$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: UyUCks95OnUlFme2nv5wOZ5hbuLVJtDQk2ZuaTsjddQ= Subject key identifier: FD:54:20:1A:67:61:89:33:31:68:F2:38:34:B5:1B:8E:F2:3F:F7:47 Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: 45 Signing time: Tue 15 Apr 2025 05:14:59 +0000 Manifest this update: Tue 15 Apr 2025 05:14:58 +0000 Manifest next update: Tue 22 Apr 2025 05:14:58 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: h8ZGLRKTgx9w+1NgPuO7b+485sRxR6OOtWu/QTxiWgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 05:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: Apr 15 05:14:58 2025 GMT Not After : Apr 22 05:14:58 2025 GMT Subject: CN=67fdeb53-6909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:89:08:2a:62:71:5a:dd:82:14:25:f6:63:fd: b4:59:dd:83:8c:a9:8b:79:1f:3d:b5:0a:8a:86:18: 52:99:12:05:89:7b:e2:11:b4:69:22:01:1b:30:19: c4:79:cf:8e:95:46:e0:9f:85:e2:8f:63:83:b7:92: f8:c3:4c:80:02:49:99:4b:a4:3f:02:50:89:44:b3: 46:b9:c3:fb:3e:f9:c4:5d:1b:55:49:3d:01:e0:01: a2:69:21:7a:d3:e4:7f:50:03:ed:d6:d5:b4:1d:f7: 43:8d:7b:a6:68:c9:7d:93:52:03:a3:f1:91:3e:96: a5:b6:c9:b3:35:9b:8e:99:e3:d1:d9:f3:cd:24:60: 15:36:9e:2d:cd:d0:13:a8:79:81:8c:4a:55:d7:1a: 24:d2:64:9b:d2:5a:a5:62:08:46:9a:35:8d:12:18: f2:d6:40:2b:ec:27:b9:e4:b4:5e:cc:75:7b:2a:73: 00:99:8e:12:18:ad:50:16:aa:8b:c4:e1:75:32:bf: c6:99:32:b7:43:ba:53:62:ac:7b:86:b3:46:5a:76: de:4c:30:0c:72:7f:a9:7e:52:65:2b:e1:a3:25:6b: 77:cd:a6:20:29:58:10:7d:89:45:3b:4b:80:a7:d1: 13:a8:50:9f:5c:69:fa:b8:86:9f:66:30:26:1d:09: d9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:54:20:1A:67:61:89:33:31:68:F2:38:34:B5:1B:8E:F2:3F:F7:47 X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:56:5d:db:08:28:ed:18:3f:a0:22:8e:a6:86:f1:30:5e:1f: a8:d8:47:b2:2a:3b:ad:16:2d:70:b1:8e:00:94:cd:2c:b9:85: b5:df:79:b7:2a:9d:66:40:2b:c9:d5:4a:82:45:de:dc:dc:76: fd:4f:1f:23:1f:62:8c:22:c1:bb:dc:42:91:55:8a:be:c8:24: 9a:82:0f:86:48:ee:02:11:58:ea:ab:4a:ef:be:61:ff:95:9d: c8:a3:f8:25:82:14:6f:34:7d:6f:f1:12:d7:fe:4f:a2:97:ab: dd:eb:cd:d8:71:26:fb:a3:0f:03:2a:70:01:92:4d:a7:5d:8b: 0d:6d:e5:26:f2:d6:c8:78:59:4f:70:16:52:29:6c:f1:24:4d: cf:8f:2f:f0:44:10:c5:95:8c:98:ba:b2:06:aa:d2:43:3b:7a: ff:d0:77:9f:66:e4:d2:49:b9:39:d7:04:59:60:f5:ac:ce:b0: 54:ea:82:32:08:7a:43:e8:43:01:dd:de:78:4c:8e:a2:3e:3a: b9:b2:94:ed:5d:cb:9a:c4:8d:6f:28:c5:54:77:27:b3:4e:76: 1b:17:e0:95:0a:af:31:20:1a:5a:39:1d:a1:a1:cc:72:80:96: a0:60:10:f1:30:33:da:00:b3:d9:d8:35:3c:0a:df:ac:76:35: 02:2e:45:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDg1NTExMC8GA1UEBRMoNUVGNUUxQTU4NUM0OEUyQkM0NTBCQTcyRjRDMzEzNDY4 MEU1MkIwRDAeFw0yNTA0MTUwNTE0NThaFw0yNTA0MjIwNTE0NThaMBgxFjAUBgNV BAMTDTY3ZmRlYjUzLTY5MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqiQgqYnFa3YIUJfZj/bRZ3YOMqYt5Hz21CoqGGFKZEgWJe+IRtGkiARswGcR5 z46VRuCfheKPY4O3kvjDTIACSZlLpD8CUIlEs0a5w/s++cRdG1VJPQHgAaJpIXrT 5H9QA+3W1bQd90ONe6ZoyX2TUgOj8ZE+lqW2ybM1m46Z49HZ880kYBU2ni3N0BOo eYGMSlXXGiTSZJvSWqViCEaaNY0SGPLWQCvsJ7nktF7MdXsqcwCZjhIYrVAWqovE 4XUyv8aZMrdDulNirHuGs0Zadt5MMAxyf6l+UmUr4aMla3fNpiApWBB9iUU7S4Cn 0ROoUJ9cafq4hp9mMCYdCdnNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/VQgGmdh iTMxaPI4NLUbjvI/90cwHwYDVR0jBBgwFoAUXvXhpYXEjivEULpy9MMTRoDlKw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwODU1L0UxQUU1NDdDQjEz ODExRUY5QjUwMzMxMkM0RjlBRTAyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHZYaHBZWEVqaXZFVUxweTlNTVRSb0RsS3cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw ODU1L0UxQUU1NDdDQjEzODExRUY5QjUwMzMxMkM0RjlBRTAyL1h2WGhwWVhFaml2 RVVMcHk5TU1UUm9EbEt3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGtWXdsIKO0YP6AijqaG8TBeH6jYR7IqO60WLXCxjgCUzSy5hbXfebcq nWZAK8nVSoJF3tzcdv1PHyMfYowiwbvcQpFVir7IJJqCD4ZI7gIRWOqrSu++Yf+V ncij+CWCFG80fW/xEtf+T6KXq93rzdhxJvujDwMqcAGSTaddiw1t5Sby1sh4WU9w FlIpbPEkTc+PL/BEEMWVjJi6sgaq0kM7ev/Qd59m5NJJuTnXBFlg9azOsFTqgjII ekPoQwHd3nhMjqI+OrmylO1dy5rEjW8oxVR3J7NOdhsX4JUKrzEgGlo5HaGhzHKA lqBgEPEwM9oAs9nYNTwK36x2NQIuRZQ= -----END CERTIFICATE-----Generated at Wed Apr 16 17:19:27 2025 by rpki-client