$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: fkiiCGqqTpU1WGI+ptlHXUQWQZi/S6WfPiqSGAhx728= Subject key identifier: 2A:76:D9:15:A7:92:5A:64:09:8A:CD:2F:72:32:5C:5D:10:D1:FF:17 Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: A9 Signing time: Tue 13 May 2025 05:20:30 +0000 Manifest this update: Tue 13 May 2025 05:20:29 +0000 Manifest next update: Tue 20 May 2025 05:20:29 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: jfa4Z+8t3E7m1jsRqoJIlil2oRVLHm68UHrvHVw8E6A=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: syHq3DbE7eogaPpFVFVsQfYoWLCn9NostuRXmVIHm9Y=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: May 13 05:20:29 2025 GMT Not After : May 20 05:20:29 2025 GMT Subject: CN=6822d69e-6cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:b5:b7:31:0d:10:75:17:d2:84:68:08:aa: 8c:f6:34:1a:f4:b4:c8:7e:63:d6:cf:ea:39:d9:20: 74:c8:56:dd:6c:ff:a7:95:78:7a:18:22:5b:1a:25: 42:4a:61:6f:50:13:e2:97:c5:e6:bc:b6:9a:bc:65: 37:7d:68:cd:28:94:21:76:22:f2:b7:67:c8:2f:06: 30:a2:53:17:f6:05:69:f6:c2:48:ac:bc:40:5c:a1: 4c:74:e5:62:fb:cf:d6:1b:6d:61:ce:23:6c:82:9c: 36:d8:9d:2c:eb:9d:5f:5d:d9:b4:bf:07:d7:e8:25: 99:0f:14:ff:75:fd:19:d0:7e:96:15:1a:65:31:d4: bd:fe:20:a0:3f:56:d9:75:f3:5f:2a:8d:b4:5c:d5: 65:6a:bd:ac:5b:42:45:23:57:05:ba:a5:b1:b9:df: cb:e0:65:c8:be:5c:24:1f:3d:67:62:28:6b:53:11: 80:9d:d6:e6:04:d3:ce:c3:66:be:59:b5:72:43:d4: 01:85:87:dd:21:66:2d:4f:e5:9c:d2:de:d4:56:a3: 22:12:1e:8e:98:c3:a5:b9:2c:38:a1:25:3f:43:12: ff:8b:0d:a3:cf:27:09:1e:d8:e5:82:6a:ae:ee:34: 2c:86:dd:0c:18:3e:ba:a6:64:cc:43:45:b7:03:56: a1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:76:D9:15:A7:92:5A:64:09:8A:CD:2F:72:32:5C:5D:10:D1:FF:17 X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e9:1a:53:bb:99:e1:66:10:9c:3e:32:73:fa:ee:78:c4:99: a8:7d:be:f3:de:78:2b:d3:2a:39:60:08:34:94:7d:49:6c:b7: 9a:b4:e3:82:97:8d:fb:5f:c1:9f:a8:a8:90:0c:de:a7:b6:b8: 3c:41:1f:2d:73:8c:85:49:51:c6:27:ac:0f:56:80:07:3e:51: 83:0b:f3:b0:3d:ad:a6:8f:49:50:2c:98:77:ca:04:fa:91:63: 02:86:6f:49:40:8c:e1:c9:34:87:c3:90:90:61:cc:7d:66:a4: 1c:d4:08:13:8e:d5:ba:4b:ad:05:48:e0:7c:9c:ca:62:fb:2b: a0:64:0f:79:75:c8:bc:d3:03:0a:a5:7b:0e:36:3b:db:cf:60: 52:76:2d:ea:9b:9f:9d:2b:b6:67:05:d5:b6:54:37:8c:2d:0a: bc:fe:ee:e9:cc:52:27:7f:a9:a1:4a:0e:f2:89:49:5d:2f:09: da:c7:9a:f2:55:65:1a:01:d1:68:85:2f:0b:97:ce:f6:63:cb: de:4d:14:dc:f3:ef:18:66:78:d1:f7:b4:db:4d:e3:51:b0:0c: 39:74:ec:88:dc:aa:08:eb:21:32:a6:a7:ca:00:46:7b:10:95: 60:15:f6:8a:9b:0e:ee:80:fd:ae:c9:8c:25:9a:e5:d2:d7:d5: 97:09:f5:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjUwNTEzMDUyMDI5WhcNMjUwNTIwMDUyMDI5WjAYMRYwFAYD VQQDEw02ODIyZDY5ZS02Y2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3u1tzENEHUX0oRoCKqM9jQa9LTIfmPWz+o52SB0yFbdbP+nlXh6GCJbGiVC SmFvUBPil8XmvLaavGU3fWjNKJQhdiLyt2fILwYwolMX9gVp9sJIrLxAXKFMdOVi +8/WG21hziNsgpw22J0s651fXdm0vwfX6CWZDxT/df0Z0H6WFRplMdS9/iCgP1bZ dfNfKo20XNVlar2sW0JFI1cFuqWxud/L4GXIvlwkHz1nYihrUxGAndbmBNPOw2a+ WbVyQ9QBhYfdIWYtT+Wc0t7UVqMiEh6OmMOluSw4oSU/QxL/iw2jzycJHtjlgmqu 7jQsht0MGD66pmTMQ0W3A1ahUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCp22RWn klpkCYrNL3IyXF0Q0f8XMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe6RpTu5nhZhCcPjJz+u54xJmofb7z3ngr0yo5YAg0lH1JbLeatOOC l437X8GfqKiQDN6ntrg8QR8tc4yFSVHGJ6wPVoAHPlGDC/OwPa2mj0lQLJh3ygT6 kWMChm9JQIzhyTSHw5CQYcx9ZqQc1AgTjtW6S60FSOB8nMpi+yugZA95dci80wMK pXsONjvbz2BSdi3qm5+dK7ZnBdW2VDeMLQq8/u7pzFInf6mhSg7yiUldLwnax5ry VWUaAdFohS8Ll872Y8veTRTc8+8YZnjR97TbTeNRsAw5dOyI3KoI6yEypqfKAEZ7 EJVgFfaKmw7ugP2uyYwlmuXS19WXCfWK -----END CERTIFICATE-----Generated at Wed May 14 14:17:36 2025 by rpki-client