$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json) Hash identifier: 9A5iKgZ0pZ+vELHHe57Zqw4CyN/8ZZ9yQ1794WesLqU= Subject key identifier: D0:22:40:FF:23:7C:46:39:26:E5:3C:DB:39:03:7C:1E:BE:CD:AD:48 Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Certificate serial: 0457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft Manifest number: 044B Signing time: Sat 05 Apr 2025 00:19:41 +0000 Manifest this update: Sat 05 Apr 2025 00:19:40 +0000 Manifest next update: Sat 12 Apr 2025 00:19:40 +0000 Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: ceTWIxfDSj6sAl1mYklw2Sbtyup4eyAUeMvSIPSh1ns=) 2: 11330A4663F611ECB344F979C4F9AE02.roa (hash: EUhD1CogfYx019LqOHk5ZADPXKjO2pURWvfLLk3fqG8=) 3: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: 0C7V986gHLfF3RPO5trmAPFLdLtlvzlCJ3+47YeVJHU=) 4: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: CMOccFw4JW9T0ieBo3En9p6kBriebw6aKjGeEamJ19Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1111 (0x457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3A8 Validity Not Before: Apr 5 00:19:40 2025 GMT Not After : Apr 12 00:19:40 2025 GMT Subject: CN=67f0771d-689c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9e:db:56:dc:54:c1:16:8a:de:2b:02:a6:5a: c2:7d:ad:77:14:cf:1c:87:30:3a:37:20:bb:27:88: 48:bd:e2:aa:cf:2e:a8:d1:64:20:66:59:b1:99:84: b6:39:03:42:7c:64:5c:48:56:1c:e9:c9:46:83:ba: 1f:5f:7d:a8:d2:d8:be:11:88:97:25:09:ef:41:66: 14:25:5b:90:a4:45:95:cc:e6:a5:b1:58:02:fd:c4: 95:29:33:03:03:e7:14:60:a8:76:0b:83:40:be:7f: 80:bf:70:da:bf:27:49:e4:05:2a:1c:b9:c5:58:f0: 7b:ce:2e:1d:51:ed:4c:9f:d0:6a:3d:e4:a3:1c:f9: 14:ee:4b:07:e4:33:fd:a0:63:a4:6e:fb:1d:af:f4: f5:0a:ce:cf:f1:fb:bd:d3:3f:b9:2f:a3:09:7c:12: b3:bd:1c:e1:9d:1d:e1:cf:5d:3e:53:e7:98:56:83: cf:6b:e9:8f:ba:dc:53:7a:fc:91:88:d0:44:e9:3c: 3e:dc:d1:68:fd:27:a6:0c:90:46:70:59:20:d5:79: fe:b1:04:71:48:34:2d:70:fd:bf:23:eb:63:fa:8c: 46:b3:33:e5:1a:a0:b3:02:84:fa:91:c8:e3:98:1c: ab:77:3d:02:69:93:28:4d:5d:76:d5:3e:44:14:c8: f4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:22:40:FF:23:7C:46:39:26:E5:3C:DB:39:03:7C:1E:BE:CD:AD:48 X509v3 Authority Key Identifier: keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:dc:cb:6d:dc:a8:b1:4e:1d:cb:0e:c2:7f:15:af:d2:ae:dc: 5c:d3:94:0d:33:d6:e3:a8:80:bf:1a:dd:e3:8b:2b:d6:1f:74: b5:90:10:95:67:4a:48:c7:06:02:3e:01:1b:a7:51:29:4e:de: e7:6e:69:b3:1a:4d:5e:a1:01:cb:70:b0:b9:9b:8b:27:6e:2b: 9d:b8:be:0e:fa:44:e3:ea:84:34:a2:c4:7d:f6:d5:cf:9c:c5: 17:48:93:c8:82:9e:b8:17:c3:3f:a2:c5:14:f4:d1:90:24:14: 3c:c5:98:2d:61:3c:70:f2:02:45:f7:3a:6f:43:98:2a:18:68: 8d:8b:54:a4:15:49:b6:4f:13:a4:90:02:cb:2b:31:f7:da:29: 73:e1:d4:73:59:7c:4f:41:a8:20:74:27:bf:c7:bf:01:56:a0: dc:a2:44:aa:17:86:8d:80:fa:65:23:0a:26:2d:86:19:0f:d1: 71:1d:43:6c:7d:25:6b:c6:36:a3:32:23:45:b8:b3:8c:1e:0a: 5d:a6:11:10:e1:1f:c1:e7:ef:c2:76:f9:ea:68:3e:db:df:0a: ee:b2:9f:ce:08:c2:e9:e8:8c:f0:4b:be:99:b7:5e:8b:a3:38: 98:29:47:45:d2:1d:6e:98:fb:f5:35:5b:63:3e:7c:b1:e8:15: 35:58:65:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2 OTM4NUU2NTUwHhcNMjUwNDA1MDAxOTQwWhcNMjUwNDEyMDAxOTQwWjAYMRYwFAYD VQQDEw02N2YwNzcxZC02ODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxp7bVtxUwRaK3isCplrCfa13FM8chzA6NyC7J4hIveKqzy6o0WQgZlmxmYS2 OQNCfGRcSFYc6clGg7ofX32o0ti+EYiXJQnvQWYUJVuQpEWVzOalsVgC/cSVKTMD A+cUYKh2C4NAvn+Av3DavydJ5AUqHLnFWPB7zi4dUe1Mn9BqPeSjHPkU7ksH5DP9 oGOkbvsdr/T1Cs7P8fu90z+5L6MJfBKzvRzhnR3hz10+U+eYVoPPa+mPutxTevyR iNBE6Tw+3NFo/SemDJBGcFkg1Xn+sQRxSDQtcP2/I+tj+oxGszPlGqCzAoT6kcjj mByrdz0CaZMoTV121T5EFMj06wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAiQP8j fEY5JuU82zkDfB6+za1IMB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0 SE1DdmtKa04yZ05wT0Y1bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa3Mtt3KixTh3LDsJ/Fa/Srtxc05QNM9bjqIC/Gt3jiyvWH3S1kBCV Z0pIxwYCPgEbp1EpTt7nbmmzGk1eoQHLcLC5m4snbiuduL4O+kTj6oQ0osR99tXP nMUXSJPIgp64F8M/osUU9NGQJBQ8xZgtYTxw8gJF9zpvQ5gqGGiNi1SkFUm2TxOk kALLKzH32ilz4dRzWXxPQaggdCe/x78BVqDcokSqF4aNgPplIwomLYYZD9FxHUNs fSVrxjajMiNFuLOMHgpdphEQ4R/B5+/CdvnqaD7b3wrusp/OCMLp6IzwS76Zt16L oziYKUdF0h1umPv1NVtjPnyx6BU1WGWk -----END CERTIFICATE-----Generated at Sat Apr 5 22:34:31 2025 by rpki-client