$ rpki-client -vvf rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft File: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft (raw, json) Hash identifier: qJzh2MPIsywi5DlexpxRP2pXi/BRrpFFS1bQIZc9c98= Subject key identifier: 4A:41:3D:3B:2E:2D:27:81:04:E1:E3:03:C7:5D:16:E9:54:57:28:72 Authority key identifier: C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 Certificate issuer: /CN=A91308E4/serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Certificate serial: 06B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft Manifest number: 06A2 Signing time: Thu 24 Apr 2025 22:00:51 +0000 Manifest this update: Thu 24 Apr 2025 22:00:50 +0000 Manifest next update: Thu 01 May 2025 22:00:50 +0000 Files and hashes: 1: xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl (hash: FfJunEMUL2AZh5oN5AubjKLizb1DAatBJPjHLDA4q78=) 2: 79520888650611EBA9BB2882C4F9AE02.roa (hash: SQlrc6PCUPjaaBm+jKtjnbQxZYJxO/Vi8PJnTLD4+DE=) 3: 801F61DCC1E111EBB27A0812C4F9AE02.roa (hash: ez5zyisrlhzGt4msn6K1G9iNl7wli7TiUZuA1FWHYm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1713 (0x6b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308E4, serialNumber=C63892FDAD943F25FA396841BB773DA15F700684 Validity Not Before: Apr 24 22:00:50 2025 GMT Not After : May 1 22:00:50 2025 GMT Subject: CN=680ab493-4cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:23:9b:8a:42:b8:36:b9:75:51:6b:93:ef: 47:1f:1e:ab:d8:c8:7e:c5:ba:20:22:9d:3b:3c:28: 5a:b5:13:1f:47:9b:34:6c:93:28:f9:ba:18:8d:1b: 92:a4:9c:f6:76:94:fd:96:6c:e6:ee:ef:b5:50:d6: 4a:9f:c9:c3:e9:62:b4:7b:07:b0:1a:f9:6a:cd:35: 18:de:a6:7a:7c:bf:1e:ef:58:cd:50:1d:ca:69:0e: 32:2c:09:60:f9:8a:b4:d2:6c:42:cb:23:96:53:d5: fd:1b:71:5d:ca:fa:98:55:67:e5:4e:25:d8:5b:1b: 4d:5c:33:fc:97:f0:e8:69:0e:68:0d:c0:e7:5a:7d: 54:29:e5:73:53:22:3d:38:ee:20:2e:5e:04:3e:ee: 8a:16:61:04:39:a9:5f:87:cc:46:95:15:64:50:09: 58:52:61:95:b1:40:c2:d4:0b:91:02:10:db:ca:bd: 73:e7:6c:58:01:65:a1:96:0e:1c:a8:2a:bb:31:ae: 7b:cc:b9:f9:93:ba:04:96:c6:5b:84:a6:35:02:b1: 89:af:aa:fb:9f:90:97:40:39:d8:8a:c6:50:de:06: e1:b4:79:99:4b:7b:da:08:5b:07:94:58:d8:1d:d6: 10:38:e9:1c:42:94:72:fd:f9:68:05:9d:f9:0c:fc: f5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:41:3D:3B:2E:2D:27:81:04:E1:E3:03:C7:5D:16:E9:54:57:28:72 X509v3 Authority Key Identifier: keyid:C6:38:92:FD:AD:94:3F:25:FA:39:68:41:BB:77:3D:A1:5F:70:06:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308E4/130A1CB0650511EB9089F180C4F9AE02/xjiS_a2UPyX6OWhBu3c9oV9wBoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:ec:43:9f:68:71:71:38:c7:f2:68:6e:e0:6c:c7:30:cb:81: 30:98:f4:53:d3:96:36:01:c9:d2:d2:38:90:0b:35:ac:e5:42: 56:df:9f:8b:be:c3:ab:68:9f:a9:6f:6c:14:e8:bd:2a:6a:56: 3c:1f:4b:54:41:a7:79:32:f7:c6:40:51:39:9e:11:70:2c:6c: 36:5b:bc:2a:ac:90:ea:8b:2a:0c:c8:19:29:d2:35:d0:ac:96: ce:b7:a3:77:1f:83:78:58:6b:c6:78:38:93:0e:40:29:41:58: 9e:6b:66:0a:63:b0:15:3b:4a:ad:a7:76:43:7b:0c:35:30:e8: 77:2b:b9:3b:73:d5:7d:dc:74:8c:8a:84:f0:33:de:58:66:bd: c7:a9:66:80:cf:a4:90:17:c9:7a:90:e3:6a:93:41:4b:c6:b3: 0f:ac:45:35:d2:bc:78:cc:67:6a:3d:31:09:65:76:4c:4b:83: ec:4c:27:ce:0c:0c:74:a4:9a:70:f4:e9:4b:e5:bf:fb:1b:a8: e6:8c:bb:ad:17:44:87:c8:54:0b:72:79:de:37:0e:53:82:47: c6:2d:f6:85:89:48:35:ca:13:e5:52:b9:59:2c:fd:fa:90:a1: 9f:e5:d9:de:dd:f7:d5:5d:71:18:59:5a:94:5a:26:3c:d1:4c: 41:94:4d:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4RTQxMTAvBgNVBAUTKEM2Mzg5MkZEQUQ5NDNGMjVGQTM5Njg0MUJCNzczREEx NUY3MDA2ODQwHhcNMjUwNDI0MjIwMDUwWhcNMjUwNTAxMjIwMDUwWjAYMRYwFAYD VQQDEw02ODBhYjQ5My00Y2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw90jm4pCuDa5dVFrk+9HHx6r2Mh+xbogIp07PChatRMfR5s0bJMo+boYjRuS pJz2dpT9lmzm7u+1UNZKn8nD6WK0ewewGvlqzTUY3qZ6fL8e71jNUB3KaQ4yLAlg +Yq00mxCyyOWU9X9G3FdyvqYVWflTiXYWxtNXDP8l/DoaQ5oDcDnWn1UKeVzUyI9 OO4gLl4EPu6KFmEEOalfh8xGlRVkUAlYUmGVsUDC1AuRAhDbyr1z52xYAWWhlg4c qCq7Ma57zLn5k7oElsZbhKY1ArGJr6r7n5CXQDnYisZQ3gbhtHmZS3vaCFsHlFjY HdYQOOkcQpRy/floBZ35DPz1jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpBPTsu LSeBBOHjA8ddFulUVyhyMB8GA1UdIwQYMBaAFMY4kv2tlD8l+jloQbt3PaFfcAaE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhFNC8xMzBBMUNCMDY1 MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5WDZPV2hCdTNjOW9WOXdC b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqaVNfYTJVUHlYNk9XaEJ1M2M5b1Y5d0JvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhFNC8xMzBBMUNCMDY1MDUxMUVCOTA4OUYxODBDNEY5QUUwMi94amlTX2EyVVB5 WDZPV2hCdTNjOW9WOXdCb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC37EOfaHFxOMfyaG7gbMcwy4EwmPRT05Y2AcnS0jiQCzWs5UJW35+L vsOraJ+pb2wU6L0qalY8H0tUQad5MvfGQFE5nhFwLGw2W7wqrJDqiyoMyBkp0jXQ rJbOt6N3H4N4WGvGeDiTDkApQViea2YKY7AVO0qtp3ZDeww1MOh3K7k7c9V93HSM ioTwM95YZr3HqWaAz6SQF8l6kONqk0FLxrMPrEU10rx4zGdqPTEJZXZMS4PsTCfO DAx0pJpw9OlL5b/7G6jmjLutF0SHyFQLcnneNw5TgkfGLfaFiUg1yhPlUrlZLP36 kKGf5dne3ffVXXEYWVqUWiY80UxBlE0G -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:59 2025 by rpki-client