$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: PgD2uW5GVPo6nWBz94j/cxxN7u1radH0elcnKTRyF2Q= Subject key identifier: 5A:81:5E:F5:67:EA:1F:B4:80:7D:76:31:C0:02:9A:3C:DF:4E:2B:1D Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 09FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 09C4 Signing time: Thu 24 Apr 2025 19:55:59 +0000 Manifest this update: Thu 24 Apr 2025 19:55:58 +0000 Manifest next update: Thu 01 May 2025 19:55:58 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: Dp9jRoj/RkVbvEQHMeBMJ7ZNb90H83AV3abSwvfPQnY=) 2: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: fT5I6I+PgWW4dacN3a4Ms0RKDB8N3MNCREMj8FDesrg=) 3: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 2Dd7cd8I4OSARGKZ0mccoyZW6iVZIc9ObRTGe4O/Dcc=) 4: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: NOfiYVkjVgVKJdndF7rjEsZWLBXmxcXaA+rDg1JFfcI=) 5: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: eb8Dxmgs1pJ56B+p/g4fWelI2bfJeXR9VvaW0O1EVCY=) 6: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Fh5T2BpUHXj8z7zvCSIDzf9GCkAnUEieH5BE04K3ZeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2554 (0x9fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Apr 24 19:55:58 2025 GMT Not After : May 1 19:55:58 2025 GMT Subject: CN=680a974f-acee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:c5:26:0e:4a:5c:0a:0a:af:f2:10:6d:15: 23:e3:bc:40:57:4d:a7:22:d0:f6:31:7e:bf:79:dd: d3:ad:e7:6a:c4:34:f0:c4:f1:0a:17:ed:c1:b9:c8: 7d:14:51:86:88:9b:55:85:2a:b5:45:49:36:14:b7: d9:0f:e1:16:b5:d2:c4:e5:1c:70:7b:a8:14:38:04: c1:b3:a5:8e:53:6f:7e:02:18:ef:50:f4:b9:56:47: 04:25:f7:64:87:02:48:a5:b5:c3:2f:54:e5:98:37: 28:b9:58:18:24:95:70:c8:6a:00:b7:d5:0b:6b:d6: 83:30:e0:38:50:03:c9:ff:fb:11:d9:5d:23:cd:63: 00:77:c6:bf:d8:74:5e:2b:4a:ec:cb:e2:71:e9:b6: c8:75:17:2b:bc:65:39:62:b4:76:7c:18:65:1a:c3: d9:7a:43:c7:ed:61:19:f7:87:fb:e7:75:56:4a:68: a0:cd:37:1d:f3:23:ae:e2:6f:6c:26:05:07:9b:fa: 62:14:78:ad:92:d5:38:5e:b6:fb:da:6e:cf:44:b6: 78:ca:81:e3:90:ef:61:80:42:97:81:5b:07:53:2d: 1a:fc:22:cb:99:b1:68:db:fd:82:0b:e8:c2:e5:a0: 14:99:bd:cc:36:dc:9b:10:65:fd:c9:49:18:bf:9e: 75:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:81:5E:F5:67:EA:1F:B4:80:7D:76:31:C0:02:9A:3C:DF:4E:2B:1D X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:6a:ef:1d:4d:c6:8e:ce:07:94:4c:be:1f:4e:e0:5b:32:a0: 0d:bc:1f:a1:81:c7:e1:10:d0:da:23:d3:4d:86:81:6c:a1:43: 6b:79:69:67:8a:54:e7:f7:8f:41:2d:d4:e8:d3:12:09:ea:51: 0b:db:00:2d:7a:00:8e:ab:d1:2c:f1:8f:07:a1:3e:22:c6:3d: 26:be:80:e0:d0:5d:75:ba:54:84:1f:37:cd:8f:c6:3b:6e:7b: 56:4b:69:20:ac:2e:e6:a4:e5:4c:28:32:ec:19:31:d9:0e:b5: 03:6f:18:6e:1f:4a:ab:5b:4b:f7:da:bc:cd:29:ea:75:9e:79: d3:7b:c2:c7:b9:f7:0c:4d:96:9f:85:d5:45:ff:79:ad:ea:65: 88:7e:6e:44:7d:23:9b:df:06:c3:8c:ef:06:75:52:82:0d:ea: 00:a3:49:95:de:5f:ad:91:1c:d4:c8:a2:4e:e9:2f:44:de:9e: a2:cf:42:b8:61:6c:c8:42:26:2f:3a:70:05:db:f6:02:f8:41: 61:7a:b7:14:f8:a1:0b:62:e5:a4:c3:91:ed:e4:92:5a:ba:3f: d7:05:75:38:c0:6c:00:0f:0c:a5:6d:ed:44:a9:a0:c3:83:80: b0:a7:41:17:f5:81:b8:44:37:10:fb:26:bb:93:33:4b:c0:d3: 0d:5d:90:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjUwNDI0MTk1NTU4WhcNMjUwNTAxMTk1NTU4WjAYMRYwFAYD VQQDEw02ODBhOTc0Zi1hY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucbFJg5KXAoKr/IQbRUj47xAV02nItD2MX6/ed3TredqxDTwxPEKF+3Buch9 FFGGiJtVhSq1RUk2FLfZD+EWtdLE5Rxwe6gUOATBs6WOU29+AhjvUPS5VkcEJfdk hwJIpbXDL1TlmDcouVgYJJVwyGoAt9ULa9aDMOA4UAPJ//sR2V0jzWMAd8a/2HRe K0rsy+Jx6bbIdRcrvGU5YrR2fBhlGsPZekPH7WEZ94f753VWSmigzTcd8yOu4m9s JgUHm/piFHitktU4Xrb72m7PRLZ4yoHjkO9hgEKXgVsHUy0a/CLLmbFo2/2CC+jC 5aAUmb3MNtybEGX9yUkYv551SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqBXvVn 6h+0gH12McACmjzfTisdMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkau8dTcaOzgeUTL4fTuBbMqANvB+hgcfhENDaI9NNhoFsoUNreWln ilTn949BLdTo0xIJ6lEL2wAtegCOq9Es8Y8HoT4ixj0mvoDg0F11ulSEHzfNj8Y7 bntWS2kgrC7mpOVMKDLsGTHZDrUDbxhuH0qrW0v32rzNKep1nnnTe8LHufcMTZaf hdVF/3mt6mWIfm5EfSOb3wbDjO8GdVKCDeoAo0mV3l+tkRzUyKJO6S9E3p6iz0K4 YWzIQiYvOnAF2/YC+EFhercU+KELYuWkw5Ht5JJauj/XBXU4wGwADwylbe1EqaDD g4Cwp0EX9YG4RDcQ+ya7kzNLwNMNXZAc -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:01 2025 by rpki-client