$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json) Hash identifier: mlUhOMpcwBtVBy7qsEfsvQVn5cB/BKRb6iHpx2auT6E= Subject key identifier: D3:57:9D:7D:3A:39:37:C0:C8:0B:25:95:B0:A2:AE:97:42:71:71:C7 Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft Manifest number: 0671 Signing time: Fri 28 Mar 2025 22:37:02 +0000 Manifest this update: Fri 28 Mar 2025 22:37:01 +0000 Manifest next update: Fri 04 Apr 2025 22:37:01 +0000 Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: ft/rEY6Buu/AgkBhKRehmDs55471uhSdOo2N7B8Unm4=) 2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: yItSFfthrvs4+kvxPXhcObukSW7A2Gjgx6MxObPc6GM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8 Validity Not Before: Mar 28 22:37:01 2025 GMT Not After : Apr 4 22:37:01 2025 GMT Subject: CN=67e7248e-8831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:b2:72:c7:c1:c7:03:29:9f:72:4d:d4:44: 23:18:6a:f8:76:b9:e5:dd:fc:2d:63:7c:9f:92:30: 67:82:3a:2c:d4:58:d7:1d:4d:ec:3b:67:b1:03:e3: 32:ad:e3:dc:33:0b:86:a3:4b:07:b4:8d:ac:53:9b: a6:26:a1:fc:65:68:bf:64:37:b3:88:d0:26:a0:33: 14:6d:f7:87:60:2a:01:3f:9f:ad:74:88:69:eb:b3: 90:f1:95:e4:dc:0d:de:68:dc:b4:da:e4:11:ef:0b: eb:74:8d:01:bf:25:f6:06:c7:42:e6:ed:0e:90:5c: 9f:d1:0b:d7:3c:b3:13:f5:bc:ae:8b:95:32:37:88: 50:a2:c2:98:ca:5c:cc:70:5d:24:fd:cc:fc:8c:a1: c4:05:ae:bb:82:ca:73:65:8f:b1:d9:11:3d:ad:e0: b7:64:3a:8d:bd:9d:5e:76:f0:c2:9a:fd:50:80:8b: 0a:6e:06:e8:19:52:90:20:e8:71:c2:ea:d8:28:62: d6:17:26:34:ad:0f:3d:ae:2c:c8:87:d1:b8:fe:aa: 14:38:57:bc:50:18:51:54:ea:6c:ee:11:4c:fa:10: 8c:22:ec:de:6f:f2:4c:b6:6a:1c:b7:f9:50:fd:06: 8d:07:1f:f6:9f:a7:1d:69:47:17:06:30:0d:43:29: 29:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:57:9D:7D:3A:39:37:C0:C8:0B:25:95:B0:A2:AE:97:42:71:71:C7 X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:c3:e0:bf:f7:1e:30:0b:24:bd:be:06:d2:b2:7a:6c:80:f1: 1f:ed:fb:15:df:31:7e:ce:6e:93:d5:af:c2:3e:c0:9b:7c:db: 1e:fc:01:9a:f5:9a:21:02:47:fc:bc:9a:f7:c6:f6:2e:d4:0c: bd:4a:82:0a:fe:70:43:fa:70:93:94:bd:f4:80:b4:9c:c3:0a: 94:11:bc:e2:71:79:72:12:cf:1e:ce:8b:9c:c3:f6:79:61:71: 71:9d:ae:a1:47:e8:9a:a0:79:27:81:00:18:9a:ef:d9:34:38: cd:57:6e:71:e2:7b:6b:f4:3b:df:38:88:29:c7:58:a4:c1:09: 59:21:dc:cf:22:ac:7b:c1:27:12:b3:68:a9:b4:21:df:35:7c: 56:c5:14:26:42:3a:ba:69:19:6d:8c:bf:96:37:fd:a8:65:1c: 6d:8e:f6:43:db:20:0c:fa:94:29:07:9f:6d:f1:6e:b8:07:c8: d4:2a:6d:87:b4:f9:83:d6:e3:11:41:f7:d6:e4:43:23:cb:f0: e0:ad:a3:ee:91:53:54:27:6c:b5:13:20:96:3b:e3:d8:34:2c: a4:98:f9:5b:b6:6a:08:57:ad:e0:69:f6:76:d7:6d:6f:d2:71: c3:9c:e2:6e:8c:9d:be:b9:fe:84:47:61:4c:01:db:76:e1:44: 2a:ab:38:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjUwMzI4MjIzNzAxWhcNMjUwNDA0MjIzNzAxWjAYMRYwFAYD VQQDEw02N2U3MjQ4ZS04ODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4+ycsfBxwMpn3JN1EQjGGr4drnl3fwtY3yfkjBngjos1FjXHU3sO2exA+My rePcMwuGo0sHtI2sU5umJqH8ZWi/ZDeziNAmoDMUbfeHYCoBP5+tdIhp67OQ8ZXk 3A3eaNy02uQR7wvrdI0BvyX2BsdC5u0OkFyf0QvXPLMT9byui5UyN4hQosKYylzM cF0k/cz8jKHEBa67gspzZY+x2RE9reC3ZDqNvZ1edvDCmv1QgIsKbgboGVKQIOhx wurYKGLWFyY0rQ89rizIh9G4/qoUOFe8UBhRVOps7hFM+hCMIuzeb/JMtmoct/lQ /QaNBx/2n6cdaUcXBjANQykp5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNXnX06 OTfAyAsllbCirpdCcXHHMB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVEOC81MUM5RjZBRTcwNUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JT dXlBMU1jUmdTYTFBTllqOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBow+C/9x4wCyS9vgbSsnpsgPEf7fsV3zF+zm6T1a/CPsCbfNse/AGa 9ZohAkf8vJr3xvYu1Ay9SoIK/nBD+nCTlL30gLScwwqUEbzicXlyEs8ezoucw/Z5 YXFxna6hR+iaoHkngQAYmu/ZNDjNV25x4ntr9DvfOIgpx1ikwQlZIdzPIqx7wScS s2iptCHfNXxWxRQmQjq6aRltjL+WN/2oZRxtjvZD2yAM+pQpB59t8W64B8jUKm2H tPmD1uMRQffW5EMjy/DgraPukVNUJ2y1EyCWO+PYNCykmPlbtmoIV63gafZ2121v 0nHDnOJujJ2+uf6ER2FMAdt24UQqqzh+ -----END CERTIFICATE-----Generated at Fri Apr 4 22:09:13 2025 by rpki-client