$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft File: xCoYwre3JR8lBvX6J4oWLoRETaY.mft (raw, json) Hash identifier: GsMGuTEEyA2t/vVuw1u0rwjGaEvHpk9J6TUl/ps0VeU= Subject key identifier: E1:6D:A7:AD:B2:03:AF:B7:C6:C9:45:78:F5:B1:6F:FF:7D:68:29:4D Authority key identifier: C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6 Certificate issuer: /CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6 Certificate serial: 0494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft Manifest number: 048E Signing time: Thu 03 Apr 2025 00:02:54 +0000 Manifest this update: Thu 03 Apr 2025 00:02:54 +0000 Manifest next update: Thu 10 Apr 2025 00:02:54 +0000 Files and hashes: 1: xCoYwre3JR8lBvX6J4oWLoRETaY.crl (hash: kWZISmoMbzbaXYZdN0FQokfOaZp7NbZAu+d1EKVeJaI=) 2: 980E2450325111EC93E97C35C4F9AE02.roa (hash: HYG5e8jfKhRbtteoZY2zvEiilxliMZJVXIBP6kOt6Xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1172 (0x494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7740 Validity Not Before: Apr 3 00:02:54 2025 GMT Not After : Apr 10 00:02:54 2025 GMT Subject: CN=67edd02e-e49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fb:35:d6:01:94:12:de:aa:f2:3d:4f:ce:6f: 63:ad:20:90:32:bc:64:3d:c8:01:22:a6:23:ef:ba: a9:f5:a1:b6:57:3a:d0:0e:ed:7f:12:6d:13:ec:ed: 96:ab:5e:98:a4:b6:6f:53:6f:1e:a2:71:9c:ae:f1: 1f:75:dc:8a:ce:83:5e:e0:76:44:ab:a8:25:2a:53: ac:70:8c:f9:c0:d3:08:5e:4d:b1:df:97:23:e1:d8: 0d:43:29:d7:1a:87:f9:2a:57:39:e5:33:7e:e1:d7: 20:ae:dc:65:8e:0d:54:2d:22:4f:92:64:c6:09:0a: 1c:32:dc:ab:54:d1:2e:b6:73:b9:4f:6d:44:34:d5: 73:9e:62:3c:88:50:7c:88:26:31:b7:79:92:ae:b7: 6d:9a:c5:da:7b:05:7e:27:e0:86:54:e6:48:0f:07: 75:af:97:2b:41:07:bc:25:9e:e0:1c:a5:ae:e4:f1: 2f:2d:8d:f1:bd:86:5c:2a:57:b3:cc:dc:d7:e2:75: 7f:3a:dd:75:fb:22:f5:91:bf:57:35:79:b6:e9:1e: 0e:a2:5c:c7:e3:6e:c3:41:8a:4b:5c:35:5f:10:b2: 31:76:1e:53:b3:a3:b7:dc:1d:9b:a7:ae:eb:d9:b1: 43:f4:41:0b:ee:07:02:b6:9d:3e:76:af:66:cb:6a: 78:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6D:A7:AD:B2:03:AF:B7:C6:C9:45:78:F5:B1:6F:FF:7D:68:29:4D X509v3 Authority Key Identifier: keyid:C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2b:35:5f:09:94:f1:18:c5:ef:e4:51:6e:07:6b:13:f7:d2: 00:12:3d:88:17:06:0f:47:5a:be:21:c9:05:d5:86:ec:37:db: fa:4c:eb:20:ec:56:25:6f:95:fa:35:70:50:bc:cb:d5:a3:62: f1:35:22:f4:0c:de:b8:89:4d:55:d9:8f:2a:b2:6c:ef:90:59: 60:ff:ae:6d:c3:b1:b1:e9:91:d8:60:7d:e4:31:e3:02:26:e2: f9:8c:0c:5e:91:2f:9e:73:6b:2e:af:c1:bf:71:f9:59:2d:eb: 53:92:28:fa:67:a4:c9:7c:6e:2a:db:ea:9c:b9:78:22:82:52: 9c:b5:82:8d:2e:23:cd:03:95:06:f9:12:13:93:39:d3:e4:b3: 54:63:41:df:ee:1d:eb:43:35:30:80:a9:dc:72:61:b9:0f:98: c5:e9:d4:57:e0:dd:4e:57:ae:13:d1:88:4a:a5:a6:7a:4f:69: 9d:eb:91:37:c6:b2:a0:d5:4d:df:a2:b4:a8:22:cf:aa:3f:df: 45:c5:90:fc:95:69:99:92:c2:30:ff:eb:21:0c:f1:8b:66:ee: ea:7c:aa:3c:a4:af:1b:48:a1:12:d3:13:8c:29:f2:bb:44:c6: 31:3a:45:93:fb:70:d8:45:6e:40:ac:04:29:57:62:4b:37:39: 15:c7:ac:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NDAxMTAvBgNVBAUTKEM0MkExOEMyQjdCNzI1MUYyNTA2RjVGQTI3OEExNjJF ODQ0NDREQTYwHhcNMjUwNDAzMDAwMjU0WhcNMjUwNDEwMDAwMjU0WjAYMRYwFAYD VQQDEw02N2VkZDAyZS1lNDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ps11gGUEt6q8j1Pzm9jrSCQMrxkPcgBIqYj77qp9aG2VzrQDu1/Em0T7O2W q16YpLZvU28eonGcrvEfddyKzoNe4HZEq6glKlOscIz5wNMIXk2x35cj4dgNQynX Gof5Klc55TN+4dcgrtxljg1ULSJPkmTGCQocMtyrVNEutnO5T21ENNVznmI8iFB8 iCYxt3mSrrdtmsXaewV+J+CGVOZIDwd1r5crQQe8JZ7gHKWu5PEvLY3xvYZcKlez zNzX4nV/Ot11+yL1kb9XNXm26R4OolzH427DQYpLXDVfELIxdh5Ts6O33B2bp67r 2bFD9EEL7gcCtp0+dq9my2p40QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFtp62y A6+3xslFePWxb/99aClNMB8GA1UdIwQYMBaAFMQqGMK3tyUfJQb1+ieKFi6ERE2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc0MC9GM0E3MTlERTMy MzMxMUVDQjJCNDM0NjNDNEY5QUUwMi94Q29Zd3JlM0pSOGxCdlg2SjRvV0xvUkVU YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDb1l3cmUzSlI4bEJ2WDZKNG9XTG9SRVRhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc0MC9GM0E3MTlERTMyMzMxMUVDQjJCNDM0NjNDNEY5QUUwMi94Q29Zd3JlM0pS OGxCdlg2SjRvV0xvUkVUYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKKzVfCZTxGMXv5FFuB2sT99IAEj2IFwYPR1q+IckF1YbsN9v6TOsg 7FYlb5X6NXBQvMvVo2LxNSL0DN64iU1V2Y8qsmzvkFlg/65tw7Gx6ZHYYH3kMeMC JuL5jAxekS+ec2sur8G/cflZLetTkij6Z6TJfG4q2+qcuXgiglKctYKNLiPNA5UG +RITkznT5LNUY0Hf7h3rQzUwgKnccmG5D5jF6dRX4N1OV64T0YhKpaZ6T2md65E3 xrKg1U3forSoIs+qP99FxZD8lWmZksIw/+shDPGLZu7qfKo8pK8bSKES0xOMKfK7 RMYxOkWT+3DYRW5ArAQpV2JLNzkVx6yq -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:17 2025 by rpki-client