$ rpki-client -vvf rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft File: XHIqJhQciPfNQPObN0raf7wfmx8.mft (raw, json) Hash identifier: gNVaSosiWCXBgdq2EWi5hEpaIh8RLR4g0szfXFAg+NU= Subject key identifier: 12:65:C7:16:78:2C:F5:D4:D0:1E:D7:5F:AF:A9:EA:97:95:1F:66:A5 Authority key identifier: 5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F Certificate issuer: /CN=A91D824A/serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft Manifest number: 7B Signing time: Thu 03 Apr 2025 05:58:10 +0000 Manifest this update: Thu 03 Apr 2025 05:58:10 +0000 Manifest next update: Thu 10 Apr 2025 05:58:10 +0000 Files and hashes: 1: XHIqJhQciPfNQPObN0raf7wfmx8.crl (hash: SWoU0erNKgE3O8loes5tvjsqZTQZveiDSE0XYptIxdg=) 2: AA5F20585B9A11EFBB8CB141C4F9AE02.roa (hash: xwJyyBO1pg9qb2VE0/6cn7we8wuOMnw/nqF3R5gu+VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D824A Validity Not Before: Apr 3 05:58:10 2025 GMT Not After : Apr 10 05:58:10 2025 GMT Subject: CN=67ee2372-4b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ae:5e:d4:fc:52:7f:fb:67:da:d7:e9:23:04: 88:86:bf:6a:5d:5d:23:e0:44:41:a6:88:64:e7:18: 42:06:fd:94:c8:ac:30:ba:d0:9d:c1:07:94:23:c8: a2:b8:76:07:59:27:e6:33:8d:84:e9:6a:c2:9e:ab: 97:b2:c2:69:93:29:d3:cb:9a:95:ff:71:bc:c0:a3: 16:69:9f:d5:94:af:b8:9a:92:4e:8c:bb:ed:9a:45: 9a:39:db:29:92:af:93:81:cd:a4:21:63:7f:aa:36: 1b:7c:40:cf:59:d2:dd:d9:0f:eb:27:88:ad:7e:df: b0:52:8a:e4:64:9c:16:a1:2b:94:73:ec:97:b0:60: 7c:24:ca:be:8a:46:32:4c:a8:52:ea:9b:ab:5b:85: d1:9b:33:b3:88:0e:b2:96:0d:6f:7b:25:f4:ae:74: 7d:f6:5b:41:4b:5d:75:f2:30:ff:1c:34:cc:aa:c7: 9d:c9:c0:08:6b:78:08:34:dd:83:64:9f:e7:2d:3f: e5:15:98:98:40:be:6b:bb:f8:ad:69:b1:5f:80:4f: d8:02:1f:60:0c:92:6b:25:96:62:54:41:ec:21:f3: 08:35:7e:69:82:2f:49:e2:66:ad:d1:7d:df:87:44: 5c:54:f2:2f:2c:bd:79:d9:42:33:7a:e7:4f:67:be: 9c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:65:C7:16:78:2C:F5:D4:D0:1E:D7:5F:AF:A9:EA:97:95:1F:66:A5 X509v3 Authority Key Identifier: keyid:5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:60:e4:e6:b8:0b:2d:73:9a:a6:b9:c7:e0:78:01:c7:87:0a: 93:f0:f2:e6:93:1a:23:be:3e:b4:98:26:e0:3a:db:f6:c1:30: 92:9c:79:de:fd:13:f4:0f:43:18:32:e5:4b:3a:a3:60:6c:01: 33:cf:dc:57:ea:28:10:9a:08:2e:c2:6d:db:12:e0:06:46:13: 5c:aa:59:2a:f1:2a:53:66:63:a4:57:c7:d5:d2:4e:65:d5:c0: 86:32:35:bf:ad:f4:23:eb:94:6f:88:2e:0f:56:5b:13:95:18: dd:29:d5:c6:f5:90:0c:c0:95:ae:2e:59:b8:db:d2:59:8b:3d: 9a:b8:fb:2f:40:de:b2:1c:89:4b:ed:65:5f:0d:9b:88:23:af: 68:2b:54:55:ac:da:64:e3:a0:fa:92:eb:c0:66:b7:e3:61:da: 07:f9:4f:da:58:70:bb:75:2f:4d:ed:cd:23:e4:dd:52:48:8a: b7:8e:ae:ae:e5:2e:e4:1b:12:e7:85:44:db:e2:39:cf:e3:55: 41:85:56:e5:1b:51:06:df:b0:6d:d0:5d:c1:dd:4d:4d:4a:f6: 61:66:48:77:96:46:a1:a9:61:9a:92:65:31:5f:d5:a5:87:9d: d6:f2:f4:29:6d:b7:b1:71:62:87:98:b2:df:91:ca:a9:60:11: e0:fb:bc:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODI0QTExMC8GA1UEBRMoNUM3MjJBMjYxNDFDODhGN0NENDBGMzlCMzc0QURBN0ZC QzFGOUIxRjAeFw0yNTA0MDMwNTU4MTBaFw0yNTA0MTAwNTU4MTBaMBgxFjAUBgNV BAMTDTY3ZWUyMzcyLTRiNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrrl7U/FJ/+2fa1+kjBIiGv2pdXSPgREGmiGTnGEIG/ZTIrDC60J3BB5QjyKK4 dgdZJ+YzjYTpasKeq5eywmmTKdPLmpX/cbzAoxZpn9WUr7iakk6Mu+2aRZo52ymS r5OBzaQhY3+qNht8QM9Z0t3ZD+sniK1+37BSiuRknBahK5Rz7JewYHwkyr6KRjJM qFLqm6tbhdGbM7OIDrKWDW97JfSudH32W0FLXXXyMP8cNMyqx53JwAhreAg03YNk n+ctP+UVmJhAvmu7+K1psV+AT9gCH2AMkmsllmJUQewh8wg1fmmCL0niZq3Rfd+H RFxU8i8svXnZQjN6509nvpwPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEmXHFngs 9dTQHtdfr6nql5UfZqUwHwYDVR0jBBgwFoAUXHIqJhQciPfNQPObN0raf7wfmx8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MjRBLzRBREYzM0ZDNUI5 QTExRUY4MzA3RjU0MEM0RjlBRTAyL1hISXFKaFFjaVBmTlFQT2JOMHJhZjd3Zm14 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEhJcUpoUWNpUGZOUVBPYk4wcmFmN3dmbXg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MjRBLzRBREYzM0ZDNUI5QTExRUY4MzA3RjU0MEM0RjlBRTAyL1hISXFKaFFjaVBm TlFQT2JOMHJhZjd3Zm14OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIdg5Oa4Cy1zmqa5x+B4AceHCpPw8uaTGiO+PrSYJuA62/bBMJKced79 E/QPQxgy5Us6o2BsATPP3FfqKBCaCC7CbdsS4AZGE1yqWSrxKlNmY6RXx9XSTmXV wIYyNb+t9CPrlG+ILg9WWxOVGN0p1cb1kAzAla4uWbjb0lmLPZq4+y9A3rIciUvt ZV8Nm4gjr2grVFWs2mTjoPqS68Bmt+Nh2gf5T9pYcLt1L03tzSPk3VJIireOrq7l LuQbEueFRNviOc/jVUGFVuUbUQbfsG3QXcHdTU1K9mFmSHeWRqGpYZqSZTFf1aWH ndby9Cltt7FxYoeYst+RyqlgEeD7vFI= -----END CERTIFICATE-----Generated at Fri Apr 4 18:16:54 2025 by rpki-client