$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json) Hash identifier: btF6NK9hMJc3mWsrgPqsjY4WWTOcaZR4KSVmqxxjoqw= Subject key identifier: 73:08:84:43:4C:54:52:DF:24:22:D1:B8:91:2C:DA:5C:03:0D:98:92 Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 06A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft Manifest number: 0694 Signing time: Fri 28 Mar 2025 22:32:11 +0000 Manifest this update: Fri 28 Mar 2025 22:32:11 +0000 Manifest next update: Fri 04 Apr 2025 22:32:11 +0000 Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: e5I3mDYLJ5M1AMUJj+tDZzFBJE/YKu8+7vlenQ7YG6Q=) 2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: SQlrc6PCUPjaaBm+jKtjnbQxZYJxO/Vi8PJnTLD4+DE=) 3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: ez5zyisrlhzGt4msn6K1G9iNl7wli7TiUZuA1FWHYm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1699 (0x6a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4 Validity Not Before: Mar 28 22:32:11 2025 GMT Not After : Apr 4 22:32:11 2025 GMT Subject: CN=67e7236b-a6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:88:90:a1:86:94:35:db:94:05:40:62:2e: 71:ef:1f:c8:96:e1:c3:6f:0f:0a:81:a8:63:4d:58: e4:42:dc:28:26:43:73:a5:76:d2:fc:c6:d2:9c:90: b3:eb:d1:19:8b:9a:bd:b8:2d:d7:96:6b:76:d2:89: 3b:cc:73:fb:f7:1f:12:34:ff:07:39:db:83:6d:e2: 7b:3d:b3:4b:6e:f9:54:49:32:cd:d6:ba:15:f3:c2: 85:bd:54:cf:2c:77:3f:88:a5:08:0c:16:65:54:c1: 31:cc:f8:94:2f:03:1e:f6:66:4d:15:07:f7:9f:e9: c7:b3:fe:a7:89:3e:7d:d7:58:25:99:5e:df:2d:83: be:61:ba:c6:38:6f:ea:42:36:98:be:6c:40:e1:16: 0b:73:0c:e0:b0:96:89:91:7e:9d:9a:e0:f7:4a:e2: 82:98:ac:0a:5c:bd:ac:39:07:a1:56:c4:5c:ec:4e: ee:c7:b0:11:a4:78:48:db:50:9e:cd:85:39:71:ef: d1:37:15:14:03:c9:ec:00:a3:b7:14:bc:a1:3e:4e: b0:33:ed:51:34:28:95:b7:ff:e8:5c:73:3d:b2:71: 1d:fd:b3:53:f1:5a:4c:73:b5:e3:fe:54:0c:9a:2e: c3:f7:89:b0:f1:48:e0:e1:20:14:2c:11:d5:0f:d5: f9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:08:84:43:4C:54:52:DF:24:22:D1:B8:91:2C:DA:5C:03:0D:98:92 X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b4:ce:0b:bd:8d:63:59:7c:88:d8:5c:7c:17:e4:78:05:f1: d4:37:a8:6c:0b:ef:c8:6a:31:f2:5d:b7:cd:31:be:50:60:6a: 0e:82:bb:38:c4:42:71:1f:fb:71:8c:b8:2c:98:12:f3:d5:bc: 6a:aa:62:28:e0:45:85:aa:7e:e0:25:15:23:2d:ae:eb:6d:c8: 25:6e:d4:b5:14:73:c4:69:33:4e:79:60:bb:dd:30:8a:51:71: d1:13:7f:f4:09:97:70:3c:6f:94:be:3f:06:d2:40:b9:f7:ed: 57:3f:59:35:1b:31:66:4b:ad:9c:1f:6f:4b:39:91:71:05:e2: 6b:2b:30:d9:9d:86:76:20:d2:3c:df:c3:ba:72:31:4e:bb:88: 3e:19:d1:fd:ac:ec:38:87:02:41:f4:25:96:ef:ac:51:33:5b: 89:c2:40:12:35:79:08:8c:ce:ac:79:89:6a:78:10:0e:d2:2f: 78:5b:68:7b:27:7c:ef:87:78:79:5e:3f:1d:58:c8:40:bf:15: 2b:76:a9:09:98:96:f0:0a:c0:32:cc:72:a4:e0:76:9d:1b:45: b9:85:f8:a1:9e:44:9a:43:16:fa:2c:f8:f4:4c:5c:97:a7:cb: 3d:5b:ea:3e:80:85:26:99:d7:e5:d6:18:fc:9b:6c:4a:6f:f1: dd:f1:b7:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjUwMzI4MjIzMjExWhcNMjUwNDA0MjIzMjExWjAYMRYwFAYD VQQDEw02N2U3MjM2Yi1hNmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpWIkKGGlDXblAVAYi5x7x/IluHDbw8KgahjTVjkQtwoJkNzpXbS/MbSnJCz 69EZi5q9uC3Xlmt20ok7zHP79x8SNP8HOduDbeJ7PbNLbvlUSTLN1roV88KFvVTP LHc/iKUIDBZlVMExzPiULwMe9mZNFQf3n+nHs/6niT5911glmV7fLYO+YbrGOG/q QjaYvmxA4RYLcwzgsJaJkX6dmuD3SuKCmKwKXL2sOQehVsRc7E7ux7ARpHhI21Ce zYU5ce/RNxUUA8nsAKO3FLyhPk6wM+1RNCiVt//oXHM9snEd/bNT8VpMc7Xj/lQM mi7D94mw8Ujg4SAULBHVD9X5ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMIhENM VFLfJCLRuJEs2lwDDZiSMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5 WDZPV2hCdTNjOW9WOXdCb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGtM4LvY1jWXyI2Fx8F+R4BfHUN6hsC+/IajHyXbfNMb5QYGoOgrs4 xEJxH/txjLgsmBLz1bxqqmIo4EWFqn7gJRUjLa7rbcglbtS1FHPEaTNOeWC73TCK UXHRE3/0CZdwPG+Uvj8G0kC59+1XP1k1GzFmS62cH29LOZFxBeJrKzDZnYZ2INI8 38O6cjFOu4g+GdH9rOw4hwJB9CWW76xRM1uJwkASNXkIjM6seYlqeBAO0i94W2h7 J3zvh3h5Xj8dWMhAvxUrdqkJmJbwCsAyzHKk4HadG0W5hfihnkSaQxb6LPj0TFyX p8s9W+o+gIUmmdfl1hj8m2xKb/Hd8bd/ -----END CERTIFICATE-----Generated at Fri Apr 4 18:27:43 2025 by rpki-client