$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft File: XDZbFzHKfOfbgd1XEwvU1kMBm14.mft (raw, json) Hash identifier: l6aXxiwxVlQQEj4682Y6++V/WCrCL3Gi/K4gTp2WPHM= Subject key identifier: FB:3A:44:8D:03:DC:2D:A9:3A:B9:D4:5A:DE:32:09:64:40:E6:89:83 Authority key identifier: 5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E Certificate issuer: /CN=A91D28EB/serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Certificate serial: 0550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft Manifest number: 0549 Signing time: Thu 24 Apr 2025 23:13:48 +0000 Manifest this update: Thu 24 Apr 2025 23:13:47 +0000 Manifest next update: Thu 01 May 2025 23:13:47 +0000 Files and hashes: 1: XDZbFzHKfOfbgd1XEwvU1kMBm14.crl (hash: or11cWkwSHSo74yV213f5CJ/CL9sw1ufNtDURA+57W0=) 2: 8E90AA02EB0B11EBA0B6DD84C4F9AE02.roa (hash: QJH4AI00yRGEUDIXxzK7vr00Zj8U+JgNqRc/dr5Ast0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1360 (0x550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28EB, serialNumber=5C365B1731CA7CE7DB81DD57130BD4D643019B5E Validity Not Before: Apr 24 23:13:47 2025 GMT Not After : May 1 23:13:47 2025 GMT Subject: CN=680ac5ac-ccd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:33:a3:f0:82:0d:22:54:5c:82:b2:41:03: ce:ac:bd:32:47:5a:ab:49:b9:a6:f3:27:12:c5:e5: 7e:77:13:f1:60:7e:56:bd:fa:18:ae:38:d8:aa:e1: 9b:c5:4b:68:21:86:22:33:3f:a8:33:e8:d3:2d:a3: 67:b8:03:34:15:a2:64:c8:9b:89:a6:55:d5:38:e4: e7:f0:33:59:f5:a5:a9:9b:60:8f:ed:dc:d2:00:fa: 51:01:87:b5:c5:44:76:b8:bb:9c:d5:dc:13:61:21: ae:d2:65:ef:f6:5a:4b:a6:59:74:10:88:08:c6:be: 6f:cc:82:3d:59:f3:ea:ec:b4:06:08:71:a3:1c:6e: f5:9f:a5:a4:b7:de:23:d0:f7:19:ad:94:74:14:29: a1:b3:c5:5d:c4:60:05:64:99:ed:bf:78:15:d9:6e: 7f:99:50:18:53:0b:96:b0:cb:ba:9e:c5:e6:1a:7b: 4a:cf:9c:da:a5:f9:91:a5:b6:0c:4e:12:a1:90:53: 4f:bb:ce:c1:69:d5:55:d9:36:19:55:55:5c:65:88: a6:ec:c1:44:c7:22:8e:08:28:6f:fc:c1:12:f2:75: 73:c0:43:47:57:d5:d6:91:a2:b4:41:02:33:2e:0c: c4:e4:e4:3f:c1:36:83:6e:db:bb:2d:69:22:d8:cd: 12:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3A:44:8D:03:DC:2D:A9:3A:B9:D4:5A:DE:32:09:64:40:E6:89:83 X509v3 Authority Key Identifier: keyid:5C:36:5B:17:31:CA:7C:E7:DB:81:DD:57:13:0B:D4:D6:43:01:9B:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDZbFzHKfOfbgd1XEwvU1kMBm14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28EB/77148AC6EB0911EB9C759180C4F9AE02/XDZbFzHKfOfbgd1XEwvU1kMBm14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:9c:61:8f:05:6f:fd:f8:43:83:54:d5:b5:0b:5f:69:93:a5: f8:13:93:12:46:0d:69:dc:8d:f5:03:a7:45:3f:86:89:a7:f1: 8a:d3:83:a0:2b:60:2c:40:b8:04:b3:7d:cc:08:dc:37:10:ff: d4:a5:3e:4d:6f:a8:b6:73:6a:cb:23:cb:a2:49:fe:54:22:d7: 3a:9d:b5:d4:58:ce:c0:ec:f8:01:e0:6e:47:51:47:2c:f4:cd: 2b:74:dc:67:2e:d5:d4:8d:2c:dc:81:95:48:e5:33:ed:30:ce: c0:05:f0:32:4b:53:ec:44:d8:b8:24:c3:46:6e:0d:3e:73:0e: 96:51:82:94:33:57:2d:d4:29:6f:5a:60:92:a2:05:b1:11:d6: 4d:f7:bc:86:0b:2f:95:51:08:7f:c1:16:4d:f3:1a:ba:8c:76: db:4c:15:51:52:27:bc:7b:f1:8b:46:e4:2e:f1:44:45:9c:86: 66:04:90:99:b9:82:61:76:6e:0f:f9:d6:94:0a:85:17:35:63: d9:e7:39:0f:23:52:bd:8f:a3:4a:d1:6b:6c:8f:38:3d:93:1d: 43:e4:ce:77:00:c9:2b:4a:c9:62:0d:b7:57:4a:9d:cc:82:44: bb:df:52:5a:3e:2f:00:4d:2d:f8:e7:99:31:db:00:85:22:71: e0:a8:7e:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RUIxMTAvBgNVBAUTKDVDMzY1QjE3MzFDQTdDRTdEQjgxREQ1NzEzMEJENEQ2 NDMwMTlCNUUwHhcNMjUwNDI0MjMxMzQ3WhcNMjUwNTAxMjMxMzQ3WjAYMRYwFAYD VQQDEw02ODBhYzVhYy1jY2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3gzo/CCDSJUXIKyQQPOrL0yR1qrSbmm8ycSxeV+dxPxYH5WvfoYrjjYquGb xUtoIYYiMz+oM+jTLaNnuAM0FaJkyJuJplXVOOTn8DNZ9aWpm2CP7dzSAPpRAYe1 xUR2uLuc1dwTYSGu0mXv9lpLpll0EIgIxr5vzII9WfPq7LQGCHGjHG71n6Wkt94j 0PcZrZR0FCmhs8VdxGAFZJntv3gV2W5/mVAYUwuWsMu6nsXmGntKz5zapfmRpbYM ThKhkFNPu87BadVV2TYZVVVcZYim7MFExyKOCChv/MES8nVzwENHV9XWkaK0QQIz LgzE5OQ/wTaDbtu7LWki2M0SEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPs6RI0D 3C2pOrnUWt4yCWRA5omDMB8GA1UdIwQYMBaAFFw2Wxcxynzn24HdVxML1NZDAZte MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFQi83NzE0OEFDNkVC MDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZPZmJnZDFYRXd2VTFrTUJt MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEWmJGekhLZk9mYmdkMVhFd3ZVMWtNQm0xNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFQi83NzE0OEFDNkVCMDkxMUVCOUM3NTkxODBDNEY5QUUwMi9YRFpiRnpIS2ZP ZmJnZDFYRXd2VTFrTUJtMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCknGGPBW/9+EODVNW1C19pk6X4E5MSRg1p3I31A6dFP4aJp/GK04Og K2AsQLgEs33MCNw3EP/UpT5Nb6i2c2rLI8uiSf5UItc6nbXUWM7A7PgB4G5HUUcs 9M0rdNxnLtXUjSzcgZVI5TPtMM7ABfAyS1PsRNi4JMNGbg0+cw6WUYKUM1ct1Clv WmCSogWxEdZN97yGCy+VUQh/wRZN8xq6jHbbTBVRUie8e/GLRuQu8URFnIZmBJCZ uYJhdm4P+daUCoUXNWPZ5zkPI1K9j6NK0Wtsjzg9kx1D5M53AMkrSsliDbdXSp3M gkS731JaPi8ATS3455kx2wCFInHgqH69 -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:51 2025 by rpki-client