$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: RdIsNKoW1qeIDAYe+T++2jm7avzWAKvNd6aIbWxTY7s= Subject key identifier: 6F:DD:69:E8:28:B7:CE:3D:F2:0F:06:04:11:C9:A4:86:6B:32:E3:62 Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 0150 Signing time: Fri 25 Apr 2025 03:19:21 +0000 Manifest this update: Fri 25 Apr 2025 03:19:21 +0000 Manifest next update: Fri 02 May 2025 03:19:21 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: rJfZfissM2Dzli1ec7eZuPGc0ZL0RdzL3B9eYiXSGGw=) 2: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: DCf9qWND7QA7KzN3251dDDXozk2L05NK9fYFAhwBS80=) 3: CA1D2934296011EEB6BB2647C4F9AE02.roa (hash: PB+Fwr7+OFv5312gtz53yebHRvlqOj9H0ezMU/u7UvY=) 4: 302B59C64EEF11EFB111F530C4F9AE02.roa (hash: aQ/AH7PdJFNkSR1Nh6TGi7Jf84xG8OlYq5cmgQwsJ0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: Apr 25 03:19:21 2025 GMT Not After : May 2 03:19:21 2025 GMT Subject: CN=680aff39-ad17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3a:39:bf:fe:9c:92:a7:36:73:0b:68:97:88: 79:60:f8:e0:03:d2:d3:4e:73:47:25:15:47:be:47: 80:18:3e:2d:0a:be:04:5c:55:12:eb:5f:e2:a9:ff: 19:2d:50:0f:8a:30:7f:8b:8a:e8:07:cd:77:89:6c: fa:67:4a:d9:47:1e:e7:0d:e0:56:42:b1:03:ce:4f: 48:ea:e3:a2:fa:06:6b:bc:d3:22:b3:dc:0f:f7:91: 0c:8a:71:ee:54:7d:83:94:d7:37:a9:70:4c:39:2f: 05:89:28:9d:42:9a:0c:c2:7e:69:c9:26:1a:b1:6c: 5e:3a:de:70:ee:bb:21:a8:d9:17:a3:ac:c1:44:da: 12:a8:20:d1:92:1d:aa:a7:18:6f:4e:8e:1a:8d:79: 9f:42:d7:8e:2d:9d:5e:da:8c:14:3a:03:e3:03:30: 88:05:55:2d:d7:5c:6c:6c:ef:0f:7a:2d:1f:8c:ff: 43:21:c7:b2:30:de:ea:dc:77:ec:12:3c:dc:e6:a5: 9f:93:77:cb:eb:84:b4:e7:df:c7:5d:16:7f:51:0f: ac:40:ae:89:ac:ae:d2:0f:c0:86:7f:5e:55:f8:0e: 6e:b7:70:1b:13:66:2e:bb:97:fc:e8:25:86:8e:a3: 40:e7:b6:80:3a:9e:f8:be:b5:ec:92:7b:17:9f:dc: 71:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DD:69:E8:28:B7:CE:3D:F2:0F:06:04:11:C9:A4:86:6B:32:E3:62 X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:84:43:fd:df:cd:1e:b6:07:51:82:6c:d6:5f:80:6c:ba:70: 46:f1:33:2e:ba:cd:a8:f5:77:63:d0:86:ff:e7:93:9c:ad:97: d9:3e:69:32:1c:83:15:89:6e:26:fe:b4:55:f7:93:8f:42:2f: ea:52:31:1c:36:b0:ef:4c:aa:b0:43:0d:55:12:38:cb:59:b7: 11:d0:6b:7b:92:be:f4:e4:41:47:62:14:4a:60:ee:c1:57:14: e4:6f:1d:b2:68:10:6d:85:dd:b0:34:dd:ee:8c:00:bd:9b:b7: 7f:7f:76:ad:71:19:49:f6:3a:89:7a:79:8d:31:55:7b:30:a8: 6c:37:4c:ca:e0:c7:34:88:63:a0:99:83:87:1d:0c:ff:1f:3b: fd:fd:2b:98:3f:39:e6:7a:82:21:5d:36:6b:42:d1:23:da:90: 49:21:84:32:85:a7:d8:79:26:b9:b7:06:86:23:b6:88:57:57: a4:74:70:e4:85:87:da:80:44:e2:40:de:cc:3b:a8:c1:48:8b: d8:82:0f:37:f2:1b:2e:97:cf:02:31:7d:94:b1:14:bd:bc:cf: bf:e3:56:b1:eb:1d:1d:59:c0:86:b9:a9:e0:58:f9:8d:27:45: 77:e6:00:4f:d5:58:c6:ab:03:90:cf:58:60:e4:14:7b:4d:f3: 78:2e:db:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjUwNDI1MDMxOTIxWhcNMjUwNTAyMDMxOTIxWjAYMRYwFAYD VQQDEw02ODBhZmYzOS1hZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jo5v/6ckqc2cwtol4h5YPjgA9LTTnNHJRVHvkeAGD4tCr4EXFUS61/iqf8Z LVAPijB/i4roB813iWz6Z0rZRx7nDeBWQrEDzk9I6uOi+gZrvNMis9wP95EMinHu VH2DlNc3qXBMOS8FiSidQpoMwn5pySYasWxeOt5w7rshqNkXo6zBRNoSqCDRkh2q pxhvTo4ajXmfQteOLZ1e2owUOgPjAzCIBVUt11xsbO8Pei0fjP9DIceyMN7q3Hfs Ejzc5qWfk3fL64S059/HXRZ/UQ+sQK6JrK7SD8CGf15V+A5ut3AbE2Yuu5f86CWG jqNA57aAOp74vrXsknsXn9xxIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/daego t8498g8GBBHJpIZrMuNiMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2hEP9380etgdRgmzWX4BsunBG8TMuus2o9Xdj0Ib/55OcrZfZPmky HIMViW4m/rRV95OPQi/qUjEcNrDvTKqwQw1VEjjLWbcR0Gt7kr705EFHYhRKYO7B VxTkbx2yaBBthd2wNN3ujAC9m7d/f3atcRlJ9jqJenmNMVV7MKhsN0zK4Mc0iGOg mYOHHQz/Hzv9/SuYPznmeoIhXTZrQtEj2pBJIYQyhafYeSa5twaGI7aIV1ekdHDk hYfagETiQN7MO6jBSIvYgg838hsul88CMX2UsRS9vM+/41ax6x0dWcCGuangWPmN J0V35gBP1VjGqwOQz1hg5BR7TfN4Lts2 -----END CERTIFICATE-----Generated at Sat Apr 26 03:59:04 2025 by rpki-client