$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: PprXpa2EtfurJs5dPyRWCzA1/5sNDBiL32Mp27yTRms= Subject key identifier: 88:0E:35:58:01:B4:CA:54:10:AD:9B:28:BC:D5:AD:BD:59:23:77:B7 Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 010E Signing time: Fri 25 Apr 2025 04:09:28 +0000 Manifest this update: Fri 25 Apr 2025 04:09:27 +0000 Manifest next update: Fri 02 May 2025 04:09:27 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: Q/yAn4uXnHLQzNYnXSkhDblFfip2ly9N+LWey5GcDPk=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: 3NZc5h6ed9BUlmgYjohUHdHLn8ZtKRYjymamcmwqc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Apr 25 04:09:27 2025 GMT Not After : May 2 04:09:27 2025 GMT Subject: CN=680b0af8-301d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:50:3b:92:50:cc:84:4b:c8:b8:0b:cd:10: df:80:d1:40:ab:b6:f9:1e:bc:8c:51:d3:cd:5e:d1: 7b:55:06:ed:19:d4:fb:ad:f5:75:28:0d:b7:63:97: a1:c5:3e:7e:28:ca:7b:1e:1d:86:0b:78:c1:86:ae: 83:85:e6:af:8f:73:1b:4d:1a:fc:69:7a:3e:07:e9: f7:0c:e1:75:a5:b2:01:db:ea:34:f8:b7:66:bd:b0: 1b:5e:8d:04:fe:24:b9:26:7c:20:b0:0b:2a:dc:0a: 60:ac:af:4d:d4:4b:31:fd:74:36:c3:81:fc:98:5a: cb:d3:67:7c:97:a6:c4:cb:4d:30:42:f4:11:a1:13: cb:a7:f0:f4:0f:53:e0:90:28:f9:fe:af:6f:da:d1: b5:57:08:b9:e5:41:fe:74:20:4f:e0:dc:7d:47:9d: 64:2f:6e:d4:12:59:fc:05:6b:18:a6:5b:27:ff:31: 83:89:3c:33:25:4e:c8:3d:66:a3:b2:b4:f0:54:c1: 57:ac:21:47:f5:08:e2:2c:d7:c1:e6:94:f7:02:b1: 90:e5:d7:17:40:23:4e:2b:2f:42:4a:c2:a3:91:59: 2a:d2:9d:06:87:57:26:dc:39:2a:de:0b:91:14:07: e2:1f:9e:7e:16:20:6c:95:61:93:ca:1d:c4:23:62: 04:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0E:35:58:01:B4:CA:54:10:AD:9B:28:BC:D5:AD:BD:59:23:77:B7 X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:35:3c:21:f8:ff:8f:be:27:53:eb:7c:7f:8e:db:67:f5:37: 56:f0:2e:b0:2e:2a:49:43:eb:2c:b8:41:e3:8a:1f:69:b7:c5: ff:d0:3b:c3:ad:17:35:f0:cf:8d:b3:64:bd:0a:a9:d2:44:ac: 35:78:82:d9:00:81:72:b0:bc:41:35:f9:d4:7c:d7:3c:de:3b: d3:e7:6a:6f:61:24:90:8d:8c:3e:c4:e7:5a:f6:7e:a7:b8:e3: 1d:31:e3:af:21:a3:95:1c:60:35:bf:e3:7e:b2:2f:55:7e:2f: 36:0f:e1:93:75:72:4f:69:40:90:6f:b0:fa:cd:9c:17:ca:ef: b3:73:38:ba:dd:e1:79:92:f1:c6:ec:81:3f:5e:dc:f0:33:8d: 0c:96:db:71:f4:af:53:ee:ac:d8:45:af:47:5c:15:71:9a:79: 3e:24:2a:6e:1e:d7:a1:eb:10:14:3c:6f:d0:e1:a5:11:5d:6b: 27:24:9a:40:77:a1:91:72:f4:a7:01:8d:41:49:1c:d5:01:06: 31:c3:db:a0:85:7e:b4:00:1a:78:c7:9f:ba:f3:b9:86:59:4b: 20:43:33:6d:b6:1c:5d:4c:d3:74:e3:0d:74:4c:ff:17:2b:39: 73:13:76:36:00:b7:9b:ee:46:e4:16:88:e1:4c:8b:b5:d2:dc: 40:f7:f9:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUwNDI1MDQwOTI3WhcNMjUwNTAyMDQwOTI3WjAYMRYwFAYD VQQDEw02ODBiMGFmOC0zMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY9QO5JQzIRLyLgLzRDfgNFAq7b5HryMUdPNXtF7VQbtGdT7rfV1KA23Y5eh xT5+KMp7Hh2GC3jBhq6Dheavj3MbTRr8aXo+B+n3DOF1pbIB2+o0+LdmvbAbXo0E /iS5JnwgsAsq3ApgrK9N1Esx/XQ2w4H8mFrL02d8l6bEy00wQvQRoRPLp/D0D1Pg kCj5/q9v2tG1Vwi55UH+dCBP4Nx9R51kL27UEln8BWsYplsn/zGDiTwzJU7IPWaj srTwVMFXrCFH9QjiLNfB5pT3ArGQ5dcXQCNOKy9CSsKjkVkq0p0Gh1cm3Dkq3guR FAfiH55+FiBslWGTyh3EI2IEawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgONVgB tMpUEK2bKLzVrb1ZI3e3MB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdNTwh+P+PvidT63x/jttn9TdW8C6wLipJQ+ssuEHjih9pt8X/0DvD rRc18M+Ns2S9CqnSRKw1eILZAIFysLxBNfnUfNc83jvT52pvYSSQjYw+xOda9n6n uOMdMeOvIaOVHGA1v+N+si9Vfi82D+GTdXJPaUCQb7D6zZwXyu+zczi63eF5kvHG 7IE/XtzwM40Mlttx9K9T7qzYRa9HXBVxmnk+JCpuHteh6xAUPG/Q4aURXWsnJJpA d6GRcvSnAY1BSRzVAQYxw9ughX60ABp4x5+687mGWUsgQzNtthxdTNN04w10TP8X KzlzE3Y2ALeb7kbkFojhTIu10txA9/lz -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:30 2025 by rpki-client