$ rpki-client -vvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft File: XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft (raw, json) Hash identifier: FssUhtpuQQsKh8TEJ3Hv3N/0ybfgNu1ztZBsC5muI9Q= Subject key identifier: D7:D9:66:6D:99:BB:6F:BE:DA:88:2A:66:D7:EE:3C:B1:06:2C:C6:8B Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4 Certificate issuer: /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft Manifest number: 015D Signing time: Thu 03 Apr 2025 03:18:15 +0000 Manifest this update: Thu 03 Apr 2025 03:18:15 +0000 Manifest next update: Thu 10 Apr 2025 03:18:15 +0000 Files and hashes: 1: XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl (hash: dtRrE3e5WOLLm3Uw6tMRsOeCL5WShEFXDfnKGZZyhP4=) 2: 80F75824FAAD11EDB0C98683C4F9AE02.roa (hash: Ir6jieXDo5WhcOUHhq3j9urxgu6n6xKvObh/fql9Ym0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923A9 Validity Not Before: Apr 3 03:18:15 2025 GMT Not After : Apr 10 03:18:15 2025 GMT Subject: CN=67edfdf7-5e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:68:7c:c5:0a:0c:2a:a2:84:9f:99:fa:31:0c: e6:2c:6d:09:60:c7:94:22:22:36:a5:40:f5:2d:c1: ab:fc:2d:e5:46:26:5a:39:b6:06:96:1f:de:2c:c0: 9b:52:66:63:ee:5b:c1:9b:40:5b:94:80:fe:58:8f: 3c:86:6f:69:f2:93:b7:55:60:7c:61:ee:ab:cb:41: 89:0a:ae:53:79:b1:30:6a:10:0d:8f:60:8b:15:2c: d5:b1:33:63:cd:37:16:ce:47:7e:56:e7:3a:46:20: e1:14:b4:1d:98:00:6b:cb:9b:3f:e8:9c:b7:de:fa: 4a:ef:78:42:1e:ae:15:eb:78:ae:73:a1:bf:e3:45: a2:be:a5:cf:96:8a:61:23:83:8b:1b:23:33:eb:e1: 3d:ea:58:39:fc:34:4e:d3:71:02:2f:c0:a1:d9:24: 45:73:cd:e5:01:31:ca:e8:6e:61:ac:21:c4:92:ef: 96:41:b0:79:9a:1c:f5:b9:de:5d:fd:6a:c5:86:48: 59:40:0a:70:74:ac:b0:21:07:b2:24:88:28:d5:ed: 3c:e7:f9:18:32:7a:dd:b2:72:52:72:01:73:85:fb: 2a:0f:7a:b1:b6:1c:b6:65:06:16:f5:2d:37:c0:b1: 2f:64:e8:69:76:94:07:92:89:33:e5:89:38:7a:aa: f7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D9:66:6D:99:BB:6F:BE:DA:88:2A:66:D7:EE:3C:B1:06:2C:C6:8B X509v3 Authority Key Identifier: keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:aa:b2:19:1a:82:1a:74:20:92:6c:ca:4a:8b:b7:8f:1e:19: 93:fa:73:50:7c:63:32:bd:da:f8:26:e6:4e:99:69:ae:7b:74: 87:fe:40:1c:6c:f3:8b:52:b4:ed:fb:12:23:63:48:b3:c5:6c: 38:0d:23:89:0e:43:03:0e:9d:bc:bd:70:00:38:86:7a:54:b3: 3f:8e:f1:7b:f3:5d:11:cd:58:5b:c2:bd:08:bb:96:3c:97:26: 7d:ed:15:7b:43:94:b8:ca:88:5f:0c:7a:02:55:cb:bb:10:a8: 95:6e:f5:aa:3f:ad:4d:84:69:93:bf:01:2d:72:53:c7:53:f9: 11:c4:e7:90:71:75:32:31:61:06:9f:3a:f9:7b:14:c2:b6:1b: 79:f7:07:38:93:58:5d:dd:63:f2:e5:4c:7f:3c:61:9d:69:75: 90:31:26:74:a3:2b:59:45:84:93:3f:c3:77:4f:96:9c:0a:7b: 1a:fd:46:24:41:1d:b0:29:0c:55:f5:79:ec:c8:1a:7f:e7:16: 35:52:68:c4:60:9d:ca:c9:a1:de:1b:48:c5:37:b4:95:88:33: 6f:aa:7a:df:2d:f6:5a:e1:14:f9:2c:c7:2d:42:77:0d:f4:c2: ce:e3:58:35:00:9e:71:1e:a8:d7:f6:16:7d:17:af:67:cd:b0: 05:7b:07:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzQTkxMTAvBgNVBAUTKDVDMTdBRjJFMEFBRjQ5MENFQUE4NEUyQUFBNzE0ODNE MDM5NUYxRTQwHhcNMjUwNDAzMDMxODE1WhcNMjUwNDEwMDMxODE1WjAYMRYwFAYD VQQDEw02N2VkZmRmNy01ZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Gh8xQoMKqKEn5n6MQzmLG0JYMeUIiI2pUD1LcGr/C3lRiZaObYGlh/eLMCb UmZj7lvBm0BblID+WI88hm9p8pO3VWB8Ye6ry0GJCq5TebEwahANj2CLFSzVsTNj zTcWzkd+Vuc6RiDhFLQdmABry5s/6Jy33vpK73hCHq4V63iuc6G/40WivqXPloph I4OLGyMz6+E96lg5/DRO03ECL8Ch2SRFc83lATHK6G5hrCHEku+WQbB5mhz1ud5d /WrFhkhZQApwdKywIQeyJIgo1e085/kYMnrdsnJScgFzhfsqD3qxthy2ZQYW9S03 wLEvZOhpdpQHkokz5Yk4eqr3RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfZZm2Z u2++2ogqZtfuPLEGLMaLMB8GA1UdIwQYMBaAFFwXry4Kr0kM6qhOKqpxSD0DlfHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNBOS9BNjM4NzY4NEZB QTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNRenFxRTRxcW5GSVBRT1Y4 ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCZXZMZ3F2U1F6cXFFNHFxbkZJUFFPVjhlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNBOS9BNjM4NzY4NEZBQTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNR enFxRTRxcW5GSVBRT1Y4ZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaqrIZGoIadCCSbMpKi7ePHhmT+nNQfGMyvdr4JuZOmWmue3SH/kAc bPOLUrTt+xIjY0izxWw4DSOJDkMDDp28vXAAOIZ6VLM/jvF7810RzVhbwr0Iu5Y8 lyZ97RV7Q5S4yohfDHoCVcu7EKiVbvWqP61NhGmTvwEtclPHU/kRxOeQcXUyMWEG nzr5exTCtht59wc4k1hd3WPy5Ux/PGGdaXWQMSZ0oytZRYSTP8N3T5acCnsa/UYk QR2wKQxV9XnsyBp/5xY1UmjEYJ3KyaHeG0jFN7SViDNvqnrfLfZa4RT5LMctQncN 9MLO41g1AJ5xHqjX9hZ9F69nzbAFewfq -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:03 2025 by rpki-client