$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft File: Rhxyji1WPw4JJFm6przkudbBi7g.mft (raw, json) Hash identifier: +5UTyZlRfl2NmVBcaVTvxXLXwQcPunQcTQhZcdf/qJI= Subject key identifier: 55:C7:02:53:76:E5:04:2D:B0:AD:BA:53:93:84:11:BD:BC:1D:7E:BA Authority key identifier: 46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 Certificate issuer: /CN=A91A9B22/serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Certificate serial: 07AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft Manifest number: 07A6 Signing time: Wed 16 Apr 2025 20:56:58 +0000 Manifest this update: Wed 16 Apr 2025 20:56:58 +0000 Manifest next update: Wed 23 Apr 2025 20:56:58 +0000 Files and hashes: 1: Rhxyji1WPw4JJFm6przkudbBi7g.crl (hash: elckkdQCEr+tLnjRV1vI+VE9trSkk9Hm0F4dUEz54t8=) 2: AF0AC0A63D0A11EB9F59D648C4F9AE02.roa (hash: +xXZdocc+DAKSGVr9i3J1ZCcXvPRm7qfVi4qSp6nPXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 20:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B22, serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Validity Not Before: Apr 16 20:56:58 2025 GMT Not After : Apr 23 20:56:58 2025 GMT Subject: CN=6800199a-f79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:c2:25:8a:cf:ca:43:47:2f:3b:bf:b5:2d: ae:cb:7b:1b:cb:5a:53:ce:b6:9b:f6:2c:55:29:22: f7:f4:bd:13:17:c1:31:34:c1:2a:47:2c:ac:2d:8a: a7:f7:82:41:95:de:ce:c4:1c:30:b4:96:26:cc:8a: dd:3f:51:af:8d:9f:6b:90:0f:f5:21:93:10:97:cf: 30:bc:e9:96:5f:14:9e:a6:bf:01:60:76:7d:3b:42: 44:cd:7d:c6:ae:bd:de:bb:77:ed:bb:15:9a:0c:c3: 40:c8:52:e9:de:18:10:7d:91:1e:8d:5f:1e:dd:b4: dc:d0:20:5b:21:b7:20:ec:d6:07:27:54:7e:6c:3b: 39:1b:74:75:cb:5f:95:fe:97:f3:cf:f0:54:4f:8e: 98:ca:90:d9:5c:cc:55:1c:aa:69:b6:34:89:57:16: 82:be:ce:db:a3:dc:82:4f:7c:26:2d:b3:12:ce:2c: f7:20:a9:0e:b2:db:2b:85:48:9a:ed:09:2a:ea:51: 37:21:54:f7:1b:4a:44:1b:6e:8d:61:cb:b2:70:0a: e5:4e:92:36:eb:a3:97:bc:6d:7f:ae:51:69:ac:22: 4c:50:19:4a:22:b2:07:09:d7:9b:61:fd:6f:f9:09: 56:39:d3:fd:ab:0d:38:ee:53:49:10:04:1b:d2:8d: 03:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C7:02:53:76:E5:04:2D:B0:AD:BA:53:93:84:11:BD:BC:1D:7E:BA X509v3 Authority Key Identifier: keyid:46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1e:b8:a4:b7:4f:46:72:bc:ec:9a:4f:42:9a:1a:ab:23:f1: 83:2a:a8:81:99:cb:c1:66:34:1d:a7:d9:e9:4f:d5:de:f9:62: c9:db:26:cf:a2:53:2d:9b:03:64:1d:4a:8c:d0:d5:23:a0:2d: 10:9a:96:7c:a4:43:6d:09:e0:45:9b:13:92:e1:22:d1:18:6f: 19:c7:73:c6:7b:9f:7c:cd:b1:e4:e7:00:04:38:ae:33:e8:b9: 1e:7e:cd:8d:12:ab:da:cd:0b:5f:13:df:29:8c:b6:95:e8:63: cc:f7:7a:23:2b:5e:eb:21:1f:77:44:e2:a4:85:6b:ac:ca:0c: db:9b:0a:02:04:df:f0:58:04:a6:17:b0:1f:47:1f:16:e6:49: 7a:5e:fa:84:79:5e:9c:35:7b:97:2b:aa:33:07:65:0b:20:9c: db:94:b6:4a:2d:78:4d:01:a5:62:dd:ae:e9:5e:7f:1a:e7:ce: 58:74:83:af:87:e0:75:88:ab:49:41:be:99:cd:28:17:e0:f3: c7:3d:53:6f:63:d6:d4:c2:a1:9a:21:17:de:c1:81:06:54:63: 1e:c7:59:b0:ac:10:8a:01:8e:6f:ea:bf:ff:c9:7b:e8:80:b6: 47:1b:a7:5d:ca:45:8a:62:91:8b:b4:55:48:29:e7:25:91:c3: 2d:55:89:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMjIxMTAvBgNVBAUTKDQ2MUM3MjhFMkQ1NjNGMEUwOTI0NTlCQUE2QkNFNEI5 RDZDMThCQjgwHhcNMjUwNDE2MjA1NjU4WhcNMjUwNDIzMjA1NjU4WjAYMRYwFAYD VQQDEw02ODAwMTk5YS1mNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAug3CJYrPykNHLzu/tS2uy3sby1pTzrab9ixVKSL39L0TF8ExNMEqRyysLYqn 94JBld7OxBwwtJYmzIrdP1GvjZ9rkA/1IZMQl88wvOmWXxSepr8BYHZ9O0JEzX3G rr3eu3ftuxWaDMNAyFLp3hgQfZEejV8e3bTc0CBbIbcg7NYHJ1R+bDs5G3R1y1+V /pfzz/BUT46YypDZXMxVHKpptjSJVxaCvs7bo9yCT3wmLbMSziz3IKkOstsrhUia 7Qkq6lE3IVT3G0pEG26NYcuycArlTpI266OXvG1/rlFprCJMUBlKIrIHCdebYf1v +QlWOdP9qw047lNJEAQb0o0DawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXHAlN2 5QQtsK26U5OEEb28HX66MB8GA1UdIwQYMBaAFEYcco4tVj8OCSRZuqa85LnWwYu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIyMi9ENzVGOTg1Q0ZD ODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3NEpKRm02cHJ6a3VkYkJp N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JoeHlqaTFXUHc0SkpGbTZwcnprdWRiQmk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIyMi9ENzVGOTg1Q0ZDODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3 NEpKRm02cHJ6a3VkYkJpN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAHrikt09Gcrzsmk9CmhqrI/GDKqiBmcvBZjQdp9npT9Xe+WLJ2ybP olMtmwNkHUqM0NUjoC0QmpZ8pENtCeBFmxOS4SLRGG8Zx3PGe598zbHk5wAEOK4z 6Lkefs2NEqvazQtfE98pjLaV6GPM93ojK17rIR93ROKkhWusygzbmwoCBN/wWASm F7AfRx8W5kl6XvqEeV6cNXuXK6ozB2ULIJzblLZKLXhNAaVi3a7pXn8a585YdIOv h+B1iKtJQb6ZzSgX4PPHPVNvY9bUwqGaIRfewYEGVGMex1mwrBCKAY5v6r//yXvo gLZHG6ddykWKYpGLtFVIKeclkcMtVYm4 -----END CERTIFICATE-----Generated at Fri Apr 18 04:46:50 2025 by rpki-client