$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft File: xIoOQPt_45dbEsI-AwrFTFIFcWM.mft (raw, json) Hash identifier: 7K4vQowHO9VeAH3EZfha8EOy1ihadATRF9QJvdk5DQE= Subject key identifier: 7E:E7:4C:ED:B3:6C:F2:91:70:91:D2:95:52:AB:E2:7F:69:43:8C:A0 Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 Certificate issuer: /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Certificate serial: 0548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft Manifest number: 0544 Signing time: Thu 24 Apr 2025 23:13:41 +0000 Manifest this update: Thu 24 Apr 2025 23:13:41 +0000 Manifest next update: Thu 01 May 2025 23:13:41 +0000 Files and hashes: 1: xIoOQPt_45dbEsI-AwrFTFIFcWM.crl (hash: hVAA/s6cA0QxpwRuZewOdUXXzNeJLJmGcaduPrITlEw=) 2: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (hash: tglvnraOKLhDlwg3ok6ZNO34EJEOJeyX625ohOQmYAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1352 (0x548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28BC, serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Validity Not Before: Apr 24 23:13:41 2025 GMT Not After : May 1 23:13:41 2025 GMT Subject: CN=680ac5a5-ba15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:5c:c8:3d:ac:fc:ea:8c:16:fd:7f:c2:96: d1:94:02:32:43:5a:26:91:0a:44:17:07:34:f7:e7: 37:b6:70:63:3d:e1:ba:03:76:88:39:89:d0:c0:35: ec:3c:f2:a8:57:c3:f7:6a:96:60:f7:f5:c8:38:1e: 61:af:bb:8f:f1:60:18:b7:14:ff:e1:7d:46:45:e6: ae:a7:b3:fe:5f:1f:9f:fb:cc:27:e1:b5:ee:54:36: 8c:df:dc:07:cd:cc:f2:9e:d9:f6:7c:80:af:b3:a3: 74:bf:90:f9:b9:4a:6d:e0:14:18:ae:66:b5:85:ea: 0e:41:a7:27:84:f0:17:a2:28:ff:fd:18:9f:10:13: 54:c6:0e:76:f6:22:10:bd:ba:9a:6e:fc:d7:15:25: 16:7e:60:f7:be:ea:a2:4c:c9:37:e8:7a:99:7a:57: 16:43:b4:5e:ed:c8:b2:df:35:ee:47:b4:04:02:29: 97:18:fe:c3:28:ec:8a:e2:80:a4:fe:cc:e1:23:20: d6:80:f7:f2:31:01:2f:ae:2f:5b:41:a6:b7:75:af: b6:8e:e5:14:f6:40:e8:e9:f4:2f:6a:44:9f:1d:d1: 6a:ac:74:19:f0:9d:c3:5f:9e:c3:70:b1:c0:cb:c6: c7:42:fa:22:46:3d:a3:61:88:fa:65:8e:ba:c0:5d: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E7:4C:ED:B3:6C:F2:91:70:91:D2:95:52:AB:E2:7F:69:43:8C:A0 X509v3 Authority Key Identifier: keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:61:77:f6:58:5b:35:54:33:a5:ec:37:ab:37:bd:69:5e:4b: 57:bd:12:b7:ef:ad:8c:22:af:14:73:f2:53:f4:a6:c8:db:eb: c6:3a:49:fe:08:ea:50:3e:4a:2f:42:39:68:25:d4:47:4b:2a: fc:0c:39:58:4f:77:2d:f5:9b:a6:f6:26:1c:2a:8e:85:aa:b6: ce:3a:17:28:ab:0a:f1:e4:a5:bb:21:ac:bb:44:19:53:78:85: f9:90:ae:cb:e5:54:f1:d4:89:94:4b:bc:2c:b2:8a:38:d0:d2: 56:64:7c:b8:49:85:d1:cc:80:a0:0a:d6:04:06:05:4b:d3:15: e3:5a:24:cd:75:f5:39:0b:f1:8d:9c:32:0f:61:b2:9b:9d:55: 5b:ba:f9:d2:41:f1:34:d1:a1:f4:c6:fb:aa:01:8c:27:cc:60: 8f:34:e7:95:e2:99:c2:3d:d2:71:ac:bb:1a:3a:fb:2c:b9:e8: 57:0e:a3:e4:3c:9d:4d:d4:fa:66:7d:c9:3a:47:ed:b4:1d:25: 94:e8:3a:cc:32:12:d0:5c:42:3c:50:7c:1e:80:2a:44:0f:67: 5a:b6:2a:c4:e5:36:c0:01:91:73:69:05:2f:81:a6:af:e0:d4: c8:67:fd:ed:57:3b:5b:93:55:79:02:b7:d6:6d:69:8f:b1:d0: 5e:f1:45:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QkMxMTAvBgNVBAUTKEM0OEEwRTQwRkI3RkUzOTc1QjEyQzIzRTAzMEFDNTRD NTIwNTcxNjMwHhcNMjUwNDI0MjMxMzQxWhcNMjUwNTAxMjMxMzQxWjAYMRYwFAYD VQQDEw02ODBhYzVhNS1iYTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxtcyD2s/OqMFv1/wpbRlAIyQ1omkQpEFwc09+c3tnBjPeG6A3aIOYnQwDXs PPKoV8P3apZg9/XIOB5hr7uP8WAYtxT/4X1GReaup7P+Xx+f+8wn4bXuVDaM39wH zczyntn2fICvs6N0v5D5uUpt4BQYrma1heoOQacnhPAXoij//RifEBNUxg529iIQ vbqabvzXFSUWfmD3vuqiTMk36HqZelcWQ7Re7ciy3zXuR7QEAimXGP7DKOyK4oCk /szhIyDWgPfyMQEvri9bQaa3da+2juUU9kDo6fQvakSfHdFqrHQZ8J3DX57DcLHA y8bHQvoiRj2jYYj6ZY66wF2ltQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7nTO2z bPKRcJHSlVKr4n9pQ4ygMB8GA1UdIwQYMBaAFMSKDkD7f+OXWxLCPgMKxUxSBXFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhCQy85MjA5MjM5MEVB RDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1ZGJFc0ktQXdyRlRGSUZj V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJb09RUHRfNDVkYkVzSS1Bd3JGVEZJRmNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhCQy85MjA5MjM5MEVBRDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1 ZGJFc0ktQXdyRlRGSUZjV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSYXf2WFs1VDOl7DerN71pXktXvRK3762MIq8Uc/JT9KbI2+vGOkn+ COpQPkovQjloJdRHSyr8DDlYT3ct9Zum9iYcKo6FqrbOOhcoqwrx5KW7Iay7RBlT eIX5kK7L5VTx1ImUS7wssoo40NJWZHy4SYXRzICgCtYEBgVL0xXjWiTNdfU5C/GN nDIPYbKbnVVbuvnSQfE00aH0xvuqAYwnzGCPNOeV4pnCPdJxrLsaOvssuehXDqPk PJ1N1Ppmfck6R+20HSWU6DrMMhLQXEI8UHwegCpED2datirE5TbAAZFzaQUvgaav 4NTIZ/3tVztbk1V5ArfWbWmPsdBe8UUg -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:04 2025 by rpki-client