$ rpki-client -vvf rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft File: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft (raw, json) Hash identifier: W3gAadiQcg7KneCJwEoKfwf+ck84kYvs3+O4vGvG3rg= Subject key identifier: 30:6A:82:35:46:73:63:9C:CF:58:12:2F:43:4C:89:A5:4B:E8:5C:52 Authority key identifier: 5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C Certificate issuer: /CN=A91569FB/serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C Certificate serial: 0667 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft Manifest number: 0661 Signing time: Fri 28 Mar 2025 22:39:11 +0000 Manifest this update: Fri 28 Mar 2025 22:39:11 +0000 Manifest next update: Fri 04 Apr 2025 22:39:11 +0000 Files and hashes: 1: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl (hash: ygaznc3NvxfQzKWQWCda3dbmOTVgtiTIdVl/ENvS8hY=) 2: 154E7E02762211EBA80A6D61C4F9AE02.roa (hash: qkyN60ECu4BYWQ3TkIsHpS5OSWIDmixvU/RZxjOnAoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1639 (0x667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91569FB Validity Not Before: Mar 28 22:39:11 2025 GMT Not After : Apr 4 22:39:11 2025 GMT Subject: CN=67e7250f-f278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5c:ed:ef:f3:ab:5f:dc:a4:4a:da:9c:a2:89: 6a:29:34:8d:7e:5b:5a:7e:be:e0:da:2e:a1:94:45: 61:60:10:53:3c:c0:fe:31:7f:52:c9:6a:e2:5c:4c: 1b:39:6c:a3:a8:a2:9e:5c:0b:5e:7e:2e:2f:14:9c: e9:37:6a:c2:4f:73:83:05:45:9e:08:6b:b3:f5:a8: 06:62:9f:95:bf:1f:74:b1:50:13:9e:ee:32:68:65: e1:0f:f9:ed:f7:ca:dc:9c:7b:46:91:8c:31:85:14: d5:66:59:a5:c2:0b:f0:3b:61:c4:05:cb:13:dc:cf: db:c1:ce:5a:a8:e5:48:fe:5a:61:88:07:8a:7b:0f: ff:03:d8:aa:61:82:a7:e8:37:80:45:3a:42:f3:6e: dd:1d:3d:fd:de:01:d6:0c:95:e0:70:e3:a4:10:e3: b0:66:3e:b5:a8:0b:0f:30:4c:b4:01:6d:1e:5d:49: 04:2b:02:33:7c:01:b9:b6:e6:31:61:0c:8a:82:e6: bd:0b:a3:2d:95:d1:22:1b:2e:a9:9e:42:54:c9:d1: ec:ff:85:94:82:a5:69:b3:87:88:f4:47:90:a3:f5: 56:3a:d1:11:b7:d5:b6:e4:c4:dd:8d:7a:db:9c:92: 8e:e4:c2:b8:f7:0a:51:1e:ac:41:5a:86:de:a5:37: f8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6A:82:35:46:73:63:9C:CF:58:12:2F:43:4C:89:A5:4B:E8:5C:52 X509v3 Authority Key Identifier: keyid:5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:aa:47:7f:b5:7c:e3:af:cf:21:77:3e:27:bf:56:d9:a8:77: d2:6b:7a:02:ea:8f:80:4f:de:ab:2c:33:a7:b4:d4:d8:b6:b9: 77:4b:a5:17:26:4a:5b:98:cd:25:2d:a6:ca:c1:ea:f4:32:0e: d6:26:e0:94:cb:b1:6c:d1:64:f1:39:b6:12:06:c4:dc:58:94: 1d:6f:1f:b6:bf:5f:65:3a:f9:14:55:40:8d:00:32:95:b1:15: d2:69:7b:e3:b6:58:65:b0:94:d6:a0:67:04:d4:70:e5:5e:17: 4c:4d:f7:32:e3:65:47:03:f3:3b:55:a9:74:97:0d:95:f4:85: d0:4f:3b:ae:c3:47:57:34:f2:db:ff:44:4d:2f:c2:41:a2:b9: 6a:6e:b3:87:b7:fc:bf:0b:77:2c:89:5f:b0:64:40:b5:84:0a: 89:1e:72:ed:d3:5d:d3:6e:80:85:60:d9:9d:48:c0:84:e6:c8: c6:ec:2f:b5:71:a2:da:c6:cf:9c:64:e6:c9:39:52:e2:1f:ce: 8d:87:27:db:4f:84:a2:68:cf:ee:ce:b8:a8:65:fc:cd:0e:3c: 79:1c:13:40:83:0a:31:95:ca:21:c2:4a:0c:7f:da:a9:e6:b0: de:f6:28:56:1b:9e:25:45:ab:15:ce:eb:d1:03:f4:20:76:d0: 73:f2:5c:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5RkIxMTAvBgNVBAUTKDVERUUxNkVGODVBMkJGODREQUQ4ODc2NjY3NTlCMUVD MTVEMUI5NEMwHhcNMjUwMzI4MjIzOTExWhcNMjUwNDA0MjIzOTExWjAYMRYwFAYD VQQDEw02N2U3MjUwZi1mMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVzt7/OrX9ykStqcoolqKTSNfltafr7g2i6hlEVhYBBTPMD+MX9SyWriXEwb OWyjqKKeXAtefi4vFJzpN2rCT3ODBUWeCGuz9agGYp+Vvx90sVATnu4yaGXhD/nt 98rcnHtGkYwxhRTVZlmlwgvwO2HEBcsT3M/bwc5aqOVI/lphiAeKew//A9iqYYKn 6DeARTpC827dHT393gHWDJXgcOOkEOOwZj61qAsPMEy0AW0eXUkEKwIzfAG5tuYx YQyKgua9C6MtldEiGy6pnkJUydHs/4WUgqVps4eI9EeQo/VWOtERt9W25MTdjXrb nJKO5MK49wpRHqxBWobepTf4UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBqgjVG c2Ocz1gSL0NMiaVL6FxSMB8GA1UdIwQYMBaAFF3uFu+For+E2tiHZmdZsewV0blM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjlGQi84REUxRENEQTc2 MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0VGEySWRtWjFteDdCWFJ1 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlNFc3NFdpdjRUYTJJZG1aMW14N0JYUnVVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjlGQi84REUxRENEQTc2MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0 VGEySWRtWjFteDdCWFJ1VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgqkd/tXzjr88hdz4nv1bZqHfSa3oC6o+AT96rLDOntNTYtrl3S6UX JkpbmM0lLabKwer0Mg7WJuCUy7Fs0WTxObYSBsTcWJQdbx+2v19lOvkUVUCNADKV sRXSaXvjtlhlsJTWoGcE1HDlXhdMTfcy42VHA/M7Val0lw2V9IXQTzuuw0dXNPLb /0RNL8JBorlqbrOHt/y/C3csiV+wZEC1hAqJHnLt013TboCFYNmdSMCE5sjG7C+1 caLaxs+cZObJOVLiH86NhyfbT4SiaM/uzrioZfzNDjx5HBNAgwoxlcohwkoMf9qp 5rDe9ihWG54lRasVzuvRA/QgdtBz8lxi -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:40 2025 by rpki-client