$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: FMH9AwqQmZ/b35OOvww2J7FXphU4sxmVgsme+fXnudk= Subject key identifier: 4D:8C:40:49:F8:7C:D9:32:AD:3E:EE:92:19:A4:F7:93:FD:33:61:74 Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 18F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 1682 Signing time: Thu 03 Jul 2025 04:53:16 +0000 Manifest this update: Thu 03 Jul 2025 04:53:15 +0000 Manifest next update: Thu 10 Jul 2025 04:53:15 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: ka+jMiCCeVHgE97CSKI7c5DVdEYvFQYjW0JrvwueFMk=) 2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=) 3: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=) 4: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=) 5: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=) 6: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=) 7: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=) 8: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=) 9: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=) 10: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=) 11: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=) 12: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=) 13: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=) 14: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=) 15: 67060F128B9F11EA97BB8046C4F9AE02.roa (hash: Bja+pXwIkwi+wu7Wy1czg9tcaeGtk3ByqmVnXr1h7PU=) 16: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=) 17: BEBA6BD452E811F0B4119D49C4F9AE02.roa (hash: JfI+XR4NGTRk5w/gvGrGQDQEHQFPLZTwcO5wcxvslsU=) 18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=) 19: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=) 20: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=) 21: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=) 22: 3AED95046D0111ECA5893B2BC4F9AE02.roa (hash: aLX0spZdD1HmaR+qKo3b5UUfl5pW1J8tkF+sIveKmK8=) 23: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=) 24: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=) 25: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=) 26: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: rx0eRPu2xzrisWwtDOzb2vQcxB4j/OQ/aSmmEmceSy8=) 27: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6388 (0x18f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Jul 3 04:53:15 2025 GMT Not After : Jul 10 04:53:15 2025 GMT Subject: CN=68660cbc-2a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:ac:e9:16:65:ac:da:3c:cf:5e:c9:45:ff: 74:e9:7c:fa:98:9b:19:47:c5:2e:3f:d6:6f:7a:ee: 1b:54:c2:4b:94:1a:79:4c:79:ad:5c:a6:d5:89:a4: 91:bd:46:2a:2e:fa:2f:64:0e:98:e1:8c:19:af:5c: a5:91:20:bb:44:69:9d:f0:cb:24:5f:60:73:ea:c3: 32:b1:c4:61:a8:a9:f1:1e:e7:6c:7c:c0:e1:54:af: fe:45:67:06:09:1a:c9:0f:e8:5e:4e:a7:f8:38:ed: 0b:b5:67:d7:2d:ad:8e:7e:85:d4:f6:5a:7b:26:ff: 9f:10:e8:cf:90:73:bf:9f:55:2a:96:51:34:14:76: 93:c3:01:10:7c:7b:47:99:48:97:1e:64:29:db:7b: 21:c1:e0:30:6e:ef:9f:3c:19:d3:4a:32:2c:4d:03: bc:cd:a1:42:77:78:14:f4:fa:2c:36:32:a5:8e:e8: 54:4f:84:84:29:82:49:b9:ea:e5:5a:8a:ea:57:a3: 3a:74:9f:9b:b5:cd:4e:56:db:0c:24:ba:98:eb:a5: 46:1a:aa:be:19:ca:bd:55:9e:aa:18:c8:ce:fa:be: 23:b3:af:55:1d:d0:ee:e2:25:06:ee:b1:e5:50:20: b0:d2:1d:91:68:c0:48:b8:ea:97:4b:05:7a:24:32: 1d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8C:40:49:F8:7C:D9:32:AD:3E:EE:92:19:A4:F7:93:FD:33:61:74 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b3:ec:cf:2a:66:50:f7:bb:dc:f0:4b:cb:02:aa:32:8c:b7: 21:52:0e:09:5d:a6:74:1b:e9:80:b7:af:2c:67:c5:9b:1f:b6: 1c:09:fc:ca:5b:54:68:24:c4:b7:16:00:8a:c2:e8:f1:64:0a: 12:70:e8:82:a1:8e:93:0b:76:00:f3:7b:7a:79:4d:c0:25:c2: ac:8c:d2:86:32:3b:36:7a:72:a2:3d:65:6c:f6:32:f1:1c:1f: 6f:f2:6d:8c:4b:ad:2e:d0:28:ef:6f:87:c3:16:81:e6:cb:5c: 93:7c:73:76:1f:57:e4:70:02:ea:f4:d6:8e:db:18:29:f6:fa: b9:0f:f4:08:12:09:ee:47:ff:5f:78:19:1d:70:91:d4:2f:58: 81:f7:e3:ba:75:78:a5:2e:5f:45:a8:09:5d:f1:40:8b:46:7a: 3a:08:84:89:bd:22:cb:26:a2:d0:fb:ed:4b:4c:5c:2f:46:cf: ba:7e:a6:09:07:bd:41:86:af:c4:d8:b0:3f:f4:40:f8:3f:70: 22:66:47:a1:90:d4:1a:b5:4a:35:bb:4c:c7:9a:70:c3:73:38: 1b:ee:71:db:6d:4d:b9:27:e3:3e:bb:0b:aa:c0:b0:ee:3d:e1: 13:24:11:54:68:e9:68:bc:24:fa:4c:99:15:0a:ff:b9:f4:73: 47:f9:a0:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjUwNzAzMDQ1MzE1WhcNMjUwNzEwMDQ1MzE1WjAYMRYwFAYD VQQDEw02ODY2MGNiYy0yYTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OSs6RZlrNo8z17JRf906Xz6mJsZR8UuP9Zveu4bVMJLlBp5THmtXKbViaSR vUYqLvovZA6Y4YwZr1ylkSC7RGmd8MskX2Bz6sMyscRhqKnxHudsfMDhVK/+RWcG CRrJD+heTqf4OO0LtWfXLa2OfoXU9lp7Jv+fEOjPkHO/n1UqllE0FHaTwwEQfHtH mUiXHmQp23shweAwbu+fPBnTSjIsTQO8zaFCd3gU9PosNjKljuhUT4SEKYJJuerl WorqV6M6dJ+btc1OVtsMJLqY66VGGqq+Gcq9VZ6qGMjO+r4js69VHdDu4iUG7rHl UCCw0h2RaMBIuOqXSwV6JDIdLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2MQEn4 fNkyrT7ukhmk95P9M2F0MB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSs+zPKmZQ97vc8EvLAqoyjLchUg4JXaZ0G+mAt68sZ8WbH7YcCfzK W1RoJMS3FgCKwujxZAoScOiCoY6TC3YA83t6eU3AJcKsjNKGMjs2enKiPWVs9jLx HB9v8m2MS60u0Cjvb4fDFoHmy1yTfHN2H1fkcALq9NaO2xgp9vq5D/QIEgnuR/9f eBkdcJHUL1iB9+O6dXilLl9FqAld8UCLRno6CISJvSLLJqLQ++1LTFwvRs+6fqYJ B71Bhq/E2LA/9ED4P3AiZkehkNQatUo1u0zHmnDDczgb7nHbbU25J+M+uwuqwLDu PeETJBFUaOlovCT6TJkVCv+59HNH+aCu -----END CERTIFICATE-----Generated at Thu Jul 3 09:16:20 2025 by rpki-client