$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json) Hash identifier: hDTEcqmN/jwOxT7D6Q3ef6B+zGLFdKg8YGoSZ2JgCgk= Subject key identifier: 57:28:7A:EE:D1:E9:BB:35:B5:FC:A4:42:5B:FB:C4:B7:CA:FD:43:8D Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100 Certificate serial: 7D61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft Manifest number: 481D Signing time: Sat 26 Apr 2025 16:58:46 +0000 Manifest this update: Sat 26 Apr 2025 16:58:46 +0000 Manifest next update: Sat 03 May 2025 16:58:46 +0000 Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: gXXNFO4rijIqlvPBpHqBxJbFFeYg3337OYUi91/WdJ0=) 2: 93933F8EB8E311EF94962C19C4F9AE02.roa (hash: oYu2WZprVxTGWmaXSTiX/1vi0KQUS49PpwwkujTaQnM=) 3: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: DKjdHPHX9uK/7sXdnl0CnoAUxvUfxg2iDv7piZLbE+g=) 4: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: bo2MU7FnWVB61bLgSeX3nMyKR524oPoEbjubyqJ1GeY=) 5: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: vN9wyIhoEAvL0Ppx9rHt6RaOh++3jtvNmxs0UWEaa1k=) 6: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: CbTGgfEWFtslvO2wALZJ+DSTt60SxWMiq0xTARE85r4=) 7: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: IaM5JoKkMFAzjZpn+sEYIwIyVW6+qhIz6t87EVXHjEI=) 8: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: aTECUl8KOBHDuvj6RQo/fOOhivuGrPAhZR0mAtm2uuY=) 9: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: fq/qWIdl/zMbQPXZZ52zcLgyQibFEjxrMjtOCJGOy18=) 10: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: zvj9UK8T+8CC31S1QfeLyCh52ggJamqXxF9Th/UxIhc=) 11: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: colPM8HZ1vvIi6XidfSQJiOmkoAqKV69tfTn2aphAGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32097 (0x7d61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100 Validity Not Before: Apr 26 16:58:46 2025 GMT Not After : May 3 16:58:46 2025 GMT Subject: CN=680d10c6-92df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:4a:ab:b3:ec:34:05:de:12:55:72:ec:0e: 57:73:18:00:ba:47:17:5d:90:69:d6:de:e4:b6:41: f6:23:3e:33:c1:84:3e:59:af:f5:b7:79:33:fc:e5: 84:be:51:0c:48:a9:c0:7e:2c:48:c8:c8:22:00:50: 3c:0b:a5:e7:ed:71:58:2a:39:14:26:d9:e2:34:15: 2b:b2:fc:72:66:b5:60:10:21:52:e8:51:6f:55:ee: 39:ee:1b:8e:65:71:d9:07:b5:dd:5b:72:da:99:a8: c5:8a:48:12:84:2e:c3:74:fe:93:be:62:b5:9e:e7: ad:83:91:03:bb:26:c4:6f:f9:ce:88:4b:99:36:88: ff:cb:a7:ea:ec:f9:17:f1:04:6c:b3:87:93:f7:7f: ae:d8:1d:9c:82:9d:4c:41:b2:60:2d:fe:a8:13:8d: 59:1c:bf:41:69:44:5d:15:5d:d2:9e:06:fb:4b:0e: 24:29:12:3d:ea:b5:a4:76:51:59:bc:0f:4f:d0:7b: 52:73:0f:ca:91:22:66:aa:58:2a:b1:50:0f:b0:bb: bd:e4:99:80:05:89:bb:a7:f3:0a:4c:bb:e6:f7:6b: 2a:1d:26:11:ef:e1:cf:b2:41:8f:18:2e:6d:35:bc: 35:f4:ae:79:26:7f:68:9c:4d:52:fc:d4:65:6b:d1: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:28:7A:EE:D1:E9:BB:35:B5:FC:A4:42:5B:FB:C4:B7:CA:FD:43:8D X509v3 Authority Key Identifier: keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:a8:65:fc:10:e5:2f:89:95:ba:95:f0:3d:27:d1:01:b1:74: 4f:63:90:5d:c1:6a:8e:df:ea:fc:c1:bb:65:7c:e2:07:92:0d: 52:08:33:90:05:a3:a7:40:a2:90:05:0e:a7:0a:7e:98:00:8c: fd:39:8d:52:ac:35:87:23:64:79:da:89:8a:82:86:64:45:99: 91:9f:69:d9:09:54:a2:5a:3a:69:34:a3:81:64:52:3f:9c:35: f8:56:15:ce:e8:f8:73:e0:ab:50:2a:13:01:ff:87:83:3f:16: 0a:6b:f8:86:87:77:65:a2:d7:f5:14:fa:dc:b1:d0:0c:4b:15: 15:43:70:5d:a1:4a:e5:0d:7d:78:1d:4b:a6:b7:b5:4d:9d:b2: 85:6f:9c:71:9a:1c:03:c6:ac:55:e8:92:0d:be:51:b2:c4:69: dc:af:c2:e4:53:00:24:ae:96:7d:ce:dc:e6:3f:e5:5d:80:e6: f9:bc:54:a3:77:c8:c2:eb:a3:63:33:3b:be:25:cf:6b:3e:b8: 2c:e1:c4:ac:e4:df:fc:2a:66:60:1b:55:a0:bd:67:34:b2:2b: 12:d2:9e:11:b5:9a:64:73:0b:a2:3e:27:db:1d:87:10:8e:d8: a9:93:f7:2f:5d:1b:73:4a:ff:bb:e0:5b:ba:85:f7:55:3d:3e: e9:e6:91:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICfWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1 Nzg5MjExMDAwHhcNMjUwNDI2MTY1ODQ2WhcNMjUwNTAzMTY1ODQ2WjAYMRYwFAYD VQQDEw02ODBkMTBjNi05MmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuspKq7PsNAXeElVy7A5XcxgAukcXXZBp1t7ktkH2Iz4zwYQ+Wa/1t3kz/OWE vlEMSKnAfixIyMgiAFA8C6Xn7XFYKjkUJtniNBUrsvxyZrVgECFS6FFvVe457huO ZXHZB7XdW3LamajFikgShC7DdP6TvmK1nuetg5EDuybEb/nOiEuZNoj/y6fq7PkX 8QRss4eT93+u2B2cgp1MQbJgLf6oE41ZHL9BaURdFV3Sngb7Sw4kKRI96rWkdlFZ vA9P0HtScw/KkSJmqlgqsVAPsLu95JmABYm7p/MKTLvm92sqHSYR7+HPskGPGC5t Nbw19K55Jn9onE1S/NRla9FRDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcoeu7R 6bs1tfykQlv7xLfK/UONMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTAwRC9GQ0RDRDNBMEFDOUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJC Sk9kWkx1MG9tZTlYaVNFUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBqGX8EOUviZW6lfA9J9EBsXRPY5BdwWqO3+r8wbtlfOIHkg1SCDOQ BaOnQKKQBQ6nCn6YAIz9OY1SrDWHI2R52omKgoZkRZmRn2nZCVSiWjppNKOBZFI/ nDX4VhXO6Phz4KtQKhMB/4eDPxYKa/iGh3dlotf1FPrcsdAMSxUVQ3BdoUrlDX14 HUumt7VNnbKFb5xxmhwDxqxV6JINvlGyxGncr8LkUwAkrpZ9ztzmP+VdgOb5vFSj d8jC66NjMzu+Jc9rPrgs4cSs5N/8KmZgG1WgvWc0sisS0p4RtZpkcwuiPifbHYcQ jtipk/cvXRtzSv+74Fu6hfdVPT7p5pFc -----END CERTIFICATE-----Generated at Sat Apr 26 22:52:27 2025 by rpki-client