$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft File: xvdY7N3EybD3LwZcNa1UaXQycRs.mft (raw, json) Hash identifier: u5C38TryIhXTH+/TnaFIrFwlWyDXW2raofvzfcW2L8I= Subject key identifier: 48:BF:4C:3A:A7:2C:F3:52:9B:CF:77:A5:FE:DD:01:FA:16:DA:5D:ED Authority key identifier: C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B Certificate issuer: /CN=A91E8DF5/serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft Manifest number: 26 Signing time: Thu 15 May 2025 07:05:14 +0000 Manifest this update: Thu 15 May 2025 07:05:14 +0000 Manifest next update: Thu 22 May 2025 07:05:14 +0000 Files and hashes: 1: xvdY7N3EybD3LwZcNa1UaXQycRs.crl (hash: L9UXR/TlJes3bxgciy18MIHVWprjHi2WusMid66Tn84=) 2: 8F9B067EF96011EF89D9E37DC4F9AE02.roa (hash: 4xicYTfIpBlcbT4bo30LC6Nm4HBJiuCMbWamLoO1Mxw=) 3: 8F350932F96011EF89D9E37DC4F9AE02.roa (hash: QrMwRSBguV4orNsh3cQZbQ07gQlvv90Dwbi2fjX1Q5w=) 4: 8EB1E9BCF96011EF89D9E37DC4F9AE02.roa (hash: uACmOb3DyJDXLeU+cbuId37JJps39u5/fEOUHNceFpo=) 5: 8E321A2AF96011EF89D9E37DC4F9AE02.roa (hash: c/khpR0D5Q+6xT3VzBLeSnoQ2dSS6+k6yToKP9EsAdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8DF5, serialNumber=C6F758ECDDC4C9B0F72F065C35AD54697432711B Validity Not Before: May 15 07:05:14 2025 GMT Not After : May 22 07:05:14 2025 GMT Subject: CN=6825922a-86ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:e8:40:35:5b:dc:6f:a1:4b:8b:24:0e:f2: cd:6f:55:35:a0:56:05:1d:7f:f3:ce:bd:cb:84:59: 1b:6e:9b:bc:93:49:90:ab:f3:b8:65:2d:c8:75:97: a4:99:ab:a6:91:42:df:5f:b9:02:28:0e:22:3c:50: aa:a4:73:85:50:bc:ef:6b:45:0c:51:05:b2:2a:6e: 36:a8:5e:6c:0b:c2:85:73:c2:e4:69:00:e8:92:fa: b7:39:df:57:f7:13:63:56:03:9c:fd:2e:16:68:55: 30:2c:a1:0d:bb:0c:af:76:83:3e:82:61:42:0c:00: 84:aa:41:86:44:29:fc:20:2a:57:32:91:36:e8:04: 40:70:c9:e0:f8:04:d1:3d:25:58:02:69:14:f9:45: 20:41:66:8d:ee:af:42:5e:07:1f:61:54:21:17:66: c4:a4:48:fe:8a:5b:34:47:8e:2e:83:54:ce:f5:36: 89:ef:66:ec:b6:34:57:82:ce:25:55:f0:a6:82:10: 50:04:a8:04:a5:10:29:ac:e3:b4:6a:a7:a0:90:39: 36:cc:f4:44:07:0e:87:e7:33:81:1f:f5:2c:94:af: 4c:ab:47:53:b9:00:cb:1b:50:64:81:46:c7:86:1b: 5c:97:b0:e1:02:a1:77:7c:dd:0f:71:68:f3:83:03: 90:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BF:4C:3A:A7:2C:F3:52:9B:CF:77:A5:FE:DD:01:FA:16:DA:5D:ED X509v3 Authority Key Identifier: keyid:C6:F7:58:EC:DD:C4:C9:B0:F7:2F:06:5C:35:AD:54:69:74:32:71:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvdY7N3EybD3LwZcNa1UaXQycRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/31E0F16AF96011EF9D679C7AC4F9AE02/xvdY7N3EybD3LwZcNa1UaXQycRs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:81:06:be:3d:97:9a:a1:d4:1f:92:3b:a3:5b:25:f9:5a:d8: 66:10:d5:fb:d3:19:10:39:6b:68:ee:95:3a:e4:27:73:df:e0: e6:bc:38:b8:1a:cf:75:98:5b:11:f4:aa:7c:e3:bb:81:ea:ca: 08:4c:30:12:17:b2:06:a2:ec:9e:2f:3c:bf:19:ab:42:e3:7c: cb:2c:4e:7e:3d:6e:b7:a7:e2:5c:75:01:9c:d0:3f:e2:84:57: a2:47:b0:28:69:6a:42:60:39:46:6c:1d:bf:d1:0e:ac:49:5e: 82:e4:6f:4d:f7:b7:d1:0b:29:7b:71:a1:32:ec:12:81:25:f5: e4:61:1e:97:68:99:02:75:43:1e:71:2d:5a:b9:a4:24:c3:1a: 0a:69:8b:be:22:c6:52:b5:11:9a:2f:28:30:47:0a:4c:76:9d: 1d:d2:b5:74:48:62:4d:e7:a8:7c:04:2e:94:64:19:3d:f7:2b: f5:c5:f2:bd:f9:43:10:2f:cd:30:75:c7:8a:88:fc:6d:ca:ca: f9:ec:0d:4d:59:35:6f:01:b1:6e:d4:2a:dd:36:7c:82:92:8f: 50:32:1b:88:d6:98:4a:55:3c:be:03:54:ba:6d:a2:60:3a:de: 77:82:79:e7:d8:47:cc:8b:98:e7:e1:d6:84:40:80:06:e1:d7: 52:f3:95:26 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OERGNTExMC8GA1UEBRMoQzZGNzU4RUNEREM0QzlCMEY3MkYwNjVDMzVBRDU0Njk3 NDMyNzExQjAeFw0yNTA1MTUwNzA1MTRaFw0yNTA1MjIwNzA1MTRaMBgxFjAUBgNV BAMTDTY4MjU5MjJhLTg2YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAaehANVvcb6FLiyQO8s1vVTWgVgUdf/POvcuEWRtum7yTSZCr87hlLch1l6SZ q6aRQt9fuQIoDiI8UKqkc4VQvO9rRQxRBbIqbjaoXmwLwoVzwuRpAOiS+rc531f3 E2NWA5z9LhZoVTAsoQ27DK92gz6CYUIMAISqQYZEKfwgKlcykTboBEBwyeD4BNE9 JVgCaRT5RSBBZo3ur0JeBx9hVCEXZsSkSP6KWzRHji6DVM71NonvZuy2NFeCziVV 8KaCEFAEqASlECms47Rqp6CQOTbM9EQHDofnM4Ef9SyUr0yrR1O5AMsbUGSBRseG G1yXsOECoXd83Q9xaPODA5DpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSL9MOqcs 81Kbz3el/t0B+hbaXe0wHwYDVR0jBBgwFoAUxvdY7N3EybD3LwZcNa1UaXQycRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4REY1LzMxRTBGMTZBRjk2 MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJEM0x3WmNOYTFVYVhReWNS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHZkWTdOM0V5YkQzTHdaY05hMVVhWFF5Y1JzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 REY1LzMxRTBGMTZBRjk2MDExRUY5RDY3OUM3QUM0RjlBRTAyL3h2ZFk3TjNFeWJE M0x3WmNOYTFVYVhReWNScy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACmBBr49l5qh1B+SO6NbJfla2GYQ1fvTGRA5a2julTrkJ3Pf4Oa8OLga z3WYWxH0qnzju4HqyghMMBIXsgai7J4vPL8Zq0LjfMssTn49bren4lx1AZzQP+KE V6JHsChpakJgOUZsHb/RDqxJXoLkb033t9ELKXtxoTLsEoEl9eRhHpdomQJ1Qx5x LVq5pCTDGgppi74ixlK1EZovKDBHCkx2nR3StXRIYk3nqHwELpRkGT33K/XF8r35 QxAvzTB1x4qI/G3KyvnsDU1ZNW8BsW7UKt02fIKSj1AyG4jWmEpVPL4DVLptomA6 3neCeefYR8yLmOfh1oRAgAbh11LzlSY= -----END CERTIFICATE-----Generated at Thu May 15 19:48:21 2025 by rpki-client