$ rpki-client -vvf rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft File: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft (raw, json) Hash identifier: ps5vl609b3VmNKsqK23hKqx2jpKGDDS8QMySp2c1fgE= Subject key identifier: 6F:5C:64:EC:BD:B8:99:05:AC:4B:3C:08:22:F2:B9:A3:EF:F2:89:76 Authority key identifier: 5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C Certificate issuer: /CN=A91569FB/serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft Manifest number: 066F Signing time: Thu 24 Apr 2025 22:07:49 +0000 Manifest this update: Thu 24 Apr 2025 22:07:48 +0000 Manifest next update: Thu 01 May 2025 22:07:48 +0000 Files and hashes: 1: Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl (hash: Vk6zh4hsFxN2t5LoHpVzR58PP0YCTzCLoVvM8tJ3OCI=) 2: 154E7E02762211EBA80A6D61C4F9AE02.roa (hash: qkyN60ECu4BYWQ3TkIsHpS5OSWIDmixvU/RZxjOnAoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91569FB, serialNumber=5DEE16EF85A2BF84DAD887666759B1EC15D1B94C Validity Not Before: Apr 24 22:07:48 2025 GMT Not After : May 1 22:07:48 2025 GMT Subject: CN=680ab634-2c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:87:2b:6f:25:72:39:a9:5b:b4:e7:3e:09:06: c4:22:b7:03:9e:28:79:26:0f:eb:49:cf:d0:b4:18: 74:ea:a2:b0:c5:d0:a8:5d:41:a5:d0:11:c8:66:d7: 3b:62:0c:a1:6e:56:98:1e:df:f2:fc:ab:86:70:52: 71:84:70:04:b7:ae:17:4a:f9:7a:77:9a:20:f1:1a: 12:03:92:07:b1:50:43:56:ef:c9:2c:11:77:95:fa: 32:b3:37:30:a8:b4:10:a3:9b:78:85:97:d0:a3:1d: 58:54:f2:05:b1:87:9e:2d:d2:2f:e9:79:cf:89:0b: a5:f9:3e:0d:41:1c:e1:a4:71:b6:3a:af:d6:65:01: e4:78:fd:37:61:87:0b:12:66:79:37:96:67:e8:f8: b0:45:f3:0d:62:b9:7a:e4:88:78:10:dd:28:25:70: 7c:e2:24:56:3f:b0:44:a7:a7:71:be:b8:8f:91:7f: 1a:0c:9e:18:42:ff:39:6c:f4:d9:36:1c:35:e7:7d: ef:98:21:0d:0a:14:fc:e7:f7:f5:00:be:97:11:5f: 2e:f9:22:51:b8:68:79:91:f7:2e:9b:00:88:96:e0: c8:09:c0:b2:c0:1f:9a:45:4c:d5:e2:a0:30:7d:cf: cc:c1:21:30:66:9b:60:58:89:cb:17:5f:89:17:24: e7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5C:64:EC:BD:B8:99:05:AC:4B:3C:08:22:F2:B9:A3:EF:F2:89:76 X509v3 Authority Key Identifier: keyid:5D:EE:16:EF:85:A2:BF:84:DA:D8:87:66:67:59:B1:EC:15:D1:B9:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91569FB/8DE1DCDA762011EBBC553C60C4F9AE02/Xe4W74Wiv4Ta2IdmZ1mx7BXRuUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:d2:c3:06:2b:fc:85:1e:0d:9f:4a:9c:49:68:f9:fe:f1:df: 9c:91:25:f3:97:f7:49:58:3a:c0:8a:39:62:3d:b8:01:3e:ee: 6a:b5:f2:96:08:cd:e8:65:7a:7f:b1:66:79:20:34:c7:fc:8e: fd:eb:dc:d7:65:97:b7:99:25:bf:f8:49:1e:5e:9c:f0:b9:6a: 29:6b:66:ab:0f:e1:f2:eb:48:de:41:48:a2:22:94:87:81:e1: 16:0f:a0:42:b9:f4:1e:5f:72:ed:66:b3:cc:5f:74:4d:da:1f: 9c:0c:69:19:3c:ab:4c:42:4c:14:b4:f8:d0:a8:e5:4f:e9:ae: bf:21:02:cf:45:ca:f9:25:35:99:e6:00:c3:8d:3f:06:83:f0: 71:15:da:8e:34:b8:2a:8f:5d:77:96:ef:fb:43:88:fc:27:e7: e2:f1:11:8c:44:ab:66:fe:cf:a3:72:cc:9e:86:df:9d:38:9d: 83:20:1e:ac:f4:2d:29:7e:d5:2a:f3:83:c4:b2:a6:0c:f5:31: 5a:e8:99:89:4c:8a:3f:a3:ac:7b:b8:d8:65:fa:2b:8e:42:2b: 64:b0:3a:41:5c:1b:2a:6c:c0:b9:93:5b:f8:2d:fd:24:9a:10: 07:ee:ca:2a:4b:f6:82:0c:ec:3c:52:42:5b:88:f6:08:9b:63: 2e:1f:b2:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5RkIxMTAvBgNVBAUTKDVERUUxNkVGODVBMkJGODREQUQ4ODc2NjY3NTlCMUVD MTVEMUI5NEMwHhcNMjUwNDI0MjIwNzQ4WhcNMjUwNTAxMjIwNzQ4WjAYMRYwFAYD VQQDEw02ODBhYjYzNC0yYzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4crbyVyOalbtOc+CQbEIrcDnih5Jg/rSc/QtBh06qKwxdCoXUGl0BHIZtc7 YgyhblaYHt/y/KuGcFJxhHAEt64XSvl6d5og8RoSA5IHsVBDVu/JLBF3lfoyszcw qLQQo5t4hZfQox1YVPIFsYeeLdIv6XnPiQul+T4NQRzhpHG2Oq/WZQHkeP03YYcL EmZ5N5Zn6PiwRfMNYrl65Ih4EN0oJXB84iRWP7BEp6dxvriPkX8aDJ4YQv85bPTZ Nhw1533vmCENChT85/f1AL6XEV8u+SJRuGh5kfcumwCIluDICcCywB+aRUzV4qAw fc/MwSEwZptgWInLF1+JFyTnGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9cZOy9 uJkFrEs8CCLyuaPv8ol2MB8GA1UdIwQYMBaAFF3uFu+For+E2tiHZmdZsewV0blM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjlGQi84REUxRENEQTc2 MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0VGEySWRtWjFteDdCWFJ1 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlNFc3NFdpdjRUYTJJZG1aMW14N0JYUnVVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjlGQi84REUxRENEQTc2MjAxMUVCQkM1NTNDNjBDNEY5QUUwMi9YZTRXNzRXaXY0 VGEySWRtWjFteDdCWFJ1VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ0sMGK/yFHg2fSpxJaPn+8d+ckSXzl/dJWDrAijliPbgBPu5qtfKW CM3oZXp/sWZ5IDTH/I7969zXZZe3mSW/+EkeXpzwuWopa2arD+Hy60jeQUiiIpSH geEWD6BCufQeX3LtZrPMX3RN2h+cDGkZPKtMQkwUtPjQqOVP6a6/IQLPRcr5JTWZ 5gDDjT8Gg/BxFdqONLgqj113lu/7Q4j8J+fi8RGMRKtm/s+jcsyeht+dOJ2DIB6s 9C0pftUq84PEsqYM9TFa6JmJTIo/o6x7uNhl+iuOQitksDpBXBsqbMC5k1v4Lf0k mhAH7soqS/aCDOw8UkJbiPYIm2MuH7KW -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:18 2025 by rpki-client