$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: XJHswdAtEMhU27Bvj24Uo1jIK96JdY9T/TWjKAfJYto= Subject key identifier: 9E:FF:37:C7:A8:68:0C:D4:B9:A2:D0:90:59:19:2D:47:BD:30:DE:F1 Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 18D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 1664 Signing time: Wed 14 May 2025 17:00:33 +0000 Manifest this update: Wed 14 May 2025 17:00:32 +0000 Manifest next update: Wed 21 May 2025 17:00:32 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: 7I7+1I23GZrA+oOgJaAaz6W2MpL0o1/LUWVSHSG9WXA=) 2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=) 3: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=) 4: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=) 5: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=) 6: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=) 7: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=) 8: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=) 9: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=) 10: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=) 11: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=) 12: 17C5C2EE0AC511F0B49A897EC4F9AE02.roa (hash: K9Z6BonmUzy423wGSqURiFZpSiAZAgbS8kqKahHQ+jI=) 13: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=) 14: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=) 15: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=) 16: 67060F128B9F11EA97BB8046C4F9AE02.roa (hash: Bja+pXwIkwi+wu7Wy1czg9tcaeGtk3ByqmVnXr1h7PU=) 17: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=) 18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=) 19: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=) 20: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=) 21: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=) 22: 97AAC8FE86A011EB8BEAC92BC4F9AE02.roa (hash: j8JrS+AqnkCckpa8gG946yMRu94Md+3E6AE+h/Sfwzw=) 23: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=) 24: 3AED95046D0111ECA5893B2BC4F9AE02.roa (hash: aLX0spZdD1HmaR+qKo3b5UUfl5pW1J8tkF+sIveKmK8=) 25: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=) 26: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=) 27: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: rx0eRPu2xzrisWwtDOzb2vQcxB4j/OQ/aSmmEmceSy8=) 28: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6356 (0x18d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: May 14 17:00:32 2025 GMT Not After : May 21 17:00:32 2025 GMT Subject: CN=6824cc31-19bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2a:dd:cf:ff:be:f7:6f:75:d9:71:5a:f4:fe: d3:0e:08:7f:3e:de:f3:86:4c:8c:51:d1:b9:3e:7c: ce:20:78:80:12:2a:36:ce:14:3f:59:99:c5:48:7a: 87:0d:19:ef:5e:15:b8:ac:cd:dc:3d:d9:09:a2:85: 07:5c:36:89:b9:ed:61:f4:26:67:e8:b9:80:c1:68: 9e:65:e0:31:7c:f7:26:7a:b8:a9:14:de:9c:5a:7b: fb:46:b4:2c:20:24:2d:2d:88:2c:18:cf:30:78:81: 12:0f:0f:ef:a7:11:bc:d8:38:4e:aa:d1:e2:6b:8a: 99:52:49:c0:31:98:84:fd:d0:16:9c:5d:6d:c5:4b: 13:39:56:38:de:d9:5c:51:f0:75:99:c5:bb:ed:9a: f1:05:50:16:28:f9:0f:5b:e8:2f:d8:74:ec:2d:15: f0:bf:b5:5e:71:68:b1:ac:5d:06:a0:5f:58:04:29: f0:e6:07:c1:be:91:0d:4f:4f:35:75:b6:37:07:88: 59:46:5c:3b:b9:9e:6f:79:48:4b:e6:04:f7:0a:71: 94:23:77:df:fe:e9:6d:6f:89:7a:77:a9:59:73:d9: e2:e9:77:78:f0:a5:2f:cb:2b:47:db:eb:02:18:d4: c0:b0:9b:90:75:81:ea:83:8d:7c:62:c5:d1:fe:96: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FF:37:C7:A8:68:0C:D4:B9:A2:D0:90:59:19:2D:47:BD:30:DE:F1 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f8:d6:2f:27:06:e6:78:7b:5c:7c:cd:a6:79:d1:cf:44:c7: a1:07:df:e0:35:1f:27:b5:36:7c:48:a8:ad:c7:3e:64:db:fb: ef:2f:f5:3c:57:70:85:46:a8:52:ef:e0:06:eb:aa:d0:55:17: a6:56:6d:dc:5a:0f:ca:8a:57:db:84:b2:ce:b6:90:7b:12:cf: 53:a4:f2:f4:ca:d9:35:2f:9c:ad:f1:55:ba:9f:4f:55:85:5f: fe:4f:9b:4c:7a:f8:e6:d7:db:1a:ff:c8:bb:2a:2b:a9:ea:c4: a2:94:9e:01:4a:79:81:eb:fe:19:f6:63:f8:a0:6f:da:69:dc: 16:0d:e9:f3:86:52:e3:ef:59:61:1a:c5:01:37:db:53:bd:91: 30:a9:db:19:78:9d:db:ae:a9:07:a1:da:f7:73:bf:e9:66:4d: 84:da:9a:8d:35:39:36:25:b2:71:a2:7b:75:0a:aa:ab:01:30: 28:e8:b5:94:a3:cb:47:c1:c4:6e:1d:3a:75:b3:d0:cb:d8:a8: 78:d4:00:92:bf:6a:99:9c:00:d4:0d:f1:3f:de:35:65:11:a9: 15:bb:a4:1e:af:36:bd:93:18:69:1c:49:b6:54:9b:70:f1:ac: e7:69:64:a0:a9:60:ca:ab:de:1e:2f:46:49:4a:f2:6b:7a:91: 57:73:54:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjUwNTE0MTcwMDMyWhcNMjUwNTIxMTcwMDMyWjAYMRYwFAYD VQQDEw02ODI0Y2MzMS0xOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzyrdz/++92912XFa9P7TDgh/Pt7zhkyMUdG5PnzOIHiAEio2zhQ/WZnFSHqH DRnvXhW4rM3cPdkJooUHXDaJue1h9CZn6LmAwWieZeAxfPcmeripFN6cWnv7RrQs ICQtLYgsGM8weIESDw/vpxG82DhOqtHia4qZUknAMZiE/dAWnF1txUsTOVY43tlc UfB1mcW77ZrxBVAWKPkPW+gv2HTsLRXwv7VecWixrF0GoF9YBCnw5gfBvpENT081 dbY3B4hZRlw7uZ5veUhL5gT3CnGUI3ff/ultb4l6d6lZc9ni6Xd48KUvyytH2+sC GNTAsJuQdYHqg418YsXR/pafFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7/N8eo aAzUuaLQkFkZLUe9MN7xMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ+NYvJwbmeHtcfM2medHPRMehB9/gNR8ntTZ8SKitxz5k2/vvL/U8 V3CFRqhS7+AG66rQVRemVm3cWg/KilfbhLLOtpB7Es9TpPL0ytk1L5yt8VW6n09V hV/+T5tMevjm19sa/8i7Kiup6sSilJ4BSnmB6/4Z9mP4oG/aadwWDenzhlLj71lh GsUBN9tTvZEwqdsZeJ3brqkHodr3c7/pZk2E2pqNNTk2JbJxont1CqqrATAo6LWU o8tHwcRuHTp1s9DL2Kh41ACSv2qZnADUDfE/3jVlEakVu6Qerza9kxhpHEm2VJtw 8aznaWSgqWDKq94eL0ZJSvJrepFXc1Rs -----END CERTIFICATE-----Generated at Fri May 16 09:39:52 2025 by rpki-client