$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft File: Rhxyji1WPw4JJFm6przkudbBi7g.mft (raw, json) Hash identifier: 7Vb15kYrXkY7WgY8QHsenPjYbndGJRxQJMQdfYDWzpE= Subject key identifier: A2:2A:57:8E:1C:B2:FD:70:A4:D6:D4:73:63:E6:D9:67:16:92:56:E1 Authority key identifier: 46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 Certificate issuer: /CN=A91A9B22/serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft Manifest number: 07AA Signing time: Thu 24 Apr 2025 21:02:24 +0000 Manifest this update: Thu 24 Apr 2025 21:02:24 +0000 Manifest next update: Thu 01 May 2025 21:02:24 +0000 Files and hashes: 1: Rhxyji1WPw4JJFm6przkudbBi7g.crl (hash: kc8GHlU1rc5PzHNYE5tI3lbWJUGlYS349TpiTQfq9H0=) 2: AF0AC0A63D0A11EB9F59D648C4F9AE02.roa (hash: +xXZdocc+DAKSGVr9i3J1ZCcXvPRm7qfVi4qSp6nPXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B22, serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8 Validity Not Before: Apr 24 21:02:24 2025 GMT Not After : May 1 21:02:24 2025 GMT Subject: CN=680aa6e0-ee1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:96:4f:b0:ab:78:ca:de:ce:77:a7:b1:32: 76:35:2d:94:56:80:08:26:9a:8f:6c:93:07:b4:2e: eb:27:b5:4b:33:a0:2e:b1:ce:dd:e8:50:53:5c:86: 52:6c:cb:34:9c:81:31:42:35:94:57:6c:91:3b:55: d2:26:d1:91:ac:cc:e1:57:ec:d2:cc:e2:70:01:f0: c0:c8:b5:1c:32:17:a7:1f:6e:ee:94:ec:05:82:31: c7:f2:eb:3f:89:73:7e:d6:f5:75:0a:c7:fc:e4:c5: 38:b1:35:71:5d:b7:49:ef:61:20:b7:9f:87:8e:5c: 9b:7e:97:3d:ef:7d:66:c6:0b:5f:3f:16:58:9d:50: 67:70:ad:70:9d:cb:39:77:10:54:b3:28:15:d6:10: 10:eb:90:b4:fb:22:16:4b:84:cf:c5:66:75:0f:a2: 46:c1:b1:11:85:5b:da:46:2e:12:10:5c:22:87:a2: 1a:92:95:fa:3d:68:8b:34:79:85:98:29:b3:23:be: 35:26:7e:1e:06:c8:61:42:a3:23:11:24:c1:0e:3b: 3a:fa:4d:87:85:94:2c:1d:37:00:a1:52:ff:cf:b1: b1:c3:4c:e5:be:01:42:94:c6:d6:7a:d8:61:e7:87: 8a:dd:8e:7c:26:d5:be:82:bc:6c:9c:55:d2:ed:91: fc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2A:57:8E:1C:B2:FD:70:A4:D6:D4:73:63:E6:D9:67:16:92:56:E1 X509v3 Authority Key Identifier: keyid:46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:f3:53:6d:05:10:9f:67:da:63:f8:f3:47:42:6d:d7:04:2b: 92:25:3f:ae:7d:2e:62:c3:9e:ff:39:e9:5d:96:b4:9d:ef:f1: 64:3b:85:a1:83:a6:97:0d:e7:18:c8:db:e3:7a:02:a7:f9:a5: 95:52:40:9a:6e:02:86:fc:5f:32:4e:f6:15:79:13:17:8b:07: d7:06:8c:60:77:5b:06:2f:ff:21:75:e4:47:4c:10:27:43:5d: fc:aa:8b:e4:e0:e7:d8:8a:ad:b4:bf:a5:d9:91:41:07:cb:63: 17:99:c1:a8:07:62:1c:39:a1:e2:d3:09:e5:72:11:bb:1a:00: b1:0e:f4:56:c3:14:0d:5d:2c:43:ce:bd:c4:a8:ef:e8:9c:7b: da:c7:46:b4:a2:dd:45:e0:a2:93:c2:c4:dd:23:85:f3:fd:04: 48:0e:c4:1c:64:cc:dd:01:59:9d:ee:51:9f:39:df:49:07:e7: 7a:f0:29:8c:02:e3:8a:7c:45:11:97:63:ef:2f:97:68:16:72: 38:fe:fd:7f:dc:84:88:e4:b7:92:3b:34:33:57:9b:a0:9f:9d: 55:45:ce:04:ed:00:c7:75:16:46:d4:7a:7d:57:8f:70:a7:d2: 7c:8e:52:38:d0:0f:9a:f3:b7:24:8e:43:fd:ce:74:71:fc:d7: 0d:1e:3e:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMjIxMTAvBgNVBAUTKDQ2MUM3MjhFMkQ1NjNGMEUwOTI0NTlCQUE2QkNFNEI5 RDZDMThCQjgwHhcNMjUwNDI0MjEwMjI0WhcNMjUwNTAxMjEwMjI0WjAYMRYwFAYD VQQDEw02ODBhYTZlMC1lZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHOWT7CreMreznensTJ2NS2UVoAIJpqPbJMHtC7rJ7VLM6Ausc7d6FBTXIZS bMs0nIExQjWUV2yRO1XSJtGRrMzhV+zSzOJwAfDAyLUcMhenH27ulOwFgjHH8us/ iXN+1vV1Csf85MU4sTVxXbdJ72Egt5+Hjlybfpc9731mxgtfPxZYnVBncK1wncs5 dxBUsygV1hAQ65C0+yIWS4TPxWZ1D6JGwbERhVvaRi4SEFwih6IakpX6PWiLNHmF mCmzI741Jn4eBshhQqMjESTBDjs6+k2HhZQsHTcAoVL/z7Gxw0zlvgFClMbWethh 54eK3Y58JtW+grxsnFXS7ZH8AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIqV44c sv1wpNbUc2Pm2WcWklbhMB8GA1UdIwQYMBaAFEYcco4tVj8OCSRZuqa85LnWwYu4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIyMi9ENzVGOTg1Q0ZD ODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3NEpKRm02cHJ6a3VkYkJp N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JoeHlqaTFXUHc0SkpGbTZwcnprdWRiQmk3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIyMi9ENzVGOTg1Q0ZDODYxMUVBQkU4RjYyMkRDNEY5QUUwMi9SaHh5amkxV1B3 NEpKRm02cHJ6a3VkYkJpN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ81NtBRCfZ9pj+PNHQm3XBCuSJT+ufS5iw57/OeldlrSd7/FkO4Wh g6aXDecYyNvjegKn+aWVUkCabgKG/F8yTvYVeRMXiwfXBoxgd1sGL/8hdeRHTBAn Q138qovk4OfYiq20v6XZkUEHy2MXmcGoB2IcOaHi0wnlchG7GgCxDvRWwxQNXSxD zr3EqO/onHvax0a0ot1F4KKTwsTdI4Xz/QRIDsQcZMzdAVmd7lGfOd9JB+d68CmM AuOKfEURl2PvL5doFnI4/v1/3ISI5LeSOzQzV5ugn51VRc4E7QDHdRZG1Hp9V49w p9J8jlI40A+a87ckjkP9znRx/NcNHj7Z -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:18 2025 by rpki-client