$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: apXuzZGfhzw2OkkDHlml7txPe2+HCgt0yOZcLoQqbkU= Subject key identifier: AD:1A:DA:56:60:1F:4F:E5:10:6A:29:E4:71:E4:E9:F7:3B:42:C2:25 Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: 95 Signing time: Thu 03 Apr 2025 05:40:01 +0000 Manifest this update: Thu 03 Apr 2025 05:40:00 +0000 Manifest next update: Thu 10 Apr 2025 05:40:00 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: riQIrVXGzj2OHNmy6LXpPyb1mh9YT1cU9MX6KkXHpJo=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: syHq3DbE7eogaPpFVFVsQfYoWLCn9NostuRXmVIHm9Y=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76 Validity Not Before: Apr 3 05:40:00 2025 GMT Not After : Apr 10 05:40:00 2025 GMT Subject: CN=67ee1f30-2b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:a2:57:5f:02:76:e5:4f:79:1f:45:5c:93: 29:41:61:62:08:5c:84:4f:1d:aa:f8:2a:3a:73:f1: 43:1c:ba:2e:d0:00:7b:87:02:35:7a:57:2d:79:46: bd:2a:de:f6:dd:ed:0b:a2:db:32:58:15:85:9d:ca: e2:48:e0:5e:1d:26:87:27:3d:00:e1:63:60:40:af: 3b:aa:b3:55:4e:e5:4d:a5:c1:1f:9b:16:11:1d:18: 2b:6e:ab:89:a0:a2:87:58:9d:c9:cf:70:5f:f9:c8: fc:08:79:e2:3f:81:67:25:b3:1e:09:1f:87:f6:92: 14:17:fd:40:e2:e8:e2:91:de:08:15:f0:55:cd:d6: 73:a0:9d:bf:c5:35:ed:de:67:c2:8e:f1:aa:b2:f4: 51:e4:66:14:13:f8:9d:1d:80:60:d1:15:d1:14:f2: 99:b8:05:c3:56:aa:d1:01:cc:fc:a2:99:7c:75:18: 09:74:f5:4e:91:b4:9c:a4:dc:ce:bf:22:89:39:20: 42:bb:07:ef:98:0c:39:29:47:63:e4:60:ed:31:25: f7:00:d0:f7:9c:e4:0f:4f:c4:a8:a7:c0:35:26:69: d7:1e:df:68:b6:0f:78:ff:74:34:5e:95:e8:d9:de: 6c:c9:d0:06:45:10:0f:d9:70:16:ce:2c:6c:d4:bf: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1A:DA:56:60:1F:4F:E5:10:6A:29:E4:71:E4:E9:F7:3B:42:C2:25 X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:43:cc:f4:1c:5a:4d:62:9d:5d:6a:4e:54:68:89:d0:02:a9: f2:f6:66:e0:aa:7a:02:ac:30:8f:a1:d8:38:cf:bc:7c:77:db: 06:fb:35:83:fa:d3:60:ed:93:6b:df:09:ea:25:14:b3:5c:e6: 70:a1:c3:de:9f:9e:c0:82:98:49:26:30:5f:32:19:cf:5d:d7: 65:d0:76:46:c2:72:1f:6a:f6:fe:0a:09:85:cb:c4:8a:e8:cf: 71:6d:1b:7c:62:1a:d8:e8:20:fc:97:06:fc:a0:26:72:93:02: ad:a8:ee:af:66:1a:ca:a3:31:2e:3f:d6:0b:74:ce:3f:b5:ec: f1:24:8f:73:34:0f:43:23:35:c1:f6:9b:f9:1b:18:9b:a3:3a: ba:76:c3:5f:4b:fb:06:c4:e9:45:b7:15:55:f3:66:94:d6:50: 5a:28:4b:f9:c1:47:02:c6:e1:72:7e:ab:e8:52:de:54:ef:4e: 7e:da:b6:3d:70:6b:86:bd:47:7f:19:27:b7:e7:c8:a9:12:da: 9f:ab:60:00:cd:e5:df:28:2b:89:4f:9b:2a:6b:eb:1f:fb:15: 4a:55:35:15:cf:37:ba:06:7c:9f:84:8c:fc:24:56:c8:68:f9: 60:86:72:b9:64:56:fc:35:63:93:10:e9:7e:b0:ec:10:13:3a: ca:0a:c4:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjUwNDAzMDU0MDAwWhcNMjUwNDEwMDU0MDAwWjAYMRYwFAYD VQQDEw02N2VlMWYzMC0yYjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNCiV18CduVPeR9FXJMpQWFiCFyETx2q+Co6c/FDHLou0AB7hwI1elcteUa9 Kt723e0LotsyWBWFncriSOBeHSaHJz0A4WNgQK87qrNVTuVNpcEfmxYRHRgrbquJ oKKHWJ3Jz3Bf+cj8CHniP4FnJbMeCR+H9pIUF/1A4ujikd4IFfBVzdZzoJ2/xTXt 3mfCjvGqsvRR5GYUE/idHYBg0RXRFPKZuAXDVqrRAcz8opl8dRgJdPVOkbScpNzO vyKJOSBCuwfvmAw5KUdj5GDtMSX3AND3nOQPT8Sop8A1JmnXHt9otg94/3Q0XpXo 2d5sydAGRRAP2XAWzixs1L/uawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0a2lZg H0/lEGop5HHk6fc7QsIlMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDeQ8z0HFpNYp1dak5UaInQAqny9mbgqnoCrDCPodg4z7x8d9sG+zWD +tNg7ZNr3wnqJRSzXOZwocPen57AgphJJjBfMhnPXddl0HZGwnIfavb+CgmFy8SK 6M9xbRt8YhrY6CD8lwb8oCZykwKtqO6vZhrKozEuP9YLdM4/tezxJI9zNA9DIzXB 9pv5Gxibozq6dsNfS/sGxOlFtxVV82aU1lBaKEv5wUcCxuFyfqvoUt5U705+2rY9 cGuGvUd/GSe358ipEtqfq2AAzeXfKCuJT5sqa+sf+xVKVTUVzze6BnyfhIz8JFbI aPlghnK5ZFb8NWOTEOl+sOwQEzrKCsQl -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:34 2025 by rpki-client