$ rpki-client -vvf rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft File: xGIlbhG2PuqR1z02Q867tRojUK8.mft (raw, json) Hash identifier: 0bUkuBRGtfc17aSSbIiJNn5yt37sw+iZTE1HL/KlQDA= Subject key identifier: E4:67:02:D7:DF:56:2C:8B:26:4A:45:97:28:10:14:A3:8C:14:C4:EA Authority key identifier: C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF Certificate issuer: /CN=A91A210A/serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Certificate serial: 104C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft Manifest number: 1040 Signing time: Fri 02 May 2025 17:56:54 +0000 Manifest this update: Fri 02 May 2025 17:56:54 +0000 Manifest next update: Fri 09 May 2025 17:56:54 +0000 Files and hashes: 1: xGIlbhG2PuqR1z02Q867tRojUK8.crl (hash: 1u4qhkq6ae5cnDMfOetM5dK7Z70Yq+CF4lW7oWkmq7s=) 2: 797BF786FB2C11EFA405F334C4F9AE02.roa (hash: zI34h0FmFtZZLolHCnykLI2wVD3iOXp1eKhUZqTjA48=) 3: 691023063A8311E99AF5572DC4F9AE02.roa (hash: Uy8f9hnHu5ZNhfoO9b7+eo6ci2jsbvNnSUlZAZd6nGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 17:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4172 (0x104c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A210A, serialNumber=C462256E11B63EEA91D73D3643CEBBB51A2350AF Validity Not Before: May 2 17:56:54 2025 GMT Not After : May 9 17:56:54 2025 GMT Subject: CN=68150766-203a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:74:6c:4b:d1:49:29:2d:71:de:16:b4:8c: 56:96:4e:fb:ec:ab:9c:c5:15:e1:0c:20:32:1c:d7: 11:21:82:40:c0:02:4e:c9:75:ad:1e:cc:d1:3d:04: b9:7a:45:20:0b:80:67:33:a6:48:30:1d:9d:5e:4d: aa:42:d6:2f:74:dd:b8:f0:6f:ca:16:ff:d5:d6:82: 65:ec:72:eb:96:27:86:54:d9:a3:73:ed:a3:86:94: 3d:27:67:4e:fd:98:e7:f3:67:87:d1:c8:ab:83:6d: a3:a2:f7:c3:6c:99:58:3a:4f:56:ad:ac:8a:e1:77: 77:ba:ca:d7:c9:93:5f:6c:ed:aa:c2:a3:a4:27:11: af:32:3d:69:19:68:38:5d:d9:2e:43:52:17:af:a1: 61:77:ac:1c:f7:3d:13:f5:64:73:bf:87:b9:ef:10: d2:45:2c:e6:0b:0e:b7:52:55:43:bd:ad:a5:a0:ff: 1f:fa:fd:1a:14:8b:a0:fd:76:84:63:9d:56:86:a0: 35:d3:9b:f1:4c:8e:3f:55:e1:48:10:a8:90:25:85: ac:6e:d4:dd:d2:f6:23:38:20:0d:45:4e:33:06:27: 14:6c:9c:ce:8e:e0:8c:26:de:98:d3:52:f9:46:51: b5:6b:ba:2e:5b:3f:b2:c0:e1:41:20:8d:a2:8d:ef: ca:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:67:02:D7:DF:56:2C:8B:26:4A:45:97:28:10:14:A3:8C:14:C4:EA X509v3 Authority Key Identifier: keyid:C4:62:25:6E:11:B6:3E:EA:91:D7:3D:36:43:CE:BB:B5:1A:23:50:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGIlbhG2PuqR1z02Q867tRojUK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A210A/A538ADB83A8211E9A4C2812CC4F9AE02/xGIlbhG2PuqR1z02Q867tRojUK8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:59:8c:76:f8:43:c3:75:a8:d2:a5:51:8d:88:da:b5:3b:4d: 11:69:ba:a4:4c:5a:a7:89:67:7a:14:b4:82:92:d7:4f:73:9a: da:ae:9b:6c:65:7f:42:13:ec:12:fc:c9:e2:f6:ca:49:63:3d: e5:e6:53:4b:63:f7:0c:bb:88:a3:a9:d1:a5:32:ab:a3:4e:87: bd:83:45:f7:45:24:92:81:2e:66:e9:33:3f:d4:cd:60:43:58: 9b:98:ab:f2:c5:7f:84:a8:bd:0c:71:29:c4:c6:98:26:ac:bb: 73:10:be:e8:e9:9b:37:4d:8b:ca:52:df:0d:37:36:d1:a3:92: d9:f8:37:e9:ae:02:c7:44:52:98:e8:06:e8:4d:91:ef:12:b5: 83:2d:cc:ab:54:f9:7b:39:38:e4:ab:4c:b7:1a:90:c8:1f:ed: ee:d0:67:04:b5:f4:9c:ca:c3:52:9b:32:e2:d4:53:07:8f:f0: e6:5a:3c:1a:8c:41:02:03:22:de:7c:f3:ab:a6:d5:51:a0:19: 8e:33:e5:0f:6c:0a:8c:82:3b:a2:93:0e:ab:90:5f:c6:62:bb: c4:3a:ab:de:05:35:e1:a5:36:ae:b9:15:be:78:26:5a:ec:3b: 2b:ea:e3:85:96:1b:e7:cc:06:6f:8b:2c:ff:5e:10:6f:c4:66: 66:c7:7a:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIxMEExMTAvBgNVBAUTKEM0NjIyNTZFMTFCNjNFRUE5MUQ3M0QzNjQzQ0VCQkI1 MUEyMzUwQUYwHhcNMjUwNTAyMTc1NjU0WhcNMjUwNTA5MTc1NjU0WjAYMRYwFAYD VQQDEw02ODE1MDc2Ni0yMDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgJ0bEvRSSktcd4WtIxWlk777KucxRXhDCAyHNcRIYJAwAJOyXWtHszRPQS5 ekUgC4BnM6ZIMB2dXk2qQtYvdN248G/KFv/V1oJl7HLrlieGVNmjc+2jhpQ9J2dO /Zjn82eH0cirg22jovfDbJlYOk9WrayK4Xd3usrXyZNfbO2qwqOkJxGvMj1pGWg4 XdkuQ1IXr6Fhd6wc9z0T9WRzv4e57xDSRSzmCw63UlVDva2loP8f+v0aFIug/XaE Y51WhqA105vxTI4/VeFIEKiQJYWsbtTd0vYjOCANRU4zBicUbJzOjuCMJt6Y01L5 RlG1a7ouWz+ywOFBII2ije/K9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORnAtff ViyLJkpFlygQFKOMFMTqMB8GA1UdIwQYMBaAFMRiJW4Rtj7qkdc9NkPOu7UaI1Cv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjEwQS9BNTM4QURCODNB ODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1cVIxejAyUTg2N3RSb2pV SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHSWxiaEcyUHVxUjF6MDJRODY3dFJvalVLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjEwQS9BNTM4QURCODNBODIxMUU5QTRDMjgxMkNDNEY5QUUwMi94R0lsYmhHMlB1 cVIxejAyUTg2N3RSb2pVSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwWYx2+EPDdajSpVGNiNq1O00RabqkTFqniWd6FLSCktdPc5rarpts ZX9CE+wS/Mni9spJYz3l5lNLY/cMu4ijqdGlMqujToe9g0X3RSSSgS5m6TM/1M1g Q1ibmKvyxX+EqL0McSnExpgmrLtzEL7o6Zs3TYvKUt8NNzbRo5LZ+DfprgLHRFKY 6AboTZHvErWDLcyrVPl7OTjkq0y3GpDIH+3u0GcEtfScysNSmzLi1FMHj/DmWjwa jEECAyLefPOrptVRoBmOM+UPbAqMgjuikw6rkF/GYrvEOqveBTXhpTauuRW+eCZa 7Dsr6uOFlhvnzAZviyz/XhBvxGZmx3o4 -----END CERTIFICATE-----Generated at Sun May 4 07:53:33 2025 by rpki-client