$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json) Hash identifier: xpKXgX4c4JQlzs8EKQsZQ6CrzWmGGX6Oe42CVpXnls8= Subject key identifier: B1:4C:42:4D:DA:7E:33:7E:D7:1A:0A:33:65:46:C6:FE:23:6D:40:84 Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 308E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft Manifest number: 3030 Signing time: Thu 24 Apr 2025 15:28:19 +0000 Manifest this update: Thu 24 Apr 2025 15:28:19 +0000 Manifest next update: Thu 01 May 2025 15:28:19 +0000 Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: O0dExVatxizc5iFrQOFPGYn6W8aT5UlcevJSq7zGtmc=) 2: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: uJNCEpY3N5D9PZUEznOLtgfDSFjB7pvoPkUdCD232AQ=) 3: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: zRK4kX65qOi1Aodd7QFDhTlHcyGoisJrEVR5AqT4AMk=) 4: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: A0f9mWgkbPinXWu1IPE7w1z8pvu79vZv+CBSMmbLkD8=) 5: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: d0jtpCmAVMShKujtRhiYarGgYODIMpgrPMB25oxFrNc=) 6: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: nMCODmmNHRPyTJQL+suYw2CsRxIUVmpXezulX/rRiwk=) 7: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: 8DE/TKExM2of42c5A8xqnIH3WAtnX8iCbZG5rmNILIM=) 8: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: yaZGjriYPeeUPnK6Lq62N5nqIchaZHkJFavQQjz/rGg=) 9: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: 4KS8xS3AoLtWAkjMFU1X5ErcnDLiIanRQAMHWzBnzUQ=) 10: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: 4kqqMewm+jC0EciEckuPYWUSQBV8lI1snIcJos5k7f0=) 11: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: HpYoD/7amrQw23qk7qiGVySn5/tkgSZijl5VcOrQDaU=) 12: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: 0GtekBL2dOHyHHnoJe/8fq1ahw3kmkZ3Jf2VXcQA8mI=) 13: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: wzNvofUysU9whi/bJ2KtDbO6Z+B2td019urJnh0Ecvg=) 14: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: N55Tj23wiJHKM+RuMh/sRp6P2rhFoWqUz2hSoTlSuVU=) 15: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: R4ybNnQ0mwoL4B+2xlweOTID4tc0Szqka+nYeqTHQpg=) 16: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: PXdJkWNxL0C8ezvM4V8PU0QpElSJqET+Lz8pr56x7DU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12430 (0x308e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Apr 24 15:28:19 2025 GMT Not After : May 1 15:28:19 2025 GMT Subject: CN=680a5893-8354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:62:3c:cf:64:a3:a6:ff:32:c4:68:2d:25: 8a:18:4c:77:30:93:e8:63:ce:33:7a:7a:7b:4d:e8: 03:05:86:76:f0:41:92:c9:af:fa:f0:a8:89:52:2b: 62:f1:25:3c:3d:0c:c4:9a:f7:45:9e:c6:5c:cc:09: dd:d7:9b:8f:6f:e4:62:4e:87:20:5b:8c:e7:b8:84: ac:10:e0:aa:03:11:59:7a:e4:ae:ff:82:9a:6a:f1: c4:1b:50:3b:29:ae:75:13:3b:0a:35:93:36:0f:33: 8c:51:0b:ec:6e:57:e0:e2:50:de:ed:62:11:f9:89: 3a:07:c8:9b:32:3a:98:47:6e:6d:58:7f:08:eb:f7: 09:31:a8:25:ea:de:63:c6:db:66:e0:3d:5a:bc:ef: ae:ee:ec:1a:ff:c2:45:eb:91:7a:eb:0f:5d:e8:f0: 17:a4:29:58:5a:5a:af:61:24:0d:0b:31:9e:7e:ca: 7d:c1:b4:d0:d5:7b:c3:ca:58:7b:18:1a:af:81:84: 01:87:c8:28:8a:37:cb:36:d7:46:6e:aa:6b:1f:19: 5f:b7:22:fb:57:63:3d:bd:0d:34:ea:bf:ed:21:1b: 90:0d:0d:86:27:0b:a5:eb:72:ca:cf:89:1d:e4:67: 44:68:b0:61:f5:dd:97:a6:d2:e8:97:8b:f4:c5:77: 16:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4C:42:4D:DA:7E:33:7E:D7:1A:0A:33:65:46:C6:FE:23:6D:40:84 X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5f:35:31:e5:76:68:dd:76:90:c2:b8:0f:0d:22:42:df:6b: e9:c4:8d:56:12:2b:04:82:3b:52:32:33:50:05:ca:76:59:44: 40:b5:bd:87:be:ac:d1:fb:35:96:96:0b:47:77:91:76:25:5a: d0:b1:fa:03:5a:dc:40:37:af:be:46:67:ca:87:58:bd:bc:ed: cc:b9:5e:e0:ec:3d:76:32:ca:3e:15:06:be:e1:d1:f4:19:3e: 0f:b7:a9:0a:22:ae:8c:7f:53:3a:0b:ba:03:86:02:87:7a:84: 9e:8c:4b:b5:cd:78:37:d4:40:68:9d:34:12:8a:7e:32:d9:0e: a4:4f:b9:7b:67:11:c9:5f:ce:74:ee:e8:62:4a:b7:57:71:c5: 6d:83:c3:3b:ba:f1:41:b1:56:b1:37:52:23:10:04:87:14:54: 05:71:0d:ae:e6:95:f6:21:05:d7:4d:bf:c6:d3:56:21:8b:a1: 43:59:de:2a:37:83:f4:65:6d:7d:0e:22:c0:18:35:21:36:29: ff:96:99:62:de:c1:2f:a0:0b:d4:99:f1:51:31:b9:78:63:61: 31:14:30:6e:5c:91:97:7b:d6:c8:3e:fb:58:43:7d:21:d3:8a: ba:be:69:66:ee:22:b5:7e:39:df:d2:c8:01:77:61:ca:7d:10: a9:66:ac:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjUwNDI0MTUyODE5WhcNMjUwNTAxMTUyODE5WjAYMRYwFAYD VQQDEw02ODBhNTg5My04MzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJJiPM9ko6b/MsRoLSWKGEx3MJPoY84zenp7TegDBYZ28EGSya/68KiJUiti 8SU8PQzEmvdFnsZczAnd15uPb+RiTocgW4znuISsEOCqAxFZeuSu/4KaavHEG1A7 Ka51EzsKNZM2DzOMUQvsblfg4lDe7WIR+Yk6B8ibMjqYR25tWH8I6/cJMagl6t5j xttm4D1avO+u7uwa/8JF65F66w9d6PAXpClYWlqvYSQNCzGefsp9wbTQ1XvDylh7 GBqvgYQBh8goijfLNtdGbqprHxlftyL7V2M9vQ006r/tIRuQDQ2GJwul63LKz4kd 5GdEaLBh9d2XptLol4v0xXcW3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFMQk3a fjN+1xoKM2VGxv4jbUCEMB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTVDOC85Q0QzRThGNkZGNTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAw WjA5ZlhyX0wtakc3bGs5a3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcXzUx5XZo3XaQwrgPDSJC32vpxI1WEisEgjtSMjNQBcp2WURAtb2H vqzR+zWWlgtHd5F2JVrQsfoDWtxAN6++RmfKh1i9vO3MuV7g7D12Mso+FQa+4dH0 GT4Pt6kKIq6Mf1M6C7oDhgKHeoSejEu1zXg31EBonTQSin4y2Q6kT7l7ZxHJX850 7uhiSrdXccVtg8M7uvFBsVaxN1IjEASHFFQFcQ2u5pX2IQXXTb/G01Yhi6FDWd4q N4P0ZW19DiLAGDUhNin/lpli3sEvoAvUmfFRMbl4Y2ExFDBuXJGXe9bIPvtYQ30h 04q6vmlm7iK1fjnf0sgBd2HKfRCpZqxo -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:38 2025 by rpki-client