$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: N25db1AMNPmGCX+hmbUVKrAY3qEg4HXQb2lsdlooNOc= Subject key identifier: D4:5E:3F:E3:2A:AF:F1:E6:3F:B3:DE:4B:A7:99:FF:AA:96:17:06:31 Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 0126 Signing time: Fri 13 Jun 2025 03:46:46 +0000 Manifest this update: Fri 13 Jun 2025 03:46:45 +0000 Manifest next update: Fri 20 Jun 2025 03:46:45 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: 4yYdGM849qX6HkUYc7ueePxGx+9YUtp5mGpG5JVL5CA=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: 3NZc5h6ed9BUlmgYjohUHdHLn8ZtKRYjymamcmwqc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Jun 13 03:46:45 2025 GMT Not After : Jun 20 03:46:45 2025 GMT Subject: CN=684b9f26-79de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ee:e3:8b:8a:66:e1:2d:ff:53:c7:90:c4:db: a2:70:ce:ad:f8:75:0f:12:be:c4:c3:73:0d:fe:c1: e0:8c:6b:16:62:67:08:2d:70:2c:d9:c7:99:93:b2: e4:01:5c:f9:27:95:0a:f9:6d:44:0d:32:df:74:f1: 99:b0:f5:f8:aa:98:52:68:fb:a0:79:2f:1e:74:10: 18:a5:08:83:3d:51:6d:b8:e0:61:b0:67:a3:58:ce: 46:6d:a8:c9:2b:67:d1:6b:86:e4:60:76:e4:17:0c: e5:b2:79:e1:79:26:a1:71:ae:fc:e3:ff:3b:56:91: 49:bc:99:bc:56:17:5a:bc:af:23:d3:29:fb:9d:99: 54:a1:1d:3b:67:c8:8e:9c:2b:dd:ce:49:06:28:0c: 02:4e:b0:65:86:45:c2:60:05:a3:05:9b:87:00:d1: ae:98:58:8e:8e:ae:73:f8:8c:fd:13:8e:ee:a4:6f: c2:e7:a4:10:9e:4d:7f:f9:49:98:7d:3c:5d:0f:54: bc:e1:40:6a:47:ba:57:de:05:7f:0f:6a:17:5e:51: 72:5b:e0:dd:f1:9b:a6:bc:6a:35:8b:df:01:69:72: b1:08:84:92:e1:4e:19:d4:c0:4a:c2:14:1c:01:50: 73:2f:b7:2a:4f:05:e7:3d:3f:52:b5:be:5a:1f:73: d3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5E:3F:E3:2A:AF:F1:E6:3F:B3:DE:4B:A7:99:FF:AA:96:17:06:31 X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:18:8a:cc:06:11:87:02:38:15:9b:0b:e7:7b:3f:0e:30:bb: fd:ea:c0:89:fa:7a:21:40:42:02:73:49:7a:ce:d1:0f:83:4e: 28:ff:a7:e5:5c:a1:8c:10:87:26:1e:d4:14:c0:55:ca:c2:d8: 4b:25:00:ae:57:3e:8e:87:0f:ed:ac:68:8e:12:30:d4:68:5c: 2c:1d:11:e7:1e:ef:41:e8:5c:b7:54:d0:5f:bd:29:57:a7:5c: 38:5d:14:77:cc:54:67:d5:05:72:f9:b9:d8:51:e2:de:8d:d3: e3:23:23:ee:ad:a3:1d:30:0b:e8:0c:f0:2e:f6:f8:3b:b5:69: 21:a4:82:73:5c:3c:49:60:c3:89:d0:93:ea:9c:4e:6d:d8:a5: 55:0f:f0:b7:1d:64:12:1f:44:88:7d:ca:8d:b8:32:c1:e9:e6: be:1a:70:2f:52:87:9c:e4:c5:87:2d:3a:b6:7b:fc:bc:ad:a1: 8b:1b:e6:64:98:bb:f1:05:a0:3f:76:06:1d:11:c4:47:70:ea: d6:00:1a:9c:27:cc:1c:b8:bd:8f:9b:75:02:f0:54:0e:da:6e: 23:cf:9f:31:5f:42:eb:03:fe:9c:6f:76:1b:36:ac:1e:30:4a: fc:49:80:2b:24:02:fd:1b:e6:1b:0f:18:10:c5:2e:2d:99:d8: af:4b:cd:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUwNjEzMDM0NjQ1WhcNMjUwNjIwMDM0NjQ1WjAYMRYwFAYD VQQDEw02ODRiOWYyNi03OWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAye7ji4pm4S3/U8eQxNuicM6t+HUPEr7Ew3MN/sHgjGsWYmcILXAs2ceZk7Lk AVz5J5UK+W1EDTLfdPGZsPX4qphSaPugeS8edBAYpQiDPVFtuOBhsGejWM5GbajJ K2fRa4bkYHbkFwzlsnnheSahca784/87VpFJvJm8VhdavK8j0yn7nZlUoR07Z8iO nCvdzkkGKAwCTrBlhkXCYAWjBZuHANGumFiOjq5z+Iz9E47upG/C56QQnk1/+UmY fTxdD1S84UBqR7pX3gV/D2oXXlFyW+Dd8ZumvGo1i98BaXKxCISS4U4Z1MBKwhQc AVBzL7cqTwXnPT9Stb5aH3PTawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNReP+Mq r/HmP7PeS6eZ/6qWFwYxMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbGIrMBhGHAjgVmwvnez8OMLv96sCJ+nohQEICc0l6ztEPg04o/6fl XKGMEIcmHtQUwFXKwthLJQCuVz6Ohw/trGiOEjDUaFwsHRHnHu9B6Fy3VNBfvSlX p1w4XRR3zFRn1QVy+bnYUeLejdPjIyPuraMdMAvoDPAu9vg7tWkhpIJzXDxJYMOJ 0JPqnE5t2KVVD/C3HWQSH0SIfcqNuDLB6ea+GnAvUoec5MWHLTq2e/y8raGLG+Zk mLvxBaA/dgYdEcRHcOrWABqcJ8wcuL2Pm3UC8FQO2m4jz58xX0LrA/6cb3YbNqwe MEr8SYArJAL9G+YbDxgQxS4tmdivS80g -----END CERTIFICATE-----Generated at Sat Jun 14 19:38:38 2025 by rpki-client