$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json) Hash identifier: YJxVlPkldSGFb0vCZfx6nxc0o7L938i0Z1hpUpVG2RI= Subject key identifier: 2D:8E:88:2C:2C:04:5A:F3:DC:25:6F:24:5B:84:80:06:EF:F0:AE:12 Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7D7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft Manifest number: 4836 Signing time: Sat 14 Jun 2025 16:58:27 +0000 Manifest this update: Sat 14 Jun 2025 16:58:26 +0000 Manifest next update: Sat 21 Jun 2025 16:58:26 +0000 Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: jWz9IrhmUOWHVBn0hMFhS8rq0Vs6EXQSlakXGrqTNTo=) 2: 93933F8EB8E311EF94962C19C4F9AE02.roa (hash: oYu2WZprVxTGWmaXSTiX/1vi0KQUS49PpwwkujTaQnM=) 3: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: DKjdHPHX9uK/7sXdnl0CnoAUxvUfxg2iDv7piZLbE+g=) 4: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: bo2MU7FnWVB61bLgSeX3nMyKR524oPoEbjubyqJ1GeY=) 5: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: vN9wyIhoEAvL0Ppx9rHt6RaOh++3jtvNmxs0UWEaa1k=) 6: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: CbTGgfEWFtslvO2wALZJ+DSTt60SxWMiq0xTARE85r4=) 7: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: IaM5JoKkMFAzjZpn+sEYIwIyVW6+qhIz6t87EVXHjEI=) 8: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: aTECUl8KOBHDuvj6RQo/fOOhivuGrPAhZR0mAtm2uuY=) 9: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: fq/qWIdl/zMbQPXZZ52zcLgyQibFEjxrMjtOCJGOy18=) 10: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: zvj9UK8T+8CC31S1QfeLyCh52ggJamqXxF9Th/UxIhc=) 11: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: colPM8HZ1vvIi6XidfSQJiOmkoAqKV69tfTn2aphAGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32122 (0x7d7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: Jun 14 16:58:26 2025 GMT Not After : Jun 21 16:58:26 2025 GMT Subject: CN=684daa32-96ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:5d:37:10:ea:2a:2a:ff:67:09:cb:a7:be: cf:cb:4a:73:30:77:01:28:b6:0e:1a:81:d9:57:a8: 95:53:0d:ed:cf:d8:47:f0:92:78:06:d5:58:e8:cc: 74:01:02:b3:8f:47:76:03:fb:f7:bf:6a:a5:67:cc: 36:e9:bf:7c:39:36:3b:39:ca:05:b6:e5:12:60:f6: 59:ed:fc:fd:68:75:2d:80:b0:ee:b0:14:45:ba:d3: a2:37:5e:37:b5:f1:4a:dd:b4:60:7a:43:65:c3:fe: 54:7b:34:0a:67:54:ed:04:22:63:7b:ea:47:a4:61: 1a:cd:c1:60:74:f3:5d:30:b9:a3:63:bc:2e:da:93: 23:4f:07:de:98:2b:00:72:d1:71:2b:a2:41:57:70: 9f:51:2a:e2:41:33:92:1f:10:7d:db:1d:c8:71:cf: de:ce:e5:b3:a1:76:a8:bc:81:5e:1b:6f:4c:9c:56: 1f:ae:d7:1d:05:c0:96:90:5d:95:b0:48:8d:09:8f: 41:91:9a:90:1e:f5:42:3c:81:c8:b1:f4:b7:cd:7b: 90:22:8a:e0:57:cd:12:0a:20:f4:1b:45:a8:2c:17: 05:64:d1:13:ce:72:45:80:35:0b:9b:4d:cb:98:2d: 88:ac:ed:5e:ec:ac:90:fe:1f:9a:0f:b1:16:1c:a4: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8E:88:2C:2C:04:5A:F3:DC:25:6F:24:5B:84:80:06:EF:F0:AE:12 X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b9:19:f1:54:0e:3d:4e:87:70:f7:c9:cf:05:74:89:0d:86: 50:01:9e:46:e1:c7:db:1b:03:4f:b7:08:b9:60:73:02:28:70: 08:25:5b:fc:0d:5d:6b:c6:cf:3c:50:0f:45:3f:a9:55:54:31: 4a:b6:ce:23:cf:59:e1:35:f9:8d:b9:a6:7b:07:f7:20:82:8b: 33:a6:0b:55:1e:7d:a2:bc:a8:c3:12:b9:65:91:f3:c6:c6:74: 1f:04:b2:40:7f:87:17:16:9c:f3:dc:01:3b:fb:45:e6:09:a8: 1a:44:6e:24:b8:ab:d9:69:7b:ab:67:c7:77:65:98:0e:df:70: 3e:8a:e2:27:8f:7a:fe:e5:e2:ed:26:9d:be:3b:6e:47:8e:ea: f3:0a:14:9c:77:1f:37:1e:4e:c1:f8:eb:e3:db:52:17:81:cc: 51:ff:71:68:9b:65:d2:f9:b4:75:f6:dd:32:a1:ac:30:dc:e3: 0c:22:f8:cb:04:1d:c4:25:3c:04:76:e9:c2:a2:81:84:4f:0f: cf:63:57:8c:4a:19:67:14:7b:b1:7e:c3:7b:5f:2b:01:c7:9d: 21:21:91:c1:3a:e2:36:c8:37:56:23:97:29:f5:bc:01:4b:cd: ac:19:9b:99:4d:60:b5:7c:2d:f2:17:6e:df:71:e3:e8:09:da: fc:55:9a:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICfXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjUwNjE0MTY1ODI2WhcNMjUwNjIxMTY1ODI2WjAYMRYwFAYD VQQDEw02ODRkYWEzMi05NmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyehdNxDqKir/ZwnLp77Py0pzMHcBKLYOGoHZV6iVUw3tz9hH8JJ4BtVY6Mx0 AQKzj0d2A/v3v2qlZ8w26b98OTY7OcoFtuUSYPZZ7fz9aHUtgLDusBRFutOiN143 tfFK3bRgekNlw/5UezQKZ1TtBCJje+pHpGEazcFgdPNdMLmjY7wu2pMjTwfemCsA ctFxK6JBV3CfUSriQTOSHxB92x3Icc/ezuWzoXaovIFeG29MnFYfrtcdBcCWkF2V sEiNCY9BkZqQHvVCPIHIsfS3zXuQIorgV80SCiD0G0WoLBcFZNETznJFgDULm03L mC2IrO1e7KyQ/h+aD7EWHKTcrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2OiCws BFrz3CVvJFuEgAbv8K4SMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTAwRC9GQ0RDRDNBMEFDOUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJC Sk9kWkx1MG9tZTlYaVNFUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAduRnxVA49Todw98nPBXSJDYZQAZ5G4cfbGwNPtwi5YHMCKHAIJVv8 DV1rxs88UA9FP6lVVDFKts4jz1nhNfmNuaZ7B/cggoszpgtVHn2ivKjDErllkfPG xnQfBLJAf4cXFpzz3AE7+0XmCagaRG4kuKvZaXurZ8d3ZZgO33A+iuInj3r+5eLt Jp2+O25HjurzChScdx83Hk7B+Ovj21IXgcxR/3Fom2XS+bR19t0yoaww3OMMIvjL BB3EJTwEdunCooGETw/PY1eMShlnFHuxfsN7XysBx50hIZHBOuI2yDdWI5cp9bwB S82sGZuZTWC1fC3yF27fcePoCdr8VZra -----END CERTIFICATE-----Generated at Mon Jun 16 16:30:16 2025 by rpki-client