$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft File: XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json) Hash identifier: 2pJj/5lC3OLSgViVYQe+TtMzKwnFMCgIKb+HeIdysxo= Subject key identifier: 4C:A3:EB:D9:1E:44:3D:A3:9B:C1:6F:40:0F:E7:DD:62:D3:23:85:B1 Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 27AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft Manifest number: 251D Signing time: Mon 12 May 2025 15:47:59 +0000 Manifest this update: Mon 12 May 2025 15:47:58 +0000 Manifest next update: Mon 19 May 2025 15:47:58 +0000 Files and hashes: 1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: AryepMkRIz0O6C37js5N+WcykLT+4WLecvhBd3BL9FA=) 2: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: JM3URqRB9lFjbjulP6HJXH0/nTZmKhp/VblyDepgmCA=) 3: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: L56JARs1lbyWfxDIMRSYK/QldVKbihzZgGIBK+gCvAE=) 4: F04860C28C5611E792848B4AC4F9AE02.roa (hash: OWjLebxJynytHvjgIP0SVIn8ZOFvLbt6j473I2eFdGg=) 5: F688FE388C5611E792848B4AC4F9AE02.roa (hash: lqz+b2mpZ7liApUeWmpk6Sxdz1MK1YVyI/nndtzOfc8=) 6: F1475E928C5611E792848B4AC4F9AE02.roa (hash: Azsul1kHuCMDc3vM/dyl3tkEbz4NHSW6BcHmreet4yc=) 7: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: arhZFiziS+sBDNkkd9ApjM4qRhUdC/BiQCxwPWquNA0=) 8: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: z8Txj1JKr5vAyHyXu3Q0JC83ZWN/Ombj0tuTCxlEaRY=) 9: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: nNfTdp4PUnPXPodCTbOjAsAWXgCW6bK0lHos7EHr9sI=) 10: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: VkOAhIa80kNaefVErpKRcJS1UUCVoa+4BpGDgLLqprQ=) 11: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: DsNdloDffNUf3moIjjEgjm54CfZxDdhXyzmCNd4A8iM=) 12: B61774A4D9DF11EFB722C742C4F9AE02.roa (hash: /ceuJ/WbnEGgNSZXAtMbOel5sgU4JUVf8lMbFmmrMek=) 13: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (hash: zea1Z4utZ31hyYXYKPM+pLoUfd33/pFxc2Oz6L2A0xI=) 14: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: NQJGHd1cKyBqpoHctaUyw3dvZ0KuQOPSMwntjDFcg1A=) 15: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: 2JFPJBUaYhM0ytiq7e9eC6CYsDAt8wgMcc3SKiIFHsg=) 16: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: rMIZrcp78OdFGxAyj3EoE0LyB7/Lf2gRKvh+qENZ2aU=) 17: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: g10juuqEsEAKzRtgsKTtEKp5BZovzdZezXJ/i6OnQX8=) 18: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: 8wMgBAimNVtvub961irO59NqQxJMZvEDQRKi+qZmzOM=) 19: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: Xb63l3ZIQpud6T0SsIiJHA/1T9XjvXnyGqxkBm5CkQ0=) 20: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: HjDnuWYD2CM4eau1ngg0jQqOKxs9P1pY+POnRU8sW84=) 21: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: oci0lTgKFp7FiEncD15sU2Ngo6tK4eT2xuYmhT6iDlU=) 22: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: begcncLwYIJtBCQ6VJWY520RlYMTXNEWKkPpgmPjKb8=) 23: 543386248C5811E782F42951C4F9AE02.roa (hash: GlY/r205IC2OrqcOiTDslwqaWuBIkTf2ufwkodlMU14=) 24: 27A84B00A1CC11ED8DDB785DC4F9AE02.roa (hash: Sottj9k4RXjczj3TRXwNeTc3keyEZnkoE9tmU2Bbb+s=) 25: 9B22F928BFE311EE949C2918C4F9AE02.roa (hash: rHfc038K7hZU+Vhyh8UrxdPg1RCOF3M80HQn+le/mCY=) 26: 14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa (hash: xPXjL37oXeRRpPjLu0GM00DmOaXEa3PmK65wf2oESwE=) 27: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: ZQdD4QBAodxhPJDLvSXRmOQaG3cbzn75kTPxr7PdWwA=) 28: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: 3hdHgWnWw8iRZc3PLDAGckupDqE2yqREOxz6oL/nUl8=) 29: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 6KUaAZVDPkXTkOKZ5DbXYRghI5OIx+//6O9Z2SthviM=) 30: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: pP6QaZ6xCHzwaNezLWWh9N0zjLWnePhegpoh8w4BrFY=) 31: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: EnqXxHxizowT8zb+SHcbhbA09vXgZZGAE/YRBfr59Gc=) 32: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: X+/JRaBFSpU+csAjI62l5rVURr8ZUzb9qKYNdwDW88k=) 33: 5366509AC63511EAAC843455C4F9AE02.roa (hash: 4VfxlhXPt3Fli8QftF+Jbfr+B7PpkjZJjrN7R7UoFec=) 34: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: rNmuk0Zw99f4Kzt4k/QReGgYLjG+b50IvgI4wD110cw=) 35: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (hash: cTr3m6jhSldGceNeNs9qUPTOBPhnI4QANoh1eGzuDWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10157 (0x27ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: May 12 15:47:58 2025 GMT Not After : May 19 15:47:58 2025 GMT Subject: CN=6822182e-f1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:d1:4a:fa:53:a3:ad:1a:d0:f5:f2:2c:09: 9a:d4:52:0e:7e:f4:01:d7:ea:9a:62:41:db:6c:fc: 25:97:cb:f0:51:9a:9f:28:42:a0:7b:65:61:30:91: 0c:65:f3:46:6a:c0:db:aa:7a:06:b4:78:44:33:9a: 61:1a:ae:15:09:b2:d1:b9:07:21:76:01:af:de:18: ca:a5:d9:ef:0f:0c:c3:4f:66:0e:7a:d1:75:9d:3c: cf:a4:08:4f:7b:0f:52:2f:53:9e:b0:f3:c5:b8:c4: 06:34:0f:39:0c:a4:e5:0e:1d:1d:6d:23:17:2a:a1: 7e:41:66:c9:57:0d:45:30:ea:2b:5a:83:b9:7b:9d: eb:66:48:38:39:0f:8b:6e:cc:1c:31:42:68:27:10: 79:50:2c:fe:b2:03:85:70:87:cf:40:48:9f:6a:39: ff:14:a1:61:25:3a:ed:19:9c:32:5a:7e:e8:e9:fa: 30:96:f4:e4:1a:d7:5c:95:a6:ee:94:0e:8e:b1:27: 0e:eb:32:51:be:0b:53:3b:83:63:1e:8e:01:54:b1: aa:7c:e5:5e:56:10:ab:1e:2f:38:d4:91:e4:2f:bd: 0b:94:92:40:7d:9c:97:8e:72:ec:34:6a:27:4e:b5: 34:c4:b8:91:98:6d:68:58:03:3b:cc:a0:7c:54:06: 7c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A3:EB:D9:1E:44:3D:A3:9B:C1:6F:40:0F:E7:DD:62:D3:23:85:B1 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:32:89:69:b6:48:86:52:4f:16:db:ba:f7:4b:fb:6e:6f:5d: e7:37:80:67:c3:bb:cb:e9:c7:e0:51:40:e9:4c:e2:0c:76:7c: 21:53:fd:79:66:18:ca:62:b2:37:ba:6d:bf:96:73:d3:cd:1d: 08:51:6f:6a:be:70:4e:27:8e:8c:39:6f:43:56:ed:24:02:a1: 93:da:51:bc:e3:49:81:bc:f0:ba:10:91:cf:54:0d:45:2e:d2: 48:6a:e0:c6:04:02:f3:b1:16:86:75:74:39:91:be:71:fe:60: c8:eb:64:7b:33:cd:e3:79:cf:32:79:af:1a:d5:32:6b:2c:e0: e8:ef:d9:c7:76:c3:f5:dc:b9:8c:03:0a:26:c4:74:55:11:2f: 27:9a:69:a7:e5:39:43:f3:83:5a:60:dd:69:95:55:00:55:5f: db:6e:a9:ef:69:e5:d6:78:4a:a4:67:72:6d:7c:5c:a6:cb:6e: 80:7e:5a:53:6c:d4:81:99:d1:e1:77:60:3f:38:c3:c1:9e:7b: 2f:b6:4d:4f:01:f1:c6:99:9c:74:5e:1c:a2:00:ec:75:57:df: c3:e7:03:04:68:28:78:be:8f:fa:6f:6f:4f:52:6c:72:48:26: 40:18:5d:f0:4d:b0:7a:fd:1a:aa:60:44:1b:19:92:75:85:77: 9e:7a:77:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjUwNTEyMTU0NzU4WhcNMjUwNTE5MTU0NzU4WjAYMRYwFAYD VQQDEw02ODIyMTgyZS1mMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvHRSvpTo60a0PXyLAma1FIOfvQB1+qaYkHbbPwll8vwUZqfKEKge2VhMJEM ZfNGasDbqnoGtHhEM5phGq4VCbLRuQchdgGv3hjKpdnvDwzDT2YOetF1nTzPpAhP ew9SL1OesPPFuMQGNA85DKTlDh0dbSMXKqF+QWbJVw1FMOorWoO5e53rZkg4OQ+L bswcMUJoJxB5UCz+sgOFcIfPQEifajn/FKFhJTrtGZwyWn7o6fowlvTkGtdclabu lA6OsScO6zJRvgtTO4NjHo4BVLGqfOVeVhCrHi841JHkL70LlJJAfZyXjnLsNGon TrU0xLiRmG1oWAM7zKB8VAZ8/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyj69ke RD2jm8FvQA/n3WLTI4WxMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkI3MC8yOTgzNjQ3QzgzOEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRo LTNoc1VtMjk3eHNFV1NpcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBMolptkiGUk8W27r3S/tub13nN4Bnw7vL6cfgUUDpTOIMdnwhU/15 ZhjKYrI3um2/lnPTzR0IUW9qvnBOJ46MOW9DVu0kAqGT2lG840mBvPC6EJHPVA1F LtJIauDGBALzsRaGdXQ5kb5x/mDI62R7M83jec8yea8a1TJrLODo79nHdsP13LmM AwomxHRVES8nmmmn5TlD84NaYN1plVUAVV/bbqnvaeXWeEqkZ3JtfFymy26AflpT bNSBmdHhd2A/OMPBnnsvtk1PAfHGmZx0XhyiAOx1V9/D5wMEaCh4vo/6b29PUmxy SCZAGF3wTbB6/RqqYEQbGZJ1hXeeenfD -----END CERTIFICATE-----Generated at Mon May 12 21:41:43 2025 by rpki-client