$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft File: xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json) Hash identifier: X7RWjYmYJGmLEZvCl0GAESko86B2vitT5AjfE+7I7Fw= Subject key identifier: 64:C4:1B:C1:6D:C0:1B:2E:CB:70:1D:32:28:4E:1B:92:AF:FF:31:4A Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Certificate serial: 04A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft Manifest number: 0491 Signing time: Sat 05 Apr 2025 00:11:23 +0000 Manifest this update: Sat 05 Apr 2025 00:11:22 +0000 Manifest next update: Sat 12 Apr 2025 00:11:22 +0000 Files and hashes: 1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: +Si5V6r+ygP2aHar2rhhSAcl824sux9W+z2Aw59LMlE=) 2: 83595478B65E11EF8DB85B32C4F9AE02.roa (hash: 8tjvkR4DoTk7UtvsWE0jDhrG+DVKY6Vhv3UaWUDUXuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1187 (0x4a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E791 Validity Not Before: Apr 5 00:11:22 2025 GMT Not After : Apr 12 00:11:22 2025 GMT Subject: CN=67f0752b-5212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2c:82:b9:a9:c9:c3:27:e1:a1:73:d8:c6:bf: fb:ad:d9:6e:fb:c1:9d:07:60:a0:71:4b:c2:d0:0e: 11:aa:49:84:71:2c:5b:47:25:c4:18:fa:93:c9:39: bc:56:dd:98:20:2d:6e:0c:4b:c1:4f:9e:32:14:12: 21:00:99:6c:08:89:61:6d:c0:63:2b:c1:96:c0:09: 8b:a3:50:be:8a:0f:13:b6:61:88:53:6f:f7:bd:4d: 6c:8e:88:81:2c:7a:ba:ee:a2:90:6e:b3:1c:be:63: 93:b6:c2:84:98:32:fc:8e:88:22:d5:d5:da:48:22: b4:69:75:bb:59:a6:ce:e8:01:53:db:8e:c0:85:68: af:c3:c9:89:4d:ec:46:e5:da:db:ed:99:ef:b6:c9: 5a:f8:cf:c7:11:95:9f:5c:bd:65:8f:03:22:be:eb: de:cb:c9:86:c9:41:8b:ce:88:33:96:5e:67:3d:f7: 1e:cc:59:07:d3:df:63:7e:7b:a7:a2:70:77:79:b7: bd:bd:f8:34:51:71:fd:07:92:03:fe:7b:09:4b:12: d7:32:01:a7:ae:37:7a:48:20:b5:f2:ac:17:ba:5d: 87:2e:d4:26:27:a0:7d:01:83:a9:c9:52:af:cb:77: f5:d4:6c:d5:46:49:c7:4e:5f:01:59:7e:f6:0d:1d: 7d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C4:1B:C1:6D:C0:1B:2E:CB:70:1D:32:28:4E:1B:92:AF:FF:31:4A X509v3 Authority Key Identifier: keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b9:91:47:bf:7d:6b:6a:82:a9:8c:fc:ba:65:5c:9d:48:d5: 80:2d:4d:0c:f2:07:a5:48:d2:23:50:e0:10:8d:1f:28:3f:77: 6b:65:73:a0:4a:88:c8:a3:61:ad:0b:83:65:10:24:70:6e:e3: a4:c3:c1:ee:af:90:fc:90:45:c8:37:e0:f0:7e:36:97:c9:af: 89:cd:b4:d8:8f:75:b3:80:78:6c:3f:66:d6:8a:53:cd:50:d4: 63:fb:70:bb:01:6a:c1:c8:85:24:8c:17:b1:06:6e:e1:e0:66: 42:63:da:ee:24:7d:61:05:a5:f2:bd:77:80:9b:78:67:5c:d9: 98:f4:05:57:74:a9:65:94:8e:b6:ce:c4:d1:06:cb:fb:d4:3b: 44:0d:fc:cf:4e:15:5a:e9:32:ae:37:f0:22:8f:fa:68:55:0f: 35:83:90:1e:ea:c8:45:d6:55:7f:cd:36:86:61:6c:f4:b3:fb: 2f:f7:db:d3:8e:b2:10:bf:56:43:ad:49:7f:8c:aa:4f:62:e1: f4:ae:7e:55:08:51:04:35:de:ee:8d:a0:b3:59:9f:75:b1:dd: bc:3d:d2:07:12:80:07:86:37:5f:5d:d8:03:cc:05:f6:19:4b: 66:06:9a:22:f6:07:d3:16:08:34:86:be:01:d1:2d:90:a0:c9: 10:14:34:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU3OTExMTAvBgNVBAUTKEM0RDdCOTRCOURGQjY0RjVDMTg5MjcyMzMwREJEQ0FE MkE3RDAxNkUwHhcNMjUwNDA1MDAxMTIyWhcNMjUwNDEyMDAxMTIyWjAYMRYwFAYD VQQDEw02N2YwNzUyYi01MjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiyCuanJwyfhoXPYxr/7rdlu+8GdB2CgcUvC0A4RqkmEcSxbRyXEGPqTyTm8 Vt2YIC1uDEvBT54yFBIhAJlsCIlhbcBjK8GWwAmLo1C+ig8TtmGIU2/3vU1sjoiB LHq67qKQbrMcvmOTtsKEmDL8jogi1dXaSCK0aXW7WabO6AFT247AhWivw8mJTexG 5drb7Znvtsla+M/HEZWfXL1ljwMivuvey8mGyUGLzogzll5nPfcezFkH099jfnun onB3ebe9vfg0UXH9B5ID/nsJSxLXMgGnrjd6SCC18qwXul2HLtQmJ6B9AYOpyVKv y3f11GzVRknHTl8BWX72DR19bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTEG8Ft wBsuy3AdMihOG5Kv/zFKMB8GA1UdIwQYMBaAFMTXuUud+2T1wYknIzDb3K0qfQFu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTc5MS8xOUM2OEQwNjNB MDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQWEJpU2NqTU52Y3JTcDlB VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZTVTNTM3WlBYQmlTY2pNTnZjclNwOUFXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTc5MS8xOUM2OEQwNjNBMDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQ WEJpU2NqTU52Y3JTcDlBVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhuZFHv31raoKpjPy6ZVydSNWALU0M8gelSNIjUOAQjR8oP3drZXOg SojIo2GtC4NlECRwbuOkw8Hur5D8kEXIN+DwfjaXya+JzbTYj3WzgHhsP2bWilPN UNRj+3C7AWrByIUkjBexBm7h4GZCY9ruJH1hBaXyvXeAm3hnXNmY9AVXdKlllI62 zsTRBsv71DtEDfzPThVa6TKuN/Aij/poVQ81g5Ae6shF1lV/zTaGYWz0s/sv99vT jrIQv1ZDrUl/jKpPYuH0rn5VCFEENd7ujaCzWZ91sd28PdIHEoAHhjdfXdgDzAX2 GUtmBpoi9gfTFgg0hr4B0S2QoMkQFDTs -----END CERTIFICATE-----Generated at Mon Apr 7 00:10:08 2025 by rpki-client