$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json) Hash identifier: E2JUICep3XeR0HD545/QMZOPHiHUMhTDtcxIpqGGGTw= Subject key identifier: D6:BC:91:94:04:2B:E4:3E:F7:EB:09:B9:F6:E9:CA:3D:28:18:81:7B Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft Manifest number: F2 Signing time: Fri 25 Apr 2025 04:28:01 +0000 Manifest this update: Fri 25 Apr 2025 04:28:01 +0000 Manifest next update: Fri 02 May 2025 04:28:01 +0000 Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: DMZITNInx3H4oK1V8DUKg3Y+pmUm+AbQ0zBGW0uPJDg=) 2: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: rFJbuDYL88Z9KeNowFp3y8pDODtibJ7P1KjjzQ7u73o=) 3: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: qHX8rwWLzYwQ68AYEwJa6sYGgUw03regWlERxMTMTs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Validity Not Before: Apr 25 04:28:01 2025 GMT Not After : May 2 04:28:01 2025 GMT Subject: CN=680b0f51-c2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:47:e3:d4:95:06:62:b8:3c:9e:f0:28:70:c9: e3:27:f2:ad:0f:3d:3c:83:9e:74:a2:3e:36:f9:30: 8c:55:15:91:43:a4:7a:d7:27:d8:f2:05:5f:bc:e5: 05:e8:f3:4b:bf:7a:62:e6:37:26:0b:d1:7f:eb:cb: d8:5f:c2:d8:41:d7:5d:b6:8d:23:b8:ec:83:97:16: eb:07:4e:18:8c:ff:cd:e5:ab:3f:55:a5:5f:22:6c: 4f:d7:e6:02:cb:8e:bb:c0:5e:e3:a2:b4:37:c9:0f: 6a:c4:0e:ed:9c:a3:b8:20:1f:fc:5f:56:46:2f:ee: f5:d5:e2:15:c1:47:ee:79:3c:cd:a1:6d:fe:0c:aa: 95:f3:cb:8a:db:99:39:38:71:09:a1:61:19:3d:e2: 46:53:95:1c:09:77:55:91:ef:1d:ff:10:55:eb:7b: 26:32:3d:66:01:9d:72:22:56:32:b7:ee:e3:a6:c3: 17:ba:f5:2e:1e:37:c9:43:b5:d7:46:b6:d8:99:c3: ae:75:71:8b:54:c6:dd:76:90:81:ba:e2:a9:a5:1d: e6:6a:d6:b5:9c:2b:77:e4:e3:bb:2f:d0:62:7c:4f: 5a:02:c2:2e:41:f1:5f:6a:55:a8:1b:bd:b0:f4:a6: f9:6f:9c:16:34:8e:ae:e3:77:4c:0d:d5:de:a3:f5: e6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BC:91:94:04:2B:E4:3E:F7:EB:09:B9:F6:E9:CA:3D:28:18:81:7B X509v3 Authority Key Identifier: keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:31:9e:c4:7c:dc:92:1c:2a:b5:45:9c:53:de:62:6c:af:90: ba:75:1b:56:2c:3e:53:13:c5:1c:80:a6:aa:22:08:84:1f:23: ce:79:66:9e:59:e2:cf:eb:b6:3e:60:69:c0:8b:ef:91:82:10: ad:db:8d:00:af:09:1c:3f:87:20:e5:11:86:98:15:18:90:02: e4:ef:42:cb:bb:26:e9:82:78:0a:fd:f3:cc:97:66:0a:72:22: 69:e0:b3:c1:39:80:ed:94:0d:24:a6:f9:5f:5f:b9:b9:e0:e5: 09:36:f1:d2:5c:ce:49:4c:92:c1:ca:dc:05:78:52:b2:f3:79: 3a:b0:52:13:d2:95:4a:6d:08:f9:7f:60:71:62:26:55:69:bd: a3:c1:1b:dc:87:5b:27:7a:4e:fe:98:14:a1:14:c1:a5:b4:e2: 9b:f6:40:27:ee:bd:af:02:16:f2:e5:12:ef:a4:ee:6c:3a:76: 11:3e:df:a9:1e:65:c6:39:2c:9a:2f:5c:37:c1:01:bd:cf:4b: 39:06:3e:9b:30:93:fe:d0:0d:e1:f1:f2:24:a7:1a:51:76:1b: a5:b6:99:e8:ea:b0:5b:7e:c3:ac:6a:3e:31:48:8c:8d:76:ea: 08:c5:09:2c:77:64:7c:27:f3:de:70:8c:2f:5e:ea:d1:29:f5: 1c:81:b9:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQTYxMTAvBgNVBAUTKEM0NzU4OTk2MkVEMEQzODkyNjIyQkU1QjdCOEJFRUZF OENFNzg4QTcwHhcNMjUwNDI1MDQyODAxWhcNMjUwNTAyMDQyODAxWjAYMRYwFAYD VQQDEw02ODBiMGY1MS1jMmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEfj1JUGYrg8nvAocMnjJ/KtDz08g550oj42+TCMVRWRQ6R61yfY8gVfvOUF 6PNLv3pi5jcmC9F/68vYX8LYQdddto0juOyDlxbrB04YjP/N5as/VaVfImxP1+YC y467wF7jorQ3yQ9qxA7tnKO4IB/8X1ZGL+711eIVwUfueTzNoW3+DKqV88uK25k5 OHEJoWEZPeJGU5UcCXdVke8d/xBV63smMj1mAZ1yIlYyt+7jpsMXuvUuHjfJQ7XX RrbYmcOudXGLVMbddpCBuuKppR3mata1nCt35OO7L9BifE9aAsIuQfFfalWoG72w 9Kb5b5wWNI6u43dMDdXeo/XmEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNa8kZQE K+Q+9+sJufbpyj0oGIF7MB8GA1UdIwQYMBaAFMR1iZYu0NOJJiK+W3uL7v6M54in MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNBNi84MDc5NEM5QUMw OEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0a21JcjViZTR2dV9vem5p S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hIV0psaTdRMDRrbUlyNWJlNHZ1X296bmlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNBNi84MDc5NEM5QUMwOEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0 a21JcjViZTR2dV9vem5pS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZMZ7EfNySHCq1RZxT3mJsr5C6dRtWLD5TE8UcgKaqIgiEHyPOeWae WeLP67Y+YGnAi++RghCt240ArwkcP4cg5RGGmBUYkALk70LLuybpgngK/fPMl2YK ciJp4LPBOYDtlA0kpvlfX7m54OUJNvHSXM5JTJLBytwFeFKy83k6sFIT0pVKbQj5 f2BxYiZVab2jwRvch1snek7+mBShFMGltOKb9kAn7r2vAhby5RLvpO5sOnYRPt+p HmXGOSyaL1w3wQG9z0s5Bj6bMJP+0A3h8fIkpxpRdhultpno6rBbfsOsaj4xSIyN duoIxQksd2R8J/PecIwvXurRKfUcgbm5 -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:19 2025 by rpki-client