$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft File: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json) Hash identifier: gcrmr8LwNGtIXIBn0+UZaoARjLxSFuVCAu+LrqbuHiw= Subject key identifier: 04:B4:76:D9:D4:13:7D:78:FF:77:76:F3:A3:C9:AB:AE:57:77:A2:5D Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft Manifest number: 06B1 Signing time: Fri 28 Mar 2025 22:25:58 +0000 Manifest this update: Fri 28 Mar 2025 22:25:57 +0000 Manifest next update: Fri 04 Apr 2025 22:25:57 +0000 Files and hashes: 1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: kNbxWclKo2JGPfciLWXhxR3Z7kQfuUUGV1phMT33utA=) 2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: +cH8RmJhdymM82G2tjdg2T5wIUQwcB/rD1A615a7HRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411C0 Validity Not Before: Mar 28 22:25:57 2025 GMT Not After : Apr 4 22:25:57 2025 GMT Subject: CN=67e721f5-52c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1b:4e:7c:a4:f3:70:ba:70:76:bd:60:77:20: d1:79:fb:b6:31:ac:d8:a6:64:a7:a0:ed:b0:7d:56: b6:e1:fb:05:b2:88:4b:66:89:7a:ac:94:0b:2b:ba: 2a:38:28:5c:b8:cb:b2:ca:c1:0f:31:47:49:7d:92: 2b:a0:cc:6b:a9:22:31:d3:46:70:59:fd:a9:7d:eb: 7f:01:43:85:0e:54:fe:8d:c4:f8:a2:33:62:ce:77: b0:38:57:67:29:2a:f5:d5:56:7f:ae:20:16:32:fa: dd:95:94:6b:6a:3d:3f:21:12:dc:50:f4:12:bd:ad: 68:64:51:ac:91:98:3b:f3:73:85:b3:b1:ff:4a:fc: 0a:1c:31:04:50:2b:e1:e2:18:0d:30:eb:25:ed:f3: 23:a7:1c:4a:ed:e9:ec:c5:60:f6:b1:74:1c:23:76: 08:36:54:48:8c:d9:23:a6:11:8f:c5:7c:2a:64:f6: d5:20:53:f5:1d:24:c4:d1:53:9e:93:ec:57:6d:16: 5c:18:e1:48:38:99:5a:a5:7f:b1:b5:75:0a:7f:1f: 35:1a:ef:25:ca:07:f5:44:71:80:5a:80:2f:28:f3: 00:d7:65:21:6d:f4:ef:24:36:f5:68:22:0e:4a:14: e7:31:b4:09:67:10:f0:dd:11:cc:ac:94:bf:20:75: 4d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B4:76:D9:D4:13:7D:78:FF:77:76:F3:A3:C9:AB:AE:57:77:A2:5D X509v3 Authority Key Identifier: keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:49:a7:8d:a3:a0:e5:54:34:a0:6c:0a:b4:d9:4d:4c:aa:2c: e1:8f:7d:de:ee:7f:03:72:7e:f7:5b:fe:15:6a:d0:ef:f8:c5: b0:6b:4b:86:9c:a4:43:68:26:11:9e:c9:b5:2f:fb:14:6c:bb: 8a:45:43:89:26:6b:7d:ff:f6:fc:c0:16:31:26:9a:65:27:6e: 21:27:90:e5:b4:60:85:2e:ce:d2:c7:c8:62:97:06:02:5b:18: 87:95:cf:32:51:f8:0b:7c:1a:12:3a:29:b6:81:31:1c:3d:07: a2:72:c9:16:5a:8f:e1:b7:ed:d0:cc:64:59:ce:dc:f9:f0:58: 1f:3a:d3:bb:20:3d:24:76:36:3f:2f:2d:cb:7f:90:13:43:0b: a7:7f:0a:b3:cf:d4:eb:82:b7:df:ee:ea:4d:01:eb:bc:2d:72: a0:de:65:87:c3:72:33:f2:29:7e:99:34:ea:14:6b:a7:7e:44: fa:ac:c9:f7:f2:7f:37:e7:a6:6b:b0:81:f8:70:45:74:cf:3e: 23:83:6a:2e:02:25:9c:45:b8:65:be:3e:80:0a:e8:fc:b1:a6: 9d:d9:32:14:f7:33:a1:1d:94:58:ed:29:a4:4e:0f:5d:b1:48: 5b:2f:a2:50:51:b2:60:13:50:7d:86:ec:07:9c:67:f1:c8:c6: da:cd:ce:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0 QTUyOUQwOUEwHhcNMjUwMzI4MjIyNTU3WhcNMjUwNDA0MjIyNTU3WjAYMRYwFAYD VQQDEw02N2U3MjFmNS01MmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhtOfKTzcLpwdr1gdyDRefu2MazYpmSnoO2wfVa24fsFsohLZol6rJQLK7oq OChcuMuyysEPMUdJfZIroMxrqSIx00ZwWf2pfet/AUOFDlT+jcT4ojNiznewOFdn KSr11VZ/riAWMvrdlZRraj0/IRLcUPQSva1oZFGskZg783OFs7H/SvwKHDEEUCvh 4hgNMOsl7fMjpxxK7ensxWD2sXQcI3YINlRIjNkjphGPxXwqZPbVIFP1HSTE0VOe k+xXbRZcGOFIOJlapX+xtXUKfx81Gu8lygf1RHGAWoAvKPMA12UhbfTvJDb1aCIO ShTnMbQJZxDw3RHMrJS/IHVN8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAS0dtnU E314/3d286PJq65Xd6JdMB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1 RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFDMC9COTYwMzc1ODU1RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05 ckFqTU1OZEtaZjlLVXAwSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqSaeNo6DlVDSgbAq02U1Mqizhj33e7n8Dcn73W/4VatDv+MWwa0uG nKRDaCYRnsm1L/sUbLuKRUOJJmt9//b8wBYxJpplJ24hJ5DltGCFLs7Sx8hilwYC WxiHlc8yUfgLfBoSOim2gTEcPQeicskWWo/ht+3QzGRZztz58FgfOtO7ID0kdjY/ Ly3Lf5ATQwunfwqzz9Trgrff7upNAeu8LXKg3mWHw3Iz8il+mTTqFGunfkT6rMn3 8n8356ZrsIH4cEV0zz4jg2ouAiWcRbhlvj6ACuj8saad2TIU9zOhHZRY7SmkTg9d sUhbL6JQUbJgE1B9huwHnGfxyMbazc5h -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:31 2025 by rpki-client