$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json) Hash identifier: HJ5iVSBQNYHaxzfONzKZuAT6RypadAmzlGhbQ5a/CSo= Subject key identifier: 76:75:8A:7B:AC:4F:78:E5:9C:40:E8:4A:86:B3:78:9C:39:6D:A4:01 Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Certificate serial: 2320 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft Manifest number: 22F2 Signing time: Thu 24 Apr 2025 15:52:24 +0000 Manifest this update: Thu 24 Apr 2025 15:52:24 +0000 Manifest next update: Thu 01 May 2025 15:52:24 +0000 Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: U7+eBDTRICkbrOmGTYGphVinmCzG8ibKepaqYLmLfpM=) 2: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: lXOFb0YJQZdFFX90oDPgUqBGFkT5p8wJoFtkhJ/Uo9A=) 3: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: p5KqoJW3tDR/PENRBzb6MlrbIycp47ssNfWx91ehau4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8992 (0x2320) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Validity Not Before: Apr 24 15:52:24 2025 GMT Not After : May 1 15:52:24 2025 GMT Subject: CN=680a5e38-7b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:60:6b:8f:ca:4d:b4:9f:8e:2f:26:eb:1f:fb: 9d:d4:72:5e:79:a9:27:87:06:97:88:76:97:99:23: 8c:2a:ec:fb:e6:ab:55:6a:7a:5e:88:60:87:f3:6a: 14:08:f0:8f:d2:d3:03:36:00:ba:a2:cf:3d:92:b1: 1d:bc:eb:55:e9:f9:d7:48:9d:f5:c3:18:02:d6:91: 45:0e:ba:d3:86:dc:9b:33:6b:71:16:1c:23:15:0c: c4:cb:56:9d:55:fa:68:2a:03:59:b5:be:c9:5f:4a: 1a:1f:fa:ab:b3:9b:00:55:8b:49:a3:23:27:58:3d: 45:47:9f:0a:44:2a:da:d5:0a:6e:3d:d7:a1:86:d0: ee:1f:65:b9:02:34:06:d2:7e:a7:80:df:5c:64:b9: 47:73:8c:91:4b:50:ec:4a:12:19:31:fb:a1:0b:af: 64:2f:7b:7d:13:e6:92:b0:68:84:ae:c9:78:59:50: fb:f9:5c:47:b6:27:f3:91:e1:5e:91:92:ec:7c:1e: bb:60:82:95:f7:26:71:00:d5:34:44:62:8a:6a:a6: 55:9d:c6:1b:17:83:2e:00:4a:ec:3e:16:2d:66:58: d0:c4:37:77:4b:e2:1e:93:3a:46:eb:dd:26:ef:62: 5f:58:51:99:51:18:e0:e9:b2:90:21:1f:4a:e4:e3: 66:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:75:8A:7B:AC:4F:78:E5:9C:40:E8:4A:86:B3:78:9C:39:6D:A4:01 X509v3 Authority Key Identifier: keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:48:4b:86:38:05:1c:40:99:06:19:c2:86:ea:9c:bb:05:3a: 4d:36:5e:03:50:66:33:d0:9f:4e:82:c1:e6:b8:76:30:7e:0c: 07:f4:66:47:a7:98:ea:40:09:63:92:36:38:a4:93:ea:b4:56: 9c:54:46:45:a4:25:3e:df:c9:db:51:fc:0b:0b:9d:ec:39:c4: 43:fa:78:4a:0e:1e:e1:6f:6a:58:b9:76:22:ca:91:08:9e:84: af:2e:f1:fe:c1:fc:1e:61:b4:87:37:65:1b:fa:be:5a:ef:ae: c2:8c:e4:d2:26:fb:88:aa:fd:ff:ff:37:f4:46:4b:b9:19:f9: e1:bd:68:da:4f:2f:7e:11:6b:47:37:c2:c3:0f:12:12:ea:08: 1c:37:82:c6:83:0d:9f:ce:3e:3c:39:aa:aa:bf:62:69:9b:c1: ce:40:62:5c:27:e7:c1:0d:02:3d:e9:38:d6:99:6d:1a:6e:d4: 39:92:a1:49:14:40:da:18:47:9c:63:fd:91:ce:99:3a:e4:21: 3d:54:fb:20:dc:0f:c9:e3:9d:56:a3:8d:76:38:4f:01:20:54: 82:d6:ca:3e:9f:e4:3f:84:23:13:cc:5f:22:57:76:65:b2:99: d0:48:d7:ee:16:76:07:14:4f:7d:bf:c7:71:68:56:e6:b0:f7: 5a:55:4b:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1 QkQ5NDFFNDAwHhcNMjUwNDI0MTU1MjI0WhcNMjUwNTAxMTU1MjI0WjAYMRYwFAYD VQQDEw02ODBhNWUzOC03YjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GBrj8pNtJ+OLybrH/ud1HJeeaknhwaXiHaXmSOMKuz75qtVanpeiGCH82oU CPCP0tMDNgC6os89krEdvOtV6fnXSJ31wxgC1pFFDrrThtybM2txFhwjFQzEy1ad VfpoKgNZtb7JX0oaH/qrs5sAVYtJoyMnWD1FR58KRCra1QpuPdehhtDuH2W5AjQG 0n6ngN9cZLlHc4yRS1DsShIZMfuhC69kL3t9E+aSsGiErsl4WVD7+VxHtifzkeFe kZLsfB67YIKV9yZxANU0RGKKaqZVncYbF4MuAErsPhYtZljQxDd3S+IekzpG690m 72JfWFGZURjg6bKQIR9K5ONmmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZ1inus T3jlnEDoSoazeJw5baQBMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0 ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REZEMy8xRkQxQThCRTk0ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3Qz OWs1RUpKcG91VjFiMlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4SEuGOAUcQJkGGcKG6py7BTpNNl4DUGYz0J9OgsHmuHYwfgwH9GZH p5jqQAljkjY4pJPqtFacVEZFpCU+38nbUfwLC53sOcRD+nhKDh7hb2pYuXYiypEI noSvLvH+wfweYbSHN2Ub+r5a767CjOTSJvuIqv3//zf0Rku5GfnhvWjaTy9+EWtH N8LDDxIS6ggcN4LGgw2fzj48Oaqqv2Jpm8HOQGJcJ+fBDQI96TjWmW0abtQ5kqFJ FEDaGEecY/2Rzpk65CE9VPsg3A/J451Wo412OE8BIFSC1so+n+Q/hCMTzF8iV3Zl spnQSNfuFnYHFE99v8dxaFbmsPdaVUst -----END CERTIFICATE-----Generated at Sat Apr 26 14:47:04 2025 by rpki-client