$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json) Hash identifier: //u8AlXt6UR4ldcKhQf4eRCjB8+B6ndg+VA7BIU3Eog= Subject key identifier: 10:78:81:49:CD:B6:51:49:D5:DD:C8:98:27:A8:DE:36:ED:0D:25:FB Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 0836 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft Manifest number: 082C Signing time: Thu 24 Apr 2025 20:39:36 +0000 Manifest this update: Thu 24 Apr 2025 20:39:35 +0000 Manifest next update: Thu 01 May 2025 20:39:35 +0000 Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: SQxgVofPJ7IrBv79ZaHG9LesxLwcG0jF9Qz+IZDzH5Y=) 2: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: 2uyPyTnKA5Zwl2pBoHO39thl2FFHLVE7fFoHDqNgHC8=) 3: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: jgTYi57dnGXhFEZx8F96LVtuauTCfgLefdSP5U2KTns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2102 (0x836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Apr 24 20:39:35 2025 GMT Not After : May 1 20:39:35 2025 GMT Subject: CN=680aa188-7092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:b2:48:35:06:d7:b0:f7:5b:0e:9e:f7:52: 75:52:a3:b1:9c:40:d8:22:cb:ed:4b:5e:60:cb:fb: 73:d9:29:8b:12:b1:a8:8f:78:71:37:d4:c3:ed:13: 68:03:06:7b:4c:92:b5:4d:8e:42:48:9f:e3:4d:cd: fd:eb:4c:e2:01:3f:57:b0:29:f9:68:ef:67:eb:1b: 29:b7:b6:91:86:5f:41:0b:3d:3b:90:e6:fe:9f:1b: 42:19:d8:12:ef:32:52:bd:33:55:c2:69:38:f8:cf: 4f:65:66:a1:0d:68:ee:7a:8b:cc:b4:2d:da:a9:fe: 5a:e5:a6:a9:c5:d4:f5:da:ed:0f:ab:28:ba:a5:16: 7c:b7:df:9b:dd:6e:b2:2f:48:1f:af:ba:78:dc:e4: ba:9c:20:57:d4:a9:9a:5e:f6:d1:fc:ed:f4:e1:cc: 79:09:6a:18:2e:a7:56:5f:1c:81:b5:74:38:0b:1e: 9b:e1:ca:62:5d:9e:04:f6:00:38:a8:1d:7b:a5:b0: 75:8c:a3:8e:69:42:5b:83:ca:19:83:79:ee:67:0d: 37:eb:55:70:4b:82:9b:a5:54:36:5d:f6:9c:07:fe: cd:9e:74:0f:47:54:01:83:5b:35:3c:fc:ae:cc:eb: 25:d4:53:38:e1:37:84:e9:a4:16:20:ce:57:44:c0: a4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:78:81:49:CD:B6:51:49:D5:DD:C8:98:27:A8:DE:36:ED:0D:25:FB X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:d7:90:e8:c5:5a:04:fd:ac:77:bd:d1:2d:38:b1:28:a4:1d: 90:76:6f:88:ff:9d:b5:63:1c:b7:bd:52:e0:19:3d:66:94:fe: aa:18:bf:c6:30:05:80:9f:89:87:8f:31:87:b8:a8:f9:ac:c0: ef:02:37:5c:a7:7e:1d:62:52:9d:65:96:cf:47:34:41:58:02: 8d:6c:82:ec:91:77:70:8d:3e:ad:8c:a3:f3:d6:a6:59:db:d7: 35:56:2d:85:53:36:a5:81:1b:b5:2a:1e:25:2d:e0:34:75:6f: 9e:77:0f:64:f9:c5:ec:2e:6f:14:33:d4:7e:4a:69:4b:1c:04: 9c:5b:b2:72:28:d7:45:ce:78:7e:d0:2b:80:83:27:4f:f8:20: c8:11:4d:f7:65:aa:45:c8:21:7d:d7:34:7c:dd:03:1c:0c:d6: 20:24:a7:e3:31:28:1b:39:43:eb:38:42:86:59:d3:b5:16:ec: 20:67:f3:43:10:8e:63:ae:dc:fb:27:30:85:93:55:4f:50:fb: b8:c5:7a:ed:03:bc:90:02:f0:ec:28:8b:0c:8e:8a:89:9e:5b: 04:af:6c:46:f4:2c:2d:55:4c:63:87:53:34:f3:89:93:98:42: 0a:26:96:d8:f1:ad:89:02:cb:17:7f:5f:c7:ac:77:ff:88:96: 42:ee:a8:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjUwNDI0MjAzOTM1WhcNMjUwNTAxMjAzOTM1WjAYMRYwFAYD VQQDEw02ODBhYTE4OC03MDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoi+ySDUG17D3Ww6e91J1UqOxnEDYIsvtS15gy/tz2SmLErGoj3hxN9TD7RNo AwZ7TJK1TY5CSJ/jTc3960ziAT9XsCn5aO9n6xspt7aRhl9BCz07kOb+nxtCGdgS 7zJSvTNVwmk4+M9PZWahDWjueovMtC3aqf5a5aapxdT12u0Pqyi6pRZ8t9+b3W6y L0gfr7p43OS6nCBX1KmaXvbR/O304cx5CWoYLqdWXxyBtXQ4Cx6b4cpiXZ4E9gA4 qB17pbB1jKOOaUJbg8oZg3nuZw0361VwS4KbpVQ2XfacB/7NnnQPR1QBg1s1PPyu zOsl1FM44TeE6aQWIM5XRMCkgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBB4gUnN tlFJ1d3ImCeo3jbtDSX7MB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBDMC8wMjJEQkNBNENDRTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0 WUdiN0wweDJWRnFjNHY0d00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn15DoxVoE/ax3vdEtOLEopB2Qdm+I/521Yxy3vVLgGT1mlP6qGL/G MAWAn4mHjzGHuKj5rMDvAjdcp34dYlKdZZbPRzRBWAKNbILskXdwjT6tjKPz1qZZ 29c1Vi2FUzalgRu1Kh4lLeA0dW+edw9k+cXsLm8UM9R+SmlLHAScW7JyKNdFznh+ 0CuAgydP+CDIEU33ZapFyCF91zR83QMcDNYgJKfjMSgbOUPrOEKGWdO1FuwgZ/ND EI5jrtz7JzCFk1VPUPu4xXrtA7yQAvDsKIsMjoqJnlsEr2xG9CwtVUxjh1M084mT mEIKJpbY8a2JAssXf1/HrHf/iJZC7qhj -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:49 2025 by rpki-client