$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft File: XcAwMzGJiu_bheTZFABriTdr7-E.mft (raw, json) Hash identifier: DAUHwksVj3V2fYjnDUGfoiF5uNtL2W6OyVt00bjk7sc= Subject key identifier: EA:54:39:DC:FC:E5:A8:30:76:03:17:36:31:1A:C1:F5:23:0B:FD:62 Authority key identifier: 5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 Certificate issuer: /CN=A91E7BD4/serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Certificate serial: 0653 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft Manifest number: 064A Signing time: Thu 24 Apr 2025 22:21:36 +0000 Manifest this update: Thu 24 Apr 2025 22:21:35 +0000 Manifest next update: Thu 01 May 2025 22:21:35 +0000 Files and hashes: 1: XcAwMzGJiu_bheTZFABriTdr7-E.crl (hash: 26Nt4Y+LRt0KA04l6KB5uQNj22s1om1H01tnl51XNb0=) 2: 81E3F4ACBBDA11ED8FDB4E45C4F9AE02.roa (hash: zRXwtVciA3XUq61vGPC3fC7y/rZPmZqFfk9/8k9uEj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1619 (0x653) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BD4, serialNumber=5DC0303331898AEFDB85E4D914006B89376BEFE1 Validity Not Before: Apr 24 22:21:35 2025 GMT Not After : May 1 22:21:35 2025 GMT Subject: CN=680ab96f-d95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:ec:50:35:11:2e:8f:c2:c5:2f:d5:3f:d7: a8:2b:8e:c1:a6:30:4a:33:61:3d:6b:54:a9:be:ea: 01:3d:cc:09:02:62:3e:a3:17:18:7f:db:2c:7d:d0: 9d:e1:b8:d7:43:3f:2a:04:3f:5d:5e:71:d2:70:a3: 6c:c9:ee:01:e1:90:06:3c:4b:fa:75:1f:35:31:8b: 92:41:e3:c6:57:1c:e5:61:85:1e:cc:44:d2:26:e6: f0:73:42:47:75:d9:03:f0:f5:d3:01:e1:ca:29:f7: bd:a4:f0:67:dc:3d:c3:79:dd:b3:64:79:74:d3:3a: d4:fb:eb:25:ca:e0:d5:e2:55:da:71:ad:90:f5:90: eb:80:bb:3f:94:45:c7:ae:c2:07:86:c0:d8:8a:70: 55:61:f2:e1:0a:13:51:18:50:8d:43:a7:1e:c7:46: 0f:9f:a1:0a:e7:19:dc:fd:f9:55:34:20:ce:e8:cf: 01:b9:f6:f2:00:55:db:23:ab:c9:a4:72:59:a1:df: d5:5a:b8:bd:47:5c:6c:46:85:62:ed:0e:c7:ef:c6: 04:36:0d:b2:a5:41:5b:9a:2d:9c:c7:0f:ee:65:b2: 01:06:cb:3b:99:88:46:af:eb:a5:e2:be:99:36:9d: 2a:35:14:3b:fd:07:54:1e:43:af:c6:b6:4e:eb:17: d4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:54:39:DC:FC:E5:A8:30:76:03:17:36:31:1A:C1:F5:23:0B:FD:62 X509v3 Authority Key Identifier: keyid:5D:C0:30:33:31:89:8A:EF:DB:85:E4:D9:14:00:6B:89:37:6B:EF:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XcAwMzGJiu_bheTZFABriTdr7-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD4/4E87A46A86B111EBB8BE217CC4F9AE02/XcAwMzGJiu_bheTZFABriTdr7-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f4:de:e1:2f:e9:95:f2:13:e9:46:af:03:80:cd:8a:cb:c9: d0:f8:bb:ac:c4:b4:2e:18:0b:85:2f:cf:fd:e7:f2:7f:a1:b2: 63:cc:0e:5f:e8:26:ff:5b:13:1d:ba:35:cd:ff:f3:97:01:4c: 67:44:a2:65:8f:92:9f:1b:90:54:d9:06:9d:db:91:64:ba:de: 1c:26:08:71:ca:e7:13:ca:ca:af:cd:4b:d8:33:49:3f:54:62: b8:9f:2e:1f:9c:c0:09:09:40:6b:db:2d:5e:61:69:cc:2c:ef: 4f:6c:7e:65:95:7c:33:43:e3:7c:7c:8c:1e:31:c6:8d:0e:5c: 78:16:f4:b1:6f:05:ef:d8:07:ad:90:8a:17:58:d3:d7:94:5e: b8:83:35:14:54:91:ee:79:a4:4c:6c:26:45:92:da:94:3f:0f: 59:1b:ac:53:22:f8:90:ba:87:7e:6a:28:da:81:05:85:8e:f1: f9:1b:84:9b:60:61:31:24:fd:93:84:76:8d:6d:b9:9f:2c:19: 2b:f5:5f:0a:ff:47:ca:67:7e:a6:50:de:52:96:54:ef:74:12: 6d:f2:17:54:a5:43:0c:4b:91:ed:cb:c7:e8:fe:c0:96:9e:01: b5:d0:38:bb:21:c1:2b:85:41:39:a2:01:f0:15:a9:fa:de:5b: b2:73:e6:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCRDQxMTAvBgNVBAUTKDVEQzAzMDMzMzE4OThBRUZEQjg1RTREOTE0MDA2Qjg5 Mzc2QkVGRTEwHhcNMjUwNDI0MjIyMTM1WhcNMjUwNTAxMjIyMTM1WjAYMRYwFAYD VQQDEw02ODBhYjk2Zi1kOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJrsUDURLo/CxS/VP9eoK47BpjBKM2E9a1SpvuoBPcwJAmI+oxcYf9ssfdCd 4bjXQz8qBD9dXnHScKNsye4B4ZAGPEv6dR81MYuSQePGVxzlYYUezETSJubwc0JH ddkD8PXTAeHKKfe9pPBn3D3Ded2zZHl00zrU++slyuDV4lXaca2Q9ZDrgLs/lEXH rsIHhsDYinBVYfLhChNRGFCNQ6cex0YPn6EK5xnc/flVNCDO6M8BufbyAFXbI6vJ pHJZod/VWri9R1xsRoVi7Q7H78YENg2ypUFbmi2cxw/uZbIBBss7mYhGr+ul4r6Z Np0qNRQ7/QdUHkOvxrZO6xfU+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpUOdz8 5agwdgMXNjEawfUjC/1iMB8GA1UdIwQYMBaAFF3AMDMxiYrv24Xk2RQAa4k3a+/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JENC80RTg3QTQ2QTg2 QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1X2JoZVRaRkFCcmlUZHI3 LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjQXdNekdKaXVfYmhlVFpGQUJyaVRkcjctRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JENC80RTg3QTQ2QTg2QjExMUVCQjhCRTIxN0NDNEY5QUUwMi9YY0F3TXpHSml1 X2JoZVRaRkFCcmlUZHI3LUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA99N7hL+mV8hPpRq8DgM2Ky8nQ+LusxLQuGAuFL8/95/J/obJjzA5f 6Cb/WxMdujXN//OXAUxnRKJlj5KfG5BU2Qad25Fkut4cJghxyucTysqvzUvYM0k/ VGK4ny4fnMAJCUBr2y1eYWnMLO9PbH5llXwzQ+N8fIweMcaNDlx4FvSxbwXv2Aet kIoXWNPXlF64gzUUVJHueaRMbCZFktqUPw9ZG6xTIviQuod+aijagQWFjvH5G4Sb YGExJP2ThHaNbbmfLBkr9V8K/0fKZ36mUN5SllTvdBJt8hdUpUMMS5Hty8fo/sCW ngG10Di7IcErhUE5ogHwFan63luyc+ZK -----END CERTIFICATE-----Generated at Sat Apr 26 15:02:53 2025 by rpki-client