$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft File: elxN0KO7nNgUshdK9pPj90FLmVs.mft (raw, json) Hash identifier: 1gFhWGiBkBuZppe6T4LYzWgmqR0MKPAPqa6xZXK5Ki4= Subject key identifier: 85:26:24:0C:93:A6:E3:7B:DF:45:13:BA:56:FE:29:59:FB:18:1F:2E Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B Certificate issuer: /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft Manifest number: 0108 Signing time: Fri 25 Apr 2025 04:09:06 +0000 Manifest this update: Fri 25 Apr 2025 04:09:05 +0000 Manifest next update: Fri 02 May 2025 04:09:05 +0000 Files and hashes: 1: elxN0KO7nNgUshdK9pPj90FLmVs.crl (hash: Qa8yZFWEPY9aS+pn1OXAxxtM4CTj8R1NSW1eyqIxDU8=) 2: 4A0A2DC8958011EE91C9DF80C4F9AE02.roa (hash: 8E473KkpiKjZKNroBEhCbINIeIwzAWwWEuJqRVf36nY=) 3: 24CB4F36957811EEA7BF2753C4F9AE02.roa (hash: UV3XO65spY2KLBvMTAJ4CDMAZHABDW2pouUNViGYZzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FD0, serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Validity Not Before: Apr 25 04:09:05 2025 GMT Not After : May 2 04:09:05 2025 GMT Subject: CN=680b0ae1-70a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:59:df:c4:18:06:ef:e3:c8:10:91:09:22:5c: f1:5a:d7:97:b2:9a:6c:93:45:4c:a0:6d:3a:ff:a6: b8:2a:1b:ee:67:28:26:b8:52:02:39:5a:08:0b:de: 4d:bd:35:ef:e6:a1:e5:d4:0b:1b:48:3f:80:8a:17: e9:3a:8c:3f:55:62:b4:3c:b1:c1:99:60:ab:62:01: ae:a5:84:eb:5f:40:e1:43:60:84:1f:c4:c3:ae:0a: 62:0a:76:35:93:b3:01:96:83:41:d3:11:7b:cc:cb: 25:f1:c7:60:d3:20:5c:0f:a4:b3:78:a8:b1:65:5c: 6c:a4:c2:64:d2:fb:51:3d:80:a8:3f:4d:9a:cf:a6: 63:67:ec:12:c8:e3:0a:d8:5a:33:b6:f0:b3:9e:69: 02:bb:bd:92:39:35:24:7c:71:26:1b:a8:5a:96:6b: bb:0a:92:8b:42:f6:16:45:f6:0a:17:23:ca:19:5a: 67:fa:18:fe:af:46:1d:9c:92:97:eb:44:c3:ce:26: ac:4f:02:5c:25:4e:e4:e1:a7:e6:94:89:fc:5b:f7: db:2d:77:6c:44:68:04:f9:14:9d:70:7f:65:b8:09: 19:5a:a6:df:9c:b1:18:a6:d6:01:0c:4f:b3:1e:cc: 99:3b:61:4b:c4:ba:43:0d:5f:d2:33:b5:c5:06:5c: 9b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:26:24:0C:93:A6:E3:7B:DF:45:13:BA:56:FE:29:59:FB:18:1F:2E X509v3 Authority Key Identifier: keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:86:e4:e8:cd:90:d5:e0:f6:51:42:e3:be:aa:80:d1:31:f9: 67:01:0e:db:40:70:72:f7:db:de:81:88:09:17:6e:10:59:f5: 05:1e:be:f0:6e:c1:0f:85:6b:e5:ae:39:01:86:a2:54:76:0c: 80:56:74:ee:70:1b:29:ba:15:73:46:94:79:4e:9a:5a:b3:e6: d1:75:7a:9a:2c:87:74:da:5c:aa:17:e2:e8:21:77:12:df:fc: 7b:f2:00:01:47:49:9b:4a:c0:d7:19:f5:13:55:a0:dc:25:b2: 0d:94:f7:eb:96:5e:55:9a:94:4b:bb:72:f9:54:12:11:52:2e: 8e:59:b4:e2:dc:6e:57:fc:b2:fa:f7:5c:c7:e8:fa:7e:5d:a4: 37:58:58:1e:b1:f7:ca:bd:b1:4c:60:61:5d:87:44:0d:56:80: 95:4f:86:45:db:88:fb:3c:a4:2c:3d:bd:f1:f5:7b:3a:3a:a2: 76:f7:96:43:5d:a4:90:0a:2a:b3:ea:b2:1a:3c:63:a5:40:2e: 06:a6:c0:7b:19:4a:37:58:10:07:ff:3b:e8:70:3a:4a:46:de: b1:e8:98:cb:a6:a2:29:20:45:05:a4:a1:b4:3f:02:aa:9a:74: 7b:eb:2a:bc:71:12:40:fd:18:47:5f:7b:04:76:eb:38:54:63: 6e:6c:40:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRDAxMTAvBgNVBAUTKDdBNUM0REQwQTNCQjlDRDgxNEIyMTc0QUY2OTNFM0Y3 NDE0Qjk5NUIwHhcNMjUwNDI1MDQwOTA1WhcNMjUwNTAyMDQwOTA1WjAYMRYwFAYD VQQDEw02ODBiMGFlMS03MGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFnfxBgG7+PIEJEJIlzxWteXsppsk0VMoG06/6a4KhvuZygmuFICOVoIC95N vTXv5qHl1AsbSD+AihfpOow/VWK0PLHBmWCrYgGupYTrX0DhQ2CEH8TDrgpiCnY1 k7MBloNB0xF7zMsl8cdg0yBcD6SzeKixZVxspMJk0vtRPYCoP02az6ZjZ+wSyOMK 2FoztvCznmkCu72SOTUkfHEmG6halmu7CpKLQvYWRfYKFyPKGVpn+hj+r0YdnJKX 60TDziasTwJcJU7k4afmlIn8W/fbLXdsRGgE+RSdcH9luAkZWqbfnLEYptYBDE+z HsyZO2FLxLpDDV/SM7XFBlybWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIUmJAyT puN730UTulb+KVn7GB8uMB8GA1UdIwQYMBaAFHpcTdCju5zYFLIXSvaT4/dBS5lb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZEMC8yQzlBQTMxQzk1 NzYxMUVFODJFRkNCMUNDNEY5QUUwMi9lbHhOMEtPN25OZ1VzaGRLOXBQajkwRkxt VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VseE4wS083bk5nVXNoZEs5cFBqOTBGTG1Wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZEMC8yQzlBQTMxQzk1NzYxMUVFODJFRkNCMUNDNEY5QUUwMi9lbHhOMEtPN25O Z1VzaGRLOXBQajkwRkxtVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/huTozZDV4PZRQuO+qoDRMflnAQ7bQHBy99vegYgJF24QWfUFHr7w bsEPhWvlrjkBhqJUdgyAVnTucBspuhVzRpR5Tppas+bRdXqaLId02lyqF+LoIXcS 3/x78gABR0mbSsDXGfUTVaDcJbINlPfrll5VmpRLu3L5VBIRUi6OWbTi3G5X/LL6 91zH6Pp+XaQ3WFgesffKvbFMYGFdh0QNVoCVT4ZF24j7PKQsPb3x9Xs6OqJ295ZD XaSQCiqz6rIaPGOlQC4GpsB7GUo3WBAH/zvocDpKRt6x6JjLpqIpIEUFpKG0PwKq mnR76yq8cRJA/RhHX3sEdus4VGNubEBr -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:38 2025 by rpki-client