$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft File: XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json) Hash identifier: x8XT0sofpjn76m4pjNohv2TCdwwMtdLgkzz+vkScPfI= Subject key identifier: 40:C8:0F:2D:7D:EC:D4:9E:EC:E4:E3:B4:6D:62:B6:02:C2:D7:EB:27 Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Certificate serial: 12AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft Manifest number: 475E Signing time: Thu 24 Apr 2025 14:20:55 +0000 Manifest this update: Thu 24 Apr 2025 14:20:55 +0000 Manifest next update: Thu 01 May 2025 14:20:55 +0000 Files and hashes: 1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: 8vovjhrqiqviHb8sOtuJD21mUIYsu+XLO5xTYm2A608=) 2: C5FA430E179711EDB9008D18C4F9AE02.roa (hash: GHnN7IPBztwTSkz/5T1Pzn2mpFjuZRSGTdYW2a+IpUM=) 3: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: idks1lefYLO6nPenvXoGS0zMdLXoYOwMfOiIKkDlkB8=) 4: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: gZAAhBS7lDX/ARKaEp+quX+YnSdkN0XwL2ShlYH1ilM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4779 (0x12ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Validity Not Before: Apr 24 14:20:55 2025 GMT Not After : May 1 14:20:55 2025 GMT Subject: CN=680a48c7-b1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:26:25:2d:3f:91:49:25:ad:47:38:33:3c:f2: 66:d5:92:88:bf:0a:a8:b7:ba:96:d4:7b:e3:cc:ff: de:81:e2:c5:5c:6e:90:f2:77:74:36:1c:31:58:29: 8b:30:b8:b3:4f:1a:72:20:a0:89:9c:02:85:dc:d0: 9b:65:84:b6:91:70:7e:0b:fc:32:8a:5e:b9:7c:6d: 79:d4:a6:0c:a1:16:62:7f:58:91:26:62:5f:b4:4b: 0c:f8:8f:1b:5b:83:c9:07:fa:4a:fb:e9:11:92:21: 3d:6b:e6:39:4c:11:59:67:0d:35:f8:30:c9:79:2b: 3f:d4:ad:11:77:b3:65:5b:e9:4b:8f:ed:2b:ad:e0: 03:fc:df:e5:45:f1:0d:e4:a6:d7:76:f8:cf:17:45: 94:08:b6:b9:4d:51:13:4d:c6:36:f4:cd:94:68:b2: ce:c5:60:b2:84:79:91:b7:b6:a3:ab:a3:e7:35:38: 75:eb:0d:76:1d:04:92:77:0e:a6:e3:fc:d9:cd:84: 9a:0e:f1:bd:ed:ad:a6:63:1d:4a:ce:aa:5b:9b:81: fb:75:da:34:8c:66:3c:d8:a6:76:d2:73:57:57:66: 6e:f1:4c:3b:a4:a3:50:2d:b7:8e:22:27:97:65:b4: 2b:77:2c:18:21:93:97:ef:ef:9a:8a:93:5f:18:46: 5b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C8:0F:2D:7D:EC:D4:9E:EC:E4:E3:B4:6D:62:B6:02:C2:D7:EB:27 X509v3 Authority Key Identifier: keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:32:d2:95:6d:e1:2b:1d:d3:7a:16:88:14:0e:f1:97:b0:8c: 3d:8f:cc:da:76:91:bb:ad:4b:5f:43:8d:02:40:61:ea:5c:d6: a9:02:fb:8d:a9:73:51:64:bb:e7:ea:51:46:78:e1:20:ee:c6: 21:5b:9d:14:9a:77:b4:f3:68:51:cf:7d:6d:7a:8c:d8:d8:0a: fe:eb:7a:95:12:2d:e9:9a:85:13:ce:52:41:71:8b:a9:ce:cd: b5:89:74:3a:e4:52:56:34:45:75:3e:d6:31:84:ae:d0:b9:a0: 08:bf:dd:f2:53:68:5f:4a:46:1e:36:04:6a:cb:f8:23:37:0f: 9f:0c:1f:0f:94:a1:8b:c0:a8:ef:90:c5:35:d9:f7:87:3a:ee: ce:d9:0e:e2:14:85:0c:dc:96:b5:97:df:84:5a:cd:08:39:ce: 55:fd:6b:61:ad:e8:47:11:4b:78:1c:81:aa:d8:1f:f6:0b:cc: 68:a3:1e:dd:48:b5:b8:00:0d:25:89:60:b1:92:d8:81:36:6a: f4:2a:c8:fd:18:95:fc:2c:72:b3:de:71:f1:00:61:fd:ac:bc: d7:f4:e9:d5:df:03:2f:75:7e:f1:ea:95:66:10:63:06:90:c9: 2f:8b:f3:a0:07:e2:0b:eb:4d:e6:b0:92:e8:75:4a:bc:e5:09: ed:94:bb:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDVFNTEwOUJFMzRCODFDMENCQkUwRTQzNTlBNzc4MUE0 NjI0QjlGQ0QwHhcNMjUwNDI0MTQyMDU1WhcNMjUwNTAxMTQyMDU1WjAYMRYwFAYD VQQDEw02ODBhNDhjNy1iMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iYlLT+RSSWtRzgzPPJm1ZKIvwqot7qW1HvjzP/egeLFXG6Q8nd0NhwxWCmL MLizTxpyIKCJnAKF3NCbZYS2kXB+C/wyil65fG151KYMoRZif1iRJmJftEsM+I8b W4PJB/pK++kRkiE9a+Y5TBFZZw01+DDJeSs/1K0Rd7NlW+lLj+0rreAD/N/lRfEN 5KbXdvjPF0WUCLa5TVETTcY29M2UaLLOxWCyhHmRt7ajq6PnNTh16w12HQSSdw6m 4/zZzYSaDvG97a2mYx1Kzqpbm4H7ddo0jGY82KZ20nNXV2Zu8Uw7pKNQLbeOIieX ZbQrdywYIZOX7++aipNfGEZbiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDIDy19 7NSe7OTjtG1itgLC1+snMB8GA1UdIwQYMBaAFF5RCb40uBwMu+DkNZp3gaRiS5/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhBeTc0T1ExbW5lQnBHSkxu ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hsRUp2alM0SEF5NzRPUTFtbmVCcEdKTG44MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhB eTc0T1ExbW5lQnBHSkxuODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACMtKVbeErHdN6FogUDvGXsIw9j8zadpG7rUtfQ40CQGHqXNapAvuN qXNRZLvn6lFGeOEg7sYhW50Umne082hRz31teozY2Ar+63qVEi3pmoUTzlJBcYup zs21iXQ65FJWNEV1PtYxhK7QuaAIv93yU2hfSkYeNgRqy/gjNw+fDB8PlKGLwKjv kMU12feHOu7O2Q7iFIUM3Ja1l9+EWs0IOc5V/WthrehHEUt4HIGq2B/2C8xoox7d SLW4AA0liWCxktiBNmr0Ksj9GJX8LHKz3nHxAGH9rLzX9OnV3wMvdX7x6pVmEGMG kMkvi/OgB+IL603msJLodUq85QntlLuO -----END CERTIFICATE-----Generated at Sat Apr 26 09:30:37 2025 by rpki-client