$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft File: xVznjEX0hWCLgkNgYAPYCooWzNY.mft (raw, json) Hash identifier: /aHnaX115AGXY0x5bTa3JG4WQ2j8qCbwxGvJn4WhhP4= Subject key identifier: 24:58:14:6B:20:C6:7E:0A:B6:CB:4E:FF:6A:1E:89:00:E6:FD:E1:7B Authority key identifier: C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6 Certificate issuer: /CN=A91E6E96/serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6 Certificate serial: 048A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft Manifest number: 0486 Signing time: Thu 24 Apr 2025 23:49:08 +0000 Manifest this update: Thu 24 Apr 2025 23:49:08 +0000 Manifest next update: Thu 01 May 2025 23:49:08 +0000 Files and hashes: 1: xVznjEX0hWCLgkNgYAPYCooWzNY.crl (hash: iOawiffJR58P0xsb2iIBFK4CTmlfZmPZOoj3K2RObRg=) 2: 64DE26F6386011EC83DC2E23C4F9AE02.roa (hash: U5GEFoFbAoED1KEx2xWUb5hktSCjTMeSRDs24OHWcTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6E96, serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6 Validity Not Before: Apr 24 23:49:08 2025 GMT Not After : May 1 23:49:08 2025 GMT Subject: CN=680acdf4-1b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:09:70:a7:69:0a:14:27:a7:e8:d1:a3:9f:99: 41:46:3a:8a:26:10:e4:7e:12:bc:09:9f:0c:ad:ed: 8c:79:f1:24:ce:77:c1:d0:44:bb:d5:cb:1f:58:e5: fd:a8:b0:b4:52:c3:31:c0:21:73:c3:3f:cb:70:71: a8:1c:8e:a9:72:b5:ea:29:07:2b:3f:03:01:0c:a7: b7:f5:cb:88:68:45:da:04:2b:f8:31:89:24:10:97: 39:9b:3a:59:2e:08:f9:4a:39:e8:23:7c:44:e5:3a: a6:1b:d5:bf:1a:9e:d2:14:39:3a:ad:f3:79:f4:03: 4b:b8:3b:8f:3e:67:2f:c6:c5:43:20:68:69:b0:ba: d0:ff:39:26:c1:46:2c:6c:a4:5b:27:e9:15:0e:64: 87:2a:c1:af:89:72:3c:a3:bf:84:e0:b3:f8:0f:48: 22:06:23:e0:76:39:cb:6e:d8:66:9c:ef:bf:52:4e: 2d:b8:9a:56:31:0e:8d:87:0c:22:a1:33:40:aa:54: 0f:72:32:b7:c7:38:39:17:19:d2:bb:f0:29:f9:3b: 8d:6a:1d:a4:e7:17:8a:ac:2f:c3:92:9c:7c:14:2b: 8e:a8:50:3b:68:38:bd:37:84:7a:b1:cb:f0:47:8c: 07:e7:51:c9:45:e7:e4:7c:01:29:75:ab:fe:c6:f6: cf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:58:14:6B:20:C6:7E:0A:B6:CB:4E:FF:6A:1E:89:00:E6:FD:E1:7B X509v3 Authority Key Identifier: keyid:C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:18:ba:fa:12:0b:e7:6b:ef:1e:4e:af:7e:2c:0f:5f:e5:c9: bf:f1:cf:de:8e:a7:05:7b:27:83:d5:77:d3:81:e1:c5:84:04: 3c:f1:d7:77:b2:51:ff:1a:69:ec:4a:8e:74:70:d9:ad:dd:58: c1:21:ab:6d:25:03:c6:bf:2f:7a:f5:c9:5d:e7:28:d3:56:31: c7:43:f5:7e:bc:07:bf:f0:78:28:b9:53:0c:e5:57:39:bb:b6: 0e:96:b8:8e:1e:ef:33:e4:48:de:2c:ca:1b:3c:eb:8d:8c:39: f7:4f:b7:c2:c7:eb:00:76:49:32:b8:a2:87:9b:84:1c:76:10: fa:b4:22:8d:df:fe:8b:73:67:bd:6b:27:6f:51:73:35:7a:ac: f8:04:7f:30:3e:11:5d:8f:80:6a:2f:75:b1:16:cb:d8:03:79: 7e:5b:d4:b6:17:16:ff:f3:20:39:54:eb:29:12:c5:c7:57:4f: b7:30:3e:5c:5b:f1:2a:9d:41:ad:2e:c5:46:31:3b:b7:d5:8c: fb:56:ea:e6:4f:56:0f:bc:f8:89:d2:bc:db:80:d2:60:cb:7e: ff:3a:06:12:f8:b5:ac:21:f8:ba:ea:9c:05:44:d6:a1:da:bb: 8e:fd:25:05:51:0c:ac:43:dd:70:9a:fa:5c:78:58:34:7c:2e: c6:bc:64:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFOTYxMTAvBgNVBAUTKEM1NUNFNzhDNDVGNDg1NjA4QjgyNDM2MDYwMDNEODBB OEExNkNDRDYwHhcNMjUwNDI0MjM0OTA4WhcNMjUwNTAxMjM0OTA4WjAYMRYwFAYD VQQDEw02ODBhY2RmNC0xYjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwlwp2kKFCen6NGjn5lBRjqKJhDkfhK8CZ8Mre2MefEkznfB0ES71csfWOX9 qLC0UsMxwCFzwz/LcHGoHI6pcrXqKQcrPwMBDKe39cuIaEXaBCv4MYkkEJc5mzpZ Lgj5SjnoI3xE5TqmG9W/Gp7SFDk6rfN59ANLuDuPPmcvxsVDIGhpsLrQ/zkmwUYs bKRbJ+kVDmSHKsGviXI8o7+E4LP4D0giBiPgdjnLbthmnO+/Uk4tuJpWMQ6Nhwwi oTNAqlQPcjK3xzg5FxnSu/Ap+TuNah2k5xeKrC/Dkpx8FCuOqFA7aDi9N4R6scvw R4wH51HJRefkfAEpdav+xvbPfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRYFGsg xn4KtstO/2oeiQDm/eF7MB8GA1UdIwQYMBaAFMVc54xF9IVgi4JDYGAD2AqKFszW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkU5Ni83QjlEM0RFQTM4 NUMxMUVDOUMyNTg3NzhDNEY5QUUwMi94VnpuakVYMGhXQ0xna05nWUFQWUNvb1d6 TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hWem5qRVgwaFdDTGdrTmdZQVBZQ29vV3pOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkU5Ni83QjlEM0RFQTM4NUMxMUVDOUMyNTg3NzhDNEY5QUUwMi94VnpuakVYMGhX Q0xna05nWUFQWUNvb1d6TlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLGLr6Egvna+8eTq9+LA9f5cm/8c/ejqcFeyeD1XfTgeHFhAQ88dd3 slH/GmnsSo50cNmt3VjBIattJQPGvy969cld5yjTVjHHQ/V+vAe/8HgouVMM5Vc5 u7YOlriOHu8z5EjeLMobPOuNjDn3T7fCx+sAdkkyuKKHm4QcdhD6tCKN3/6Lc2e9 aydvUXM1eqz4BH8wPhFdj4BqL3WxFsvYA3l+W9S2Fxb/8yA5VOspEsXHV0+3MD5c W/EqnUGtLsVGMTu31Yz7VurmT1YPvPiJ0rzbgNJgy37/OgYS+LWsIfi66pwFRNah 2ruO/SUFUQysQ91wmvpceFg0fC7GvGS8 -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:24 2025 by rpki-client