$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json) Hash identifier: ukyQRuJYPbnsCUChy/XX91iZWRAGc45RLm/8wa65V1k= Subject key identifier: B3:AD:21:F3:A8:58:1D:0E:C4:9A:D2:77:CC:45:DA:F4:BE:40:7F:14 Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 083F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft Manifest number: 0835 Signing time: Mon 12 May 2025 20:36:05 +0000 Manifest this update: Mon 12 May 2025 20:36:04 +0000 Manifest next update: Mon 19 May 2025 20:36:04 +0000 Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: yTpx7c2iaJ3TQtBOFwQf2Z3vq5HGeR4hfpZuNSBGUN8=) 2: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: 2uyPyTnKA5Zwl2pBoHO39thl2FFHLVE7fFoHDqNgHC8=) 3: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: jgTYi57dnGXhFEZx8F96LVtuauTCfgLefdSP5U2KTns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2111 (0x83f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: May 12 20:36:04 2025 GMT Not After : May 19 20:36:04 2025 GMT Subject: CN=68225bb4-9139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:ac:3e:74:89:3e:76:8c:66:90:90:22:08: 16:80:6e:76:09:96:70:c6:0d:ed:79:e6:58:ce:0c: f1:f8:7d:97:8d:1d:89:de:f0:dc:5d:ef:b5:cc:8c: 8c:df:de:0f:6f:8c:aa:d5:bb:ac:af:f7:ce:7c:41: f2:ce:29:f1:55:2e:71:04:6a:f3:7e:80:3d:39:88: 83:dc:89:f0:0f:b2:55:a4:bc:d3:54:35:00:9e:3e: 7b:46:7b:e3:f5:9d:be:db:6f:a1:7e:a4:25:c2:99: 9a:5c:d8:24:4f:c8:2a:ba:29:a3:97:ab:75:75:c9: 82:61:2d:1b:2c:1c:48:d7:54:34:9e:bb:ad:ca:a1: 2c:12:79:17:f9:82:25:74:ef:6f:8f:db:e6:57:26: 21:d8:ff:73:50:cf:60:e4:97:a9:7e:64:19:a5:e8: ab:be:07:41:11:a4:63:53:52:60:0a:dc:d3:79:0c: 94:dd:d2:c8:c9:a3:4b:c7:5c:b3:b2:91:4d:76:27: 65:a9:7e:13:3c:b2:99:01:6b:9d:15:b6:07:b7:48: a4:bd:0d:a8:1c:7d:eb:17:e5:46:82:5f:0f:5f:77: 11:ae:62:20:eb:65:6b:61:14:eb:e2:ae:66:c6:bf: 17:37:8b:a4:f4:18:d1:82:7d:c9:c2:da:81:d7:0c: 7e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AD:21:F3:A8:58:1D:0E:C4:9A:D2:77:CC:45:DA:F4:BE:40:7F:14 X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:a4:fa:65:5b:b9:a7:ac:91:cd:41:9e:70:18:07:9f:b3:f3: 59:b2:77:aa:5b:d4:b2:5a:b7:24:66:6f:ab:53:9f:12:10:8d: ad:76:a7:56:47:4d:d1:1e:0b:bc:f4:46:00:8d:af:23:fb:12: 67:f6:36:5e:1c:6c:b3:8b:9e:a6:c1:de:67:c0:70:59:46:00: 92:df:86:c7:c9:c6:15:a7:a5:03:6e:3a:25:e2:55:0a:d9:46: 80:be:e8:e8:9d:a6:b5:ee:eb:0b:04:50:7b:66:ab:fe:65:e2: f8:53:1a:21:77:3c:c3:a7:06:d6:d5:60:78:0b:52:ec:ae:dc: 5a:df:c5:57:fd:9d:c3:d5:44:52:c9:d9:5a:cb:f4:23:78:d7: 72:71:57:cd:a1:0e:14:ab:73:99:42:c1:61:aa:62:6d:5a:19: 40:e3:ad:af:29:cd:cb:32:bd:74:5a:10:f8:17:5b:c2:5b:50: d0:c2:fa:fb:7b:b1:7e:8a:6d:d1:04:e4:28:9e:9d:ee:e1:ab: cc:56:fc:cd:db:43:d0:6f:14:0c:c8:b3:86:c8:f1:f8:01:83: bc:ca:fb:c1:8b:02:21:6a:32:33:9c:ad:5e:54:6e:88:68:bd: 18:84:ce:fd:df:a4:74:6f:0a:37:7f:db:e3:c3:2c:70:08:7c: 62:ee:92:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjUwNTEyMjAzNjA0WhcNMjUwNTE5MjAzNjA0WjAYMRYwFAYD VQQDEw02ODIyNWJiNC05MTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVasPnSJPnaMZpCQIggWgG52CZZwxg3teeZYzgzx+H2XjR2J3vDcXe+1zIyM 394Pb4yq1busr/fOfEHyzinxVS5xBGrzfoA9OYiD3InwD7JVpLzTVDUAnj57Rnvj 9Z2+22+hfqQlwpmaXNgkT8gquimjl6t1dcmCYS0bLBxI11Q0nrutyqEsEnkX+YIl dO9vj9vmVyYh2P9zUM9g5JepfmQZpeirvgdBEaRjU1JgCtzTeQyU3dLIyaNLx1yz spFNdidlqX4TPLKZAWudFbYHt0ikvQ2oHH3rF+VGgl8PX3cRrmIg62VrYRTr4q5m xr8XN4uk9BjRgn3JwtqB1wx+7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOtIfOo WB0OxJrSd8xF2vS+QH8UMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBDMC8wMjJEQkNBNENDRTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0 WUdiN0wweDJWRnFjNHY0d00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRpPplW7mnrJHNQZ5wGAefs/NZsneqW9SyWrckZm+rU58SEI2tdqdW R03RHgu89EYAja8j+xJn9jZeHGyzi56mwd5nwHBZRgCS34bHycYVp6UDbjol4lUK 2UaAvujonaa17usLBFB7Zqv+ZeL4UxohdzzDpwbW1WB4C1Lsrtxa38VX/Z3D1URS ydlay/QjeNdycVfNoQ4Uq3OZQsFhqmJtWhlA462vKc3LMr10WhD4F1vCW1DQwvr7 e7F+im3RBOQonp3u4avMVvzN20PQbxQMyLOGyPH4AYO8yvvBiwIhajIznK1eVG6I aL0YhM7936R0bwo3f9vjwyxwCHxi7pIv -----END CERTIFICATE-----Generated at Tue May 13 10:09:14 2025 by rpki-client