$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json) Hash identifier: TbrQVpW2R3EjXhFYjQ7KG1Y8LGCt3vSS3lzdNFNcSu4= Subject key identifier: 7C:67:17:64:47:50:8B:C2:47:7E:1C:82:67:22:CB:AC:41:6D:89:C5 Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft Manifest number: CE Signing time: Fri 25 Apr 2025 04:43:35 +0000 Manifest this update: Fri 25 Apr 2025 04:43:35 +0000 Manifest next update: Fri 02 May 2025 04:43:35 +0000 Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: 71MyDEDuwNiHDiazFlnTvcQyU79S+jOGKMyNO1PuWdo=) 2: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: OhwAMmDXpoUwiIlu+NNwWEG2Mjf5q973vVgDZWZTt/I=) 3: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: zTFWSulVee4Ly8DKhZ3WsgppSiRMvqo0mmrNlUemSBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A24, serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Validity Not Before: Apr 25 04:43:35 2025 GMT Not After : May 2 04:43:35 2025 GMT Subject: CN=680b12f7-f131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:b2:95:af:1d:16:af:84:72:07:df:eb:0c: 3a:30:c2:73:7a:b9:5f:1b:3d:be:8b:85:8b:d4:9b: 74:8b:cf:0f:82:94:e3:8f:8c:16:6b:97:b2:88:60: df:96:8d:e4:37:37:4d:d4:bf:19:07:4b:f4:64:ba: 73:63:f4:56:9d:9b:48:53:de:24:d6:05:ab:78:dd: 4b:7e:55:ce:62:ea:57:e6:a9:c9:eb:84:a5:39:93: 64:75:03:4a:65:a4:6d:05:e2:58:3b:7a:ab:82:fd: ae:7a:5c:98:9e:d7:32:ed:f5:1f:7a:85:bb:7b:36: 74:01:8b:ef:20:4e:a1:de:ff:dc:c5:da:0d:38:84: 6b:0d:04:37:c4:bb:c1:88:58:e6:89:27:42:6a:19: ac:2f:d9:84:f3:60:c8:b6:93:25:17:25:ba:12:f5: 97:5b:8c:d6:5b:9a:83:b8:4b:ed:f4:c9:7d:2f:07: 0f:05:f0:bc:a4:a5:9b:d0:d6:7b:19:26:60:5c:0d: e3:ab:d6:02:1f:ea:db:1f:82:56:91:77:eb:b3:4c: 1f:26:cc:0a:c7:fc:14:b9:eb:ba:89:c2:24:f3:61: cd:85:cc:8e:69:af:be:af:bd:bd:1e:55:ce:cd:d6: 3b:9c:f1:be:d5:af:93:7c:38:65:a7:25:11:d3:b4: a1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:67:17:64:47:50:8B:C2:47:7E:1C:82:67:22:CB:AC:41:6D:89:C5 X509v3 Authority Key Identifier: keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:82:0e:0b:c1:03:2f:e2:9b:70:15:2e:4b:e1:80:02:b1:d4: e7:7a:9a:cd:e2:4e:f5:62:7c:31:6b:f8:f6:19:83:90:99:39: 0a:79:81:bc:2c:01:61:6d:b1:7c:9d:1a:13:ce:94:9b:fc:2e: 46:0f:80:32:0b:f1:8b:aa:ef:12:55:a9:77:32:1a:03:20:e3: a8:d0:ac:91:43:8b:57:ec:6e:74:0c:19:69:8b:8b:57:fc:6d: da:26:da:72:6d:bb:6c:f1:2f:a1:5b:69:b7:c5:c7:b3:6b:b7: 7e:ad:19:69:df:ee:e8:95:89:ec:5c:6b:08:45:ae:4c:6f:c6: eb:86:4c:fa:88:b3:de:75:31:65:d2:65:5b:39:f9:66:1b:8b: 82:92:4a:67:c4:6c:e0:2d:23:4a:e3:8b:6c:0f:6c:30:5b:c2: 93:fd:74:86:8a:af:3d:ea:4f:0c:75:94:e1:bc:38:7d:f2:7e: 9f:0c:cd:4f:49:4a:48:2b:35:16:34:5d:de:34:31:01:38:1f: 05:c7:57:a7:a0:db:52:4b:77:bb:04:cf:4c:58:f3:fd:4c:a5: f0:de:06:74:90:ea:2f:23:82:1e:a3:28:9c:10:d7:4c:10:d0: 56:b0:4d:83:09:cd:71:85:43:94:3c:16:e3:8d:58:d6:e9:a4: 53:51:8d:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBMjQxMTAvBgNVBAUTKDQ3MTBFNERFNjQxNUM0OEU4QjUzMUI1OUNENDdBNDFD RDc5MzQ1NUUwHhcNMjUwNDI1MDQ0MzM1WhcNMjUwNTAyMDQ0MzM1WjAYMRYwFAYD VQQDEw02ODBiMTJmNy1mMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+qyla8dFq+Ecgff6ww6MMJzerlfGz2+i4WL1Jt0i88PgpTjj4wWa5eyiGDf lo3kNzdN1L8ZB0v0ZLpzY/RWnZtIU94k1gWreN1LflXOYupX5qnJ64SlOZNkdQNK ZaRtBeJYO3qrgv2uelyYntcy7fUfeoW7ezZ0AYvvIE6h3v/cxdoNOIRrDQQ3xLvB iFjmiSdCahmsL9mE82DItpMlFyW6EvWXW4zWW5qDuEvt9Ml9LwcPBfC8pKWb0NZ7 GSZgXA3jq9YCH+rbH4JWkXfrs0wfJswKx/wUueu6icIk82HNhcyOaa++r729HlXO zdY7nPG+1a+TfDhlpyUR07ShnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxnF2RH UIvCR34cgmciy6xBbYnFMB8GA1UdIwQYMBaAFEcQ5N5kFcSOi1MbWc1HpBzXk0Ve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUEyNC85Mzk4NENGMkU2 NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJNkxVeHRaelVla0hOZVRS VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4RGszbVFWeEk2TFV4dFp6VWVrSE5lVFJWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUEyNC85Mzk4NENGMkU2NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJ NkxVeHRaelVla0hOZVRSVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcgg4LwQMv4ptwFS5L4YACsdTneprN4k71Ynwxa/j2GYOQmTkKeYG8 LAFhbbF8nRoTzpSb/C5GD4AyC/GLqu8SVal3MhoDIOOo0KyRQ4tX7G50DBlpi4tX /G3aJtpybbts8S+hW2m3xceza7d+rRlp3+7olYnsXGsIRa5Mb8brhkz6iLPedTFl 0mVbOflmG4uCkkpnxGzgLSNK44tsD2wwW8KT/XSGiq896k8MdZThvDh98n6fDM1P SUpIKzUWNF3eNDEBOB8Fx1enoNtSS3e7BM9MWPP9TKXw3gZ0kOovI4IeoyicENdM ENBWsE2DCc1xhUOUPBbjjVjW6aRTUY30 -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:56 2025 by rpki-client