$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft File: XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft (raw, json) Hash identifier: Bsk0TmI9+ZDym36GLYZzpjPwivdthyuW5/OS9cdynpA= Subject key identifier: A9:41:23:34:D1:AB:B9:A2:13:5F:84:87:B3:C8:72:5A:4D:F9:DF:23 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0CE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft Manifest number: 0CB9 Signing time: Fri 04 Apr 2025 18:18:20 +0000 Manifest this update: Fri 04 Apr 2025 18:18:20 +0000 Manifest next update: Fri 11 Apr 2025 18:18:20 +0000 Files and hashes: 1: XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl (hash: F3SFRIMoZErhq0puUH2YWSMWGZF0sGK1NUDCdx7nQps=) 2: 6EA46446646511EFA9435879C4F9AE02.roa (hash: wKDEdStmrZZfi1N+sozcMYpUpj9M6UZTKjL7qa1uJ/0=) 3: 65DCB430F25A11E9937D9D73C4F9AE02.roa (hash: gaKPScXkAxsuY8VAZ/bdwS1+gAnXATdqGjlvtSNl84I=) 4: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (hash: 9VMgA4YRxMIjWK/lK97cgRReFAG7X/1dXoRMnmEvJtU=) 5: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (hash: OIcrwBZfO0r9AZzqec0EZieuFLydO0IeQ37B1ozdZjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3296 (0xce0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998 Validity Not Before: Apr 4 18:18:20 2025 GMT Not After : Apr 11 18:18:20 2025 GMT Subject: CN=67f0226c-b18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:cd:6a:06:5b:4b:18:1f:07:2c:70:d7:a7: c9:39:96:48:1f:86:eb:b3:62:0c:de:ff:09:8e:1c: ac:47:ef:8d:c8:21:a1:1b:14:15:13:49:26:82:74: 65:26:9b:b4:e7:35:2e:00:fa:4f:d0:07:ad:08:52: 76:ae:1b:93:df:74:a7:87:17:54:be:34:62:f0:e9: 30:e9:67:a8:93:f3:bb:27:fd:59:4a:ee:bb:94:a0: 2c:36:0e:ab:26:06:c1:74:aa:07:c6:67:fa:96:b9: 3e:2d:72:bb:a6:af:7f:08:44:ff:a1:7d:4b:fc:33: ab:37:3e:31:4f:ab:36:75:e0:08:1f:47:28:98:0e: 9b:16:6f:87:1b:d6:1f:66:64:e2:84:0e:a0:02:00: e3:c4:79:5e:27:4b:73:e9:dd:67:86:fc:a1:a8:19: f0:fc:8a:67:8c:2e:10:81:4d:61:53:42:36:99:45: c4:33:ff:c7:38:0d:24:4f:2f:5b:d0:b9:d6:c4:82: be:31:06:c5:b8:a9:c7:ac:57:84:cc:92:04:bc:fe: 19:29:94:cf:34:3c:a0:35:cd:ce:70:2c:4b:ea:2d: bd:25:70:70:5a:8b:b1:6c:41:16:a6:da:88:73:0d: 52:7d:47:5d:b2:7a:4e:22:e3:78:0a:e0:eb:76:85: 46:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:41:23:34:D1:AB:B9:A2:13:5F:84:87:B3:C8:72:5A:4D:F9:DF:23 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5d:21:ef:d9:70:ca:7b:90:69:ad:be:dc:bc:6f:5f:84:9d: 65:c4:60:1d:67:e0:fd:9f:ce:38:a4:ce:cd:a6:56:58:37:21: cd:7d:62:d2:17:82:14:37:1e:f6:06:36:6f:f3:fe:72:6a:7b: 90:9f:d5:2a:92:a5:ff:dc:e3:d6:0a:a9:d5:1e:61:6b:48:4b: af:36:1e:c9:ba:1e:32:53:23:88:98:43:d1:ac:e0:c1:b9:da: e0:12:dc:60:7f:bd:94:95:f1:78:26:63:90:4f:2a:e9:18:90: 43:22:a7:7a:45:ff:c2:12:04:03:8b:6e:56:f4:88:d5:95:1e: bf:41:46:5c:b7:c2:8a:34:f5:71:50:5e:a3:2e:a5:ed:05:f7: 13:4b:d4:a1:f3:7d:6f:b4:97:29:71:25:e0:7a:1c:86:c7:31: 37:91:18:39:85:11:39:8d:37:3e:13:ce:f8:66:ff:54:f6:25: 9a:a1:e0:17:d5:7f:0d:c8:39:96:7c:05:3c:8a:52:18:e8:9d: ac:08:a0:d2:2c:c2:a4:de:c1:ad:9d:b9:ea:1c:eb:5a:7e:b0: 21:3d:8a:e5:94:9d:f2:d4:ce:8b:21:98:9c:f7:5a:dd:86:10: b6:53:13:97:32:b1:d7:e7:b7:a7:36:ec:e2:67:6e:ae:3e:74: 3c:78:14:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjUwNDA0MTgxODIwWhcNMjUwNDExMTgxODIwWjAYMRYwFAYD VQQDEw02N2YwMjI2Yy1iMThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbHNagZbSxgfByxw16fJOZZIH4brs2IM3v8JjhysR++NyCGhGxQVE0kmgnRl Jpu05zUuAPpP0AetCFJ2rhuT33SnhxdUvjRi8Okw6Weok/O7J/1ZSu67lKAsNg6r JgbBdKoHxmf6lrk+LXK7pq9/CET/oX1L/DOrNz4xT6s2deAIH0comA6bFm+HG9Yf ZmTihA6gAgDjxHleJ0tz6d1nhvyhqBnw/IpnjC4QgU1hU0I2mUXEM//HOA0kTy9b 0LnWxIK+MQbFuKnHrFeEzJIEvP4ZKZTPNDygNc3OcCxL6i29JXBwWouxbEEWptqI cw1SfUddsnpOIuN4CuDrdoVGKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlBIzTR q7miE1+Eh7PIclpN+d8jMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTk5OC9BQjM0RkJENEYyNTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUt X0hmS0dqamxMM0tzMUdPVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIXSHv2XDKe5Bprb7cvG9fhJ1lxGAdZ+D9n844pM7NplZYNyHNfWLS F4IUNx72BjZv8/5yanuQn9UqkqX/3OPWCqnVHmFrSEuvNh7Juh4yUyOImEPRrODB udrgEtxgf72UlfF4JmOQTyrpGJBDIqd6Rf/CEgQDi25W9IjVlR6/QUZct8KKNPVx UF6jLqXtBfcTS9Sh831vtJcpcSXgehyGxzE3kRg5hRE5jTc+E874Zv9U9iWaoeAX 1X8NyDmWfAU8ilIY6J2sCKDSLMKk3sGtnbnqHOtafrAhPYrllJ3y1M6LIZic91rd hhC2UxOXMrHX57enNuziZ26uPnQ8eBTv -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:07 2025 by rpki-client