$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: g0r+x22DGrLGxaFpdeOJ5ZQnRJ7I+FEs+L0n5vvtu+s= Subject key identifier: A3:51:D9:82:D5:F1:C0:42:18:54:0B:52:E2:96:B6:F9:C3:8D:B5:7B Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 0145 Signing time: Thu 03 Apr 2025 03:35:24 +0000 Manifest this update: Thu 03 Apr 2025 03:35:24 +0000 Manifest next update: Thu 10 Apr 2025 03:35:24 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: rFZuuVtlb3XGrbL+nCcVLA0N5N+TtoMyhnZJkY6saq0=) 2: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: DCf9qWND7QA7KzN3251dDDXozk2L05NK9fYFAhwBS80=) 3: CA1D2934296011EEB6BB2647C4F9AE02.roa (hash: PB+Fwr7+OFv5312gtz53yebHRvlqOj9H0ezMU/u7UvY=) 4: 302B59C64EEF11EFB111F530C4F9AE02.roa (hash: aQ/AH7PdJFNkSR1Nh6TGi7Jf84xG8OlYq5cmgQwsJ0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:35:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0 Validity Not Before: Apr 3 03:35:24 2025 GMT Not After : Apr 10 03:35:24 2025 GMT Subject: CN=67ee01fc-7380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c6:cc:0e:1e:40:47:1f:78:99:7b:bb:3d:1f: 13:84:dc:86:e5:f2:b6:8b:af:a7:f5:57:5e:6d:f8: c9:a4:da:c7:fc:e7:71:29:f2:10:d5:eb:86:67:cb: 98:5b:49:20:16:a4:a3:87:2f:86:a8:1e:b6:31:c7: 8b:f3:a7:54:c3:f0:19:22:6e:b2:18:e7:19:1f:df: 4e:23:1f:a5:75:a9:4b:f7:08:b7:60:73:12:3e:f7: 2f:51:e8:43:b4:7d:2a:58:2e:23:a9:e0:81:34:69: ff:e2:65:5a:c8:53:cb:25:46:ea:aa:32:3b:e9:5c: 4c:54:60:10:c3:e6:5f:91:26:bd:09:82:54:01:e6: ca:a3:0e:e7:76:e2:b0:2a:3e:bd:db:bb:73:5e:0b: d0:05:5f:1f:96:82:24:47:8f:02:89:bf:9c:6f:ed: 81:a7:9b:73:ce:f2:89:d4:37:e9:c4:67:ac:44:4a: e8:c2:97:8f:bf:0d:95:74:a2:78:59:89:af:d4:16: af:b3:44:25:a1:f4:43:b6:b6:2b:89:6d:4a:5f:80: 94:70:75:30:c2:20:5a:ec:a7:67:76:20:13:56:44: 0c:52:a4:7c:f2:35:c6:0a:1a:46:70:e6:7d:4a:65: 8c:14:b3:50:9d:2f:09:e0:ca:62:40:5c:24:29:d5: 86:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:51:D9:82:D5:F1:C0:42:18:54:0B:52:E2:96:B6:F9:C3:8D:B5:7B X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:4e:1c:eb:42:db:a7:c6:ab:a3:dd:12:bc:3e:a6:1b:5c:19: 9e:9e:40:d9:85:9a:91:0d:82:4b:3e:ef:fd:ce:73:a3:fe:1b: cb:d2:f8:68:52:46:c7:be:ea:fd:cd:43:13:b5:52:b2:8d:c6: 14:26:e5:69:72:95:74:a1:13:2c:fc:db:b9:5f:f6:e2:6c:b8: 79:af:e0:f8:a0:cc:49:a7:6b:53:b3:d4:94:40:f7:e0:6d:ff: 53:3e:95:17:d2:f2:0e:1a:2e:74:ea:2a:21:56:17:5c:a6:da: 01:43:8d:97:42:1d:c6:fb:30:8c:39:52:41:4a:a0:55:6d:05: 62:20:90:7e:35:0d:2e:be:dc:58:f8:53:7f:5e:e7:a8:a8:5b: 17:c2:cf:eb:bb:c1:12:18:e9:b6:cd:e3:34:a3:66:d6:6e:b5: 56:e0:c8:05:54:95:75:b0:3c:3a:5b:81:b0:ba:39:c0:20:39: 79:ed:f8:cc:f0:48:ff:78:f7:0e:5e:ea:01:36:84:f0:dd:27: 9e:fe:e8:86:87:87:40:66:c7:01:97:86:ba:f0:85:86:11:3f: 69:44:a7:13:68:e3:9c:b6:66:c9:84:de:1f:78:38:1c:23:40: b4:17:10:66:a3:a4:60:ad:eb:8f:76:f6:fd:a9:b2:3a:52:e0: 73:30:a4:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjUwNDAzMDMzNTI0WhcNMjUwNDEwMDMzNTI0WjAYMRYwFAYD VQQDEw02N2VlMDFmYy03MzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8bMDh5ARx94mXu7PR8ThNyG5fK2i6+n9VdebfjJpNrH/OdxKfIQ1euGZ8uY W0kgFqSjhy+GqB62MceL86dUw/AZIm6yGOcZH99OIx+ldalL9wi3YHMSPvcvUehD tH0qWC4jqeCBNGn/4mVayFPLJUbqqjI76VxMVGAQw+ZfkSa9CYJUAebKow7nduKw Kj6927tzXgvQBV8floIkR48Cib+cb+2Bp5tzzvKJ1DfpxGesRErowpePvw2VdKJ4 WYmv1Bavs0QlofRDtrYriW1KX4CUcHUwwiBa7KdndiATVkQMUqR88jXGChpGcOZ9 SmWMFLNQnS8J4MpiQFwkKdWG8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNR2YLV 8cBCGFQLUuKWtvnDjbV7MB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFThzrQtunxquj3RK8PqYbXBmenkDZhZqRDYJLPu/9znOj/hvL0vho UkbHvur9zUMTtVKyjcYUJuVpcpV0oRMs/Nu5X/bibLh5r+D4oMxJp2tTs9SUQPfg bf9TPpUX0vIOGi506iohVhdcptoBQ42XQh3G+zCMOVJBSqBVbQViIJB+NQ0uvtxY +FN/XueoqFsXws/ru8ESGOm2zeM0o2bWbrVW4MgFVJV1sDw6W4GwujnAIDl57fjM 8Ej/ePcOXuoBNoTw3See/uiGh4dAZscBl4a68IWGET9pRKcTaOOctmbJhN4feDgc I0C0FxBmo6RgreuPdvb9qbI6UuBzMKQk -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:01 2025 by rpki-client