$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: FrbAnmttKVem00xiHbRDOnp7Jiv966ukGdKNJgfQgm0= Subject key identifier: F9:41:49:C1:17:B8:2D:B6:C7:BF:B1:49:9F:CA:9B:1E:DF:88:2F:2F Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 09EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 09B9 Signing time: Wed 02 Apr 2025 20:06:39 +0000 Manifest this update: Wed 02 Apr 2025 20:06:38 +0000 Manifest next update: Wed 09 Apr 2025 20:06:38 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: 7+DP1ySTEjHuiewfabKFGbvhRnJceLlGoefGtqNTg9E=) 2: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: fT5I6I+PgWW4dacN3a4Ms0RKDB8N3MNCREMj8FDesrg=) 3: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 2Dd7cd8I4OSARGKZ0mccoyZW6iVZIc9ObRTGe4O/Dcc=) 4: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: NOfiYVkjVgVKJdndF7rjEsZWLBXmxcXaA+rDg1JFfcI=) 5: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: eb8Dxmgs1pJ56B+p/g4fWelI2bfJeXR9VvaW0O1EVCY=) 6: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Fh5T2BpUHXj8z7zvCSIDzf9GCkAnUEieH5BE04K3ZeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 20:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2543 (0x9ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45 Validity Not Before: Apr 2 20:06:38 2025 GMT Not After : Apr 9 20:06:38 2025 GMT Subject: CN=67ed98cf-0fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ef:ac:47:ff:d9:03:50:fc:8a:89:bb:70:72: 5a:36:66:a7:e5:a2:b1:99:b1:8d:5b:68:cc:3f:79: a0:86:04:f1:de:6e:ed:e0:82:45:82:c2:31:6e:9a: bc:e7:b5:15:4d:01:eb:a0:f5:b3:e4:a7:0f:4f:0c: 47:74:64:19:73:84:08:8c:5d:86:74:4e:0b:df:05: b8:ce:7b:ed:ef:5e:0a:30:7b:9c:e0:4e:3a:ef:b9: 89:e3:e4:ab:0b:ce:1f:ab:b1:ae:16:bc:3c:6f:2f: 26:aa:90:49:b7:ec:23:50:23:4f:91:21:cc:bc:ba: 7e:9f:14:94:97:fb:0e:53:97:28:17:9e:56:6d:7b: bc:5a:5b:cf:98:98:00:bf:8d:45:38:04:9d:9f:a1: b8:3e:4d:52:e3:b1:3d:7d:b8:23:65:2d:a2:3e:e2: b6:56:91:f1:5b:b9:57:6c:dc:ff:ce:de:c6:5c:4a: 2c:b7:bd:b4:07:28:82:cb:7b:83:c7:ad:fc:f0:18: 35:12:fc:17:f6:da:de:79:14:29:62:60:11:d9:05: b9:57:e9:00:81:bb:29:34:c8:bb:ab:be:54:02:95: f8:80:ef:c6:23:8b:63:b2:1f:24:66:c6:09:80:72: 12:fc:9d:fc:1d:b2:af:1c:4e:dd:1f:cd:a2:6a:f2: 4b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:41:49:C1:17:B8:2D:B6:C7:BF:B1:49:9F:CA:9B:1E:DF:88:2F:2F X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:7d:ed:3f:d6:91:e0:a7:6e:64:0d:46:e3:4d:4e:3f:7d:fa: 13:b2:b3:5b:99:a8:0f:89:6b:43:d6:c6:ec:b8:b3:a3:04:cf: f4:5f:5d:4b:8b:f7:65:3a:9c:a5:6d:48:97:c8:0e:68:84:dc: 10:7e:6c:02:2e:c6:3d:bc:88:0c:5b:09:30:d6:a5:0a:bf:1b: e4:18:36:00:f1:48:3f:9c:e6:1b:ab:1e:c5:cb:46:51:31:83: 06:cf:de:f3:26:e3:38:e7:8d:21:4a:e3:d8:58:14:d5:a4:0a: 21:e4:ea:55:04:54:07:df:50:b5:53:7a:00:5c:67:10:45:39: ed:94:da:c0:a2:3e:05:82:d7:a5:59:ba:ab:8c:42:39:a4:61: 77:5c:df:52:66:69:36:21:a3:84:cd:4c:3c:3a:56:35:c6:c9: 07:c1:98:0c:49:a1:db:ce:9d:97:d8:6e:71:0f:9f:4e:64:8c: 8d:46:e7:25:5b:8a:c0:a3:d3:68:11:4b:c5:2d:cd:ca:85:89: 11:3f:6c:2a:4c:44:5b:5c:bf:12:c0:d1:84:3a:18:79:3b:da: f6:b3:98:1e:5f:f6:80:bd:d5:61:ac:64:f8:a3:59:7a:4c:30: 53:30:9b:bc:9d:f3:55:2b:52:a7:6f:84:a3:cd:74:fc:47:4b: f7:3f:20:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjUwNDAyMjAwNjM4WhcNMjUwNDA5MjAwNjM4WjAYMRYwFAYD VQQDEw02N2VkOThjZi0wZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqe+sR//ZA1D8iom7cHJaNman5aKxmbGNW2jMP3mghgTx3m7t4IJFgsIxbpq8 57UVTQHroPWz5KcPTwxHdGQZc4QIjF2GdE4L3wW4znvt714KMHuc4E4677mJ4+Sr C84fq7GuFrw8by8mqpBJt+wjUCNPkSHMvLp+nxSUl/sOU5coF55WbXu8WlvPmJgA v41FOASdn6G4Pk1S47E9fbgjZS2iPuK2VpHxW7lXbNz/zt7GXEost720ByiCy3uD x6388Bg1EvwX9treeRQpYmAR2QW5V+kAgbspNMi7q75UApX4gO/GI4tjsh8kZsYJ gHIS/J38HbKvHE7dH82iavJL5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlBScEX uC22x7+xSZ/Kmx7fiC8vMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJfe0/1pHgp25kDUbjTU4/ffoTsrNbmagPiWtD1sbsuLOjBM/0X11L i/dlOpylbUiXyA5ohNwQfmwCLsY9vIgMWwkw1qUKvxvkGDYA8Ug/nOYbqx7Fy0ZR MYMGz97zJuM4540hSuPYWBTVpAoh5OpVBFQH31C1U3oAXGcQRTntlNrAoj4Fgtel WbqrjEI5pGF3XN9SZmk2IaOEzUw8OlY1xskHwZgMSaHbzp2X2G5xD59OZIyNRucl W4rAo9NoEUvFLc3KhYkRP2wqTERbXL8SwNGEOhh5O9r2s5geX/aAvdVhrGT4o1l6 TDBTMJu8nfNVK1Knb4SjzXT8R0v3PyDb -----END CERTIFICATE-----Generated at Fri Apr 4 22:00:38 2025 by rpki-client