$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: gL6Drb6eXuplXyFac6eqL9J0cu2aQDOuWLsEFm7ulo4= Subject key identifier: 33:48:2B:F2:66:B1:5F:64:70:8C:DC:5E:87:16:A8:98:3D:0E:E6:DC Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: FE Signing time: Sat 05 Apr 2025 04:51:11 +0000 Manifest this update: Sat 05 Apr 2025 04:51:11 +0000 Manifest next update: Sat 12 Apr 2025 04:51:11 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: pc86UIdfcNPzw9go2sS1nHdx8JmaQMqRHySMg6hle84=) 2: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: XfIHm/MhIPSh6jZecIK72twugLDWV563OBM4HVySVuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F Validity Not Before: Apr 5 04:51:11 2025 GMT Not After : Apr 12 04:51:11 2025 GMT Subject: CN=67f0b6bf-a9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:c5:36:04:96:2f:f9:8e:fe:87:34:56:a5: 66:32:29:52:64:4a:07:b7:ee:ad:55:3c:22:9b:2a: 7f:0f:bb:d1:8e:3c:dd:f5:74:c1:f6:63:4a:29:36: 13:96:d4:fc:7a:bd:d4:74:56:51:86:39:10:50:c1: 27:35:c1:d0:90:7c:ab:45:38:93:c7:cd:b0:d5:7d: bc:65:f4:76:a1:98:e6:47:26:13:6f:b5:58:52:8d: 70:ab:6f:36:3b:a4:d7:b6:a0:ed:2d:a5:69:31:bd: 34:c2:d7:ba:17:19:31:04:f5:29:86:c2:8b:f9:4b: d7:25:c7:04:ba:fe:0e:b7:69:38:99:91:f5:3f:39: 3d:f3:67:fd:de:19:b6:52:7e:42:82:45:c3:e3:a8: 09:0f:ff:a6:e9:76:56:9e:b3:d9:70:5e:bd:82:a4: 76:2b:b5:a8:8c:03:19:5a:c4:37:49:2c:46:1f:e7: 79:41:40:3e:47:b8:76:0d:43:e1:1e:b0:81:d0:b2: e5:f0:6a:a8:68:6f:31:12:e8:64:55:af:4e:48:26: 56:ae:29:51:25:ba:4f:53:0e:fd:fd:d5:a3:f3:cf: 83:b6:25:18:5f:54:c4:bf:29:18:68:d9:ca:ca:7b: 5a:39:d9:50:d3:31:ae:48:01:fa:93:ff:3e:bb:29: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:48:2B:F2:66:B1:5F:64:70:8C:DC:5E:87:16:A8:98:3D:0E:E6:DC X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:af:9f:4b:d5:7f:39:8a:f8:3b:7c:8f:c6:18:d6:4e:79:33: 6d:1a:d3:e3:37:44:a2:7f:57:47:2b:a2:8c:c9:35:0b:f3:03: 27:8a:fc:1a:6f:36:84:ad:d7:5d:31:f5:4a:7a:9f:b9:88:92: 32:06:ec:96:70:31:73:02:a2:99:88:75:49:26:94:23:4d:f4: d1:b3:5c:dd:c0:f6:85:6f:d3:a6:cb:72:88:e1:ef:6e:a2:65: 78:4e:84:40:45:8b:97:7b:e0:0c:8d:39:51:63:c4:a4:2c:14: b0:a4:7a:f1:4b:bd:8e:59:e9:6e:4a:a4:e0:2d:84:08:41:09: 7f:db:2d:22:f2:0d:9a:7c:a8:8a:79:49:33:65:d7:6b:d0:32: 5c:17:22:fa:36:a7:49:08:10:db:1d:3a:c7:1e:6b:cf:b0:78: a9:50:27:6b:64:f8:25:a8:b8:8c:a9:2a:a2:eb:d8:c2:31:96: f7:ee:cd:df:29:f2:ce:ce:44:d7:e7:34:f0:84:e3:5a:43:57: 4e:83:5a:71:5a:52:99:e4:f6:00:3a:00:d4:f9:4f:b2:24:b9: ee:b7:b8:4c:6c:d3:e7:4e:54:8e:9a:63:60:ef:3e:f3:5a:83: cf:65:06:b1:67:51:c0:e9:6f:16:cf:0e:48:f5:c6:9e:4d:8b: e0:50:1c:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjUwNDA1MDQ1MTExWhcNMjUwNDEyMDQ1MTExWjAYMRYwFAYD VQQDEw02N2YwYjZiZi1hOWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdLFNgSWL/mO/oc0VqVmMilSZEoHt+6tVTwimyp/D7vRjjzd9XTB9mNKKTYT ltT8er3UdFZRhjkQUMEnNcHQkHyrRTiTx82w1X28ZfR2oZjmRyYTb7VYUo1wq282 O6TXtqDtLaVpMb00wte6FxkxBPUphsKL+UvXJccEuv4Ot2k4mZH1Pzk982f93hm2 Un5CgkXD46gJD/+m6XZWnrPZcF69gqR2K7WojAMZWsQ3SSxGH+d5QUA+R7h2DUPh HrCB0LLl8GqoaG8xEuhkVa9OSCZWrilRJbpPUw79/dWj88+DtiUYX1TEvykYaNnK yntaOdlQ0zGuSAH6k/8+uynt9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNIK/Jm sV9kcIzcXocWqJg9DubcMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjr59L1X85ivg7fI/GGNZOeTNtGtPjN0Sif1dHK6KMyTUL8wMnivwa bzaErdddMfVKep+5iJIyBuyWcDFzAqKZiHVJJpQjTfTRs1zdwPaFb9Omy3KI4e9u omV4ToRARYuXe+AMjTlRY8SkLBSwpHrxS72OWeluSqTgLYQIQQl/2y0i8g2afKiK eUkzZddr0DJcFyL6NqdJCBDbHTrHHmvPsHipUCdrZPglqLiMqSqi69jCMZb37s3f KfLOzkTX5zTwhONaQ1dOg1pxWlKZ5PYAOgDU+U+yJLnut7hMbNPnTlSOmmNg7z7z WoPPZQaxZ1HA6W8Wzw5I9caeTYvgUByc -----END CERTIFICATE-----Generated at Sun Apr 6 06:28:09 2025 by rpki-client