczAvMB8GA1UdIwQYMBaAFF4FdEbElh5NJsN//qisP3qt2Dsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNCMy9BM0QzRDgyMjhB MEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hrMG13M18tcUt3X2VxM1lP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hnVjBSc1NXSGswbXczXy1xS3dfZXEzWU96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNCMy9BM0QzRDgyMjhBMEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hr MG13M18tcUt3X2VxM1lPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNNiGBedda9z7RLTyLX1UCSuh2KTyQ656K4T1pVAcE/uC1we4LjyxQ 5z50yIOdqo0a3+gxmlQSqxipYDyqdtjxd+L9sj5lYVehWHLGZjX9WnW5iwOKbjAh gDcIJ+j/Wv7S650yJsVxAe5K+EOD/DK+CQx9XbH3PZ0EirwJkWHvWq94/i0cFne0 GacX0bvSUM3SRjBgqlzPAylqFje85xai4YA4ckyUAZrhE9DnYE4iwntFSDJ0nJ4/ dSObaO8cCqyChEa03u78rTr60T9zFkJ6SMwyg3bwJP41QKPWa8uRYc9oydhoi1j3 FpXGkHroklixyO5PyN5/SyFrZgDiuv8f -----END CERTIFICATE-----Generated at Wed May 14 10:38:53 2025 by rpki-client