$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json) Hash identifier: jJi3KuDWLEjbXtTYi4MdmGqaRIZKtejdxYTPXiq6ftU= Subject key identifier: 0F:6B:06:EE:14:D6:81:61:A1:8F:7B:08:FE:39:F7:28:9E:FB:66:7D Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Certificate serial: 258C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft Manifest number: 2573 Signing time: Fri 04 Apr 2025 15:47:12 +0000 Manifest this update: Fri 04 Apr 2025 15:47:12 +0000 Manifest next update: Fri 11 Apr 2025 15:47:12 +0000 Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: tpBffvWh8xVqgbSRRlRlT7SHJkiUTJW9bCSqaNPTn/U=) 2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: pVWyhrhr52dDPOhFrnd0oPU2DOTP+1UBjUuKhhhwO0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9612 (0x258c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8119 Validity Not Before: Apr 4 15:47:12 2025 GMT Not After : Apr 11 15:47:12 2025 GMT Subject: CN=67efff00-81ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:99:dd:27:5e:3c:71:f0:e5:db:53:12:6f:69: 58:3a:0c:da:38:17:de:08:3e:71:f3:35:3e:f3:e3: 22:2a:3f:47:7a:29:78:a3:36:4b:97:eb:88:f6:a8: 5e:ea:ed:b4:e1:95:84:2e:ec:c9:a5:ae:17:3b:71: fa:88:c2:0c:99:fb:9c:f3:3c:e4:fb:ca:9c:3e:eb: ff:49:6a:b7:00:c2:d3:34:f2:d2:1a:e4:e9:f1:18: 6c:2e:fe:10:f0:36:fc:41:ec:b0:14:be:6b:bd:36: f7:d2:7e:7b:8d:47:5b:72:ac:3b:62:21:c2:bf:a3: f8:a6:91:c2:b2:e3:bd:b7:8a:ed:dc:e1:b4:62:63: 51:1e:9a:a1:59:6e:59:40:49:a2:30:68:39:41:c4: 8b:64:de:8e:f3:27:35:da:22:71:ac:7d:82:71:6f: 14:10:0c:cb:f2:ec:43:67:f3:1c:b2:ff:b2:5c:ac: 4a:8e:c7:34:8e:ea:bb:96:4f:5a:21:11:2d:01:7d: f8:9f:46:08:1f:d9:05:0b:1a:05:af:03:0a:e8:a0: e3:5d:aa:12:b9:c5:10:d0:a7:eb:12:29:7b:71:48: 29:13:95:4f:8c:08:26:5b:d6:ce:10:08:a6:44:ac: 07:fc:9d:19:33:91:e3:39:fc:a9:44:c7:63:4c:40: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6B:06:EE:14:D6:81:61:A1:8F:7B:08:FE:39:F7:28:9E:FB:66:7D X509v3 Authority Key Identifier: keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:c0:41:8c:1e:bb:d0:30:c2:29:e3:39:b7:a2:c5:34:f4:93: 10:7a:4a:01:c8:89:00:dd:f0:d0:54:b5:7e:63:29:34:2f:68: ee:d5:80:9f:91:b6:03:db:08:15:c2:fd:df:4d:d5:f9:7e:9e: b0:1b:62:70:bf:86:61:0a:f7:ac:de:30:94:db:f5:06:f5:75: d9:c3:f6:8d:02:4f:99:39:4e:2d:0e:86:0e:fb:5b:b3:b1:6b: 0d:53:8f:6d:c6:44:08:39:66:9c:2e:39:d9:74:f1:28:de:cc: a9:76:d1:aa:c9:bc:4d:58:cd:d2:84:5d:c8:36:75:8d:15:d8: bd:3e:99:a3:e1:72:de:12:79:c5:33:c2:66:ca:80:05:cf:03: a0:06:e9:3d:18:e5:76:7e:fc:3a:18:fc:01:69:c3:07:39:73: 17:36:6a:1c:a3:f3:3c:67:26:19:d8:81:89:50:c9:80:59:83: 16:da:98:2e:00:26:0d:69:e1:31:12:b7:d9:41:a9:ff:d6:55: 55:35:b3:7e:dd:7e:56:69:56:0d:92:fb:27:f5:e9:cd:1f:4b: 65:bf:f1:a2:0e:0d:d0:20:e0:8d:6b:67:0c:47:0d:a8:2a:41: f0:27:0e:9f:0b:fd:1f:dc:59:e4:37:df:5d:84:44:01:1a:97: 83:96:8b:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxMTkxMTAvBgNVBAUTKDVGMzhGNDE5NTE2MTYyQkQ4ODZFNDBCREE5MjdGNTVE QzZGRjNFNjIwHhcNMjUwNDA0MTU0NzEyWhcNMjUwNDExMTU0NzEyWjAYMRYwFAYD VQQDEw02N2VmZmYwMC04MWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7JndJ148cfDl21MSb2lYOgzaOBfeCD5x8zU+8+MiKj9Heil4ozZLl+uI9qhe 6u204ZWELuzJpa4XO3H6iMIMmfuc8zzk+8qcPuv/SWq3AMLTNPLSGuTp8RhsLv4Q 8Db8QeywFL5rvTb30n57jUdbcqw7YiHCv6P4ppHCsuO9t4rt3OG0YmNRHpqhWW5Z QEmiMGg5QcSLZN6O8yc12iJxrH2CcW8UEAzL8uxDZ/Mcsv+yXKxKjsc0juq7lk9a IREtAX34n0YIH9kFCxoFrwMK6KDjXaoSucUQ0KfrEil7cUgpE5VPjAgmW9bOEAim RKwH/J0ZM5HjOfypRMdjTED62wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9rBu4U 1oFhoY97CP459yie+2Z9MB8GA1UdIwQYMBaAFF849BlRYWK9iG5Avakn9V3G/z5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS9BN0VDNTk2QzEz MzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFlyMklia0M5cVNmMVhjYl9Q bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6ajBHVkZoWXIySWJrQzlxU2YxWGNiX1BtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODExOS9BN0VDNTk2QzEzMzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFly Mklia0M5cVNmMVhjYl9QbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1wEGMHrvQMMIp4zm3osU09JMQekoByIkA3fDQVLV+Yyk0L2ju1YCf kbYD2wgVwv3fTdX5fp6wG2Jwv4ZhCves3jCU2/UG9XXZw/aNAk+ZOU4tDoYO+1uz sWsNU49txkQIOWacLjnZdPEo3sypdtGqybxNWM3ShF3INnWNFdi9Ppmj4XLeEnnF M8JmyoAFzwOgBuk9GOV2fvw6GPwBacMHOXMXNmoco/M8ZyYZ2IGJUMmAWYMW2pgu ACYNaeExErfZQan/1lVVNbN+3X5WaVYNkvsn9enNH0tlv/GiDg3QIOCNa2cMRw2o KkHwJw6fC/0f3FnkN99dhEQBGpeDlovL -----END CERTIFICATE-----Generated at Sat Apr 5 14:27:51 2025 by rpki-client