$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json) Hash identifier: xWyk2JxL1mkrkSEBCyY5aeoa10vFiTnZZVIJHqSMn6U= Subject key identifier: D8:2A:5E:0A:8F:D4:2C:71:8B:1D:D4:05:D6:D8:87:08:2C:B6:41:07 Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft Manifest number: D1 Signing time: Fri 25 Apr 2025 04:40:56 +0000 Manifest this update: Fri 25 Apr 2025 04:40:55 +0000 Manifest next update: Fri 02 May 2025 04:40:55 +0000 Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: QpJRHr6dfdJf0iHaTtuS+WoD9NKjux78XcAh5HwXZ1k=) 2: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: 3MMDEbkkdNFM/djNh0ORf8UHeAKMwjP4dT3GZUmqZZQ=) 3: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: 7eg8s3nshujJWlMFILJG4nxViOoj4GxAMrDMLj0daAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Validity Not Before: Apr 25 04:40:55 2025 GMT Not After : May 2 04:40:55 2025 GMT Subject: CN=680b1257-7b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dc:48:70:51:af:b3:f9:e2:6c:17:54:dc:d8: 9e:15:85:e3:32:5c:7a:c9:14:ff:f8:e9:b9:7c:57: 1d:a2:48:4c:34:0d:68:68:d8:d8:c2:f0:c9:f9:84: 6e:67:e4:0b:1f:4c:dc:f2:dc:f5:71:ff:e3:de:64: 89:41:bf:07:b9:10:43:06:1d:dc:fc:43:ee:62:65: 80:3d:23:de:06:a3:af:d4:f0:37:7f:7a:19:37:b8: d0:af:cc:fb:98:87:69:97:5f:00:98:7a:a2:55:6e: c4:c9:12:79:eb:fc:d5:30:30:da:7e:bf:dd:f0:60: 4b:ed:ef:79:50:5a:e2:9d:5c:e1:9b:69:42:b7:0e: 3f:ab:60:3b:a1:04:fa:3b:1f:9d:c8:8f:5b:94:56: ed:4b:ed:40:8f:a5:af:47:5d:aa:63:69:51:ae:f3: fe:b2:7b:5c:48:b6:a8:e4:ec:d0:c3:94:8e:7e:c5: de:97:0d:58:8a:6e:64:a5:25:ed:72:bd:5d:a2:b1: d7:d8:a0:87:ef:35:52:dd:1f:90:37:79:be:93:8a: 7e:a1:35:5b:2a:8c:71:a8:b6:e0:d7:12:86:48:f7: 7a:96:16:0b:d2:13:1f:7b:d7:8c:32:62:aa:29:d4: 48:92:1e:5e:ea:1e:26:d5:d4:46:50:d4:ce:65:21: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2A:5E:0A:8F:D4:2C:71:8B:1D:D4:05:D6:D8:87:08:2C:B6:41:07 X509v3 Authority Key Identifier: keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b2:41:4b:0c:65:21:66:00:d7:96:1a:94:67:8a:f5:c2:b6: 61:57:2a:e7:63:fa:ee:9a:c5:18:dc:64:1f:4f:43:08:fd:a4: ca:19:d4:b2:74:94:77:70:cc:25:d9:6e:e7:6b:45:c2:f9:81: 95:fb:14:77:9d:7c:db:59:20:74:26:03:94:92:10:ec:a0:cb: b6:43:33:3a:be:00:5c:60:d2:ec:3e:09:7a:e5:03:03:c8:dc: 92:da:41:f7:46:df:f7:9b:8c:6a:4d:ac:20:87:5c:7b:63:d2: 77:39:9c:15:d8:d6:20:2b:0a:b8:dc:cf:4a:dc:94:9d:97:1f: 3c:5b:f9:1f:cf:74:ac:61:70:0e:d7:f9:be:48:e0:75:31:36: c0:36:66:02:4a:cc:96:b3:3b:48:25:3e:b5:8e:28:06:ae:a1: 67:52:5d:e1:ee:d9:9d:c0:64:27:3b:b1:a5:1d:2a:e2:92:6e: 9e:34:e6:0e:10:24:26:44:63:98:e9:d6:e7:9b:79:19:fb:f7: 8f:c5:c6:f4:ba:f6:2f:40:94:98:13:05:80:79:e1:dc:d8:53: d9:fe:0d:84:78:7c:5b:f4:d0:5a:7d:82:2f:64:c6:7c:77:0f: ae:0e:a5:70:ca:b3:d1:12:ae:1b:f1:65:bf:49:04:50:d8:0f: 17:e4:67:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyRkQxMTAvBgNVBAUTKDVGMkI1ODIxREQ0M0MyOTQzOUQyQkFFRTVCREMwNDMy OTFDNDdCQUYwHhcNMjUwNDI1MDQ0MDU1WhcNMjUwNTAyMDQ0MDU1WjAYMRYwFAYD VQQDEw02ODBiMTI1Ny03YjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NxIcFGvs/nibBdU3NieFYXjMlx6yRT/+Om5fFcdokhMNA1oaNjYwvDJ+YRu Z+QLH0zc8tz1cf/j3mSJQb8HuRBDBh3c/EPuYmWAPSPeBqOv1PA3f3oZN7jQr8z7 mIdpl18AmHqiVW7EyRJ56/zVMDDafr/d8GBL7e95UFrinVzhm2lCtw4/q2A7oQT6 Ox+dyI9blFbtS+1Aj6WvR12qY2lRrvP+sntcSLao5OzQw5SOfsXelw1Yim5kpSXt cr1dorHX2KCH7zVS3R+QN3m+k4p+oTVbKoxxqLbg1xKGSPd6lhYL0hMfe9eMMmKq KdRIkh5e6h4m1dRGUNTOZSHE+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgqXgqP 1Cxxix3UBdbYhwgstkEHMB8GA1UdIwQYMBaAFF8rWCHdQ8KUOdK67lvcBDKRxHuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJGRC82MzhENjJBMEUx MTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdwUTUwcnJ1Vzl3RU1wSEVl NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjJGRC82MzhENjJBMEUxMTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdw UTUwcnJ1Vzl3RU1wSEVlNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgskFLDGUhZgDXlhqUZ4r1wrZhVyrnY/rumsUY3GQfT0MI/aTKGdSy dJR3cMwl2W7na0XC+YGV+xR3nXzbWSB0JgOUkhDsoMu2QzM6vgBcYNLsPgl65QMD yNyS2kH3Rt/3m4xqTawgh1x7Y9J3OZwV2NYgKwq43M9K3JSdlx88W/kfz3SsYXAO 1/m+SOB1MTbANmYCSsyWsztIJT61jigGrqFnUl3h7tmdwGQnO7GlHSrikm6eNOYO ECQmRGOY6dbnm3kZ+/ePxcb0uvYvQJSYEwWAeeHc2FPZ/g2EeHxb9NBafYIvZMZ8 dw+uDqVwyrPREq4b8WW/SQRQ2A8X5Gc/ -----END CERTIFICATE-----Generated at Sat Apr 26 04:24:31 2025 by rpki-client