$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: 6L+UlilkdmtqvkbMCHFgsW36sVRgofSMhojqu847ITk= Subject key identifier: 22:D1:17:A5:D3:62:23:E3:6F:57:53:4D:1E:D3:6E:A9:49:6B:5F:F0 Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 18CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 165A Signing time: Thu 24 Apr 2025 16:56:33 +0000 Manifest this update: Thu 24 Apr 2025 16:56:33 +0000 Manifest next update: Thu 01 May 2025 16:56:33 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: r+JsLy19F11qiX1JVv25RaKwvVrDdISeYcsOco4uLUM=) 2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=) 3: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=) 4: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=) 5: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=) 6: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=) 7: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=) 8: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=) 9: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=) 10: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=) 11: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=) 12: 17C5C2EE0AC511F0B49A897EC4F9AE02.roa (hash: K9Z6BonmUzy423wGSqURiFZpSiAZAgbS8kqKahHQ+jI=) 13: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=) 14: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=) 15: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=) 16: 67060F128B9F11EA97BB8046C4F9AE02.roa (hash: Bja+pXwIkwi+wu7Wy1czg9tcaeGtk3ByqmVnXr1h7PU=) 17: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=) 18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=) 19: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=) 20: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=) 21: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=) 22: 3AED95046D0111ECA5893B2BC4F9AE02.roa (hash: aLX0spZdD1HmaR+qKo3b5UUfl5pW1J8tkF+sIveKmK8=) 23: 97AAC8FE86A011EB8BEAC92BC4F9AE02.roa (hash: j8JrS+AqnkCckpa8gG946yMRu94Md+3E6AE+h/Sfwzw=) 24: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=) 25: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=) 26: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=) 27: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: rx0eRPu2xzrisWwtDOzb2vQcxB4j/OQ/aSmmEmceSy8=) 28: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6346 (0x18ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Apr 24 16:56:33 2025 GMT Not After : May 1 16:56:33 2025 GMT Subject: CN=680a6d41-ed2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9a:3b:96:01:0a:06:7d:5e:f4:6a:47:41:ce: bf:2e:ef:03:62:8b:8f:5d:a3:60:e3:6f:db:62:6d: e3:9e:a8:6c:8f:1c:f8:f1:2d:8b:49:5f:e7:2b:5d: 51:92:bf:17:29:2e:7c:f1:6d:87:6e:5f:ad:95:60: dd:d4:0b:ac:0c:dc:b8:7e:13:b5:a4:e8:7f:a8:a9: e3:17:0d:c7:27:a3:fd:10:9c:bc:24:83:25:a1:02: ce:76:0b:65:28:df:c2:4b:cd:f9:77:7b:b5:8e:ab: 65:b5:7a:10:3c:c3:57:79:f6:55:0a:d7:f5:b3:41: 26:09:4d:00:78:15:f4:32:62:3d:37:07:09:52:9f: 3a:7d:93:90:72:e9:37:7f:d5:d0:9b:f9:4d:a1:15: c1:09:9c:7d:62:00:ed:29:c4:d2:be:8c:7d:6e:67: 99:d9:7d:5d:ba:6b:fe:24:65:d3:61:80:c4:23:55: 57:68:c0:12:af:c7:6f:fb:89:c2:80:bd:31:23:a4: 94:5e:59:db:a9:dc:fa:6f:a5:03:c6:c4:ab:10:83: a9:46:29:af:9b:cc:46:d7:d6:9b:52:5b:ff:fe:2c: fb:04:b3:02:22:66:ff:c9:8e:1f:00:63:1e:f1:67: e4:8f:84:66:77:f3:1d:60:1e:bd:97:60:b3:82:e3: 47:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D1:17:A5:D3:62:23:E3:6F:57:53:4D:1E:D3:6E:A9:49:6B:5F:F0 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:0a:d3:ab:93:9c:74:9f:82:c4:17:ee:41:70:fd:b3:14:3c: c2:86:b8:3a:72:5a:62:34:ae:e3:91:8a:9f:c0:89:78:ee:fb: 76:04:3c:af:cf:f3:bf:1c:13:cb:36:59:78:36:03:a0:b5:16: c3:4f:9b:fc:35:bb:2e:20:0e:c1:f7:d4:be:86:14:4f:e0:d5: f1:d1:a6:13:f8:ba:49:7e:3d:5b:7d:27:36:bb:ef:cf:a9:62: b3:66:8b:fb:7b:b4:97:9e:71:ce:65:d0:24:8c:17:8f:c9:e9: 78:17:3e:38:de:04:ff:e7:2e:b1:5d:72:37:03:7d:6f:4c:ad: 28:28:14:08:6f:5b:3d:13:9d:f7:5b:fc:a7:4d:ab:20:8f:41: 68:bc:2b:11:d6:38:12:56:9d:e0:ba:9b:a7:38:e1:50:c2:31: e8:40:99:46:3d:ad:20:be:fd:e9:0e:86:5a:5d:9e:4c:33:9a: c1:93:32:72:d3:d3:c5:ba:18:89:a7:10:c7:8a:89:39:46:16: 0b:34:3a:2e:de:9f:97:ca:01:be:48:15:f6:48:44:47:fe:0e: 8c:f7:2b:88:f4:60:7b:f9:e2:0b:bc:91:df:59:88:9c:5e:61: e2:1b:15:e4:b3:9a:c8:7b:04:6e:a4:06:07:77:2d:bd:88:16: fc:41:10:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjUwNDI0MTY1NjMzWhcNMjUwNTAxMTY1NjMzWjAYMRYwFAYD VQQDEw02ODBhNmQ0MS1lZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypo7lgEKBn1e9GpHQc6/Lu8DYouPXaNg42/bYm3jnqhsjxz48S2LSV/nK11R kr8XKS588W2Hbl+tlWDd1AusDNy4fhO1pOh/qKnjFw3HJ6P9EJy8JIMloQLOdgtl KN/CS835d3u1jqtltXoQPMNXefZVCtf1s0EmCU0AeBX0MmI9NwcJUp86fZOQcuk3 f9XQm/lNoRXBCZx9YgDtKcTSvox9bmeZ2X1dumv+JGXTYYDEI1VXaMASr8dv+4nC gL0xI6SUXlnbqdz6b6UDxsSrEIOpRimvm8xG19abUlv//iz7BLMCImb/yY4fAGMe 8Wfkj4Rmd/MdYB69l2CzguNHqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLRF6XT YiPjb1dTTR7TbqlJa1/wMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVCtOrk5x0n4LEF+5BcP2zFDzChrg6clpiNK7jkYqfwIl47vt2BDyv z/O/HBPLNll4NgOgtRbDT5v8NbsuIA7B99S+hhRP4NXx0aYT+LpJfj1bfSc2u+/P qWKzZov7e7SXnnHOZdAkjBePyel4Fz443gT/5y6xXXI3A31vTK0oKBQIb1s9E533 W/ynTasgj0FovCsR1jgSVp3gupunOOFQwjHoQJlGPa0gvv3pDoZaXZ5MM5rBkzJy 09PFuhiJpxDHiok5RhYLNDou3p+XygG+SBX2SERH/g6M9yuI9GB7+eILvJHfWYic XmHiGxXks5rIewRupAYHdy29iBb8QRBm -----END CERTIFICATE-----Generated at Sat Apr 26 17:11:09 2025 by rpki-client