$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: IV6fHKsbqzjTaULeeNnViDUlw6oSGVjnI1A6AL/dB38= Subject key identifier: FC:5C:F1:9A:9B:6F:BE:8C:BE:2A:13:98:F6:75:F6:5E:29:39:A0:3D Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 230E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 22DC Signing time: Thu 24 Apr 2025 15:52:38 +0000 Manifest this update: Thu 24 Apr 2025 15:52:37 +0000 Manifest next update: Thu 01 May 2025 15:52:37 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: aRZozPXMFntGZ5cIN7RBIlabYQo3eUU4kH0LqQYixFI=) 2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ceQW0pBKYX0iNvGIXu+d5odgS50V86e35zycTc8Ud5M=) 3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: XQc3pF8G20Y24MbmGRMd8iGWGDKIE6b3RdlXoHLAo9o=) 4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: aAotkUpTu/+JybhkWBN3FLBD+6K9gZJwPXhnau7EH7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8974 (0x230e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Apr 24 15:52:37 2025 GMT Not After : May 1 15:52:37 2025 GMT Subject: CN=680a5e46-ca1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:3a:34:9b:54:62:72:18:2f:0d:3a:d5:9f: a2:56:72:6e:7d:67:26:01:44:a8:5c:b1:40:ea:47: 33:20:fe:fe:10:73:00:3a:c4:d5:64:33:03:6f:38: 1e:b9:9b:9d:23:ba:e0:a9:81:77:bb:a9:3c:8d:e2: cd:07:19:5b:e5:8e:da:b1:28:ef:4b:34:18:32:67: 57:74:7a:13:ac:42:39:99:9c:36:e4:3c:31:ca:97: 68:4e:9b:5d:e7:69:25:69:e4:d2:45:76:4c:67:a1: a8:6e:48:5a:73:41:d2:20:48:9d:15:88:9d:28:1a: 23:90:7d:73:bf:39:90:da:1a:9a:a9:c1:99:25:7d: 1b:ee:98:46:20:5d:ef:2a:4b:10:6e:83:e0:63:33: f8:ba:06:ea:d9:94:62:dd:8b:4e:4c:57:b8:be:a0: 88:ee:58:e1:d0:26:bd:d6:88:4c:7e:b2:be:f8:83: 11:8e:6e:b8:cc:6b:ed:af:e5:ce:09:20:41:cc:0c: 96:1a:a8:6f:bf:3b:e2:ff:5a:63:6f:a0:64:86:97: c1:e0:8d:99:dd:2b:61:01:a5:2f:ba:06:e0:10:ef: a8:3a:37:87:a2:b1:ff:57:75:c5:27:6f:82:ab:37: 9b:93:2b:b2:d2:3f:36:63:f3:52:38:f9:1d:8f:e3: 65:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5C:F1:9A:9B:6F:BE:8C:BE:2A:13:98:F6:75:F6:5E:29:39:A0:3D X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:6e:55:41:d3:ad:d6:dd:fe:f9:a6:1e:af:6c:60:90:86:a2: c6:59:55:38:b9:d7:72:eb:ef:9a:84:d6:98:72:cb:d3:c3:8a: 68:a8:40:c7:03:28:9b:cf:38:dc:be:51:0c:e8:52:50:6e:d6: 2a:db:9b:62:54:e6:a4:c6:31:53:4e:6c:d8:2f:a8:1b:37:a2: c2:9d:1e:9f:ab:f9:fe:09:e9:f0:bb:77:c9:d7:6a:66:d8:18: b9:94:e9:55:11:d8:d8:e6:85:7d:64:77:0f:a9:27:2c:56:21: e2:86:76:fb:46:33:78:c6:de:7a:59:aa:4d:76:54:41:27:52: c8:e0:52:7a:ad:f2:8d:30:35:44:60:6f:10:29:05:d7:5f:10: 6c:e9:4f:c1:0f:0e:91:5a:65:af:02:c9:a0:fa:43:2c:9d:49: 38:d4:5d:b4:67:00:90:ca:ff:a7:e3:67:5f:f1:17:b7:5c:bd: ef:69:57:d6:0a:52:0f:ca:1f:ee:f0:85:1a:16:7d:6f:dd:59: d3:67:4b:54:eb:e5:4c:12:92:79:fa:65:c7:f5:6d:06:02:bd: 35:ed:94:11:0f:a5:23:dc:49:c0:f0:dc:bf:28:f0:27:6e:0b: f2:00:a8:a6:d1:d0:32:36:7c:5d:fa:71:64:10:97:27:70:bb: d6:c7:5f:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjUwNDI0MTU1MjM3WhcNMjUwNTAxMTU1MjM3WjAYMRYwFAYD VQQDEw02ODBhNWU0Ni1jYTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApz86NJtUYnIYLw061Z+iVnJufWcmAUSoXLFA6kczIP7+EHMAOsTVZDMDbzge uZudI7rgqYF3u6k8jeLNBxlb5Y7asSjvSzQYMmdXdHoTrEI5mZw25DwxypdoTptd 52klaeTSRXZMZ6Gobkhac0HSIEidFYidKBojkH1zvzmQ2hqaqcGZJX0b7phGIF3v KksQboPgYzP4ugbq2ZRi3YtOTFe4vqCI7ljh0Ca91ohMfrK++IMRjm64zGvtr+XO CSBBzAyWGqhvvzvi/1pjb6BkhpfB4I2Z3SthAaUvugbgEO+oOjeHorH/V3XFJ2+C qzebkyuy0j82Y/NSOPkdj+NlPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxc8Zqb b76MvioTmPZ19l4pOaA9MB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPblVB063W3f75ph6vbGCQhqLGWVU4uddy6++ahNaYcsvTw4poqEDH AyibzzjcvlEM6FJQbtYq25tiVOakxjFTTmzYL6gbN6LCnR6fq/n+Cenwu3fJ12pm 2Bi5lOlVEdjY5oV9ZHcPqScsViHihnb7RjN4xt56WapNdlRBJ1LI4FJ6rfKNMDVE YG8QKQXXXxBs6U/BDw6RWmWvAsmg+kMsnUk41F20ZwCQyv+n42df8Re3XL3vaVfW ClIPyh/u8IUaFn1v3VnTZ0tU6+VMEpJ5+mXH9W0GAr017ZQRD6Uj3EnA8Ny/KPAn bgvyAKim0dAyNnxd+nFkEJcncLvWx1/u -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:07 2025 by rpki-client