$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json) Hash identifier: aOyvVvQkW6QNebBeASjBDA1lPwvlx8eliyOIosqRWR4= Subject key identifier: F5:11:AA:50:98:3C:75:D3:5D:34:2B:12:1C:F9:1A:C5:60:97:16:B7 Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft Manifest number: 0683 Signing time: Thu 24 Apr 2025 22:05:43 +0000 Manifest this update: Thu 24 Apr 2025 22:05:42 +0000 Manifest next update: Thu 01 May 2025 22:05:42 +0000 Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: R2JeQMejgsxPTsTXXO1jD9CWW6b+tyCy2+ytGbLI7uo=) 2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: FREW3BYIhAyr82gwSpG+aXABGrdd/q2DunYmdFOCRY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7 Validity Not Before: Apr 24 22:05:42 2025 GMT Not After : May 1 22:05:42 2025 GMT Subject: CN=680ab5b7-3e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:94:19:98:b5:4d:d5:f2:27:ec:a6:df:6c: c4:7e:eb:ec:46:4a:17:c9:cb:52:cf:e0:2f:f4:1f: 82:ba:6e:72:72:88:1e:70:7c:4c:fc:16:c8:4c:bb: 10:4b:3b:0d:b3:72:ac:3d:60:8d:4e:9b:41:26:a9: 42:24:ef:36:58:b5:61:21:bb:9e:f9:1e:92:85:9c: 29:5d:2a:80:ae:7e:22:19:02:35:5d:7b:95:58:79: f3:be:19:a7:76:cf:00:8f:01:ed:83:0e:2b:6e:c7: 9c:a1:9b:52:21:bd:2e:8c:cb:cc:e1:37:3b:c5:34: 22:d4:9e:3c:c5:c5:f4:7d:59:21:66:97:8e:4e:b8: 85:46:d1:e4:8e:8a:66:29:bc:53:a8:83:49:de:1e: c3:65:d4:fc:b1:e7:a0:42:0c:90:96:ad:6f:a7:04: 2e:f9:e6:db:17:49:98:45:ad:2f:e7:8d:b9:aa:a3: 78:3a:45:e0:17:9b:86:a5:7a:48:28:53:2f:5d:86: 64:8a:83:9a:29:81:63:67:ed:bb:f9:ba:0e:d0:3c: b6:d3:96:37:29:5a:44:c4:a8:b8:17:eb:7d:8f:a0: fd:2e:e7:ca:28:ea:f1:8b:89:1c:9b:36:1f:5d:da: 4b:6d:a6:61:c7:32:2a:56:54:a9:cf:ad:44:21:a2: a5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:11:AA:50:98:3C:75:D3:5D:34:2B:12:1C:F9:1A:C5:60:97:16:B7 X509v3 Authority Key Identifier: keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:f7:3a:a1:c8:11:0f:3c:14:70:83:05:0f:da:33:5f:64:54: e0:b9:da:9c:1c:a5:60:f8:b9:7b:b4:ca:cc:c0:0a:7d:0a:35: 87:95:86:63:a3:60:3b:c4:a2:3d:69:43:0e:5a:78:80:f8:38: 95:d2:4e:a5:02:30:92:fb:dd:45:ca:bf:7d:c1:30:56:9f:a1: 0c:05:3b:63:d8:66:3b:4d:27:36:dd:92:72:50:5a:00:ad:8d: 60:8c:21:d4:ea:61:19:ab:68:9f:0c:c6:8a:2f:4e:d2:9d:21: 8b:63:92:e7:48:a6:2b:d2:ca:c0:3c:94:b8:19:fc:60:a3:4b: b8:46:95:3f:f5:83:d3:d0:24:a5:d0:bd:8b:c2:01:2e:ae:3c: 25:d5:b7:97:b7:98:eb:18:62:74:3c:2d:a6:69:1d:e5:80:79: 58:66:0b:d2:00:e6:d0:a2:df:66:b2:12:6c:78:17:f6:28:79: e6:e8:ad:16:37:d6:b5:18:16:5c:9d:19:12:58:35:26:ff:cb: c8:6f:5d:37:fe:8b:5d:13:9f:a5:a7:83:ed:f8:4f:c6:e0:c8: 70:3d:3e:19:a0:21:67:83:59:26:4c:98:5d:ad:83:e5:09:09: ce:c2:3c:b7:fe:b4:8a:84:b0:9b:aa:6e:fc:37:04:38:21:b7: fd:de:7c:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc1RDgxMTAvBgNVBAUTKEM0MzlCQ0Q3NEQ2NDA1MkJCMjAzNTMxQzQ2MDQ5QUQ0 MDM1ODhGQzcwHhcNMjUwNDI0MjIwNTQyWhcNMjUwNTAxMjIwNTQyWjAYMRYwFAYD VQQDEw02ODBhYjViNy0zZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSyUGZi1TdXyJ+ym32zEfuvsRkoXyctSz+Av9B+Cum5ycogecHxM/BbITLsQ SzsNs3KsPWCNTptBJqlCJO82WLVhIbue+R6ShZwpXSqArn4iGQI1XXuVWHnzvhmn ds8AjwHtgw4rbsecoZtSIb0ujMvM4Tc7xTQi1J48xcX0fVkhZpeOTriFRtHkjopm KbxTqINJ3h7DZdT8seegQgyQlq1vpwQu+ebbF0mYRa0v5425qqN4OkXgF5uGpXpI KFMvXYZkioOaKYFjZ+27+boO0Dy205Y3KVpExKi4F+t9j6D9LufKKOrxi4kcmzYf XdpLbaZhxzIqVlSpz61EIaKlgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPURqlCY PHXTXTQrEhz5GsVglxa3MB8GA1UdIwQYMBaAFMQ5vNdNZAUrsgNTHEYEmtQDWI/H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzVEOC81MUM5RjZBRTcw NUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JTdXlBMU1jUmdTYTFBTllq OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEbTgxMDFrQlN1eUExTWNSZ1NhMUFOWWo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzVEOC81MUM5RjZBRTcwNUYxMUVCOTk3QkJCMTZDNEY5QUUwMi94RG04MTAxa0JT dXlBMU1jUmdTYTFBTllqOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB19zqhyBEPPBRwgwUP2jNfZFTgudqcHKVg+Ll7tMrMwAp9CjWHlYZj o2A7xKI9aUMOWniA+DiV0k6lAjCS+91Fyr99wTBWn6EMBTtj2GY7TSc23ZJyUFoA rY1gjCHU6mEZq2ifDMaKL07SnSGLY5LnSKYr0srAPJS4Gfxgo0u4RpU/9YPT0CSl 0L2LwgEurjwl1beXt5jrGGJ0PC2maR3lgHlYZgvSAObQot9mshJseBf2KHnm6K0W N9a1GBZcnRkSWDUm/8vIb103/otdE5+lp4Pt+E/G4MhwPT4ZoCFng1kmTJhdrYPl CQnOwjy3/rSKhLCbqm78NwQ4Ibf93nwB -----END CERTIFICATE-----Generated at Sat Apr 26 03:56:42 2025 by rpki-client