$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft File: XerjhTD4FfvwubP472N1B4bIrAo.mft (raw, json) Hash identifier: vPhskXfzCq1ESF3nDMCZ0MNZG4VWTAADaWKqdjX5d6U= Subject key identifier: B6:32:3E:A6:48:DB:07:3F:61:E6:B2:F6:B5:F5:6D:85:5B:20:3E:AA Authority key identifier: 5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A Certificate issuer: /CN=A91A4481/serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft Manifest number: BA Signing time: Fri 25 Apr 2025 04:55:54 +0000 Manifest this update: Fri 25 Apr 2025 04:55:54 +0000 Manifest next update: Fri 02 May 2025 04:55:54 +0000 Files and hashes: 1: XerjhTD4FfvwubP472N1B4bIrAo.crl (hash: 7UccgUYx31EZ1lzmkSVFAD9KivKs8eA6Ksuokvpn1/4=) 2: 5B08B12602C211EF9A1E4567C4F9AE02.roa (hash: LMERtpQp+DLty4Wivq0OeREYwOOHlqWpDYnqAURaibM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4481, serialNumber=5DEAE38530F815FBF0B9B3F8EF63750786C8AC0A Validity Not Before: Apr 25 04:55:54 2025 GMT Not After : May 2 04:55:54 2025 GMT Subject: CN=680b15da-3fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:04:66:14:85:97:c7:63:7b:c1:7d:69:54:16: 74:e4:ad:db:5c:b5:e7:b7:e5:20:c8:30:86:dc:4e: 71:88:49:1f:62:cf:6b:12:30:36:db:8e:e8:07:ec: 46:27:cc:ec:d6:d9:4d:0b:1b:6a:5f:f7:1f:ab:b3: f0:e4:cd:9e:fe:57:01:4f:1b:7f:bf:c7:d3:e8:4a: 27:b0:df:70:54:33:97:f2:da:68:36:39:01:ed:56: 66:a5:60:3e:11:78:c9:61:d2:8e:e4:5b:92:05:2e: c0:cd:8c:31:e5:0a:1c:3f:77:a4:b0:c2:a0:c1:cc: b6:b7:7a:6f:6f:23:19:9d:1d:8f:a9:2e:a2:b5:dc: 8a:0d:8c:9e:ca:f8:34:f4:a7:4f:bc:ea:8f:5b:b5: b1:e3:89:89:3d:b0:13:d9:16:58:65:d5:8d:9c:9a: 39:83:fe:62:fa:af:d1:24:38:da:51:71:97:d1:ee: 2e:ec:e9:c5:55:9e:c6:b3:ea:46:40:7d:74:b0:04: 35:d0:c7:b7:5a:bd:a7:c3:aa:9c:9b:fe:cd:b0:73: 68:b9:65:10:42:6e:00:50:6c:d9:84:45:b1:7a:09: a2:35:e7:bc:7d:55:54:61:b3:d8:00:74:97:44:bc: 16:b1:0e:f9:8a:32:db:c1:48:51:25:4c:a8:82:cc: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:32:3E:A6:48:DB:07:3F:61:E6:B2:F6:B5:F5:6D:85:5B:20:3E:AA X509v3 Authority Key Identifier: keyid:5D:EA:E3:85:30:F8:15:FB:F0:B9:B3:F8:EF:63:75:07:86:C8:AC:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XerjhTD4FfvwubP472N1B4bIrAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4481/BC840F4602C111EFAF3CB465C4F9AE02/XerjhTD4FfvwubP472N1B4bIrAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:75:9f:76:58:69:b6:07:34:6e:e9:08:df:54:e2:87:d1:62: 53:a6:9b:3f:0a:ae:dd:fc:4c:44:52:24:80:90:41:c8:20:93: 17:d3:f1:88:5d:4d:63:f6:d0:7c:a9:e1:5f:7f:2a:fd:e0:7b: 92:5b:5e:7b:be:1f:ff:e9:ca:6d:58:f6:a6:96:e4:b9:36:a6: c3:6f:53:fd:7c:b8:8c:b1:b8:e4:df:a5:3c:5a:76:73:16:a6: 0e:d3:d2:03:04:c0:10:71:a3:9e:e5:20:50:39:94:38:82:a4: e0:31:f1:4a:d0:74:34:52:dc:89:70:9e:13:75:be:73:0a:65: c6:f4:06:f9:b0:3f:4b:ee:72:60:03:2b:3e:2b:d8:3f:a8:61: 9d:8c:60:ec:94:93:16:2b:18:da:48:59:1d:22:e4:32:a5:c9: 37:f3:a5:fc:4c:55:57:bf:2c:a4:36:b6:73:b2:82:38:bd:28: 3d:b9:66:5c:69:b9:73:3b:3e:06:2c:54:6d:bf:20:6e:cc:56: 2f:61:3c:f7:0c:d2:40:fb:ac:73:a6:4a:b8:d2:e8:78:ec:00: e2:9b:ad:7a:3b:4b:84:bf:70:64:87:59:5b:96:06:e4:af:a5: dc:3c:8f:45:0e:7a:a5:7a:c5:53:66:ac:7d:05:1c:d7:54:76: 79:50:fc:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0ODExMTAvBgNVBAUTKDVERUFFMzg1MzBGODE1RkJGMEI5QjNGOEVGNjM3NTA3 ODZDOEFDMEEwHhcNMjUwNDI1MDQ1NTU0WhcNMjUwNTAyMDQ1NTU0WjAYMRYwFAYD VQQDEw02ODBiMTVkYS0zZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswRmFIWXx2N7wX1pVBZ05K3bXLXnt+UgyDCG3E5xiEkfYs9rEjA2247oB+xG J8zs1tlNCxtqX/cfq7Pw5M2e/lcBTxt/v8fT6EonsN9wVDOX8tpoNjkB7VZmpWA+ EXjJYdKO5FuSBS7AzYwx5QocP3eksMKgwcy2t3pvbyMZnR2PqS6itdyKDYyeyvg0 9KdPvOqPW7Wx44mJPbAT2RZYZdWNnJo5g/5i+q/RJDjaUXGX0e4u7OnFVZ7Gs+pG QH10sAQ10Me3Wr2nw6qcm/7NsHNouWUQQm4AUGzZhEWxegmiNee8fVVUYbPYAHSX RLwWsQ75ijLbwUhRJUyogsxxCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYyPqZI 2wc/Yeay9rX1bYVbID6qMB8GA1UdIwQYMBaAFF3q44Uw+BX78Lmz+O9jdQeGyKwK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ4MS9CQzg0MEY0NjAy QzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZmdnd1YlA0NzJOMUI0Ykly QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hlcmpoVEQ0RmZ2d3ViUDQ3Mk4xQjRiSXJBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ4MS9CQzg0MEY0NjAyQzExMUVGQUYzQ0I0NjVDNEY5QUUwMi9YZXJqaFRENEZm dnd1YlA0NzJOMUI0YklyQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0dZ92WGm2BzRu6QjfVOKH0WJTpps/Cq7d/ExEUiSAkEHIIJMX0/GI XU1j9tB8qeFffyr94HuSW157vh//6cptWPamluS5NqbDb1P9fLiMsbjk36U8WnZz FqYO09IDBMAQcaOe5SBQOZQ4gqTgMfFK0HQ0UtyJcJ4Tdb5zCmXG9Ab5sD9L7nJg Ays+K9g/qGGdjGDslJMWKxjaSFkdIuQypck386X8TFVXvyykNrZzsoI4vSg9uWZc ablzOz4GLFRtvyBuzFYvYTz3DNJA+6xzpkq40uh47ADim616O0uEv3Bkh1lblgbk r6XcPI9FDnqlesVTZqx9BRzXVHZ5UPzT -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:56 2025 by rpki-client