$ rpki-client -vvf rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft File: xNe5S537ZPXBiScjMNvcrSp9AW4.mft (raw, json) Hash identifier: PHeMaci02Ohm8oucUTayUROMbHFPCl8TgCdRs4PFpMQ= Subject key identifier: 3D:50:B7:73:54:44:91:85:88:DF:C5:CD:DF:1C:86:F6:1B:0C:BD:89 Authority key identifier: C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E Certificate issuer: /CN=A912E791/serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Certificate serial: 04B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft Manifest number: 049E Signing time: Thu 24 Apr 2025 23:49:49 +0000 Manifest this update: Thu 24 Apr 2025 23:49:49 +0000 Manifest next update: Thu 01 May 2025 23:49:49 +0000 Files and hashes: 1: xNe5S537ZPXBiScjMNvcrSp9AW4.crl (hash: MvKN0nTsx/7NC3MAmy7J6Le47aWaqELz7I4K31XTm1g=) 2: 9E9D5C66157C11F0B4CD801EC4F9AE02.roa (hash: 1C34cm2EkOQCZ4JCIngq0S5UUVGOvkcAMgGxSVETRwg=) 3: 83595478B65E11EF8DB85B32C4F9AE02.roa (hash: 8tjvkR4DoTk7UtvsWE0jDhrG+DVKY6Vhv3UaWUDUXuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1202 (0x4b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E791, serialNumber=C4D7B94B9DFB64F5C189272330DBDCAD2A7D016E Validity Not Before: Apr 24 23:49:49 2025 GMT Not After : May 1 23:49:49 2025 GMT Subject: CN=680ace1d-8716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:f3:8c:d2:0b:93:4b:46:a0:e8:7e:97:8b: 6c:26:02:21:0e:a4:cf:df:f0:f1:a9:c1:e3:5b:e9: 64:17:e7:92:53:68:32:d1:9e:51:8a:7a:54:5d:f1: 66:ca:26:19:e5:ef:00:8a:1b:6f:cd:f7:e2:7a:7e: 92:18:f1:45:0a:48:87:dd:d2:be:74:e3:a9:ac:71: 69:ad:7e:4f:cc:27:4b:68:f5:1f:f6:95:eb:aa:1e: 87:eb:a4:47:18:34:72:ec:bd:d0:30:90:1a:fc:45: 03:46:bd:9b:8f:0f:20:92:9c:b7:d2:a3:12:1e:c4: 82:ef:b8:07:26:f0:64:df:ce:85:b7:0c:af:2c:35: 55:b8:c4:7d:25:2c:83:29:17:b9:95:95:36:b0:81: 31:71:31:d3:8b:7b:29:6e:f3:5c:20:2e:c4:4b:5d: a2:17:62:99:16:60:8b:24:a3:69:e3:f1:22:62:f1: 7e:0a:af:e6:88:40:5a:f2:7a:b8:77:cb:07:44:23: f1:08:22:d6:99:58:76:68:2c:a8:0c:ff:5e:e7:13: 7d:e7:17:b1:62:6e:47:af:bb:f4:8b:e3:6c:d4:11: b0:95:89:94:d7:4f:7b:4f:68:ca:d1:2c:a8:e0:b2: 2d:bf:50:3a:c8:f0:a2:3c:88:1a:9e:9c:30:c5:20: 3a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:50:B7:73:54:44:91:85:88:DF:C5:CD:DF:1C:86:F6:1B:0C:BD:89 X509v3 Authority Key Identifier: keyid:C4:D7:B9:4B:9D:FB:64:F5:C1:89:27:23:30:DB:DC:AD:2A:7D:01:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNe5S537ZPXBiScjMNvcrSp9AW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E791/19C68D063A0511ECA944051BC4F9AE02/xNe5S537ZPXBiScjMNvcrSp9AW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:db:f7:2e:e8:0a:fb:9e:c8:cd:29:c9:1e:ae:a1:31:f5:4e: 9d:8a:97:7e:17:f2:69:b3:f3:14:82:80:47:5c:73:1c:70:67: 6a:19:e9:e0:b7:c5:5c:67:22:1d:f9:aa:78:c1:ed:04:ba:aa: 70:08:dc:72:65:36:76:8f:e6:19:3b:74:b9:a4:2d:80:28:2f: a9:ca:d3:42:38:d1:64:a4:14:81:32:18:79:a3:54:71:3a:61: 50:8f:80:d3:cd:aa:a4:c7:30:4e:d7:cf:e6:76:b1:34:cb:83: 5a:15:c2:bb:85:25:04:9b:d4:15:50:48:1a:2a:c1:af:37:7e: cf:14:68:c8:84:5c:96:97:ba:ef:5a:7c:25:8f:24:83:a5:94: 7f:4e:0a:06:1b:b0:ac:1d:20:3e:a4:50:65:44:30:26:78:96: 86:3c:03:64:a9:30:25:d6:30:d6:39:fb:d0:99:02:3d:52:97: 03:9d:f0:c9:62:b5:eb:c1:fe:82:9e:00:17:02:46:03:4f:0f: d3:d7:e6:a8:49:16:b1:27:c3:33:1a:7f:c1:95:76:dc:22:39: 3a:a1:49:5e:18:71:cf:b3:15:70:9c:c6:1b:fe:70:a3:37:12: 36:82:1e:c6:1c:e1:6f:1d:42:9b:1e:95:a6:b1:df:00:86:38: 22:db:bd:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU3OTExMTAvBgNVBAUTKEM0RDdCOTRCOURGQjY0RjVDMTg5MjcyMzMwREJEQ0FE MkE3RDAxNkUwHhcNMjUwNDI0MjM0OTQ5WhcNMjUwNTAxMjM0OTQ5WjAYMRYwFAYD VQQDEw02ODBhY2UxZC04NzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3XzjNILk0tGoOh+l4tsJgIhDqTP3/DxqcHjW+lkF+eSU2gy0Z5RinpUXfFm yiYZ5e8Aihtvzffien6SGPFFCkiH3dK+dOOprHFprX5PzCdLaPUf9pXrqh6H66RH GDRy7L3QMJAa/EUDRr2bjw8gkpy30qMSHsSC77gHJvBk386FtwyvLDVVuMR9JSyD KRe5lZU2sIExcTHTi3spbvNcIC7ES12iF2KZFmCLJKNp4/EiYvF+Cq/miEBa8nq4 d8sHRCPxCCLWmVh2aCyoDP9e5xN95xexYm5Hr7v0i+Ns1BGwlYmU1097T2jK0Syo 4LItv1A6yPCiPIganpwwxSA6BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1Qt3NU RJGFiN/Fzd8chvYbDL2JMB8GA1UdIwQYMBaAFMTXuUud+2T1wYknIzDb3K0qfQFu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTc5MS8xOUM2OEQwNjNB MDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQWEJpU2NqTU52Y3JTcDlB VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOZTVTNTM3WlBYQmlTY2pNTnZjclNwOUFXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTc5MS8xOUM2OEQwNjNBMDUxMUVDQTk0NDA1MUJDNEY5QUUwMi94TmU1UzUzN1pQ WEJpU2NqTU52Y3JTcDlBVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy2/cu6Ar7nsjNKckerqEx9U6dipd+F/Jps/MUgoBHXHMccGdqGeng t8VcZyId+ap4we0EuqpwCNxyZTZ2j+YZO3S5pC2AKC+pytNCONFkpBSBMhh5o1Rx OmFQj4DTzaqkxzBO18/mdrE0y4NaFcK7hSUEm9QVUEgaKsGvN37PFGjIhFyWl7rv WnwljySDpZR/TgoGG7CsHSA+pFBlRDAmeJaGPANkqTAl1jDWOfvQmQI9UpcDnfDJ YrXrwf6CngAXAkYDTw/T1+aoSRaxJ8MzGn/BlXbcIjk6oUleGHHPsxVwnMYb/nCj NxI2gh7GHOFvHUKbHpWmsd8Ahjgi270H -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:41 2025 by rpki-client