$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json) Hash identifier: KeMBHp1voMnmI8UKj0J70Y13r5m3m1dxr+1LOim/oM4= Subject key identifier: C7:2A:BB:58:40:42:69:51:CE:85:1E:B4:81:71:E8:B4:57:F8:1B:AE Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft Manifest number: 051C Signing time: Thu 24 Apr 2025 23:20:24 +0000 Manifest this update: Thu 24 Apr 2025 23:20:23 +0000 Manifest next update: Thu 01 May 2025 23:20:23 +0000 Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: QY+cvnMmUM5M86ryg1ZyTL7qlRcI0ChFHUXQkHD5gE8=) 2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: 9X0FABgF4N/aMCwLf/2Sir07UctuAOlwN446kkP4Osg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Validity Not Before: Apr 24 23:20:23 2025 GMT Not After : May 1 23:20:23 2025 GMT Subject: CN=680ac738-ad7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:c6:56:91:04:ce:54:e3:7d:34:16:fa:1a: f1:f0:28:5d:53:d2:be:38:44:9b:aa:82:65:e7:47: 86:1a:e9:a3:ef:98:ea:cd:da:2d:2e:a5:56:cd:a2: f8:ba:ef:dc:20:02:48:43:74:cf:f3:12:64:0e:c2: e2:90:6e:93:f0:81:a6:a9:27:11:3c:5f:73:7a:a0: ce:4e:19:a8:10:0a:c8:f7:23:c1:d7:0b:4d:46:1c: 89:a0:e0:ac:bb:00:e7:4d:b4:93:6c:29:34:3e:5d: d3:40:a2:73:16:35:5c:c9:a7:4e:00:81:44:27:a1: c5:05:e2:5a:56:5f:24:3b:eb:38:39:a8:a2:f4:9c: cd:7d:79:d3:6d:71:36:6a:cd:83:21:31:86:b4:c7: f8:8e:0f:af:99:d2:79:0c:e9:9f:82:ce:d0:2c:98: 8b:a1:29:67:c6:1d:4a:10:aa:2e:88:0b:92:e1:d8: cc:ee:b7:09:a7:0e:db:17:5e:52:6d:f9:b9:00:9e: d0:41:ef:9e:f7:e0:c3:5b:7c:ae:c6:9f:c2:8f:b0: 7c:0c:3b:5b:41:f9:07:2c:de:56:fc:a6:5c:04:c7: 73:30:83:09:45:d6:d8:12:e8:d3:65:e6:78:4d:6e: 92:ca:54:98:52:e8:98:31:54:5a:6d:be:69:86:4b: 3d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2A:BB:58:40:42:69:51:CE:85:1E:B4:81:71:E8:B4:57:F8:1B:AE X509v3 Authority Key Identifier: keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:43:87:eb:a1:0e:bd:0f:d5:a9:a5:43:3a:bf:04:ef:2f:2f: dc:6a:06:67:b8:9a:cb:6e:ab:15:ab:4f:07:29:88:e3:3c:1a: 8c:3c:aa:5c:b5:c7:0d:e1:31:93:4b:65:4c:e4:90:0a:67:d3: 84:06:95:e1:6d:63:07:29:ef:87:e3:80:c5:2b:db:1c:0a:15: 02:67:e0:39:f3:6b:24:dc:12:27:e7:6e:1c:e7:e7:b7:bb:82: 63:02:f9:68:cc:8c:e9:c8:1d:7e:3c:74:12:a7:b0:b5:62:1f: c7:7d:d6:d9:cb:e1:e9:7c:0c:cb:50:08:5a:30:d1:da:76:fc: 8c:ad:30:a7:e8:12:18:53:5b:53:3c:d4:df:67:93:c5:64:85: 8b:8e:91:4c:59:6c:48:eb:f6:70:ce:cd:b9:16:da:fe:2b:72: eb:11:ca:91:bf:63:41:53:50:a3:02:83:10:54:f4:84:cc:ca: a8:56:c5:6a:da:f2:1e:07:d6:e9:71:75:b9:26:08:d3:aa:bd: 85:a6:8c:0f:4c:b5:51:2e:7f:ac:31:96:f4:52:b3:46:12:61: c4:37:65:36:d9:f7:df:2e:c1:57:47:c9:4d:86:47:69:14:1a: 47:57:16:4a:13:68:72:72:38:46:6e:ee:17:a6:19:52:13:37: ca:64:63:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG NzAxN0RDQjgwHhcNMjUwNDI0MjMyMDIzWhcNMjUwNTAxMjMyMDIzWjAYMRYwFAYD VQQDEw02ODBhYzczOC1hZDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyavGVpEEzlTjfTQW+hrx8ChdU9K+OESbqoJl50eGGumj75jqzdotLqVWzaL4 uu/cIAJIQ3TP8xJkDsLikG6T8IGmqScRPF9zeqDOThmoEArI9yPB1wtNRhyJoOCs uwDnTbSTbCk0Pl3TQKJzFjVcyadOAIFEJ6HFBeJaVl8kO+s4Oaii9JzNfXnTbXE2 as2DITGGtMf4jg+vmdJ5DOmfgs7QLJiLoSlnxh1KEKouiAuS4djM7rcJpw7bF15S bfm5AJ7QQe+e9+DDW3yuxp/Cj7B8DDtbQfkHLN5W/KZcBMdzMIMJRdbYEujTZeZ4 TW6SylSYUuiYMVRabb5phks98QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcqu1hA QmlRzoUetIFx6LRX+BuuMB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJGQS9FODBEQUEyRUZBODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdq UVhOLUlaNFZybWozQVgzTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvQ4froQ69D9WppUM6vwTvLy/cagZnuJrLbqsVq08HKYjjPBqMPKpc tccN4TGTS2VM5JAKZ9OEBpXhbWMHKe+H44DFK9scChUCZ+A582sk3BIn524c5+e3 u4JjAvlozIzpyB1+PHQSp7C1Yh/HfdbZy+HpfAzLUAhaMNHadvyMrTCn6BIYU1tT PNTfZ5PFZIWLjpFMWWxI6/Zwzs25Ftr+K3LrEcqRv2NBU1CjAoMQVPSEzMqoVsVq 2vIeB9bpcXW5JgjTqr2FpowPTLVRLn+sMZb0UrNGEmHEN2U22fffLsFXR8lNhkdp FBpHVxZKE2hycjhGbu4XphlSEzfKZGOd -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:37 2025 by rpki-client