$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft File: CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft (raw, json) Hash identifier: AZWkkqEERuB3veZvnlXQ7p88+dFFkBCisOV2RR+Pf2g= Subject key identifier: 1A:BF:BE:29:E7:03:84:D4:AE:C9:44:F4:24:39:A1:6F:49:0F:6A:57 Authority key identifier: 09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E Certificate issuer: /CN=A91E9D1A/serialNumber=0976FC3D23186D48C671773740891CF54E31B80E Certificate serial: 34A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft Manifest number: 3489 Signing time: Fri 04 Apr 2025 14:19:26 +0000 Manifest this update: Fri 04 Apr 2025 14:19:25 +0000 Manifest next update: Fri 11 Apr 2025 14:19:25 +0000 Files and hashes: 1: CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl (hash: 0q8WV6A2k7fPHgLKspd8L0/jBcI+xCZIHqUW/1wq1dw=) 2: 81C9B5A4BBFA11ED99272016C4F9AE02.roa (hash: LKJoEQzPb1sMSVb2vDN9+BembbPiOElHd7gaQSKpvPY=) 3: E404430CB0F811E595E0F761C4F9AE02.roa (hash: 0Rx8HN5jmUeLiu9CtnRcyXpipRICUg/GHNM7vipXeYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13479 (0x34a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D1A Validity Not Before: Apr 4 14:19:25 2025 GMT Not After : Apr 11 14:19:25 2025 GMT Subject: CN=67efea6d-469d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:9e:cb:ed:4b:bb:17:ed:06:f6:22:26:ed: be:25:81:5c:27:3a:c9:db:aa:6a:b6:32:00:38:cc: e3:e4:3e:fa:aa:46:b0:b9:e7:2f:4d:ef:82:1c:51: 0f:2b:0e:e9:b8:01:0f:dd:b2:71:ba:44:29:41:5a: c6:10:b9:b4:9d:c8:a3:0a:a5:88:c7:37:d7:39:cb: 8f:09:46:20:25:3f:06:53:f8:cb:04:29:73:db:03: 04:16:39:a9:b0:71:9e:3a:ae:ec:ad:5c:d6:17:66: f9:07:59:e7:83:a9:e6:7b:87:f4:22:6c:d5:7f:ef: 54:0f:f4:a1:ff:c7:07:ce:e5:15:02:b3:df:57:5f: d3:a5:f1:be:ac:3e:4f:61:5e:46:0f:b8:fa:5d:4c: 4b:26:ff:c0:39:f1:4d:42:12:d0:44:75:4f:9b:b5: 56:e8:2c:21:53:07:23:4d:83:29:1b:2b:52:9e:62: 59:f0:f1:f7:24:bc:70:26:4b:7b:e0:b2:df:da:17: 28:03:93:bc:57:b1:5a:41:9e:d2:fb:f6:f1:84:22: f1:16:84:fb:3e:7a:03:09:f1:19:10:62:b4:0f:75: 34:58:42:9a:ad:a3:46:67:c2:f9:8a:65:06:85:c3: 93:3a:e2:7e:ed:87:a0:de:83:21:81:55:a0:d5:96: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BF:BE:29:E7:03:84:D4:AE:C9:44:F4:24:39:A1:6F:49:0F:6A:57 X509v3 Authority Key Identifier: keyid:09:76:FC:3D:23:18:6D:48:C6:71:77:37:40:89:1C:F5:4E:31:B8:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D1A/C59B02DA1D7011E286F147B508B02CD2/CXb8PSMYbUjGcXc3QIkc9U4xuA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:43:6b:77:d5:79:7f:f9:40:a7:ba:3f:1f:f3:f8:d0:22:22: 9a:43:75:6f:da:e6:56:99:ad:0b:b9:a2:c4:52:d0:7c:0d:ca: cf:93:12:f1:4a:4e:cf:cf:66:a0:fd:90:86:43:e5:ae:70:2c: bd:90:e6:ef:ac:58:40:61:88:a5:a1:ff:ce:15:59:b3:23:0f: 95:41:3a:13:01:2a:c2:77:b9:65:d6:95:38:63:b1:2d:93:3a: 3c:90:32:4f:3a:a7:12:4b:0d:90:0d:74:db:18:d6:6f:37:9b: eb:07:cb:48:e8:30:19:a0:32:8f:d7:15:67:a7:13:30:4a:f4: d4:12:43:09:02:eb:66:ca:43:73:3a:22:d1:c5:3e:ad:b0:e6: e1:5a:71:ee:c9:a5:45:18:2c:76:85:3b:de:73:e2:76:7b:19: 31:b6:09:57:61:5f:8a:ca:d1:ff:96:cb:18:18:48:53:1a:98: 47:ed:f5:28:51:20:87:28:b1:c4:e0:1a:2d:ee:60:94:ae:25: 59:cf:86:1f:ae:37:4e:65:7d:5f:d9:04:e3:03:fd:20:c2:46: 8c:b4:73:1f:86:db:8e:0b:e6:94:7b:6a:05:40:18:62:c8:04: c0:fb:cf:a7:ec:97:9a:1b:7f:3b:ac:9c:b3:d3:a1:6c:5f:94: 7d:ee:b1:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlEMUExMTAvBgNVBAUTKDA5NzZGQzNEMjMxODZENDhDNjcxNzczNzQwODkxQ0Y1 NEUzMUI4MEUwHhcNMjUwNDA0MTQxOTI1WhcNMjUwNDExMTQxOTI1WjAYMRYwFAYD VQQDEw02N2VmZWE2ZC00NjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQqey+1LuxftBvYiJu2+JYFcJzrJ26pqtjIAOMzj5D76qkawuecvTe+CHFEP Kw7puAEP3bJxukQpQVrGELm0ncijCqWIxzfXOcuPCUYgJT8GU/jLBClz2wMEFjmp sHGeOq7srVzWF2b5B1nng6nme4f0ImzVf+9UD/Sh/8cHzuUVArPfV1/TpfG+rD5P YV5GD7j6XUxLJv/AOfFNQhLQRHVPm7VW6CwhUwcjTYMpGytSnmJZ8PH3JLxwJkt7 4LLf2hcoA5O8V7FaQZ7S+/bxhCLxFoT7PnoDCfEZEGK0D3U0WEKaraNGZ8L5imUG hcOTOuJ+7Yeg3oMhgVWg1ZbBHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq/vinn A4TUrslE9CQ5oW9JD2pXMB8GA1UdIwQYMBaAFAl2/D0jGG1IxnF3N0CJHPVOMbgO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQxQS9DNTlCMDJEQTFE NzAxMUUyODZGMTQ3QjUwOEIwMkNEMi9DWGI4UFNNWWJVakdjWGMzUUlrYzlVNHh1 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NYYjhQU01ZYlVqR2NYYzNRSWtjOVU0eHVBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQxQS9DNTlCMDJEQTFENzAxMUUyODZGMTQ3QjUwOEIwMkNEMi9DWGI4UFNNWWJV akdjWGMzUUlrYzlVNHh1QTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9Q2t31Xl/+UCnuj8f8/jQIiKaQ3Vv2uZWma0LuaLEUtB8DcrPkxLx Sk7Pz2ag/ZCGQ+WucCy9kObvrFhAYYilof/OFVmzIw+VQToTASrCd7ll1pU4Y7Et kzo8kDJPOqcSSw2QDXTbGNZvN5vrB8tI6DAZoDKP1xVnpxMwSvTUEkMJAutmykNz OiLRxT6tsObhWnHuyaVFGCx2hTvec+J2exkxtglXYV+KytH/lssYGEhTGphH7fUo USCHKLHE4Bot7mCUriVZz4YfrjdOZX1f2QTjA/0gwkaMtHMfhtuOC+aUe2oFQBhi yATA+8+n7JeaG387rJyz06FsX5R97rFT -----END CERTIFICATE-----Generated at Sun Apr 6 11:57:31 2025 by rpki-client