$ rpki-client -vvf rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft File: RxkmQvqTOGbRd55eOPq_Vscx-6c.mft (raw, json) Hash identifier: ZukT26eJ+OzWk/SiYGTRcw+d+C2CEb3SKgjhs8QCVUU= Subject key identifier: 54:49:C4:FA:15:30:02:68:01:C6:65:ED:F8:48:20:13:96:84:4E:66 Authority key identifier: 47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 Certificate issuer: /CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Certificate serial: 0A06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft Manifest number: 0A00 Signing time: Thu 10 Apr 2025 19:47:58 +0000 Manifest this update: Thu 10 Apr 2025 19:47:58 +0000 Manifest next update: Thu 17 Apr 2025 19:47:58 +0000 Files and hashes: 1: RxkmQvqTOGbRd55eOPq_Vscx-6c.crl (hash: eYQVBDY90idIlX9Svw8spMaHe2r+s1gu9VxSTwgTynM=) 2: 426DB414718E11EA9F6FA85CC4F9AE02.roa (hash: L7du7ZJlcmB2nN0ANGTgn5PQ8EaqXu+Bk+I6VvNhSKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 19:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2566 (0xa06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284F0, serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Validity Not Before: Apr 10 19:47:58 2025 GMT Not After : Apr 17 19:47:58 2025 GMT Subject: CN=67f8206e-fe37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1a:9f:d8:3a:04:17:7e:72:38:6e:85:91:a3: d5:c5:43:84:4d:8b:59:ef:ae:00:c3:98:ed:79:b9: 65:ec:f0:50:b0:bc:ac:3b:4a:3d:b1:92:90:7b:ff: 37:92:90:e3:6e:a3:5d:b7:f6:77:69:b3:57:3f:6c: 40:51:9e:8f:11:2e:d3:0d:79:7d:8a:dc:72:dd:62: f5:5c:32:e6:ae:36:f0:53:00:15:c3:c9:ea:77:9d: 87:5a:1d:e2:e4:5f:42:80:c7:c0:60:ce:bd:23:f1: 9e:7b:c7:92:2c:2b:cd:b7:a1:d2:c6:86:24:19:5c: 07:42:2a:b3:9a:fc:93:34:2e:d2:62:fa:30:b5:00: 52:e2:06:12:66:f0:72:54:7c:fd:c2:f0:0c:85:d3: be:76:d7:55:9b:3c:3e:58:6c:35:18:14:91:d7:59: 87:a2:e8:26:e4:40:2c:27:93:a9:d4:7e:c9:b0:8a: 72:9c:52:40:8c:12:c5:17:eb:7a:c9:b6:fe:60:e6: 40:0f:0f:ad:e1:fa:a5:33:a0:34:6a:dc:39:c5:ba: 9a:d7:76:ae:3d:30:b9:7d:04:8a:20:38:b8:12:eb: 19:2a:56:c8:e7:d6:cc:b3:7d:85:c0:af:5c:67:f4: 66:01:b1:1f:34:5f:08:c0:3c:b6:30:35:e7:2f:28: cd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:49:C4:FA:15:30:02:68:01:C6:65:ED:F8:48:20:13:96:84:4E:66 X509v3 Authority Key Identifier: keyid:47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0a:40:24:9c:57:c6:2a:b5:3f:ef:b8:9c:f1:7a:b8:1e:0a: 85:fc:a8:dc:1f:f5:da:74:1d:a4:7c:58:ae:77:02:a2:13:01: 60:78:13:d4:63:87:f6:ad:19:95:bd:d1:ef:c6:e1:06:98:62: 94:f2:54:25:4b:cf:31:ef:8b:82:7a:fb:c9:e5:51:07:a4:a1: 11:b0:fa:58:f9:11:2c:b8:aa:a7:e9:e3:3c:f1:3b:ae:c1:fa: df:99:3f:c0:03:48:95:52:aa:2e:32:cd:1f:c7:93:66:cf:53: ba:3f:df:d6:e5:23:09:94:0c:98:55:d8:3e:b9:c2:85:7a:d6: 6e:ef:e2:87:58:86:eb:74:df:dd:11:c0:56:43:ed:23:1c:cd: eb:e2:56:01:46:df:8b:28:fc:4b:e8:41:a6:4d:7a:e4:df:27: 24:b8:2c:17:98:3f:68:f8:e1:56:98:b0:e6:2a:98:79:bf:d4: 00:72:bb:e9:d7:1f:fc:0a:be:2e:8d:5c:69:b1:3f:d3:21:ed: f2:3c:3d:57:f9:51:a7:5e:c1:f7:2b:7a:40:87:5c:7b:3e:1c: b3:97:80:70:1a:3b:62:63:8b:bb:98:75:f9:b6:cd:c0:af:7b: 99:07:12:93:f8:8a:c5:b4:d1:53:ab:88:8e:60:5b:fa:c4:7a: 4f:fd:d9:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RjAxMTAvBgNVBAUTKDQ3MTkyNjQyRkE5MzM4NjZEMTc3OUU1RTM4RkFCRjU2 QzczMUZCQTcwHhcNMjUwNDEwMTk0NzU4WhcNMjUwNDE3MTk0NzU4WjAYMRYwFAYD VQQDEw02N2Y4MjA2ZS1mZTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hqf2DoEF35yOG6FkaPVxUOETYtZ764Aw5jtebll7PBQsLysO0o9sZKQe/83 kpDjbqNdt/Z3abNXP2xAUZ6PES7TDXl9itxy3WL1XDLmrjbwUwAVw8nqd52HWh3i 5F9CgMfAYM69I/Gee8eSLCvNt6HSxoYkGVwHQiqzmvyTNC7SYvowtQBS4gYSZvBy VHz9wvAMhdO+dtdVmzw+WGw1GBSR11mHougm5EAsJ5Op1H7JsIpynFJAjBLFF+t6 ybb+YOZADw+t4fqlM6A0atw5xbqa13auPTC5fQSKIDi4EusZKlbI59bMs32FwK9c Z/RmAbEfNF8IwDy2MDXnLyjNWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRJxPoV MAJoAcZl7fhIIBOWhE5mMB8GA1UdIwQYMBaAFEcZJkL6kzhm0XeeXjj6v1bHMfun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRGMC80NkU2N0IzMDcx OEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9HYlJkNTVlT1BxX1ZzY3gt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4a21RdnFUT0diUmQ1NWVPUHFfVnNjeC02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRGMC80NkU2N0IzMDcxOEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9H YlJkNTVlT1BxX1ZzY3gtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaCkAknFfGKrU/77ic8Xq4HgqF/KjcH/XadB2kfFiudwKiEwFgeBPU Y4f2rRmVvdHvxuEGmGKU8lQlS88x74uCevvJ5VEHpKERsPpY+REsuKqn6eM88Tuu wfrfmT/AA0iVUqouMs0fx5Nmz1O6P9/W5SMJlAyYVdg+ucKFetZu7+KHWIbrdN/d EcBWQ+0jHM3r4lYBRt+LKPxL6EGmTXrk3yckuCwXmD9o+OFWmLDmKph5v9QAcrvp 1x/8Cr4ujVxpsT/TIe3yPD1X+VGnXsH3K3pAh1x7Phyzl4BwGjtiY4u7mHX5ts3A r3uZBxKT+IrFtNFTq4iOYFv6xHpP/dnv -----END CERTIFICATE-----Generated at Sat Apr 12 15:27:06 2025 by rpki-client