$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft File: xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json) Hash identifier: mqpx7qVpc1T+xs72rMl3HNtSX4xEL4OCDOdjxNujwIc= Subject key identifier: E0:C4:E6:EA:07:0E:8D:D9:61:3F:D0:A9:09:67:0B:D7:19:10:C5:E0 Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Certificate serial: 03FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft Manifest number: 03DF Signing time: Fri 25 Apr 2025 00:22:36 +0000 Manifest this update: Fri 25 Apr 2025 00:22:36 +0000 Manifest next update: Fri 02 May 2025 00:22:36 +0000 Files and hashes: 1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: x/Y09T4+AvHOVUf1EeKltS7vDqjE1FuD6CmqtOBYoXY=) 2: 07C047B28BE911EF9DF25F0BC4F9AE02.roa (hash: AN4hBiZx1+tVHoaN/LazZ9dbBGKvWOUI1wRt7z4HbB0=) 3: 50F671067CC411EF8589DF32C4F9AE02.roa (hash: 2ORnkhzshra5gFpyLproOPD3/repbchwTxkXJLvaYUk=) 4: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: wgX+EMzgoKfrAVdDz/48mCSLSDU8m2MWUYcABpMkNSU=) 5: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: Hb+mhjOnUiRcLYwNjTfwnpK/Ky2Nkaju8DZXLfXW14s=) 6: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: Cfsk+t84ibLo+fkUEG7hLT0dawrjqPaFJly7xspE4TQ=) 7: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: PGtYjaqkpIprbzlxtBJWh83LZS83/aciT2SXNSejhqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1020 (0x3fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F Validity Not Before: Apr 25 00:22:36 2025 GMT Not After : May 2 00:22:36 2025 GMT Subject: CN=680ad5cc-0f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:aa:ef:f2:c8:e5:4e:aa:5d:bc:fb:41:46: 26:bd:c0:c0:97:21:ed:99:72:fe:39:72:26:fb:e2: 02:0e:ab:96:c4:3b:bb:49:61:10:73:2f:0a:38:42: db:49:bd:39:9c:22:ea:70:f5:82:55:ce:1a:8c:73: 97:ee:f6:93:62:20:bb:b5:b0:91:11:76:10:d9:9b: 20:27:22:09:16:c9:62:89:f8:79:c2:06:f9:a7:bd: c2:ef:72:97:8d:37:06:0f:cd:c1:59:5e:c0:89:d7: a7:91:5d:94:cd:f6:11:3b:35:cd:f7:4f:bc:14:7a: 23:03:de:fc:95:b4:38:49:47:18:36:69:82:5c:55: e3:54:28:30:10:4d:f9:24:21:46:07:6c:5a:65:3d: dc:0f:69:0a:32:cf:07:ef:f7:9f:41:68:d2:5d:08: eb:8f:fa:14:74:31:d1:a0:b4:11:be:7b:64:52:66: 43:c8:84:9c:d7:2a:33:8b:78:aa:98:34:38:a4:09: ff:4c:4a:6b:a5:c9:6d:c3:6b:ab:a6:08:03:4a:62: ad:de:d8:64:fc:2c:f2:dd:30:f7:01:7c:67:9b:dd: e6:d6:9b:2a:5d:e3:1b:b5:45:34:71:e9:54:16:06: 28:36:b8:e6:0b:bd:fb:93:d3:07:2a:76:ab:f5:8b: 51:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C4:E6:EA:07:0E:8D:D9:61:3F:D0:A9:09:67:0B:D7:19:10:C5:E0 X509v3 Authority Key Identifier: keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:25:04:59:28:ae:74:6b:a4:f4:63:0d:b7:19:9b:a7:26:07: d8:72:51:3e:4a:32:38:cb:d4:82:e7:4a:85:d7:d3:d8:ea:00: a1:c5:c2:47:f1:89:b4:e2:cc:4c:e0:77:b6:1f:08:b8:52:0f: bc:1d:e2:8a:9e:0f:5c:ca:76:73:dc:78:f6:fe:81:ca:1c:da: 82:6a:87:19:8d:73:53:dc:e5:9e:27:a1:0c:d4:ab:16:8e:d3: 88:21:1e:c1:64:b6:84:17:9b:67:91:47:9d:f2:be:b8:fe:e5: 19:fc:f1:83:4e:e9:3a:d4:77:00:fd:35:6a:9b:f8:27:3b:95: 4f:31:87:83:5f:3c:83:08:b7:cc:c4:09:5c:45:7a:ab:37:c8: 99:66:b3:2f:72:94:cd:b8:a9:77:24:65:00:8a:c5:39:77:b3: 5a:9a:0d:2b:9b:83:90:cb:5b:0b:f8:cf:78:59:fa:19:41:3f: e5:fa:5b:a3:d8:cb:0d:b3:fd:be:69:b7:76:6a:6a:50:80:7a: d4:af:0e:05:95:63:c9:32:be:30:41:76:dd:ed:82:23:be:cc: b4:40:1c:7d:f3:e3:4a:a6:2e:ae:81:79:14:6c:be:4e:c6:3f: 25:78:b0:f4:27:c4:6f:bb:4b:8a:e0:87:8f:b4:f7:58:78:5e: db:7b:af:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVCOTQxMTAvBgNVBAUTKEM0RDRGQjBGRjAyNzc5NkU5REFBMTdCNzU1NTFGRDBC NzdGMTk4MkYwHhcNMjUwNDI1MDAyMjM2WhcNMjUwNTAyMDAyMjM2WjAYMRYwFAYD VQQDEw02ODBhZDVjYy0wZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1+q7/LI5U6qXbz7QUYmvcDAlyHtmXL+OXIm++ICDquWxDu7SWEQcy8KOELb Sb05nCLqcPWCVc4ajHOX7vaTYiC7tbCREXYQ2ZsgJyIJFsliifh5wgb5p73C73KX jTcGD83BWV7AidenkV2UzfYROzXN90+8FHojA978lbQ4SUcYNmmCXFXjVCgwEE35 JCFGB2xaZT3cD2kKMs8H7/efQWjSXQjrj/oUdDHRoLQRvntkUmZDyISc1yozi3iq mDQ4pAn/TEprpcltw2urpggDSmKt3thk/Czy3TD3AXxnm93m1psqXeMbtUU0celU FgYoNrjmC737k9MHKnar9YtRVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODE5uoH Do3ZYT/QqQlnC9cZEMXgMB8GA1UdIwQYMBaAFMTU+w/wJ3lunaoXt1VR/Qt38Zgv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUI5NC9FM0NDMjVEODgx MUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVXNmRxaGUzVlZIOUMzZnht QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOVDdEX0FuZVc2ZHFoZTNWVkg5QzNmeG1DOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUI5NC9FM0NDMjVEODgxMUUxMUVDOTIwMjU1NTFDNEY5QUUwMi94TlQ3RF9BbmVX NmRxaGUzVlZIOUMzZnhtQzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBJQRZKK50a6T0Yw23GZunJgfYclE+SjI4y9SC50qF19PY6gChxcJH 8Ym04sxM4He2Hwi4Ug+8HeKKng9cynZz3Hj2/oHKHNqCaocZjXNT3OWeJ6EM1KsW jtOIIR7BZLaEF5tnkUed8r64/uUZ/PGDTuk61HcA/TVqm/gnO5VPMYeDXzyDCLfM xAlcRXqrN8iZZrMvcpTNuKl3JGUAisU5d7Namg0rm4OQy1sL+M94WfoZQT/l+luj 2MsNs/2+abd2ampQgHrUrw4FlWPJMr4wQXbd7YIjvsy0QBx98+NKpi6ugXkUbL5O xj8leLD0J8Rvu0uK4IePtPdYeF7be6+p -----END CERTIFICATE-----Generated at Sat Apr 26 16:33:36 2025 by rpki-client