$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft File: xOTw2gEK9YY3zFlihHHpmLckPFI.mft (raw, json) Hash identifier: GIoltWGGSlg+6dE8OtVYrOckiguHO1OAOhRzQaaKWR0= Subject key identifier: E1:D9:E9:20:D2:84:3A:8A:49:CD:C5:39:D1:5D:49:90:6D:DC:15:38 Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 Certificate issuer: /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Certificate serial: 08F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft Manifest number: 08D6 Signing time: Thu 24 Apr 2025 20:20:31 +0000 Manifest this update: Thu 24 Apr 2025 20:20:30 +0000 Manifest next update: Thu 01 May 2025 20:20:30 +0000 Files and hashes: 1: xOTw2gEK9YY3zFlihHHpmLckPFI.crl (hash: 3cEr7QcVO1jWKHFpyfDze5LaNuLogbbVcY4aogBO6Jo=) 2: 5353EA28781F11EEBA05B17FC4F9AE02.roa (hash: Del+9YrkACA6yrhYJeSPVVuh01l/16gJ82iy69S9BRo=) 3: 863670328FD011EEB6FFC636C4F9AE02.roa (hash: PnqDvM4vjQdsVy80UhznbWoKhp/dlqh33E+GG+RU+dk=) 4: 03706138786411EC8624EB12C4F9AE02.roa (hash: qKXv165pzdK/WBxXfxqKy/V+953i+G1rFbe37yvanHk=) 5: F4E74AA8B99911EF9A0C3B63C4F9AE02.roa (hash: Ci305f1V47fRIRqmqjLy+EIi8DLnLoGCGpVVZ48v10E=) 6: 6A6E4770A10F11EF840C2548C4F9AE02.roa (hash: lvX9qWs0U9FJpaiKhdFBFudNcs3mWD37dbOmEs33Njk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52 Validity Not Before: Apr 24 20:20:30 2025 GMT Not After : May 1 20:20:30 2025 GMT Subject: CN=680a9d0e-ff68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:0f:9b:4d:a6:f8:96:56:7e:1b:7a:1d:e9: 24:40:0f:5f:24:96:e6:ad:d4:2c:fb:ca:e3:cf:14: 32:96:56:31:40:95:73:ae:fb:56:a4:15:2b:3c:f5: 80:86:f9:f3:14:66:bd:0d:3f:29:2f:bf:30:c6:eb: 39:f2:1f:d5:03:f5:a8:ce:47:a7:e0:5b:52:e3:74: e1:c4:62:b7:b4:87:1d:ee:33:30:34:b2:97:50:f5: 1b:5e:ef:ae:ad:f6:af:f2:40:e3:11:da:8e:68:65: 35:dd:a3:e8:98:b8:e6:ea:cc:ad:8f:41:be:d4:1e: ef:89:44:3a:bf:31:b4:f8:bf:77:73:ea:38:a5:76: f7:92:bc:a8:29:90:fe:c3:a2:5f:eb:ff:43:f9:a3: cb:37:26:66:43:53:8c:00:7a:9d:06:6d:c5:f3:c2: 30:d8:da:e6:91:46:42:38:44:70:ce:93:ff:a0:d2: 7d:b3:38:26:9f:94:30:0e:bf:5f:a4:37:e2:b3:78: e9:10:b1:3d:c5:96:e7:51:2e:f6:a5:30:93:65:1d: c6:9d:9d:4e:1d:d9:ea:4e:90:d7:77:5b:57:0f:83: 8f:9c:8a:55:8c:9e:c3:a3:d3:59:52:cc:46:4b:56: ba:13:61:a5:14:16:a8:7f:e3:a2:55:42:3a:bb:b0: e7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D9:E9:20:D2:84:3A:8A:49:CD:C5:39:D1:5D:49:90:6D:DC:15:38 X509v3 Authority Key Identifier: keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:f3:54:a6:c3:9d:77:82:e7:17:cf:fb:e5:cf:1b:50:aa:a3: ac:65:8f:f1:63:60:df:6d:2f:c7:f1:80:07:0f:18:f4:9e:18: 0e:71:5a:d8:9f:2c:e5:94:3a:6f:ee:55:18:68:10:30:d2:76: 28:eb:21:40:a9:b7:c2:04:77:69:24:ca:a1:02:ee:b5:0f:dc: 63:3b:03:43:a1:f6:ac:f6:51:15:24:9d:1d:c9:49:35:92:01: 1f:af:05:0d:67:9d:86:5f:d8:05:b3:51:14:0c:2b:5c:51:ee: 6c:a1:e2:46:f3:9f:30:c0:8e:02:4a:10:bc:a2:b5:49:ec:bb: 1a:73:1f:ff:bc:02:e2:c6:a8:0a:97:a8:59:bf:c9:72:b0:f9: a3:cb:d5:45:a6:41:40:c6:80:38:3e:82:0d:4a:60:34:7e:ed: 27:50:ef:b8:3c:b6:0c:5c:8b:a2:c9:fe:0f:16:38:3b:f1:9c: 63:df:18:01:29:69:69:75:7c:2c:e0:4e:98:b1:0a:40:ef:c3: 3b:2d:22:72:e7:15:e8:c8:88:74:fd:62:76:3a:49:98:c4:f2: 88:ea:57:d3:2e:92:4b:63:ba:67:0d:e0:39:1e:67:d7:93:02: 31:f9:7d:db:2a:e2:03:13:db:d6:19:37:4b:fd:91:c6:fb:3b: 02:c2:1d:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzRDAxMTAvBgNVBAUTKEM0RTRGMERBMDEwQUY1ODYzN0NDNTk2Mjg0NzFFOTk4 QjcyNDNDNTIwHhcNMjUwNDI0MjAyMDMwWhcNMjUwNTAxMjAyMDMwWjAYMRYwFAYD VQQDEw02ODBhOWQwZS1mZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX0Pm02m+JZWfht6HekkQA9fJJbmrdQs+8rjzxQyllYxQJVzrvtWpBUrPPWA hvnzFGa9DT8pL78wxus58h/VA/Wozken4FtS43ThxGK3tIcd7jMwNLKXUPUbXu+u rfav8kDjEdqOaGU13aPomLjm6sytj0G+1B7viUQ6vzG0+L93c+o4pXb3kryoKZD+ w6Jf6/9D+aPLNyZmQ1OMAHqdBm3F88Iw2NrmkUZCOERwzpP/oNJ9szgmn5QwDr9f pDfis3jpELE9xZbnUS72pTCTZR3GnZ1OHdnqTpDXd1tXD4OPnIpVjJ7Do9NZUsxG S1a6E2GlFBaof+OiVUI6u7DncwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHZ6SDS hDqKSc3FOdFdSZBt3BU4MB8GA1UdIwQYMBaAFMTk8NoBCvWGN8xZYoRx6Zi3JDxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNEMC8wQTE2MjA4QUFG QkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZWTN6RmxpaEhIcG1MY2tQ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hPVHcyZ0VLOVlZM3pGbGloSEhwbUxja1BGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNEMC8wQTE2MjA4QUFGQkMxMUVBQTk2MUNCODZDNEY5QUUwMi94T1R3MmdFSzlZ WTN6RmxpaEhIcG1MY2tQRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy81Smw513gucXz/vlzxtQqqOsZY/xY2DfbS/H8YAHDxj0nhgOcVrY nyzllDpv7lUYaBAw0nYo6yFAqbfCBHdpJMqhAu61D9xjOwNDofas9lEVJJ0dyUk1 kgEfrwUNZ52GX9gFs1EUDCtcUe5soeJG858wwI4CShC8orVJ7Lsacx//vALixqgK l6hZv8lysPmjy9VFpkFAxoA4PoINSmA0fu0nUO+4PLYMXIuiyf4PFjg78Zxj3xgB KWlpdXws4E6YsQpA78M7LSJy5xXoyIh0/WJ2OkmYxPKI6lfTLpJLY7pnDeA5HmfX kwIx+X3bKuIDE9vWGTdL/ZHG+zsCwh09 -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:57 2025 by rpki-client