$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft File: XqEcijop4GlzwfEhYR1aXCobBp0.mft (raw, json) Hash identifier: N7Gc8PoIEe5k7VYThLg5SrEBX4DZsyV15qcNPV8v13Y= Subject key identifier: 59:32:08:7A:0A:83:3B:EC:B9:C3:13:C0:5A:65:EC:A1:93:FC:CA:07 Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D Certificate serial: 0714 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft Manifest number: 06FA Signing time: Wed 02 Apr 2025 21:59:46 +0000 Manifest this update: Wed 02 Apr 2025 21:59:46 +0000 Manifest next update: Wed 09 Apr 2025 21:59:46 +0000 Files and hashes: 1: XqEcijop4GlzwfEhYR1aXCobBp0.crl (hash: xsiVl4F5UZxPBLlbkSvRFLUiO1DWIg4HMwmABoo49HY=) 2: 5A51D464F5FA11EC9B35372AC4F9AE02.roa (hash: nqhvH+f7wHKT8bjIs6vVLkOc7U1WY+z2Ysz9HVOAovM=) 3: 0940732E0E6311EDB98DEA0DC4F9AE02.roa (hash: RMYTLsjzchYs7RKbF9BO3OVp44cFPqnQKzT6ydktQoo=) 4: 0A37FEFA0E6311EDB98DEA0DC4F9AE02.roa (hash: Bcj/iiKxpeGROHNnH2fXMR3kft/+QpPcp29Mc0T3G5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1812 (0x714) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A654C Validity Not Before: Apr 2 21:59:46 2025 GMT Not After : Apr 9 21:59:46 2025 GMT Subject: CN=67edb352-0035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:df:21:c6:d7:89:68:72:e5:b0:c3:b2:66: ec:70:95:1c:bf:73:4b:a0:30:9b:43:7b:5a:fd:b8: 01:9e:6c:db:05:c5:ba:e5:f7:05:da:c6:3b:85:01: ab:cc:31:bc:80:36:e6:10:58:0d:54:18:d3:89:63: 67:1c:5e:b1:75:fc:2e:d1:2f:87:f4:6b:5f:6b:f3: 29:17:97:f5:96:e3:f4:2a:4c:ef:94:2d:9c:f1:a0: f8:84:03:58:40:01:cb:30:49:06:23:f8:c0:49:b9: 73:f0:8e:0b:95:45:8e:0e:b1:7c:e3:75:d2:b2:5a: 09:42:25:24:4c:d4:13:6c:a7:6e:80:fa:65:6c:48: f8:8d:d6:81:ee:d7:1b:6f:f0:74:67:88:83:ea:4f: 9a:4d:47:8f:a2:b1:cb:a9:5b:e2:42:5b:3f:08:13: 50:d8:7f:6a:d4:7d:db:6e:32:38:b3:b4:9f:6f:c4: 80:57:45:11:06:ef:14:99:bc:f1:57:c0:a6:81:04: 6c:a9:e1:9a:d4:6d:ef:eb:7a:f6:45:ac:8e:7f:bd: 50:3b:cf:09:f1:95:5a:80:cb:fe:06:0a:1e:64:34: 0c:22:ea:d9:a9:97:e4:36:65:de:14:cc:1d:b0:fa: b9:0b:a6:8a:a1:40:87:ef:c9:0b:c9:9b:09:19:be: 89:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:32:08:7A:0A:83:3B:EC:B9:C3:13:C0:5A:65:EC:A1:93:FC:CA:07 X509v3 Authority Key Identifier: keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:55:e6:44:f5:72:46:bd:83:a6:b3:63:30:94:3b:cd:6b:76: 2d:4b:9a:5d:c8:b5:ad:df:dd:7a:da:1a:d2:3e:e5:3e:9b:53: 6e:c1:b0:2b:de:02:e4:c2:56:b3:84:df:9f:fe:04:af:d7:64: e4:ea:9f:b9:00:62:7a:c1:bd:f4:87:ce:69:8e:9a:51:7d:98: 56:6a:30:37:53:c1:2d:a7:74:86:c7:7d:79:2c:a3:d7:f5:84: 56:7f:55:3a:50:d6:0d:5d:cd:db:41:d5:7e:6b:50:28:d8:c6: 3e:d8:6f:82:02:58:f1:74:77:53:5c:4c:fb:72:21:1f:a6:d6: e7:a7:44:0a:e8:56:d2:8a:71:b6:13:a1:04:e4:06:46:d8:6f: 0c:c9:3b:13:0e:c0:65:29:d7:5c:d4:51:ce:67:9b:35:64:55: 83:9c:a0:9f:73:7d:5c:71:7a:a3:0e:2c:94:86:77:f8:21:dd: 00:2c:da:42:15:f6:84:f6:03:80:b2:e5:73:95:44:1e:ab:1b: ab:91:1d:81:ba:2c:69:ce:f2:86:21:38:5b:dd:ab:66:f4:ee: 4a:73:1b:1a:6f:60:29:c0:f5:c2:4b:1e:30:9f:2c:32:25:5a: 1b:a1:cc:98:b0:cc:a2:25:f0:80:24:80:92:d1:f7:e3:6a:f0: de:bd:66:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1NEMxMTAvBgNVBAUTKDVFQTExQzhBM0EyOUUwNjk3M0MxRjEyMTYxMUQ1QTVD MkExQjA2OUQwHhcNMjUwNDAyMjE1OTQ2WhcNMjUwNDA5MjE1OTQ2WjAYMRYwFAYD VQQDEw02N2VkYjM1Mi0wMDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4LfIcbXiWhy5bDDsmbscJUcv3NLoDCbQ3ta/bgBnmzbBcW65fcF2sY7hQGr zDG8gDbmEFgNVBjTiWNnHF6xdfwu0S+H9Gtfa/MpF5f1luP0KkzvlC2c8aD4hANY QAHLMEkGI/jASblz8I4LlUWODrF843XSsloJQiUkTNQTbKdugPplbEj4jdaB7tcb b/B0Z4iD6k+aTUePorHLqVviQls/CBNQ2H9q1H3bbjI4s7Sfb8SAV0URBu8Umbzx V8CmgQRsqeGa1G3v63r2RayOf71QO88J8ZVagMv+BgoeZDQMIurZqZfkNmXeFMwd sPq5C6aKoUCH78kLyZsJGb6JmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkyCHoK gzvsucMTwFpl7KGT/MoHMB8GA1UdIwQYMBaAFF6hHIo6KeBpc8HxIWEdWlwqGwad MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0Qy81MUE5RUFDQzQx NjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRHbHp3ZkVoWVIxYVhDb2JC cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxRWNpam9wNEdsendmRWhZUjFhWENvYkJwMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU0Qy81MUE5RUFDQzQxNjAxMUVCOTA4NzQ0NTBDNEY5QUUwMi9YcUVjaWpvcDRH bHp3ZkVoWVIxYVhDb2JCcDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTVeZE9XJGvYOms2MwlDvNa3YtS5pdyLWt39162hrSPuU+m1NuwbAr 3gLkwlazhN+f/gSv12Tk6p+5AGJ6wb30h85pjppRfZhWajA3U8Etp3SGx315LKPX 9YRWf1U6UNYNXc3bQdV+a1Ao2MY+2G+CAljxdHdTXEz7ciEfptbnp0QK6FbSinG2 E6EE5AZG2G8MyTsTDsBlKddc1FHOZ5s1ZFWDnKCfc31ccXqjDiyUhnf4Id0ALNpC FfaE9gOAsuVzlUQeqxurkR2BuixpzvKGIThb3atm9O5Kcxsab2ApwPXCSx4wnywy JVobocyYsMyiJfCAJICS0ffjavDevWbB -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:07 2025 by rpki-client