$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json) Hash identifier: h0piLNOsQBfMOsKeFfP4vKSs+sLnlNVeeqSqo+kF3uc= Subject key identifier: 41:87:DA:B3:C6:8E:73:6F:77:D7:9A:1B:87:94:68:C5:18:79:9B:8F Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 0AC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft Manifest number: 0AA0 Signing time: Thu 24 Apr 2025 19:30:01 +0000 Manifest this update: Thu 24 Apr 2025 19:30:00 +0000 Manifest next update: Thu 01 May 2025 19:30:00 +0000 Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: 7hfBf7EznwTnQQVkStpRje0cAYDWF4/hfQhtzMDWQPY=) 2: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: 9vhYDzl42dspDXwVKnxh739DiVyQvgiliwEtZbzC2G8=) 3: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: 66vEtVsOZgkHbfKKZep1to2E133VnAUxFeLa9d7Wa3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2758 (0xac6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: Apr 24 19:30:00 2025 GMT Not After : May 1 19:30:00 2025 GMT Subject: CN=680a9138-9504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:44:f6:8a:d5:85:ef:9b:6e:37:79:db:37:3d: c1:0d:52:ed:c1:6e:3f:09:ad:c1:40:92:cc:99:f0: 06:18:13:22:ea:c5:f6:b9:4a:bd:85:8c:31:52:28: ab:29:18:18:28:2d:68:d5:7e:a6:83:8e:92:a9:dd: ef:01:9f:1d:8d:cb:ff:ce:c8:8c:b0:ad:fb:cc:50: f0:9e:ae:f8:37:f3:05:9d:b6:4c:e2:90:5a:06:29: 06:58:03:6d:1d:02:a3:73:3d:28:16:06:2e:3c:f2: ac:df:fa:e5:b1:11:d3:a8:1a:c1:92:d2:f5:2c:ba: dd:7b:ae:21:bb:23:18:72:23:f1:28:12:19:27:27: ae:9a:6a:8d:28:6d:2b:50:2f:9c:8c:ad:21:1b:f4: ec:08:b4:6f:ae:3a:e1:23:60:60:f3:b8:ae:33:94: 22:cd:57:f8:ca:d0:5f:c0:b6:17:b0:b7:0c:4a:27: ac:db:89:fc:5a:e3:22:07:94:15:dd:c5:ce:d1:eb: 04:e6:a8:a5:09:a0:d2:da:7e:ea:72:8e:50:f4:10: ff:44:c0:41:b5:bd:12:20:22:be:0d:89:fb:ab:39: 18:7e:5d:09:23:29:a5:b4:b3:55:4f:a0:68:db:04: 8b:f1:24:0b:20:e1:62:4e:ef:b7:4b:00:b4:0c:bf: 99:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:87:DA:B3:C6:8E:73:6F:77:D7:9A:1B:87:94:68:C5:18:79:9B:8F X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:0e:47:bb:3a:c9:3e:ef:12:9e:d9:37:63:a3:54:07:23:15: cc:e1:d1:8b:1d:7e:a2:79:a2:27:71:bf:db:51:8c:7f:39:99: 65:0a:f0:45:ba:c2:d0:01:20:4e:7c:28:a1:8b:59:a8:9c:7f: ad:2b:07:37:f1:9a:a4:fe:03:81:e9:06:43:12:0d:0d:ae:98: b0:43:6c:b8:71:9b:a1:e0:c8:02:cc:ba:4c:bc:85:19:38:60: 9a:1e:ce:f0:49:fd:80:73:fc:44:6a:7d:60:72:f4:58:92:7d: ca:2f:83:f1:96:b7:ef:f8:44:e2:97:c2:62:e2:db:9c:7e:fe: 79:f8:ee:9a:3c:2d:bf:e9:ac:b4:de:4e:59:8b:0b:6a:d4:39: 6b:9f:5f:e0:a6:7e:1d:56:b8:2e:07:43:2d:dc:9f:8d:bb:f4: 4d:6a:de:9e:13:32:53:e4:22:0a:37:7c:6c:89:4f:3d:38:f2: 3a:f3:3c:23:1f:1f:9d:7d:f5:6d:da:8f:87:d6:7a:1a:eb:5f: aa:37:01:6c:f2:3e:71:bd:2a:4d:b5:6e:28:96:13:05:34:bb: 26:46:6b:51:b4:6c:95:ec:e9:91:f9:76:51:c7:4d:db:b8:e4: 9c:34:86:10:2f:7e:48:e5:db:22:e8:64:1d:b9:74:19:8b:85: bd:c1:d4:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjUwNDI0MTkzMDAwWhcNMjUwNTAxMTkzMDAwWjAYMRYwFAYD VQQDEw02ODBhOTEzOC05NTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0T2itWF75tuN3nbNz3BDVLtwW4/Ca3BQJLMmfAGGBMi6sX2uUq9hYwxUiir KRgYKC1o1X6mg46Sqd3vAZ8djcv/zsiMsK37zFDwnq74N/MFnbZM4pBaBikGWANt HQKjcz0oFgYuPPKs3/rlsRHTqBrBktL1LLrde64huyMYciPxKBIZJyeummqNKG0r UC+cjK0hG/TsCLRvrjrhI2Bg87iuM5QizVf4ytBfwLYXsLcMSies24n8WuMiB5QV 3cXO0esE5qilCaDS2n7qco5Q9BD/RMBBtb0SICK+DYn7qzkYfl0JIymltLNVT6Bo 2wSL8SQLIOFiTu+3SwC0DL+ZewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGH2rPG jnNvd9eaG4eUaMUYeZuPMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg3NS82RDkxQUFCQzU5MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tv N1I4UTNvUm1MbFVqOVZ6STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Dke7Osk+7xKe2Tdjo1QHIxXM4dGLHX6ieaIncb/bUYx/OZllCvBF usLQASBOfCihi1monH+tKwc38Zqk/gOB6QZDEg0NrpiwQ2y4cZuh4MgCzLpMvIUZ OGCaHs7wSf2Ac/xEan1gcvRYkn3KL4Pxlrfv+ETil8Ji4tucfv55+O6aPC2/6ay0 3k5Ziwtq1Dlrn1/gpn4dVrguB0Mt3J+Nu/RNat6eEzJT5CIKN3xsiU89OPI68zwj Hx+dffVt2o+H1noa61+qNwFs8j5xvSpNtW4olhMFNLsmRmtRtGyV7OmR+XZRx03b uOScNIYQL35I5dsi6GQduXQZi4W9wdQk -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:31 2025 by rpki-client