$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: Wcd7am2JjPzlh8T3cLxQl+veXHyDhnOAijD6kwD2rlA= Subject key identifier: 80:E7:E5:59:E9:D0:46:E9:E1:8E:D1:DF:04:DE:10:D2:CD:DD:A7:EF Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: A3 Signing time: Thu 01 May 2025 05:13:17 +0000 Manifest this update: Thu 01 May 2025 05:13:17 +0000 Manifest next update: Thu 08 May 2025 05:13:17 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: mG69yaJ8QxutdLqsHR6yVdzoA+2t8OhzPMBt0EUdLVs=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: syHq3DbE7eogaPpFVFVsQfYoWLCn9NostuRXmVIHm9Y=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 05:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: May 1 05:13:17 2025 GMT Not After : May 8 05:13:17 2025 GMT Subject: CN=681302ed-e5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:dd:02:d0:b6:94:0e:76:14:7a:b8:fc:1e: c9:18:80:31:be:98:a1:db:a9:eb:2f:d6:30:81:23: 73:24:32:73:c5:71:54:f6:f2:fc:e4:0d:78:dd:48: a4:58:8d:75:df:44:77:0d:1a:da:a3:3f:bb:fc:86: 28:c8:00:88:6a:fa:ab:de:bf:53:53:c2:42:18:d3: 40:78:7c:21:04:2d:34:a0:d1:a2:e7:72:95:47:fc: d4:7b:36:c8:95:6f:10:97:5a:3b:32:df:cf:aa:a1: 04:53:ea:ef:58:7c:6b:fa:9d:db:6b:7e:ae:e2:11: 6d:42:c9:38:74:d9:aa:c7:9b:a1:7a:67:cc:c6:b5: a9:53:aa:49:65:d6:1e:8d:43:8e:0e:30:dc:b1:2f: 04:be:a9:30:45:fb:ee:76:2c:c2:e9:19:80:20:a0: aa:b4:5c:6c:e4:8f:43:8c:ab:9b:46:fe:7b:df:45: b4:c0:a4:e1:83:07:aa:a2:7e:b2:09:1b:4e:8c:e5: 7d:4c:28:2e:a6:06:6f:bd:e7:4a:80:5b:da:38:b6: 58:a9:b0:2d:ed:13:af:2a:08:43:84:74:a8:13:84: 0f:06:af:f6:54:e2:a9:b7:a3:75:3d:00:bf:fe:90: f5:73:f9:24:22:23:94:3a:b0:06:be:a6:59:49:42: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E7:E5:59:E9:D0:46:E9:E1:8E:D1:DF:04:DE:10:D2:CD:DD:A7:EF X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:fb:0d:9a:35:94:b9:fd:4f:f4:41:57:1b:ac:2e:f1:d7:00: bc:da:00:a7:f7:71:5e:22:f4:0d:e3:1c:dc:0a:a6:ae:ef:84: c8:21:25:38:f4:55:f5:57:9b:58:a9:fd:d8:b6:3f:ee:71:61: af:24:72:9a:10:b5:f0:f4:e9:cd:f5:aa:77:09:74:40:fc:c3: 78:c8:14:ae:fe:86:47:75:be:a0:2e:55:d6:08:b8:9b:7c:da: 85:13:78:f2:9f:04:d2:c9:59:3a:58:de:1d:48:d6:1b:fb:00: c9:ce:0c:64:ca:80:6a:1c:98:95:9e:f4:01:bf:57:a5:2d:a2: 47:1c:49:29:04:fc:3e:3d:95:42:22:70:95:55:a4:ce:1d:48: 60:9d:b4:91:c8:c0:69:ee:05:79:00:7c:2a:c6:28:40:4d:10: 9f:e2:9c:17:0f:90:4f:fa:d2:f2:03:85:76:d6:6a:de:b8:2f: bd:3a:d5:2b:11:7b:72:4b:db:2e:63:e4:df:ee:85:91:2a:10: 24:37:69:c2:76:d8:09:01:1e:7c:02:e8:13:78:32:c3:46:eb: 7f:d9:32:dc:b6:6b:18:b1:80:06:d7:be:da:e7:7b:27:74:08: 2e:c6:86:6b:93:e5:f5:72:df:82:1d:ea:fa:96:88:56:ab:76: 98:5c:8d:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjUwNTAxMDUxMzE3WhcNMjUwNTA4MDUxMzE3WjAYMRYwFAYD VQQDEw02ODEzMDJlZC1lNWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqAHdAtC2lA52FHq4/B7JGIAxvpih26nrL9YwgSNzJDJzxXFU9vL85A143Uik WI1130R3DRraoz+7/IYoyACIavqr3r9TU8JCGNNAeHwhBC00oNGi53KVR/zUezbI lW8Ql1o7Mt/PqqEEU+rvWHxr+p3ba36u4hFtQsk4dNmqx5uhemfMxrWpU6pJZdYe jUOODjDcsS8EvqkwRfvudizC6RmAIKCqtFxs5I9DjKubRv5730W0wKThgweqon6y CRtOjOV9TCgupgZvvedKgFvaOLZYqbAt7ROvKghDhHSoE4QPBq/2VOKpt6N1PQC/ /pD1c/kkIiOUOrAGvqZZSUJAPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDn5Vnp 0Ebp4Y7R3wTeENLN3afvMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ+w2aNZS5/U/0QVcbrC7x1wC82gCn93FeIvQN4xzcCqau74TIISU4 9FX1V5tYqf3Ytj/ucWGvJHKaELXw9OnN9ap3CXRA/MN4yBSu/oZHdb6gLlXWCLib fNqFE3jynwTSyVk6WN4dSNYb+wDJzgxkyoBqHJiVnvQBv1elLaJHHEkpBPw+PZVC InCVVaTOHUhgnbSRyMBp7gV5AHwqxihATRCf4pwXD5BP+tLyA4V21mreuC+9OtUr EXtyS9suY+Tf7oWRKhAkN2nCdtgJAR58AugTeDLDRut/2TLctmsYsYAG177a53sn dAguxoZrk+X1ct+CHer6lohWq3aYXI3f -----END CERTIFICATE-----Generated at Fri May 2 17:17:06 2025 by rpki-client