$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft File: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft (raw, json) Hash identifier: DZ7n99bIlOsxdR9rrAUBo3uuIs2BqQXm4JKsHZOQjYk= Subject key identifier: 6A:DC:29:E1:07:EE:F8:87:A9:EE:04:CD:D3:9E:0A:C1:9A:49:B6:E9 Authority key identifier: C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD Certificate issuer: /CN=A91B6F60/serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft Manifest number: 04DF Signing time: Thu 24 Apr 2025 23:33:12 +0000 Manifest this update: Thu 24 Apr 2025 23:33:12 +0000 Manifest next update: Thu 01 May 2025 23:33:12 +0000 Files and hashes: 1: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl (hash: 72erCNlo1V5jX0XHqh5+rzOKLU9PEeZDvdr0sJS5tTM=) 2: 52A8AE84152E11EC94BCB264C4F9AE02.roa (hash: rYm3bxzeD9Hz/zvaLyO6m3QZv6wC6yDqGi0rEoUEXJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F60, serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Validity Not Before: Apr 24 23:33:12 2025 GMT Not After : May 1 23:33:12 2025 GMT Subject: CN=680aca38-78fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:06:34:5f:7d:04:81:0e:0e:5b:d1:fa:15: 9b:0f:ff:33:e2:04:ce:c2:52:6f:24:05:a3:49:c2: 21:42:45:ad:36:49:84:c5:c9:12:e5:37:0c:af:d6: bf:bb:0e:14:36:2e:52:67:b9:3a:8c:14:16:52:f5: 6e:0e:e8:82:42:c5:a3:3d:fd:a8:e3:f0:af:7f:c1: 37:0d:77:66:ce:72:50:97:83:df:9e:bd:65:db:fe: bf:eb:e2:2e:df:cb:94:71:e8:e6:3d:4a:65:10:a5: 20:49:9a:da:bb:e8:5f:7e:1e:0b:4f:bc:38:c7:d0: 7c:b6:c8:d4:6c:55:3b:87:35:c6:73:a7:11:84:0a: 82:e1:7b:b3:54:80:a3:3b:0f:f6:d2:f7:b2:c4:0c: 45:a1:f4:ee:5d:d1:6b:f7:ad:fa:3c:a2:b4:28:ab: ce:48:e6:31:2a:05:51:31:72:2f:6a:e2:f9:ca:50: 5d:18:46:65:05:eb:d3:09:ed:61:89:d0:3c:8c:c7: 0f:d7:bf:6f:05:81:81:f0:8c:06:26:f1:c1:c7:68: 1d:df:ce:55:7f:bd:6b:cf:e7:8f:7f:21:13:e6:71: 7e:bc:cb:14:e8:91:b4:c5:7f:0a:34:92:57:76:ba: 21:2d:b4:10:42:90:63:09:8f:7e:2d:cf:d7:92:e7: db:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:DC:29:E1:07:EE:F8:87:A9:EE:04:CD:D3:9E:0A:C1:9A:49:B6:E9 X509v3 Authority Key Identifier: keyid:C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:d8:9e:26:8e:0e:d1:e8:ec:51:0e:c2:82:ae:80:ca:15:c6: 49:16:63:fe:1c:bb:95:e8:97:a9:e0:b3:80:46:f0:9e:15:90: 60:35:f6:a5:c0:db:2b:ff:74:b7:c2:76:5e:4c:4d:9a:7c:cd: 99:04:a6:5e:81:f5:d9:bd:5e:91:a0:b5:2d:83:f2:2e:95:2d: a8:1a:84:67:76:7c:02:05:b6:02:af:56:6a:ee:74:3d:0e:ee: e5:77:58:64:13:f2:14:a3:1e:8e:19:e3:5d:4c:da:76:c1:5e: 57:e1:ac:f2:89:a1:7c:6a:b8:e9:6a:47:23:a2:f6:8d:d2:db: f9:72:41:60:f5:e3:20:3d:44:9c:94:1e:83:a3:86:af:ee:e5: 98:05:ba:d9:f2:3f:ee:39:6c:74:79:d2:4c:ef:16:d1:f0:e3: 49:87:39:26:9e:5e:ec:30:7e:ac:45:d9:df:ea:62:fc:b3:eb: 45:d6:5e:f8:03:12:ce:b7:32:10:56:5d:de:75:e5:db:68:70: 90:0f:86:68:1f:96:7d:40:12:9e:3c:cf:a3:ac:d0:0d:b6:4a: f3:20:58:72:37:04:31:35:84:45:1a:bf:88:cd:ba:06:3b:41: bf:83:07:e3:41:06:e9:db:25:3d:9a:50:f5:41:65:36:a0:fc: b0:e9:40:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNjAxMTAvBgNVBAUTKEM0MTFDMkQ3MjQwMUY1M0VDQTAxNjM1Nzg4OUQ3RUJB M0JDQ0ZEQ0QwHhcNMjUwNDI0MjMzMzEyWhcNMjUwNTAxMjMzMzEyWjAYMRYwFAYD VQQDEw02ODBhY2EzOC03OGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHgGNF99BIEODlvR+hWbD/8z4gTOwlJvJAWjScIhQkWtNkmExckS5TcMr9a/ uw4UNi5SZ7k6jBQWUvVuDuiCQsWjPf2o4/Cvf8E3DXdmznJQl4Pfnr1l2/6/6+Iu 38uUcejmPUplEKUgSZrau+hffh4LT7w4x9B8tsjUbFU7hzXGc6cRhAqC4XuzVICj Ow/20veyxAxFofTuXdFr9636PKK0KKvOSOYxKgVRMXIvauL5ylBdGEZlBevTCe1h idA8jMcP179vBYGB8IwGJvHBx2gd385Vf71rz+ePfyET5nF+vMsU6JG0xX8KNJJX drohLbQQQpBjCY9+Lc/Xkufb0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrcKeEH 7viHqe4EzdOeCsGaSbbpMB8GA1UdIwQYMBaAFMQRwtckAfU+ygFjV4idfro7zP3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY2MC85NDkzMkJFQzE1 MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlUN0tBV05YaUoxLXVqdk1f YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCSEMxeVFCOVQ3S0FXTlhpSjEtdWp2TV9jMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY2MC85NDkzMkJFQzE1MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlU N0tBV05YaUoxLXVqdk1fYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV2J4mjg7R6OxRDsKCroDKFcZJFmP+HLuV6Jep4LOARvCeFZBgNfal wNsr/3S3wnZeTE2afM2ZBKZegfXZvV6RoLUtg/IulS2oGoRndnwCBbYCr1Zq7nQ9 Du7ld1hkE/IUox6OGeNdTNp2wV5X4azyiaF8arjpakcjovaN0tv5ckFg9eMgPUSc lB6Do4av7uWYBbrZ8j/uOWx0edJM7xbR8ONJhzkmnl7sMH6sRdnf6mL8s+tF1l74 AxLOtzIQVl3edeXbaHCQD4ZoH5Z9QBKePM+jrNANtkrzIFhyNwQxNYRFGr+IzboG O0G/gwfjQQbp2yU9mlD1QWU2oPyw6UAM -----END CERTIFICATE-----Generated at Sat Apr 26 03:36:09 2025 by rpki-client