$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: W3xfH8+Rci7E5UCyhRaO0LfJzxIbAg7dOhG7FfTkNOI= Subject key identifier: 78:F7:DD:97:90:7F:B4:AE:5B:82:CD:60:2B:EB:AB:3A:96:C1:57:57 Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 0103 Signing time: Thu 03 Apr 2025 04:26:29 +0000 Manifest this update: Thu 03 Apr 2025 04:26:28 +0000 Manifest next update: Thu 10 Apr 2025 04:26:28 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: twaogdWroxdMGp1Q8Y/eY/rWpCAJqE60psHXiUrEMo4=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: 3NZc5h6ed9BUlmgYjohUHdHLn8ZtKRYjymamcmwqc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA Validity Not Before: Apr 3 04:26:28 2025 GMT Not After : Apr 10 04:26:28 2025 GMT Subject: CN=67ee0df4-4df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:76:61:24:fe:7f:de:bc:64:2b:54:2f:f3:28: 3e:74:3d:87:87:d4:22:af:3c:db:57:a2:fb:37:41: 72:40:c7:34:cb:b5:66:c8:d2:80:98:c0:42:f2:93: d0:3e:3a:be:f2:76:e5:b8:39:95:12:44:fb:1b:00: 98:62:51:33:21:e1:52:43:15:e1:62:6e:04:9c:9a: 4c:f6:3f:b4:a7:62:f5:27:5a:c2:97:d5:dc:2b:ab: 37:78:19:84:f7:20:71:9b:55:03:da:4f:fd:fb:96: 21:8a:ee:2c:2d:b7:e8:11:df:d9:fb:1c:0a:1e:54: 34:39:94:0e:f2:22:f7:7f:af:d4:57:f1:8a:ea:82: a9:d2:19:c1:14:bc:a4:a9:81:1d:76:8d:d2:22:cc: 21:04:c6:a9:a6:f5:3f:be:6f:b0:93:96:e8:51:d5: 8e:b3:15:f4:d3:8d:cd:91:3c:18:71:39:23:eb:0f: 70:d5:a7:04:5b:d2:11:47:13:b5:b7:1c:17:aa:f6: da:ce:69:64:05:76:cf:ab:bf:ab:a9:de:86:f6:84: af:75:4a:e8:99:55:6a:6d:44:94:4d:24:12:8f:34: 9d:9e:95:9e:0e:bc:45:1b:3d:9f:d4:1d:1f:d8:47: 91:0c:6c:4b:a8:62:7e:cc:d0:fa:00:a7:a8:8f:da: 35:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F7:DD:97:90:7F:B4:AE:5B:82:CD:60:2B:EB:AB:3A:96:C1:57:57 X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:df:d6:3d:b0:6e:72:f3:f7:87:5c:09:28:7a:18:98:58:23: 2b:05:ad:ef:c0:6b:86:9e:cd:aa:98:c2:49:5b:c1:b6:38:b9: 86:a6:15:54:9f:c7:23:bb:83:7e:99:5f:43:5b:be:67:70:6b: ce:68:e3:c5:a0:aa:42:31:9a:b9:d1:35:c0:bb:67:a6:c1:91: d1:ca:89:67:9f:9e:8f:f0:b5:55:f3:fd:cd:c1:f3:b4:66:a3: 7b:0a:74:64:24:8b:ec:d1:82:82:50:97:40:ed:a1:90:59:79: b7:d4:f8:90:53:5a:37:33:ee:b8:26:5f:11:d0:c3:62:b4:34: 6c:56:e2:86:68:c4:07:83:50:af:9c:2a:ab:3d:ff:f9:0b:a7: 27:85:3b:40:3b:42:29:43:76:23:78:ef:f6:e4:96:aa:ab:46: ba:a4:30:01:f3:1d:c6:55:c0:99:a1:e1:1a:3e:09:28:77:f3: a9:c0:58:22:6c:a3:8c:f3:95:ba:1a:3e:a2:13:cd:a7:d4:69: 3c:56:78:47:6a:78:92:a1:0c:ba:64:ed:bc:4e:fb:c9:0a:cf: 20:19:91:eb:16:96:78:8e:80:3d:1c:ed:04:1e:ff:ce:48:21: 5f:f8:fa:8a:89:80:fb:80:3e:f5:41:8a:6f:ed:a3:f0:57:17: 94:eb:af:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUwNDAzMDQyNjI4WhcNMjUwNDEwMDQyNjI4WjAYMRYwFAYD VQQDEw02N2VlMGRmNC00ZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHZhJP5/3rxkK1Qv8yg+dD2Hh9QirzzbV6L7N0FyQMc0y7VmyNKAmMBC8pPQ Pjq+8nbluDmVEkT7GwCYYlEzIeFSQxXhYm4EnJpM9j+0p2L1J1rCl9XcK6s3eBmE 9yBxm1UD2k/9+5Yhiu4sLbfoEd/Z+xwKHlQ0OZQO8iL3f6/UV/GK6oKp0hnBFLyk qYEddo3SIswhBMappvU/vm+wk5boUdWOsxX0043NkTwYcTkj6w9w1acEW9IRRxO1 txwXqvbazmlkBXbPq7+rqd6G9oSvdUromVVqbUSUTSQSjzSdnpWeDrxFGz2f1B0f 2EeRDGxLqGJ+zND6AKeoj9o15QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj33ZeQ f7SuW4LNYCvrqzqWwVdXMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh39Y9sG5y8/eHXAkoehiYWCMrBa3vwGuGns2qmMJJW8G2OLmGphVU n8cju4N+mV9DW75ncGvOaOPFoKpCMZq50TXAu2emwZHRyolnn56P8LVV8/3NwfO0 ZqN7CnRkJIvs0YKCUJdA7aGQWXm31PiQU1o3M+64Jl8R0MNitDRsVuKGaMQHg1Cv nCqrPf/5C6cnhTtAO0IpQ3YjeO/25Jaqq0a6pDAB8x3GVcCZoeEaPgkod/OpwFgi bKOM85W6Gj6iE82n1Gk8VnhHaniSoQy6ZO28TvvJCs8gGZHrFpZ4joA9HO0EHv/O SCFf+PqKiYD7gD71QYpv7aPwVxeU669x -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:23 2025 by rpki-client