$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft File: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft (raw, json) Hash identifier: cOrM0BApSqFd2/VouOeB4e3jtW9hxUiiM/UHVFFD2rE= Subject key identifier: A5:DF:86:82:CE:48:76:8C:F9:7B:F4:1F:B3:11:9C:B0:AC:82:C0:80 Authority key identifier: 5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54 Certificate issuer: /CN=A91B4F01/serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154 Certificate serial: 044E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft Manifest number: 044A Signing time: Thu 03 Apr 2025 00:13:45 +0000 Manifest this update: Thu 03 Apr 2025 00:13:44 +0000 Manifest next update: Thu 10 Apr 2025 00:13:44 +0000 Files and hashes: 1: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl (hash: jiVAIzXO49qxHZQpD03Bx7E+V5au66lLk+sIJiOlpdE=) 2: BD115AB24B7C11ECA63C0038C4F9AE02.roa (hash: IcEuGPt4GTNEbPQpjAanlaif3gO8wRzi48eufGxQr4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F01 Validity Not Before: Apr 3 00:13:44 2025 GMT Not After : Apr 10 00:13:44 2025 GMT Subject: CN=67edd2b9-47c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1e:79:c3:0f:f1:6d:1f:41:61:ae:7d:ca:74: 8b:5a:f7:47:24:23:f2:4a:a5:6c:de:88:82:e5:7e: e6:27:d6:77:3d:44:0d:a3:c7:e0:87:2b:25:95:74: 78:9b:8f:fc:c9:2d:8f:1a:e6:a6:1f:55:6c:9c:3d: 1d:d8:a5:91:77:30:99:73:5f:1e:07:cb:94:50:e2: a6:d3:3c:58:43:2e:6a:c4:89:e9:b4:5e:e0:26:57: c2:01:5a:55:a7:53:35:45:d2:1c:d2:06:28:24:f4: 7f:f6:66:f4:ea:0b:0a:a5:85:1b:4d:a0:c7:8a:fd: 19:1c:bb:1f:50:14:da:a5:d1:9d:ad:af:e3:ea:e2: fa:34:11:aa:53:dc:a4:39:53:f9:55:c8:25:e5:da: fd:bb:98:ea:11:43:02:5e:f2:6a:dd:f3:37:05:30: b4:ff:10:32:6e:f2:9a:29:aa:bc:13:77:a0:e0:bf: 3b:81:56:ee:2a:42:ec:95:02:c2:a7:3c:74:7f:45: 1d:17:25:61:3d:9d:bc:e3:91:c8:ca:3d:32:d9:bf: 04:9c:b9:0b:2b:79:ed:ac:01:c6:ba:2a:95:7e:4f: e5:09:19:de:6f:f0:fb:71:f0:24:bc:2f:5c:f4:54: 2d:e5:54:49:ab:6a:d1:89:3f:01:c5:43:5c:78:65: 27:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DF:86:82:CE:48:76:8C:F9:7B:F4:1F:B3:11:9C:B0:AC:82:C0:80 X509v3 Authority Key Identifier: keyid:5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:08:c3:24:dc:1b:6a:9a:08:a1:1a:0c:1a:53:c8:21:1b:cd: 94:ec:ae:40:b4:7b:8d:f4:97:28:ec:da:e1:de:43:47:17:3b: 46:91:98:c1:6d:be:6b:03:7a:3c:f0:02:c1:96:ba:09:d1:6c: 5d:42:ca:07:07:50:fd:46:f4:ca:71:d6:47:9e:45:2c:c3:6f: 92:e8:71:39:5e:bc:71:29:24:f0:13:38:41:b7:76:b1:20:4f: 84:a0:cd:60:d5:4e:9b:d7:f4:70:dd:aa:c5:b4:2e:00:f2:7d: 2a:d0:be:10:eb:1b:f5:28:58:94:87:4d:98:6e:7e:33:7f:02: d4:9e:72:32:38:ac:85:aa:19:6f:c1:da:d5:45:1c:70:6e:52: c7:d6:46:c3:f3:50:49:51:37:5b:7c:d2:7e:b2:0b:d2:b1:49: ee:2e:66:83:1d:7a:9f:16:66:71:a9:b0:4f:d6:f4:ce:5c:5e: 75:56:00:f6:8a:d5:0b:10:a4:8d:3c:25:2c:c1:dd:c0:75:db: 63:65:1d:97:2a:c4:e6:87:8f:b3:b1:ca:23:75:df:83:1e:55: b0:06:29:7b:6b:6e:5a:96:c1:00:e2:a2:c5:5b:e9:0e:57:44: db:3a:4d:99:9e:ee:2d:11:da:5b:e6:e1:40:ad:88:7a:4e:a9: d5:a5:9c:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGMDExMTAvBgNVBAUTKDVFQkRBN0ZBQTgwMUM1QTI3NERDMjNEMTcxRjg4QjQ2 QTExRTQxNTQwHhcNMjUwNDAzMDAxMzQ0WhcNMjUwNDEwMDAxMzQ0WjAYMRYwFAYD VQQDEw02N2VkZDJiOS00N2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0B55ww/xbR9BYa59ynSLWvdHJCPySqVs3oiC5X7mJ9Z3PUQNo8fghysllXR4 m4/8yS2PGuamH1VsnD0d2KWRdzCZc18eB8uUUOKm0zxYQy5qxInptF7gJlfCAVpV p1M1RdIc0gYoJPR/9mb06gsKpYUbTaDHiv0ZHLsfUBTapdGdra/j6uL6NBGqU9yk OVP5Vcgl5dr9u5jqEUMCXvJq3fM3BTC0/xAybvKaKaq8E3eg4L87gVbuKkLslQLC pzx0f0UdFyVhPZ2845HIyj0y2b8EnLkLK3ntrAHGuiqVfk/lCRneb/D7cfAkvC9c 9FQt5VRJq2rRiT8BxUNceGUniwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXfhoLO SHaM+Xv0H7MRnLCsgsCAMB8GA1UdIwQYMBaAFF69p/qoAcWidNwj0XH4i0ahHkFU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYwMS9BNzAwQTg0NDRC NzgxMUVDODZFNTBBMzBDNEY5QUUwMi9YcjJuLXFnQnhhSjAzQ1BSY2ZpTFJxRWVR VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hyMm4tcWdCeGFKMDNDUFJjZmlMUnFFZVFWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYwMS9BNzAwQTg0NDRCNzgxMUVDODZFNTBBMzBDNEY5QUUwMi9YcjJuLXFnQnhh SjAzQ1BSY2ZpTFJxRWVRVlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9CMMk3BtqmgihGgwaU8ghG82U7K5AtHuN9Jco7Nrh3kNHFztGkZjB bb5rA3o88ALBlroJ0WxdQsoHB1D9RvTKcdZHnkUsw2+S6HE5XrxxKSTwEzhBt3ax IE+EoM1g1U6b1/Rw3arFtC4A8n0q0L4Q6xv1KFiUh02Ybn4zfwLUnnIyOKyFqhlv wdrVRRxwblLH1kbD81BJUTdbfNJ+sgvSsUnuLmaDHXqfFmZxqbBP1vTOXF51VgD2 itULEKSNPCUswd3AddtjZR2XKsTmh4+zscojdd+DHlWwBil7a25alsEA4qLFW+kO V0TbOk2Znu4tEdpb5uFArYh6TqnVpZx3 -----END CERTIFICATE-----Generated at Fri Apr 4 21:12:33 2025 by rpki-client