$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft File: XS3RVLXc4h-3hsUm297xsEWSirg.mft (raw, json) Hash identifier: L1MkafSx7NtL0U0ispP0ViBw+/RZxZbl7DVkGr40q9M= Subject key identifier: B4:DA:E2:DD:42:7B:55:70:4D:87:F5:A6:79:2C:6D:08:87:39:72:00 Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 27BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft Manifest number: 252F Signing time: Mon 16 Jun 2025 15:54:23 +0000 Manifest this update: Mon 16 Jun 2025 15:54:23 +0000 Manifest next update: Mon 23 Jun 2025 15:54:23 +0000 Files and hashes: 1: XS3RVLXc4h-3hsUm297xsEWSirg.crl (hash: TB4f3Hh+zbXD7atxccBvZRglthS+vhy5bgAF4bPYQFo=) 2: 19A3CD9E4B7011EC8E9FCB48C4F9AE02.roa (hash: JM3URqRB9lFjbjulP6HJXH0/nTZmKhp/VblyDepgmCA=) 3: A293EE844BFB11EAADB0780AC4F9AE02.roa (hash: L56JARs1lbyWfxDIMRSYK/QldVKbihzZgGIBK+gCvAE=) 4: F04860C28C5611E792848B4AC4F9AE02.roa (hash: OWjLebxJynytHvjgIP0SVIn8ZOFvLbt6j473I2eFdGg=) 5: F688FE388C5611E792848B4AC4F9AE02.roa (hash: lqz+b2mpZ7liApUeWmpk6Sxdz1MK1YVyI/nndtzOfc8=) 6: F1475E928C5611E792848B4AC4F9AE02.roa (hash: Azsul1kHuCMDc3vM/dyl3tkEbz4NHSW6BcHmreet4yc=) 7: CAC3390AD30E11EB98AEFF45C4F9AE02.roa (hash: arhZFiziS+sBDNkkd9ApjM4qRhUdC/BiQCxwPWquNA0=) 8: F3DC1FD08C5611E792848B4AC4F9AE02.roa (hash: z8Txj1JKr5vAyHyXu3Q0JC83ZWN/Ombj0tuTCxlEaRY=) 9: EFBF37208C5611E792848B4AC4F9AE02.roa (hash: nNfTdp4PUnPXPodCTbOjAsAWXgCW6bK0lHos7EHr9sI=) 10: F55175EA8C5611E792848B4AC4F9AE02.roa (hash: VkOAhIa80kNaefVErpKRcJS1UUCVoa+4BpGDgLLqprQ=) 11: B4C0B17CC94E11EDB5018458C4F9AE02.roa (hash: DsNdloDffNUf3moIjjEgjm54CfZxDdhXyzmCNd4A8iM=) 12: B61774A4D9DF11EFB722C742C4F9AE02.roa (hash: /ceuJ/WbnEGgNSZXAtMbOel5sgU4JUVf8lMbFmmrMek=) 13: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (hash: zea1Z4utZ31hyYXYKPM+pLoUfd33/pFxc2Oz6L2A0xI=) 14: EF3B21E28C5611E792848B4AC4F9AE02.roa (hash: NQJGHd1cKyBqpoHctaUyw3dvZ0KuQOPSMwntjDFcg1A=) 15: 6DBD2412C9EB11EC886A6D51C4F9AE02.roa (hash: 2JFPJBUaYhM0ytiq7e9eC6CYsDAt8wgMcc3SKiIFHsg=) 16: 7BFDDDB8D42E11EB8E13801EC4F9AE02.roa (hash: rMIZrcp78OdFGxAyj3EoE0LyB7/Lf2gRKvh+qENZ2aU=) 17: 7271CAB217D711EA90BA7F4EC4F9AE02.roa (hash: Xb63l3ZIQpud6T0SsIiJHA/1T9XjvXnyGqxkBm5CkQ0=) 18: EEBDFBB88C5611E792848B4AC4F9AE02.roa (hash: g10juuqEsEAKzRtgsKTtEKp5BZovzdZezXJ/i6OnQX8=) 19: EDA1B0D8A1CE11EDA692F359C4F9AE02.roa (hash: 8wMgBAimNVtvub961irO59NqQxJMZvEDQRKi+qZmzOM=) 20: F721F6B08C5611E792848B4AC4F9AE02.roa (hash: HjDnuWYD2CM4eau1ngg0jQqOKxs9P1pY+POnRU8sW84=) 21: F47B5B188C5611E792848B4AC4F9AE02.roa (hash: oci0lTgKFp7FiEncD15sU2Ngo6tK4eT2xuYmhT6iDlU=) 22: 743ABB72997011EAB50D6934C4F9AE02.roa (hash: begcncLwYIJtBCQ6VJWY520RlYMTXNEWKkPpgmPjKb8=) 23: 543386248C5811E782F42951C4F9AE02.roa (hash: GlY/r205IC2OrqcOiTDslwqaWuBIkTf2ufwkodlMU14=) 24: 27A84B00A1CC11ED8DDB785DC4F9AE02.roa (hash: Sottj9k4RXjczj3TRXwNeTc3keyEZnkoE9tmU2Bbb+s=) 25: 9B22F928BFE311EE949C2918C4F9AE02.roa (hash: rHfc038K7hZU+Vhyh8UrxdPg1RCOF3M80HQn+le/mCY=) 26: 14E0C65A4BFD11EAAB81FE0DC4F9AE02.roa (hash: xPXjL37oXeRRpPjLu0GM00DmOaXEa3PmK65wf2oESwE=) 27: F5F86ADA8C5611E792848B4AC4F9AE02.roa (hash: ZQdD4QBAodxhPJDLvSXRmOQaG3cbzn75kTPxr7PdWwA=) 28: F15AD0CE544E11ED9C5E2F3AC4F9AE02.roa (hash: 3hdHgWnWw8iRZc3PLDAGckupDqE2yqREOxz6oL/nUl8=) 29: 62F6493EE3BE11EE933A0461C4F9AE02.roa (hash: 6KUaAZVDPkXTkOKZ5DbXYRghI5OIx+//6O9Z2SthviM=) 30: F1C092BC8C5611E792848B4AC4F9AE02.roa (hash: pP6QaZ6xCHzwaNezLWWh9N0zjLWnePhegpoh8w4BrFY=) 31: E0CC1C58235911ECAB7C7661C4F9AE02.roa (hash: EnqXxHxizowT8zb+SHcbhbA09vXgZZGAE/YRBfr59Gc=) 32: BE5DA1A0E3BE11EEAEC5E061C4F9AE02.roa (hash: X+/JRaBFSpU+csAjI62l5rVURr8ZUzb9qKYNdwDW88k=) 33: 5366509AC63511EAAC843455C4F9AE02.roa (hash: 4VfxlhXPt3Fli8QftF+Jbfr+B7PpkjZJjrN7R7UoFec=) 34: C82D6ACC969A11EB9BC1FA1BC4F9AE02.roa (hash: rNmuk0Zw99f4Kzt4k/QReGgYLjG+b50IvgI4wD110cw=) 35: B6D7E1547EEE11EF8B38A43BC4F9AE02.roa (hash: cTr3m6jhSldGceNeNs9qUPTOBPhnI4QANoh1eGzuDWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 15:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10175 (0x27bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Jun 16 15:54:23 2025 GMT Not After : Jun 23 15:54:23 2025 GMT Subject: CN=68503e2f-2c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:15:cc:9f:8a:b8:ef:9e:2b:88:20:db:90: 67:62:fb:bd:23:47:4e:45:d6:35:ca:30:f2:5c:71: 3e:5a:d8:36:2f:cd:9c:d6:94:0b:e7:3d:b1:14:fc: 30:d7:33:61:84:4b:17:b9:e8:7e:9d:67:24:81:27: 62:33:c1:0a:9d:85:3c:d4:03:b1:ae:c9:36:e6:ae: d7:98:ca:1b:48:96:56:b8:ad:da:74:d5:13:9e:62: f4:8f:1c:7b:4d:fa:32:ea:21:43:d8:a3:a7:90:12: 82:78:a9:df:7a:5c:80:14:bf:3e:dc:55:89:a1:37: f6:e4:87:3d:f9:52:b0:f1:c7:18:a6:79:44:bb:49: ac:b7:6e:d8:93:92:72:2b:57:29:5f:0e:8f:3b:c8: d9:68:b6:8e:15:34:7b:99:1d:8f:26:5f:a9:04:fe: a9:c6:19:07:68:00:14:5b:0a:19:d9:29:ca:43:77: 74:09:4b:db:08:22:8f:40:c1:61:c7:aa:08:19:15: e2:75:3f:50:b5:ee:8a:b5:fb:68:81:df:80:80:52: 67:01:4a:06:1b:2d:11:25:b8:e4:35:02:47:e7:0e: 8c:ce:59:bc:bc:37:32:72:25:40:f2:c9:b5:85:d5: 04:3e:6a:7e:7b:3d:01:60:60:b5:5f:84:53:f0:ec: 1b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DA:E2:DD:42:7B:55:70:4D:87:F5:A6:79:2C:6D:08:87:39:72:00 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:e8:4d:bc:05:e3:42:9b:ba:d0:15:19:42:b9:49:ba:b8:bc: 8c:e0:b0:cf:6f:19:2a:ae:4b:93:cd:59:f8:d0:82:bb:18:a3: 42:e0:41:37:55:ea:b7:7b:bc:97:e5:cb:27:97:1f:bc:e3:25: 9b:96:92:af:e5:4c:8c:6d:c8:19:eb:70:46:44:d2:be:ba:8d: 1e:68:7f:ae:a6:07:de:ab:69:10:4c:72:3e:26:05:b2:ed:b0: 31:8d:c7:f7:da:06:34:1d:6b:07:f1:bc:6d:f3:a7:39:5e:48: da:84:d8:c8:74:cd:75:b1:fb:56:f9:2c:ac:54:02:80:3d:99: b0:5e:37:41:6e:58:95:7b:d2:3a:9d:f5:02:bb:2b:41:72:0e: 56:12:66:bc:8a:b5:f3:da:e9:9b:25:08:73:ac:2d:77:35:9a: db:8f:fb:8d:eb:8c:eb:68:39:97:8f:f6:47:30:2a:8e:06:5d: 1a:37:a2:6e:13:e2:48:25:8e:8b:7c:59:14:ec:69:e0:76:b1: ce:22:61:0a:50:5d:b0:02:f2:08:d0:0e:7a:6a:fa:28:8f:04: 2f:a6:2a:63:aa:90:5d:61:71:4c:99:9b:9c:75:11:bb:be:df: ab:1b:cf:3c:46:cc:98:7b:0c:07:f8:82:65:1e:32:15:4b:83: 65:30:68:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjUwNjE2MTU1NDIzWhcNMjUwNjIzMTU1NDIzWjAYMRYwFAYD VQQDEw02ODUwM2UyZi0yYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu4VzJ+KuO+eK4gg25BnYvu9I0dORdY1yjDyXHE+Wtg2L82c1pQL5z2xFPww 1zNhhEsXueh+nWckgSdiM8EKnYU81AOxrsk25q7XmMobSJZWuK3adNUTnmL0jxx7 Tfoy6iFD2KOnkBKCeKnfelyAFL8+3FWJoTf25Ic9+VKw8ccYpnlEu0mst27Yk5Jy K1cpXw6PO8jZaLaOFTR7mR2PJl+pBP6pxhkHaAAUWwoZ2SnKQ3d0CUvbCCKPQMFh x6oIGRXidT9Qte6Ktftogd+AgFJnAUoGGy0RJbjkNQJH5w6Mzlm8vDcyciVA8sm1 hdUEPmp+ez0BYGC1X4RT8OwbIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTa4t1C e1VwTYf1pnksbQiHOXIAMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkI3MC8yOTgzNjQ3QzgzOEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRo LTNoc1VtMjk3eHNFV1NpcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ6E28BeNCm7rQFRlCuUm6uLyM4LDPbxkqrkuTzVn40IK7GKNC4EE3 Veq3e7yX5csnlx+84yWblpKv5UyMbcgZ63BGRNK+uo0eaH+upgfeq2kQTHI+JgWy 7bAxjcf32gY0HWsH8bxt86c5XkjahNjIdM11sftW+SysVAKAPZmwXjdBbliVe9I6 nfUCuytBcg5WEma8irXz2umbJQhzrC13NZrbj/uN64zraDmXj/ZHMCqOBl0aN6Ju E+JIJY6LfFkU7GngdrHOImEKUF2wAvII0A56avoojwQvpipjqpBdYXFMmZucdRG7 vt+rG888RsyYewwH+IJlHjIVS4NlMGjB -----END CERTIFICATE-----Generated at Wed Jun 18 12:15:45 2025 by rpki-client