$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: 0RJZRESdQozv+wW27HjM2ZAHsicm8mZ+i3K84Sjd3Ss= Subject key identifier: A0:AA:72:CE:3E:C9:76:A5:0D:78:CC:86:86:3B:FF:BF:F2:D3:CA:56 Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: FE Signing time: Thu 03 Apr 2025 04:20:54 +0000 Manifest this update: Thu 03 Apr 2025 04:20:54 +0000 Manifest next update: Thu 10 Apr 2025 04:20:54 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: vIP6WlDaxVMUFXlOS9SPEtUE9+olmuwIgsm5rrPEbuE=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: sPbI4s6oqdRUOiNi18Y1/q6iWjlYMVf5hdTw+xVFaMo=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: AVP7CNVml5F9ogjZv8lDcpc3+J0u+jj8KPjr/y0/brc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28 Validity Not Before: Apr 3 04:20:54 2025 GMT Not After : Apr 10 04:20:54 2025 GMT Subject: CN=67ee0ca6-4d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:ae:9a:b8:bd:56:a7:d9:46:f5:62:f8:97: 83:54:2a:b9:07:db:6a:4d:75:98:75:cb:50:61:ee: 72:21:68:27:20:79:60:9a:81:0b:92:44:3d:fc:91: 0c:4f:72:db:02:1c:11:d4:b8:54:d4:71:2b:dd:93: 06:be:47:37:0a:92:d1:15:51:61:0a:c0:7e:60:b2: e9:94:27:af:be:ae:c7:3b:95:2b:f6:85:6e:79:b8: d3:59:54:ef:e1:8a:87:33:6b:cd:6c:51:b0:05:0e: 8a:74:83:08:1f:c1:3e:47:51:3a:58:0f:ae:7c:6a: 2c:0b:10:59:fe:94:07:bd:eb:52:cb:47:e5:5f:2f: fa:dd:00:52:c2:20:44:95:bb:95:3a:0a:9c:78:90: fc:23:86:3c:9b:59:de:90:f8:97:c2:b6:c0:e1:ce: fc:c5:4b:13:18:ee:19:09:9b:64:7f:19:58:4d:58: c8:f6:f7:d9:f0:4b:59:16:ee:82:12:21:8f:84:27: 4a:74:d5:52:cb:77:09:ac:c3:9a:6c:bd:ff:3a:5b: 50:18:dc:16:20:78:e1:62:c1:81:33:1f:fe:eb:30: d6:59:00:b3:1c:27:bb:6f:69:03:93:e6:8c:7c:18: a0:ea:71:cb:42:7e:c7:b4:20:76:99:f5:4d:3d:b8: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AA:72:CE:3E:C9:76:A5:0D:78:CC:86:86:3B:FF:BF:F2:D3:CA:56 X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0c:29:b3:29:ba:6b:2a:a8:a2:11:8e:42:73:11:fe:08:8e: fb:f6:56:ac:90:15:91:e4:a7:f4:e3:11:02:99:e5:78:85:55: d3:52:58:12:c0:f4:96:a4:50:95:07:c5:f3:6f:66:e8:77:35: 99:82:f4:ec:ca:8e:f3:7a:37:43:82:59:31:80:3b:09:6f:59: 49:94:3f:00:93:3a:05:77:1f:c8:b2:f9:2e:29:c1:3e:e3:d5: 6b:57:b6:3e:e4:c9:43:de:65:c5:64:91:6c:b5:b5:5a:7f:ea: c7:f8:3d:6c:98:ed:1e:66:b0:5b:90:b0:28:0d:cd:2f:d5:34: 2a:2e:fd:50:06:50:cc:68:70:19:bb:73:4e:1b:76:94:21:4b: b1:50:8d:0f:2d:78:4a:20:bd:5b:a1:f3:fd:68:25:20:3d:cc: f6:b7:9b:bb:e8:22:21:93:66:85:7a:0b:25:5b:84:be:0b:b7: db:c4:a1:18:94:30:29:1c:92:f7:ca:d0:42:d1:a7:d8:a9:c1: 76:17:d1:c9:f9:ec:73:e2:8f:cf:e2:13:83:53:c9:1f:2e:84: b2:63:5a:b2:76:31:5d:6f:07:ea:a7:a1:12:e8:f9:1c:1e:3d: 1b:06:af:b4:71:20:52:cf:2f:68:61:03:53:0f:ca:c8:3e:a0: 3e:28:58:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjUwNDAzMDQyMDU0WhcNMjUwNDEwMDQyMDU0WjAYMRYwFAYD VQQDEw02N2VlMGNhNi00ZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxluumri9VqfZRvVi+JeDVCq5B9tqTXWYdctQYe5yIWgnIHlgmoELkkQ9/JEM T3LbAhwR1LhU1HEr3ZMGvkc3CpLRFVFhCsB+YLLplCevvq7HO5Ur9oVuebjTWVTv 4YqHM2vNbFGwBQ6KdIMIH8E+R1E6WA+ufGosCxBZ/pQHvetSy0flXy/63QBSwiBE lbuVOgqceJD8I4Y8m1nekPiXwrbA4c78xUsTGO4ZCZtkfxlYTVjI9vfZ8EtZFu6C EiGPhCdKdNVSy3cJrMOabL3/OltQGNwWIHjhYsGBMx/+6zDWWQCzHCe7b2kDk+aM fBig6nHLQn7HtCB2mfVNPbjSuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCqcs4+ yXalDXjMhoY7/7/y08pWMB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANDCmzKbprKqiiEY5CcxH+CI779laskBWR5Kf04xECmeV4hVXTUlgS wPSWpFCVB8Xzb2bodzWZgvTsyo7zejdDglkxgDsJb1lJlD8AkzoFdx/IsvkuKcE+ 49VrV7Y+5MlD3mXFZJFstbVaf+rH+D1smO0eZrBbkLAoDc0v1TQqLv1QBlDMaHAZ u3NOG3aUIUuxUI0PLXhKIL1bofP9aCUgPcz2t5u76CIhk2aFegslW4S+C7fbxKEY lDApHJL3ytBC0afYqcF2F9HJ+exz4o/P4hODU8kfLoSyY1qydjFdbwfqp6ES6Pkc Hj0bBq+0cSBSzy9oYQNTD8rIPqA+KFiU -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:04 2025 by rpki-client