$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json) Hash identifier: F6KZnx8G33LbFjbyDFG7RGI4dhuDB+lmC5+2j1U2kKU= Subject key identifier: F2:8D:42:24:F4:DF:1A:76:5B:E4:14:FF:6F:54:CD:CA:DD:A2:E2:6D Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A Certificate serial: 07A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft Manifest number: 079E Signing time: Fri 28 Mar 2025 21:30:36 +0000 Manifest this update: Fri 28 Mar 2025 21:30:36 +0000 Manifest next update: Fri 04 Apr 2025 21:30:36 +0000 Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: ge/ji5yRlg0P6MHRgKHivnErS/ojp0kthm6Z6epxZlI=) 2: FC4EA8D8918511EDB3CBB378C4F9AE02.roa (hash: 4bMonkEILF31i3rwXcmiWVxlZY8L3ObeZ0NQ0u78bEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 21:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1961 (0x7a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE88 Validity Not Before: Mar 28 21:30:36 2025 GMT Not After : Apr 4 21:30:36 2025 GMT Subject: CN=67e714fc-57ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:c6:44:dd:f8:1e:70:e3:3f:5e:2f:c5:30: de:9b:44:38:f0:50:42:fd:0e:9c:ac:aa:10:3d:69: a5:c5:a4:dd:a5:d3:08:b6:36:1d:75:1a:b7:a2:0f: e1:1a:5b:b4:2b:44:17:7a:76:5b:0d:12:a1:15:9d: ac:ca:aa:39:de:e8:97:92:d1:3b:ed:07:86:c3:04: 26:6e:81:14:4e:f9:75:52:28:fc:4e:4c:dd:53:5e: 79:3a:1a:d9:ee:06:8f:4b:b9:d6:9e:3b:b1:05:e9: f8:ed:0c:82:05:48:ee:b3:eb:16:1c:ff:5c:0b:44: 5b:2d:49:01:6a:16:a8:3e:15:ac:a4:41:38:54:ae: c8:35:ce:d2:e6:60:cc:f6:c5:05:e1:2b:a0:db:f7: a0:5c:6d:b6:ab:ad:03:f1:4c:51:c3:7f:82:d5:46: 3d:85:9f:f0:b0:f7:83:48:a0:9d:46:dd:a0:d8:5f: b9:a6:d5:1d:d0:3b:7a:c1:fb:b9:25:8c:60:05:49: 6d:ac:95:4c:39:af:41:c5:2b:26:7b:be:e7:6b:10: 53:3b:a7:c2:7c:dd:2f:91:77:d2:91:52:19:83:44: 22:2f:51:fd:c9:22:5e:61:bc:ec:05:69:20:7d:7a: 7e:f2:a7:c7:93:eb:48:c6:42:be:4b:92:36:09:34: e0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8D:42:24:F4:DF:1A:76:5B:E4:14:FF:6F:54:CD:CA:DD:A2:E2:6D X509v3 Authority Key Identifier: keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:9d:85:c6:cc:29:2a:62:fc:cb:d0:4b:2f:fd:10:fe:15:43: cd:fe:58:59:0f:c2:52:a7:b8:af:96:b4:ad:e1:c1:bb:8c:62: 27:1a:08:40:26:e0:cc:ea:47:37:e8:74:af:7c:e7:86:be:19: d8:2b:ad:61:55:03:bd:9e:88:9e:d8:c2:95:f7:13:78:b1:42: ab:bf:65:1c:25:db:1a:d7:1f:3c:e7:ac:e7:dd:ef:70:e9:9d: 56:db:8a:84:88:95:df:56:69:7f:b8:76:b6:49:44:de:59:aa: ba:39:92:6c:d6:51:1a:00:93:76:2c:9b:69:d0:fd:93:bd:1e: c4:86:b4:c0:a0:3d:07:b2:55:ea:3c:64:8f:be:23:14:34:e4: 79:f5:07:aa:fb:8c:e4:4f:28:43:5a:a3:a8:70:19:3f:23:04: 1f:a6:c5:05:77:6b:72:10:98:2c:ce:96:59:be:fe:89:40:b4: 1a:84:4e:2d:e0:a3:8f:be:b6:ae:e5:f0:c7:c1:03:b0:de:a6: 55:8c:65:05:1c:c1:3d:a3:7c:a8:55:a4:25:da:c2:56:93:8e: ce:17:ea:74:28:ce:16:48:32:f7:e4:d8:5a:5f:80:90:d0:1d: db:80:a7:4f:7a:d9:97:24:f6:49:e7:6b:2d:d6:15:d1:58:4d: 71:56:46:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE RUE1MjU0OEEwHhcNMjUwMzI4MjEzMDM2WhcNMjUwNDA0MjEzMDM2WjAYMRYwFAYD VQQDEw02N2U3MTRmYy01N2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA3GRN34HnDjP14vxTDem0Q48FBC/Q6crKoQPWmlxaTdpdMItjYddRq3og/h Glu0K0QXenZbDRKhFZ2syqo53uiXktE77QeGwwQmboEUTvl1Uij8TkzdU155OhrZ 7gaPS7nWnjuxBen47QyCBUjus+sWHP9cC0RbLUkBahaoPhWspEE4VK7INc7S5mDM 9sUF4Sug2/egXG22q60D8UxRw3+C1UY9hZ/wsPeDSKCdRt2g2F+5ptUd0Dt6wfu5 JYxgBUltrJVMOa9BxSsme77naxBTO6fCfN0vkXfSkVIZg0QiL1H9ySJeYbzsBWkg fXp+8qfHk+tIxkK+S5I2CTTg/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKNQiT0 3xp2W+QU/29UzcrdouJtMB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbnYXGzCkqYvzL0Esv/RD+FUPN/lhZD8JSp7ivlrSt4cG7jGInGghA JuDM6kc36HSvfOeGvhnYK61hVQO9noie2MKV9xN4sUKrv2UcJdsa1x8856zn3e9w 6Z1W24qEiJXfVml/uHa2SUTeWaq6OZJs1lEaAJN2LJtp0P2TvR7EhrTAoD0HslXq PGSPviMUNOR59Qeq+4zkTyhDWqOocBk/IwQfpsUFd2tyEJgszpZZvv6JQLQahE4t 4KOPvrau5fDHwQOw3qZVjGUFHME9o3yoVaQl2sJWk47OF+p0KM4WSDL35NhaX4CQ 0B3bgKdPetmXJPZJ52st1hXRWE1xVkae -----END CERTIFICATE-----Generated at Fri Apr 4 21:07:39 2025 by rpki-client