$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: HA38tSD+tEMpJWOmz1H4doKvxZOuNabf1Oderf3+vBk= Subject key identifier: 23:0A:67:AF:67:19:CE:85:DB:A3:EB:AA:15:F0:45:84:48:97:6E:BA Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 0924 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 091D Signing time: Sat 26 Apr 2025 20:04:14 +0000 Manifest this update: Sat 26 Apr 2025 20:04:14 +0000 Manifest next update: Sat 03 May 2025 20:04:14 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: sleE1cd+2H335YXszo2xLJDwUYLd4FL489ilheRvnKM=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: 2i86HvqqruP2HLn2/0YD1Ofb8VdhIBy3sY51fKOAOAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2340 (0x924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Apr 26 20:04:14 2025 GMT Not After : May 3 20:04:14 2025 GMT Subject: CN=680d3c3e-1c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ba:41:33:0d:d5:18:7a:10:c8:1f:20:a3:56: 5f:25:5a:f2:01:4a:ca:2d:58:94:30:6b:82:26:54: 5f:87:83:91:c6:d8:df:f2:dd:9f:41:00:00:c1:58: 5b:46:73:76:58:f9:c0:77:fc:b3:7c:f1:9d:ea:63: fb:3b:aa:a1:6d:58:0d:85:4d:f4:ee:77:80:e6:68: 51:18:c8:11:83:d4:6b:a1:c1:e6:50:08:a2:0a:1f: 58:05:ce:80:54:dc:4a:ca:3c:a5:e6:86:b4:97:63: be:20:cd:c8:00:c3:ff:73:63:42:53:f3:a6:76:32: d3:bf:d0:cc:40:93:55:2c:ca:0a:6e:73:24:b2:7d: b9:af:e7:da:69:da:80:aa:29:f5:c5:38:52:57:1b: 92:eb:0d:3e:37:4c:b1:6e:ba:f2:ff:fe:c2:dd:d4: d4:19:51:f6:a6:b3:cb:1a:97:0e:a6:04:6d:04:8d: 7f:9e:7c:30:a3:3c:20:9e:02:25:05:16:bd:7d:c4: 9e:61:5a:e8:87:9e:46:3b:81:1d:35:4e:ef:c8:83: 61:03:28:92:c5:ff:d1:9c:78:13:45:07:df:49:39: c5:b8:97:11:23:58:a8:9e:c8:6d:1d:a8:c1:51:29: d2:3b:a0:7f:65:47:5a:2d:c9:37:a4:7e:c7:fb:56: 10:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0A:67:AF:67:19:CE:85:DB:A3:EB:AA:15:F0:45:84:48:97:6E:BA X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0c:43:05:26:9b:50:b3:b2:ec:1a:f5:c2:d4:79:1e:e8:a1: 75:03:91:d7:b6:5a:87:25:1a:3c:eb:88:9a:0f:f7:ca:6a:ee: 46:52:78:ce:42:d7:c5:e8:44:d9:ff:fd:5a:e1:56:71:97:d9: 48:98:98:20:7c:57:51:ba:29:1d:2e:de:28:ec:40:a1:1c:a8: 83:cd:4e:4a:72:81:78:02:3c:93:f6:45:38:57:9a:4e:1d:d7: 67:c2:c6:99:85:fc:bd:7e:43:d3:73:20:d4:70:b9:c3:ee:79: 2d:87:2b:a1:5b:79:36:05:45:83:89:3f:01:ac:6a:f6:b2:a9: 81:c9:f2:66:f1:46:e6:d1:94:a9:e3:10:bd:cf:40:95:62:f5: 96:61:07:e2:a1:76:d4:c8:60:ab:a8:2e:77:bd:65:c3:58:4e: f8:03:a6:74:1a:b7:bc:c1:f0:66:77:e9:25:13:df:f1:b4:be: eb:ef:86:6f:c4:c9:38:2b:24:0e:af:73:a7:c9:17:df:65:c6: 04:45:b6:91:9f:85:97:fe:e1:4b:70:c6:4d:0c:10:04:97:a2: 5d:c0:1e:b7:35:cf:f5:f9:b2:f7:32:3a:f4:54:4a:53:28:bd: 16:74:a4:3b:03:b9:e6:f3:f0:db:f0:92:65:2b:32:4a:f1:c9: aa:60:c0:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjUwNDI2MjAwNDE0WhcNMjUwNTAzMjAwNDE0WjAYMRYwFAYD VQQDEw02ODBkM2MzZS0xYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLpBMw3VGHoQyB8go1ZfJVryAUrKLViUMGuCJlRfh4ORxtjf8t2fQQAAwVhb RnN2WPnAd/yzfPGd6mP7O6qhbVgNhU307neA5mhRGMgRg9RrocHmUAiiCh9YBc6A VNxKyjyl5oa0l2O+IM3IAMP/c2NCU/OmdjLTv9DMQJNVLMoKbnMksn25r+faadqA qin1xThSVxuS6w0+N0yxbrry//7C3dTUGVH2prPLGpcOpgRtBI1/nnwwozwgngIl BRa9fcSeYVroh55GO4EdNU7vyINhAyiSxf/RnHgTRQffSTnFuJcRI1ionshtHajB USnSO6B/ZUdaLck3pH7H+1YQ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMKZ69n Gc6F26PrqhXwRYRIl266MB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaDEMFJptQs7LsGvXC1Hke6KF1A5HXtlqHJRo864iaD/fKau5GUnjO QtfF6ETZ//1a4VZxl9lImJggfFdRuikdLt4o7EChHKiDzU5KcoF4AjyT9kU4V5pO HddnwsaZhfy9fkPTcyDUcLnD7nkthyuhW3k2BUWDiT8BrGr2sqmByfJm8Ubm0ZSp 4xC9z0CVYvWWYQfioXbUyGCrqC53vWXDWE74A6Z0Gre8wfBmd+klE9/xtL7r74Zv xMk4KyQOr3OnyRffZcYERbaRn4WX/uFLcMZNDBAEl6JdwB63Nc/1+bL3Mjr0VEpT KL0WdKQ7A7nm8/Db8JJlKzJK8cmqYMCf -----END CERTIFICATE-----Generated at Sun Apr 27 04:49:15 2025 by rpki-client