$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft File: XRhbcS2TBWvydLi3qJjGklTruYM.mft (raw, json) Hash identifier: 9HLG+3uFmb/PUzM/d+dKlg12kAHB5sWGRG4KfwDzSlU= Subject key identifier: 6E:CE:F1:AB:03:12:90:B5:F8:F7:7F:7B:F2:97:61:A0:AE:1E:8C:7E Authority key identifier: 5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83 Certificate issuer: /CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft Manifest number: 0105 Signing time: Fri 25 Apr 2025 04:14:36 +0000 Manifest this update: Fri 25 Apr 2025 04:14:36 +0000 Manifest next update: Fri 02 May 2025 04:14:36 +0000 Files and hashes: 1: XRhbcS2TBWvydLi3qJjGklTruYM.crl (hash: IX+5gfWMZtoc9n8QErSFKMqhy0MpwiR1hn3OfAzVII8=) 2: DCCEA912A3EB11EE8049E335C4F9AE02.roa (hash: FIv9Q2CGo09cXVQt1+GL/sX7lFUzEShgd+XdbWhi1sg=) 3: 79124A64AD5F11EE8824985BC4F9AE02.roa (hash: wMz4YHecnoUe6lNOvLCIKTrJsjYktuBbQQe4ax28M00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE972, serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983 Validity Not Before: Apr 25 04:14:36 2025 GMT Not After : May 2 04:14:36 2025 GMT Subject: CN=680b0c2c-a371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:97:95:77:d9:99:e0:7b:46:61:05:7b:e0: e9:b3:45:6e:e4:4a:91:e5:fa:4f:e8:08:44:7e:10: db:ec:e6:a4:ef:1b:83:9e:2c:a4:f7:b0:70:f1:65: 05:6b:6a:22:b0:0b:c0:bb:bd:15:48:c1:8c:88:64: 74:b6:26:fa:8c:f4:21:a7:b0:f7:35:78:f0:86:89: 0c:97:68:d8:ce:e4:38:2f:3f:3b:6b:94:4c:91:7b: 70:8c:0b:08:39:b0:67:4b:f0:ea:36:87:d0:bb:0d: fb:93:8b:09:a9:65:40:9e:6d:d9:57:75:fd:fb:c7: 9c:75:45:32:6a:ad:42:21:b5:88:52:ca:70:41:0f: a7:fc:b3:d5:35:16:75:00:a3:68:66:61:ff:ad:a8: f1:cc:b0:af:3e:8b:5d:4f:59:db:b2:ab:13:b5:43: 4e:61:97:f1:72:97:18:9c:9c:2f:7d:d4:3b:fb:37: c0:c2:55:12:52:90:08:65:4a:c1:dc:a2:0a:ae:56: 8b:df:85:12:c6:7c:84:fe:c6:a3:e6:e9:90:9a:52: 74:bd:53:ec:2f:1f:85:61:d2:be:77:08:74:b0:19: 32:4d:97:96:73:1a:31:82:a5:4c:01:21:1e:89:4f: 56:66:c2:a3:85:62:c4:02:17:91:3d:7b:ad:7c:b9: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CE:F1:AB:03:12:90:B5:F8:F7:7F:7B:F2:97:61:A0:AE:1E:8C:7E X509v3 Authority Key Identifier: keyid:5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b0:77:b6:3f:0e:6f:cf:f8:d4:4c:8b:f8:ed:f2:14:20:09: 74:d0:6d:ce:31:42:62:af:e2:b0:ef:55:2a:0c:95:06:7d:6e: 8a:ae:68:24:20:82:b4:b5:9a:cc:78:d6:d6:7d:b0:72:9e:30: 80:8a:ff:f7:50:86:22:f9:b6:65:21:20:23:ed:78:26:8b:40: 23:d6:19:b6:1c:b6:19:1e:2c:ba:8e:ed:46:de:77:71:af:86: ff:76:2c:bd:a1:26:97:ba:bc:5e:71:48:50:6f:8e:7b:f8:69: 85:b5:05:8a:01:5a:e9:da:30:6a:cd:16:57:49:23:16:b4:52: 32:22:96:f6:f4:c0:fb:7f:1c:b3:aa:fe:d0:3c:c6:e5:a2:e1: 39:aa:48:19:a1:1b:ef:6f:c8:63:f0:9b:74:17:4e:83:9c:d6: 9f:e6:00:0c:59:17:54:5c:ec:54:20:77:c8:ea:5f:8f:15:2b: 4b:0e:37:db:19:5f:ee:a0:00:95:4d:3b:7b:97:d1:c9:33:19: ad:46:e3:a4:69:a3:ee:ab:ee:c8:6a:ce:64:41:11:ce:0a:db: 7b:0c:a9:44:d4:25:07:a0:bf:42:bc:38:7a:e4:1d:76:1d:e1: 22:b0:f4:e9:64:1c:fa:58:26:ce:ba:c2:a4:78:49:d5:e2:3a: 4a:a9:66:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5NzIxMTAvBgNVBAUTKDVEMTg1QjcxMkQ5MzA1NkJGMjc0QjhCN0E4OThDNjky NTRFQkI5ODMwHhcNMjUwNDI1MDQxNDM2WhcNMjUwNTAyMDQxNDM2WjAYMRYwFAYD VQQDEw02ODBiMGMyYy1hMzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQeXlXfZmeB7RmEFe+Dps0Vu5EqR5fpP6AhEfhDb7Oak7xuDniyk97Bw8WUF a2oisAvAu70VSMGMiGR0tib6jPQhp7D3NXjwhokMl2jYzuQ4Lz87a5RMkXtwjAsI ObBnS/DqNofQuw37k4sJqWVAnm3ZV3X9+8ecdUUyaq1CIbWIUspwQQ+n/LPVNRZ1 AKNoZmH/rajxzLCvPotdT1nbsqsTtUNOYZfxcpcYnJwvfdQ7+zfAwlUSUpAIZUrB 3KIKrlaL34USxnyE/saj5umQmlJ0vVPsLx+FYdK+dwh0sBkyTZeWcxoxgqVMASEe iU9WZsKjhWLEAheRPXutfLlzeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7O8asD EpC1+Pd/e/KXYaCuHox+MB8GA1UdIwQYMBaAFF0YW3EtkwVr8nS4t6iYxpJU67mD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk3Mi8yNDVCM0REQ0Ez RTYxMUVFQURGOTQ4NTVDNEY5QUUwMi9YUmhiY1MyVEJXdnlkTGkzcUpqR2tsVHJ1 WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSaGJjUzJUQld2eWRMaTNxSmpHa2xUcnVZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTk3Mi8yNDVCM0REQ0EzRTYxMUVFQURGOTQ4NTVDNEY5QUUwMi9YUmhiY1MyVEJX dnlkTGkzcUpqR2tsVHJ1WU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfsHe2Pw5vz/jUTIv47fIUIAl00G3OMUJir+Kw71UqDJUGfW6Krmgk IIK0tZrMeNbWfbBynjCAiv/3UIYi+bZlISAj7Xgmi0Aj1hm2HLYZHiy6ju1G3ndx r4b/diy9oSaXurxecUhQb457+GmFtQWKAVrp2jBqzRZXSSMWtFIyIpb29MD7fxyz qv7QPMblouE5qkgZoRvvb8hj8Jt0F06DnNaf5gAMWRdUXOxUIHfI6l+PFStLDjfb GV/uoACVTTt7l9HJMxmtRuOkaaPuq+7Ias5kQRHOCtt7DKlE1CUHoL9CvDh65B12 HeEisPTpZBz6WCbOusKkeEnV4jpKqWaE -----END CERTIFICATE-----Generated at Sat Apr 26 13:39:01 2025 by rpki-client