$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft File: Xx7oK_cJomzAAJlbR0geVPbzgG4.mft (raw, json) Hash identifier: yhX15WTEsS+WM9Miv9AymxHMg5CpYsJkncYDZ2DomVQ= Subject key identifier: 09:36:5A:6A:4D:E0:0B:94:59:01:F4:C5:EB:E8:FD:88:70:1F:B2:9E Authority key identifier: 5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E Certificate issuer: /CN=A91F9E0A/serialNumber=5F1EE82BF709A26CC000995B47481E54F6F3806E Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft Manifest number: 8F Signing time: Mon 07 Apr 2025 05:19:50 +0000 Manifest this update: Mon 07 Apr 2025 05:19:49 +0000 Manifest next update: Mon 14 Apr 2025 05:19:49 +0000 Files and hashes: 1: Xx7oK_cJomzAAJlbR0geVPbzgG4.crl (hash: KOuvg2lNolIzbo2TUiBD3EOHFdLeriw5dGGcvOiY2kI=) 2: 9F4A37143EA511EF882FE276C4F9AE02.roa (hash: tpxknLltESXlXvrC8XRzEEbUw6cbAqdQTGW1X5phwoU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 05:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A Validity Not Before: Apr 7 05:19:49 2025 GMT Not After : Apr 14 05:19:49 2025 GMT Subject: CN=67f36076-bf21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:85:e9:f2:89:60:9e:4d:2a:2d:02:37:2d:33: 0d:ca:af:ff:fb:a2:d9:e3:8c:2f:0f:e3:c4:50:8c: b5:81:cc:4e:20:f7:3f:04:05:41:13:df:a1:00:1e: e0:77:e9:a9:05:9a:fc:01:4d:f8:df:c1:68:e1:11: 25:a5:67:5e:af:72:f4:ff:f0:14:32:38:c5:98:cb: 5d:5c:fc:73:31:d1:e2:4a:81:a3:64:7e:09:70:40: 19:11:a3:38:68:cb:38:a2:7c:77:fb:e6:d1:38:63: 0e:9c:9f:80:82:ae:6d:8d:1b:52:33:bb:05:d3:f2: 11:01:6e:54:e5:8f:69:7e:7c:83:1d:ee:02:37:49: 0a:1e:ef:33:52:76:0a:75:1d:65:bd:d3:71:67:71: 0f:39:5a:fd:33:e6:92:52:63:c8:f8:a4:de:ed:8e: e9:ab:c0:34:29:eb:76:26:17:17:fb:e1:64:76:18: 99:22:d5:b0:81:ad:02:b2:76:3c:a7:0a:4c:66:38: 39:03:21:73:81:64:d6:e3:7a:70:87:4a:45:26:e4: a7:a4:b4:3c:1d:3e:1c:25:e7:3c:1b:f7:3b:58:e0: a8:88:c8:61:43:15:49:bf:95:a1:a3:d7:6e:45:c8: a8:d1:7b:23:b8:2c:80:42:e2:6f:94:54:6c:6c:9a: fb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:36:5A:6A:4D:E0:0B:94:59:01:F4:C5:EB:E8:FD:88:70:1F:B2:9E X509v3 Authority Key Identifier: keyid:5F:1E:E8:2B:F7:09:A2:6C:C0:00:99:5B:47:48:1E:54:F6:F3:80:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xx7oK_cJomzAAJlbR0geVPbzgG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/03B052D43E6911EFA2CE676AC4F9AE02/Xx7oK_cJomzAAJlbR0geVPbzgG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:85:5d:af:39:ab:57:1b:01:8c:55:69:27:b3:48:71:54:ab: d5:d7:8b:20:5c:b6:97:66:41:ce:85:f8:4b:ca:c2:9c:a1:da: 8c:43:cb:cb:e7:ef:76:73:5d:de:56:66:f3:b5:8c:7e:cd:28: 5c:74:05:3c:3a:40:22:b9:10:26:dc:bb:d7:94:38:53:51:7c: 10:85:dc:8f:4f:04:e7:c3:c2:63:71:f5:f6:38:21:63:a2:01: 8e:a0:09:5b:e4:e9:7d:38:c6:7c:1f:c5:24:a5:ec:df:5b:91: 9b:f2:fb:de:1e:c2:dd:56:c7:6e:a6:d4:b7:e8:c0:c2:e3:3e: f3:7d:7b:c0:be:b8:08:f0:59:1d:f3:a1:59:14:8e:6a:6e:0c: 78:64:ab:d5:b9:5c:ff:f3:b8:c6:f6:84:7e:7d:d0:76:99:fd: 0a:f3:f7:92:87:e7:35:a5:3e:20:6c:26:15:6d:ce:94:ea:22: 26:e3:48:99:9f:af:ba:b2:ef:6f:d8:67:11:1e:81:eb:9d:dd: 45:c3:a8:e2:4b:46:27:a2:7f:21:31:da:20:da:01:67:4f:b7: a0:51:1e:f5:42:15:f8:7c:1a:b9:6c:31:e8:e2:e1:63:67:af: 08:2d:9f:3f:4c:68:66:ae:55:0a:c9:d0:a6:29:55:a9:36:7d: 6a:9e:94:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDVGMUVFODJCRjcwOUEyNkNDMDAwOTk1QjQ3NDgxRTU0 RjZGMzgwNkUwHhcNMjUwNDA3MDUxOTQ5WhcNMjUwNDE0MDUxOTQ5WjAYMRYwFAYD VQQDEw02N2YzNjA3Ni1iZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIXp8olgnk0qLQI3LTMNyq//+6LZ44wvD+PEUIy1gcxOIPc/BAVBE9+hAB7g d+mpBZr8AU3438Fo4RElpWder3L0//AUMjjFmMtdXPxzMdHiSoGjZH4JcEAZEaM4 aMs4onx3++bROGMOnJ+Agq5tjRtSM7sF0/IRAW5U5Y9pfnyDHe4CN0kKHu8zUnYK dR1lvdNxZ3EPOVr9M+aSUmPI+KTe7Y7pq8A0Ket2JhcX++FkdhiZItWwga0CsnY8 pwpMZjg5AyFzgWTW43pwh0pFJuSnpLQ8HT4cJec8G/c7WOCoiMhhQxVJv5Who9du Rcio0XsjuCyAQuJvlFRsbJr7dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAk2WmpN 4AuUWQH0xevo/YhwH7KeMB8GA1UdIwQYMBaAFF8e6Cv3CaJswACZW0dIHlT284Bu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wM0IwNTJENDNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9YeDdvS19jSm9tekFBSmxiUjBnZVZQYnpn RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1h4N29LX2NKb216QUFKbGJSMGdlVlBiemdHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wM0IwNTJENDNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9YeDdvS19jSm9t ekFBSmxiUjBnZVZQYnpnRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqhV2vOatXGwGMVWkns0hxVKvV14sgXLaXZkHOhfhLysKcodqMQ8vL 5+92c13eVmbztYx+zShcdAU8OkAiuRAm3LvXlDhTUXwQhdyPTwTnw8JjcfX2OCFj ogGOoAlb5Ol9OMZ8H8UkpezfW5Gb8vveHsLdVsduptS36MDC4z7zfXvAvrgI8Fkd 86FZFI5qbgx4ZKvVuVz/87jG9oR+fdB2mf0K8/eSh+c1pT4gbCYVbc6U6iIm40iZ n6+6su9v2GcRHoHrnd1Fw6jiS0Ynon8hMdog2gFnT7egUR71QhX4fBq5bDHo4uFj Z68ILZ8/TGhmrlUKydCmKVWpNn1qnpTm -----END CERTIFICATE-----Generated at Tue Apr 8 20:27:47 2025 by rpki-client