$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: ka0NjofnLb5txtrvhGZQAqdQP+ciDMFm3ifNHhyB69Y= Subject key identifier: 8A:E1:3E:D7:23:90:D0:06:A1:B5:55:79:D7:D5:EF:41:A2:56:A5:8C Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 056C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 0560 Signing time: Thu 24 Apr 2025 23:11:08 +0000 Manifest this update: Thu 24 Apr 2025 23:11:07 +0000 Manifest next update: Thu 01 May 2025 23:11:07 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: vnwgmKYMmz2hnazBA16kJ8K337ofKSqjXv8rqPJWohw=) 2: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: ufMyNaGjuZX/NIDCDapqBE7K0L5whHlFadMDreUuVQI=) 3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: iCz1ketzxjoXfDIC5MMDi5PROHAwL63mxQQHk82Ic5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1388 (0x56c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Apr 24 23:11:07 2025 GMT Not After : May 1 23:11:07 2025 GMT Subject: CN=680ac50b-fccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:53:e9:64:71:7d:26:25:59:f0:99:4e:ac:26: 6c:88:16:1b:90:82:b1:27:9a:a6:68:fb:c2:32:f9: 18:05:80:fa:95:0d:b6:18:cc:44:01:c4:a6:7c:7a: 2c:e5:96:8e:f6:ae:83:be:d6:04:87:69:ca:f9:93: 54:d0:b8:4a:51:af:9f:4e:8c:b7:90:a6:e9:d5:d1: 3c:66:e0:02:73:0b:f8:ca:cf:44:28:da:f9:0b:30: 57:66:9b:75:be:8a:16:e6:5e:b7:c3:26:eb:a2:c4: d2:ff:69:44:ea:eb:ec:11:d7:ae:06:51:52:81:55: 0a:9a:35:10:18:56:80:9b:6a:e9:65:d1:79:49:65: 32:8e:6c:75:c8:15:e8:d3:81:5a:e8:c8:98:bd:74: 0f:b2:16:2a:44:d1:8f:51:23:91:ef:e0:e3:46:14: 03:08:9a:69:1b:e2:c3:25:bb:35:32:a1:17:0d:71: 99:07:56:bd:b7:9c:41:93:75:30:12:e6:b7:bf:27: ba:51:3a:39:05:d8:4c:03:00:65:ed:c5:e0:cd:7f: 7a:9a:be:17:3a:ec:f0:da:f8:ad:5c:67:46:65:49: c8:e7:9f:45:f7:9a:c8:ce:11:29:df:ee:d9:90:12: 73:35:36:a0:c6:1d:ac:6c:ae:e1:62:d9:81:62:d6: 68:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E1:3E:D7:23:90:D0:06:A1:B5:55:79:D7:D5:EF:41:A2:56:A5:8C X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:94:e7:bb:d1:bf:83:a7:77:a8:df:54:70:62:a9:f8:37:8f: ac:c8:08:30:10:19:92:23:66:8e:94:10:e7:8c:ab:e4:35:ae: 38:d5:5b:1b:b3:39:e8:1c:08:1f:35:37:77:1d:9f:a4:4f:96: 42:bb:29:32:48:4b:11:ba:1c:ff:f2:86:e4:99:55:00:b0:15: 7d:3d:ca:b2:a1:63:93:64:31:99:58:2b:17:fc:c2:d6:88:dc: c2:a1:04:6b:11:ed:cb:50:52:c2:67:ed:17:62:3b:49:c7:69: 06:a6:a0:57:db:15:2e:95:c6:c4:5c:d9:c7:b8:aa:24:88:86: a5:0d:73:3d:49:d0:e7:89:b6:b1:b5:98:cf:77:26:97:f4:e8: 90:3a:a9:60:8f:ad:70:b4:d2:b2:9b:b3:a6:ce:ef:31:07:32: 06:32:cf:1f:48:4e:d0:b6:8c:1a:fe:20:d0:06:16:09:39:c9: be:51:39:46:59:f8:d8:50:80:5a:10:b2:7b:9f:a9:1e:b1:94: f8:56:9f:d7:bc:e0:07:54:38:54:c8:92:d6:eb:c0:dd:f5:6c: 80:aa:b9:1e:b0:d8:89:c9:1c:3a:7d:bb:27:1d:8f:47:94:e3: 93:6e:99:3b:38:f7:3b:06:73:e1:1c:6b:07:2e:75:67:2f:82: 44:8f:35:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjUwNDI0MjMxMTA3WhcNMjUwNTAxMjMxMTA3WjAYMRYwFAYD VQQDEw02ODBhYzUwYi1mY2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFPpZHF9JiVZ8JlOrCZsiBYbkIKxJ5qmaPvCMvkYBYD6lQ22GMxEAcSmfHos 5ZaO9q6DvtYEh2nK+ZNU0LhKUa+fToy3kKbp1dE8ZuACcwv4ys9EKNr5CzBXZpt1 vooW5l63wybrosTS/2lE6uvsEdeuBlFSgVUKmjUQGFaAm2rpZdF5SWUyjmx1yBXo 04Fa6MiYvXQPshYqRNGPUSOR7+DjRhQDCJppG+LDJbs1MqEXDXGZB1a9t5xBk3Uw Eua3vye6UTo5BdhMAwBl7cXgzX96mr4XOuzw2vitXGdGZUnI559F95rIzhEp3+7Z kBJzNTagxh2sbK7hYtmBYtZocQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrhPtcj kNAGobVVedfV70GiVqWMMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhlOe70b+Dp3eo31RwYqn4N4+syAgwEBmSI2aOlBDnjKvkNa441Vsb sznoHAgfNTd3HZ+kT5ZCuykySEsRuhz/8obkmVUAsBV9PcqyoWOTZDGZWCsX/MLW iNzCoQRrEe3LUFLCZ+0XYjtJx2kGpqBX2xUulcbEXNnHuKokiIalDXM9SdDnibax tZjPdyaX9OiQOqlgj61wtNKym7Omzu8xBzIGMs8fSE7Qtowa/iDQBhYJOcm+UTlG WfjYUIBaELJ7n6kesZT4Vp/XvOAHVDhUyJLW68Dd9WyAqrkesNiJyRw6fbsnHY9H lOOTbpk7OPc7BnPhHGsHLnVnL4JEjzVB -----END CERTIFICATE-----Generated at Sat Apr 26 04:25:27 2025 by rpki-client