$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: MCxBFVexTDY1kcXBZSW9GnJpxiddGoydifD7/XB4yyA= Subject key identifier: EB:0A:B6:F8:13:A3:E3:B9:77:93:E2:6C:69:49:5F:CB:60:A6:E6:E8 Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 0183 Signing time: Tue 15 Apr 2025 03:08:21 +0000 Manifest this update: Tue 15 Apr 2025 03:08:20 +0000 Manifest next update: Tue 22 Apr 2025 03:08:20 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: HXSYZ8akyhR+56gDb5l9QClxuvtKUj2VBUh5sYUiMME=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: 2K9kOKHGwBClsOCjMWjBt/lsIDrWFOJQCQhQXvkzECo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 03:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: Apr 15 03:08:20 2025 GMT Not After : Apr 22 03:08:20 2025 GMT Subject: CN=67fdcda4-eaf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8f:40:c7:52:af:eb:de:1e:1c:f7:41:f4:58: 3b:19:7b:37:58:e7:5a:2b:79:35:28:a3:1d:78:b4: 93:e4:f2:11:a1:a4:a2:31:98:c6:d0:f1:cc:2d:2f: 84:68:2c:90:46:16:0b:0f:c6:7f:5a:7c:6b:49:ae: 0f:83:4b:1f:eb:74:a9:d9:12:de:38:f2:5b:0e:15: d6:99:2a:af:14:c7:23:52:94:85:39:af:d2:30:a7: b8:47:8f:4c:be:a3:21:04:33:f9:5c:a9:4a:66:3b: 14:2f:98:43:7d:2c:ca:a1:c5:2f:fb:8e:9f:35:c3: 6a:b7:ae:0c:1e:62:7c:a5:d8:b9:92:b6:e0:c0:61: d6:f4:b1:d2:9a:ff:80:05:2d:1e:0e:a1:69:15:3f: 80:18:d1:20:25:04:7a:d8:f8:cf:4c:34:a1:b1:48: 21:0e:75:4c:62:64:08:0a:0d:54:64:b4:21:e9:52: e0:01:49:6c:22:3b:b6:23:c6:3d:89:02:9b:17:3b: 86:ad:47:56:e7:7e:48:95:a7:40:15:6c:41:e0:00: cc:d7:df:ed:1d:a3:d3:35:f7:a2:41:1e:82:6b:c5: 8d:21:e5:61:a2:52:e9:33:78:89:da:1a:b4:b9:aa: 08:ec:73:e2:db:bb:8c:71:73:95:fe:61:f2:12:e3: c0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0A:B6:F8:13:A3:E3:B9:77:93:E2:6C:69:49:5F:CB:60:A6:E6:E8 X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:02:c3:f8:61:ae:f1:3e:c1:d9:27:3b:d4:87:7c:fb:fb:e2: 59:5c:c3:4a:dc:8b:11:b0:e4:75:80:80:9e:02:1e:97:d6:23: d1:16:16:75:38:90:d0:69:ca:f1:f6:75:82:bd:fa:4c:3c:a2: a0:bb:db:50:e1:0b:52:fd:2b:f3:5f:8f:b1:35:4c:bb:cc:d0: da:e4:fd:f1:16:49:77:ce:b7:f2:8a:93:0b:10:ff:ab:2f:c1: ae:52:7a:ab:c3:e6:67:03:48:fe:45:3d:e0:68:02:56:cd:0d: 8c:07:24:56:7e:f5:e7:bc:c7:91:31:2c:e4:ed:f0:c7:1c:c1: c5:bc:2a:0e:31:09:9a:38:be:15:db:bd:a1:48:47:54:b2:ae: da:c8:86:56:c4:3a:07:0a:13:63:9e:4c:2a:62:be:c0:d5:5f: f3:33:fc:53:e1:dd:0f:b9:be:06:04:7a:21:0c:16:31:52:d0: 1d:b0:a0:65:47:c1:a6:d4:7d:06:a6:fa:6d:76:c8:5e:af:6f: b8:c3:ca:31:43:42:81:d7:8a:24:c5:9e:0a:e2:19:ed:60:c6: 66:8b:e2:b4:d6:08:f4:5b:0f:e7:c9:38:16:42:38:20:2e:5c: 60:1f:37:08:78:e7:aa:0b:18:11:b8:7c:54:f5:8e:8e:52:d5: 64:87:18:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjUwNDE1MDMwODIwWhcNMjUwNDIyMDMwODIwWjAYMRYwFAYD VQQDEw02N2ZkY2RhNC1lYWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0o9Ax1Kv694eHPdB9Fg7GXs3WOdaK3k1KKMdeLST5PIRoaSiMZjG0PHMLS+E aCyQRhYLD8Z/WnxrSa4Pg0sf63Sp2RLeOPJbDhXWmSqvFMcjUpSFOa/SMKe4R49M vqMhBDP5XKlKZjsUL5hDfSzKocUv+46fNcNqt64MHmJ8pdi5krbgwGHW9LHSmv+A BS0eDqFpFT+AGNEgJQR62PjPTDShsUghDnVMYmQICg1UZLQh6VLgAUlsIju2I8Y9 iQKbFzuGrUdW535IladAFWxB4ADM19/tHaPTNfeiQR6Ca8WNIeVholLpM3iJ2hq0 uaoI7HPi27uMcXOV/mHyEuPAZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsKtvgT o+O5d5PibGlJX8tgpuboMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtAsP4Ya7xPsHZJzvUh3z7++JZXMNK3IsRsOR1gICeAh6X1iPRFhZ1 OJDQacrx9nWCvfpMPKKgu9tQ4QtS/SvzX4+xNUy7zNDa5P3xFkl3zrfyipMLEP+r L8GuUnqrw+ZnA0j+RT3gaAJWzQ2MByRWfvXnvMeRMSzk7fDHHMHFvCoOMQmaOL4V 272hSEdUsq7ayIZWxDoHChNjnkwqYr7A1V/zM/xT4d0Pub4GBHohDBYxUtAdsKBl R8Gm1H0Gpvptdsher2+4w8oxQ0KB14okxZ4K4hntYMZmi+K01gj0Ww/nyTgWQjgg LlxgHzcIeOeqCxgRuHxU9Y6OUtVkhxhl -----END CERTIFICATE-----Generated at Wed Apr 16 21:14:46 2025 by rpki-client