$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft File: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft (raw, json) Hash identifier: Ql1zM584/+DSHs0xe+vl5p3hk0DGeS6lV93xAcXqnK0= Subject key identifier: DC:90:1B:C8:B1:81:21:A9:98:8C:CD:7B:E6:5F:BF:F2:D1:D2:5D:40 Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 Certificate issuer: /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft Manifest number: 0107 Signing time: Fri 25 Apr 2025 04:10:26 +0000 Manifest this update: Fri 25 Apr 2025 04:10:26 +0000 Manifest next update: Fri 02 May 2025 04:10:26 +0000 Files and hashes: 1: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl (hash: YZYRPDicywAxHALSyf4hbk5tPfyi/bWm28+CI4SXhEw=) 2: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (hash: oApvSZT8Sv3uSmM9SxIKbWqw6D6WWZsa1SWpMmDS0a4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3F2, serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Validity Not Before: Apr 25 04:10:26 2025 GMT Not After : May 2 04:10:26 2025 GMT Subject: CN=680b0b32-28e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3a:5b:59:a5:83:3e:73:4a:c9:ca:cc:ce:b2: 86:47:55:71:9f:b9:5a:85:53:1c:a7:ec:30:55:3e: 93:a0:6c:be:ee:ab:82:9a:ec:16:59:00:7e:39:3a: 41:9c:3e:3c:92:03:8d:19:24:0b:83:fd:7c:7c:b4: 0c:b7:ab:aa:6d:1d:75:92:d8:77:6b:39:00:b3:27: b7:0b:c3:4d:a4:0d:0b:df:8c:5e:99:dc:6e:7c:bf: 4b:bd:1d:69:43:9f:34:b2:41:29:67:8e:e9:7c:d0: 71:6d:dc:c9:ad:56:f2:18:0a:4f:5f:c9:31:1f:0d: f6:a3:c1:ee:9a:1e:58:80:71:1d:99:d7:c1:19:c7: 41:2e:5b:c1:9a:5e:e7:eb:38:94:73:f3:4c:cc:7d: 08:d6:a9:f4:90:1a:9c:53:da:e2:47:e5:43:52:a5: c0:f7:f4:0d:09:17:a8:87:e9:eb:57:52:6f:80:83: fe:f6:c5:3b:a1:47:b8:dc:80:65:de:05:d6:dd:93: ed:b8:09:46:dd:16:b9:f5:0e:34:fa:a2:bf:05:1d: 5b:b4:71:0e:16:db:0e:ce:81:de:8e:18:db:c0:05: bd:59:25:7e:1f:2c:13:64:7e:1a:47:0b:59:c3:65: 70:df:48:0a:de:28:56:25:21:a7:fe:f9:a7:9a:82: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:90:1B:C8:B1:81:21:A9:98:8C:CD:7B:E6:5F:BF:F2:D1:D2:5D:40 X509v3 Authority Key Identifier: keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:37:66:c1:bf:90:b3:8c:d9:37:b5:c0:59:38:84:ea:81:a4: b5:b4:32:ec:70:3f:fe:3c:ed:80:02:18:91:72:2f:f7:5c:85: 75:7c:7f:53:3e:5e:11:74:8c:fe:63:6e:94:ca:4f:24:5f:7d: 75:bd:7b:a2:f0:8d:b3:b0:f3:52:dc:69:6c:2c:e4:07:da:ed: 4c:f0:e9:f2:81:13:d1:87:bc:86:9a:ee:a2:01:0a:cf:7d:19: fd:87:eb:a1:b4:c4:6b:ca:42:81:c1:51:5f:7b:92:99:b3:09: 9c:54:12:b0:55:24:c8:0c:a8:d6:64:01:12:94:13:ce:9d:68: 88:28:c2:e4:0f:6e:05:92:ef:a6:e6:a1:e2:5f:96:a9:46:9a: 91:36:d8:f0:7e:2a:c0:77:ca:50:d7:8f:da:2b:14:47:97:d0: 9f:c6:f1:c7:4e:98:28:5a:22:a7:7a:29:fa:e0:ec:41:6f:84: 2f:44:2d:32:f1:05:f0:f3:3a:fb:98:ca:a6:19:2c:b0:6b:7f: 3d:4b:9a:f0:c3:13:99:44:8f:13:ac:34:e5:cb:29:71:bd:71: a1:fa:f4:75:2b:35:09:92:12:b5:4c:8b:77:33:4b:b4:03:36: b4:58:49:35:57:ea:e8:da:00:56:28:17:a6:32:df:f7:33:a7: 1c:29:80:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRjIxMTAvBgNVBAUTKDVDQzkxQUZENUI4QjM3RUQ4QzUwOUY2MTE4OUY0NDhF NzMxMjFGOTcwHhcNMjUwNDI1MDQxMDI2WhcNMjUwNTAyMDQxMDI2WjAYMRYwFAYD VQQDEw02ODBiMGIzMi0yOGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTpbWaWDPnNKycrMzrKGR1Vxn7lahVMcp+wwVT6ToGy+7quCmuwWWQB+OTpB nD48kgONGSQLg/18fLQMt6uqbR11kth3azkAsye3C8NNpA0L34xemdxufL9LvR1p Q580skEpZ47pfNBxbdzJrVbyGApPX8kxHw32o8Humh5YgHEdmdfBGcdBLlvBml7n 6ziUc/NMzH0I1qn0kBqcU9riR+VDUqXA9/QNCReoh+nrV1JvgIP+9sU7oUe43IBl 3gXW3ZPtuAlG3Ra59Q40+qK/BR1btHEOFtsOzoHejhjbwAW9WSV+HywTZH4aRwtZ w2Vw30gK3ihWJSGn/vmnmoIpEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyQG8ix gSGpmIzNe+Zfv/LR0l1AMB8GA1UdIwQYMBaAFFzJGv1bizftjFCfYRifRI5zEh+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNGMi8wMDUxREJDQzk3 RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4tMk1VSjloR0o5RWpuTVNI NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hNa2FfVnVMTi0yTVVKOWhHSjlFam5NU0g1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNGMi8wMDUxREJDQzk3RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4t Mk1VSjloR0o5RWpuTVNINWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7N2bBv5CzjNk3tcBZOITqgaS1tDLscD/+PO2AAhiRci/3XIV1fH9T Pl4RdIz+Y26Uyk8kX311vXui8I2zsPNS3GlsLOQH2u1M8OnygRPRh7yGmu6iAQrP fRn9h+uhtMRrykKBwVFfe5KZswmcVBKwVSTIDKjWZAESlBPOnWiIKMLkD24Fku+m 5qHiX5apRpqRNtjwfirAd8pQ14/aKxRHl9CfxvHHTpgoWiKnein64OxBb4QvRC0y 8QXw8zr7mMqmGSywa389S5rwwxOZRI8TrDTlyylxvXGh+vR1KzUJkhK1TIt3M0u0 Aza0WEk1V+ro2gBWKBemMt/3M6ccKYDD -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:08 2025 by rpki-client