$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json) Hash identifier: wb+TPkD/ykaikziQYZmreeD0amA7NWvPYkySjhg/ppM= Subject key identifier: 6B:8F:03:94:04:84:B4:06:EF:B5:2C:D3:7A:68:A0:43:7B:36:99:EE Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Certificate serial: 2501 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft Manifest number: 24F3 Signing time: Wed 12 Mar 2025 15:40:17 +0000 Manifest this update: Wed 12 Mar 2025 15:40:17 +0000 Manifest next update: Wed 19 Mar 2025 15:40:17 +0000 Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: 73AF2UKkvP22wx71Agal2X5fbWSaj1jEuBWC0/3Lyyc=) 2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: bILzWIi7SfN0oZ29P+We7rkWjU1abIhmL+TRmVZttNg=) 3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: A+fjTwtG6/7wteTJpdAw9ZNsTS7E+yeIkAmgl1S9yHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 15:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9473 (0x2501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD Validity Not Before: Mar 12 15:40:17 2025 GMT Not After : Mar 19 15:40:17 2025 GMT Subject: CN=67d1aae1-9803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:83:a4:4d:8f:11:58:81:93:b7:d9:80:f6: 58:fb:13:2b:98:7f:47:5b:93:0e:45:97:3d:0f:02: 55:c7:cc:43:69:59:c3:6f:be:05:4d:96:4c:e0:f2: 64:44:63:fc:70:71:b5:f4:93:aa:cc:08:62:bf:7a: 04:91:7a:31:20:72:50:39:c0:ff:41:f7:97:4f:82: 2d:f9:8c:4e:c5:b7:86:77:a0:55:5a:74:15:a9:ca: 6b:15:bd:cd:2c:a2:cf:ec:c8:f8:a7:85:4f:7d:3a: dd:91:f6:69:bd:ee:1c:0a:d2:d7:b0:86:a7:52:c9: 34:19:30:b0:5e:a0:ca:d5:0d:50:43:34:7f:f0:3c: ac:b0:7b:39:63:b0:cc:ee:10:98:a1:69:32:7e:71: 1a:3d:88:f5:fd:1c:8e:11:9d:79:0a:79:f8:da:04: f8:ce:3c:b3:9f:1b:c8:bf:f4:95:99:bf:73:5d:58: 62:e0:b5:9e:9e:4c:f8:6d:06:0e:6b:87:2e:92:01: 64:23:16:13:d1:ee:c7:15:a6:ce:76:28:c7:58:94: db:6c:f0:25:ca:d7:82:d6:e0:04:69:39:1e:6b:b3: 71:69:a2:e7:7a:50:b6:6a:5d:05:57:ec:cb:f1:4e: fc:4d:d8:5a:9a:87:00:58:52:79:7f:53:a5:6b:4c: c5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8F:03:94:04:84:B4:06:EF:B5:2C:D3:7A:68:A0:43:7B:36:99:EE X509v3 Authority Key Identifier: keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:3f:4e:e7:a2:a3:d7:d3:7d:21:cc:9e:b2:34:eb:f4:f8:98: f3:75:78:66:7f:f5:0f:de:f9:bf:41:2a:60:da:25:12:97:4b: 9e:b3:19:19:96:26:52:c5:1f:c0:f3:5c:29:f6:9c:0e:34:25: c2:d9:e2:22:05:fe:18:9e:8a:5a:5b:d0:0a:65:53:39:a7:99: f1:35:9a:93:30:24:c4:c7:0b:68:c1:e7:3d:42:f8:f4:35:c6: 98:ce:e8:c0:fd:9d:e1:7a:b6:7f:f3:c1:7a:15:9b:d9:b8:03: 18:d7:3d:ff:b6:22:e3:dc:94:c7:9e:73:a4:a3:39:9f:25:2f: 5c:aa:1a:d7:f9:79:c0:61:49:b4:7d:80:af:b7:18:e4:b2:19: e0:70:9d:18:ca:f4:12:f4:84:33:a2:35:96:21:1d:b7:ea:7b: 41:95:81:d9:e5:35:13:6c:5a:48:c6:d4:c3:ae:60:97:d3:03: 60:a7:07:1f:89:57:e5:d3:81:e3:fe:22:7a:72:1f:3d:69:d4: f8:cd:20:6d:cd:ad:ed:6c:33:47:c7:40:1c:eb:45:5a:d9:e7: 6e:b7:f4:8b:31:1d:ed:83:21:bd:0d:15:54:7d:9e:39:55:af: c0:d4:0a:17:c7:e5:ed:55:21:3b:3d:14:d6:40:5a:77:03:2e: 14:56:cc:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND MjdFQUQ4RUQwHhcNMjUwMzEyMTU0MDE3WhcNMjUwMzE5MTU0MDE3WjAYMRYwFAYD VQQDEw02N2QxYWFlMS05ODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuG+DpE2PEViBk7fZgPZY+xMrmH9HW5MORZc9DwJVx8xDaVnDb74FTZZM4PJk RGP8cHG19JOqzAhiv3oEkXoxIHJQOcD/QfeXT4It+YxOxbeGd6BVWnQVqcprFb3N LKLP7Mj4p4VPfTrdkfZpve4cCtLXsIanUsk0GTCwXqDK1Q1QQzR/8DyssHs5Y7DM 7hCYoWkyfnEaPYj1/RyOEZ15Cnn42gT4zjyznxvIv/SVmb9zXVhi4LWenkz4bQYO a4cukgFkIxYT0e7HFabOdijHWJTbbPAlyteC1uAEaTkea7NxaaLnelC2al0FV+zL 8U78TdhamocAWFJ5f1Ola0zFNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuPA5QE hLQG77Us03pooEN7NpnuMB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2 RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx V2JBU3llaVpxdFBDZnEyTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdP07noqPX030hzJ6yNOv0+JjzdXhmf/UP3vm/QSpg2iUSl0uesxkZ liZSxR/A81wp9pwONCXC2eIiBf4YnopaW9AKZVM5p5nxNZqTMCTExwtowec9Qvj0 NcaYzujA/Z3herZ/88F6FZvZuAMY1z3/tiLj3JTHnnOkozmfJS9cqhrX+XnAYUm0 fYCvtxjkshngcJ0YyvQS9IQzojWWIR236ntBlYHZ5TUTbFpIxtTDrmCX0wNgpwcf iVfl04Hj/iJ6ch89adT4zSBtza3tbDNHx0Ac60Va2edut/SLMR3tgyG9DRVUfZ45 Va/A1AoXx+XtVSE7PRTWQFp3Ay4UVsyi -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:55 2025 by rpki-client