$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft File: xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json) Hash identifier: eQFs2AhdM2gfsEZ/Iqr+gSQfbaL5mfhzSACF6MV+VU0= Subject key identifier: D4:E6:C8:F5:56:AB:1E:A0:7E:ED:24:16:60:FB:60:17:5E:F8:C8:0F Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61 Certificate issuer: /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft Manifest number: 7B Signing time: Fri 25 Apr 2025 01:56:39 +0000 Manifest this update: Fri 25 Apr 2025 01:56:39 +0000 Manifest next update: Fri 02 May 2025 01:56:39 +0000 Files and hashes: 1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: xmSlzGQ4NCPUqyRQQ+rKDMfpVFPr5BserMXu/KmRDJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361 Validity Not Before: Apr 25 01:56:39 2025 GMT Not After : May 2 01:56:39 2025 GMT Subject: CN=680aebd7-b796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:24:79:90:0b:71:1f:1d:5a:61:00:dc:0c: 1b:98:cd:7e:e6:bf:39:08:7d:e2:be:e4:fe:c3:fc: 03:26:a5:77:18:6e:d1:c1:7a:0a:1f:42:25:21:cd: f9:bc:9a:3d:14:ee:4b:00:8b:96:38:dd:8d:86:23: a2:e4:67:b5:31:6d:20:cf:42:57:49:fe:72:70:99: 3b:08:be:2a:60:bc:89:9d:3f:b7:a8:8d:be:88:78: a0:72:ca:20:01:09:69:21:b8:60:c6:bd:ef:a7:37: c0:28:24:61:50:fb:02:11:0e:72:f9:f9:9e:87:28: 0e:a4:0f:69:f4:5d:62:c1:2e:bd:40:d2:64:2c:af: 52:74:82:4c:53:20:6d:5d:4f:15:ab:84:6f:38:17: 68:e4:74:d6:99:86:16:c1:a0:a2:55:7c:34:8d:75: 02:4d:5f:b4:f0:6e:80:8d:25:e9:fc:a8:60:4b:03: 22:67:ce:dc:9c:46:d1:1d:a9:e2:4f:c8:02:1d:4f: 47:e6:8b:09:24:f0:af:40:50:a7:72:6d:74:e0:d8: 18:29:62:ec:78:51:d8:ea:5f:04:7f:7a:ef:1f:4e: 50:50:e0:a9:86:f5:99:36:05:62:b0:36:60:e7:01: 5e:ae:a6:03:c9:a2:a1:1e:aa:c6:e8:00:0a:ad:60: e8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E6:C8:F5:56:AB:1E:A0:7E:ED:24:16:60:FB:60:17:5E:F8:C8:0F X509v3 Authority Key Identifier: keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:5c:e3:67:ad:83:e9:68:12:87:ec:8f:86:9d:46:03:5e:fe: bf:60:ea:da:18:05:87:12:04:4e:31:ba:1c:f2:a0:28:1f:14: 96:ff:26:fb:a2:8a:a1:4b:ce:9e:24:1b:00:6f:dc:9a:ab:18: 05:59:3e:eb:6d:74:04:1f:59:94:3c:59:bd:9c:00:ea:0a:18: 92:9c:e8:3f:a9:43:2e:8a:91:04:35:38:87:77:57:37:59:e3: d0:3d:f7:ab:f8:43:9e:0d:a5:18:9d:76:0e:c0:41:29:46:03: 07:b6:c0:af:b1:76:d3:56:0f:96:1b:4a:2f:94:c6:d7:9a:f0: cf:f0:61:c0:aa:de:f0:04:0c:fb:4f:05:49:06:b1:c3:e2:12: a6:23:79:74:56:70:d1:fb:19:c1:6f:b9:cf:16:78:c0:3b:d3: 37:5b:ca:20:38:dc:da:40:ac:de:b6:fc:b3:6e:04:45:e0:9d: 80:75:e6:1e:9d:96:54:a8:6a:07:e9:06:58:bf:e9:8d:fe:7f: 20:de:c7:5a:7d:3a:89:d9:1e:4a:97:5c:5d:83:09:e8:08:7b: 47:67:eb:94:3e:a3:9f:93:ee:ac:f7:be:28:9f:76:5e:ef:4c: c1:a5:2f:18:03:cc:46:d2:c2:42:60:2b:22:4e:3e:7c:0e:b1: db:36:78:d3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEMxNDExMC8GA1UEBRMoQzYxNTcwMEQ3Qzg4OEJFNkJBNzUwQURFQ0Q5NEQ4ODY0 NjgyRTM2MTAeFw0yNTA0MjUwMTU2MzlaFw0yNTA1MDIwMTU2MzlaMBgxFjAUBgNV BAMTDTY4MGFlYmQ3LWI3OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4fSR5kAtxHx1aYQDcDBuYzX7mvzkIfeK+5P7D/AMmpXcYbtHBegofQiUhzfm8 mj0U7ksAi5Y43Y2GI6LkZ7UxbSDPQldJ/nJwmTsIvipgvImdP7eojb6IeKByyiAB CWkhuGDGve+nN8AoJGFQ+wIRDnL5+Z6HKA6kD2n0XWLBLr1A0mQsr1J0gkxTIG1d TxWrhG84F2jkdNaZhhbBoKJVfDSNdQJNX7TwboCNJen8qGBLAyJnztycRtEdqeJP yAIdT0fmiwkk8K9AUKdybXTg2BgpYux4UdjqXwR/eu8fTlBQ4KmG9Zk2BWKwNmDn AV6upgPJoqEeqsboAAqtYOhxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1ObI9Var HqB+7SQWYPtgF174yA8wHwYDVR0jBBgwFoAUxhVwDXyIi+a6dQrezZTYhkaC42Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQzE0LzhGMzM5OTk2NkJG QjExRUY4NDYzMjYzNUM0RjlBRTAyL3hoVndEWHlJaS1hNmRRcmV6WlRZaGthQzQy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveGhWd0RYeUlpLWE2ZFFyZXpaVFloa2FDNDJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QzE0LzhGMzM5OTk2NkJGQjExRUY4NDYzMjYzNUM0RjlBRTAyL3hoVndEWHlJaS1h NmRRcmV6WlRZaGthQzQyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALdc42etg+loEofsj4adRgNe/r9g6toYBYcSBE4xuhzyoCgfFJb/Jvui iqFLzp4kGwBv3JqrGAVZPuttdAQfWZQ8Wb2cAOoKGJKc6D+pQy6KkQQ1OId3VzdZ 49A996v4Q54NpRiddg7AQSlGAwe2wK+xdtNWD5YbSi+Uxtea8M/wYcCq3vAEDPtP BUkGscPiEqYjeXRWcNH7GcFvuc8WeMA70zdbyiA43NpArN62/LNuBEXgnYB15h6d llSoagfpBli/6Y3+fyDex1p9OonZHkqXXF2DCegIe0dn65Q+o5+T7qz3viifdl7v TMGlLxgDzEbSwkJgKyJOPnwOsds2eNM= -----END CERTIFICATE-----Generated at Sat Apr 26 13:10:46 2025 by rpki-client