$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: 5jSFeGzKTtcst4GgSeCuJH2ZOKt+tpfryR+fIRnJ31Q= Subject key identifier: 7F:80:5C:DC:87:60:8E:9A:97:8F:35:A4:F3:07:BD:E5:94:13:0E:F1 Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 018E Signing time: Wed 07 May 2025 02:46:36 +0000 Manifest this update: Wed 07 May 2025 02:46:36 +0000 Manifest next update: Wed 14 May 2025 02:46:36 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: Mn0ShVhewzyHR3lW77ttW4gkF38Whh8JkeIVaMfY3Ms=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: 2K9kOKHGwBClsOCjMWjBt/lsIDrWFOJQCQhQXvkzECo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: May 7 02:46:36 2025 GMT Not After : May 14 02:46:36 2025 GMT Subject: CN=681ac98c-0e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:d2:9a:ce:ec:6b:ff:06:62:a6:2f:32:7d: 0e:31:92:65:af:fb:89:e7:5a:58:f5:c2:63:ab:e1: 1a:9b:b7:73:80:1c:36:2e:45:6c:e5:50:ef:d2:81: d5:9f:92:65:d1:65:db:fe:6d:93:0d:5e:d2:f6:7b: 6b:51:d8:9c:8a:ef:eb:17:fe:52:ce:4d:ec:33:7f: 27:71:ac:94:1c:11:e9:a7:d3:3a:47:b4:24:06:18: 7f:59:69:ba:a9:ed:9e:69:33:bd:08:e3:2a:bf:c8: a9:23:b5:71:f9:19:a9:c1:66:8a:3a:2e:ae:e8:d7: 2e:da:55:f5:7a:44:3c:72:e9:7a:f7:6f:2d:5f:8a: 86:94:09:ad:92:cc:02:78:9c:0c:5e:f6:48:17:39: 4b:4e:b1:05:24:9f:b9:3b:13:26:7d:55:cf:ae:a4: c4:9c:dd:29:88:d7:50:6e:33:45:5b:38:0b:13:fa: ee:9f:2a:b7:35:ce:b5:86:60:b6:31:65:ef:6e:d4: 55:fe:79:33:60:e3:ac:70:02:37:4a:0a:55:e4:ef: d6:5b:7c:48:d3:9e:a2:c6:58:d5:32:11:27:31:b7: 07:3b:05:94:1d:03:42:e1:a8:ae:0f:64:3f:09:ba: 97:3a:34:e4:03:6e:30:aa:fa:ea:fc:e1:70:91:5d: d9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:80:5C:DC:87:60:8E:9A:97:8F:35:A4:F3:07:BD:E5:94:13:0E:F1 X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:69:39:ae:2a:ea:01:90:0a:f1:73:c2:75:f5:b2:c1:97:87: 7b:58:52:b3:e5:8f:9c:6f:29:78:f5:b2:48:f7:87:0a:55:f4: 89:56:66:4e:0c:32:eb:ef:5a:03:a2:3a:af:eb:4f:8e:9f:c8: 5f:0f:01:eb:72:e6:59:79:3f:d3:91:61:fb:84:4a:fa:ab:7e: b0:da:0e:79:12:67:6e:ac:5e:b9:5c:24:77:44:a6:4e:9d:eb: 65:c1:8b:c8:5f:28:2e:7e:92:c4:c1:a4:5f:89:2a:61:c4:44: 50:60:77:c9:80:7c:fe:f3:1e:41:6d:e6:d3:a8:ce:6f:62:99: d2:4f:78:32:c2:37:97:34:a3:cd:8e:c5:64:bf:99:ce:2c:75: 21:8b:cc:93:7f:cc:a9:e6:f2:2c:41:32:d3:3d:15:1f:1b:94: ad:0e:68:02:b0:74:95:ed:63:fc:e4:f6:77:f4:ed:dd:0f:a3: d5:42:04:bc:6f:42:6b:74:3b:87:d1:e3:1e:ae:1c:dc:39:20: 91:47:f4:18:5c:fb:b8:46:5b:23:c1:a9:e1:0e:b9:0c:e3:fb: bb:cb:ec:14:27:98:7e:7a:d3:a5:27:91:97:a4:36:33:e1:c9: ad:91:2f:91:c6:41:db:29:05:58:0a:63:d9:9b:06:f5:70:72: e9:58:64:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjUwNTA3MDI0NjM2WhcNMjUwNTE0MDI0NjM2WjAYMRYwFAYD VQQDEw02ODFhYzk4Yy0wZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQDSms7sa/8GYqYvMn0OMZJlr/uJ51pY9cJjq+Eam7dzgBw2LkVs5VDv0oHV n5Jl0WXb/m2TDV7S9ntrUdiciu/rF/5Szk3sM38ncayUHBHpp9M6R7QkBhh/WWm6 qe2eaTO9COMqv8ipI7Vx+RmpwWaKOi6u6Ncu2lX1ekQ8cul6928tX4qGlAmtkswC eJwMXvZIFzlLTrEFJJ+5OxMmfVXPrqTEnN0piNdQbjNFWzgLE/runyq3Nc61hmC2 MWXvbtRV/nkzYOOscAI3SgpV5O/WW3xI056ixljVMhEnMbcHOwWUHQNC4aiuD2Q/ CbqXOjTkA24wqvrq/OFwkV3ZyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+AXNyH YI6al481pPMHveWUEw7xMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdaTmuKuoBkArxc8J19bLBl4d7WFKz5Y+cbyl49bJI94cKVfSJVmZO DDLr71oDojqv60+On8hfDwHrcuZZeT/TkWH7hEr6q36w2g55EmdurF65XCR3RKZO netlwYvIXygufpLEwaRfiSphxERQYHfJgHz+8x5BbebTqM5vYpnST3gywjeXNKPN jsVkv5nOLHUhi8yTf8yp5vIsQTLTPRUfG5StDmgCsHSV7WP85PZ39O3dD6PVQgS8 b0JrdDuH0eMerhzcOSCRR/QYXPu4RlsjwanhDrkM4/u7y+wUJ5h+etOlJ5GXpDYz 4cmtkS+RxkHbKQVYCmPZmwb1cHLpWGR+ -----END CERTIFICATE-----Generated at Wed May 7 10:36:37 2025 by rpki-client