$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft File: XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft (raw, json) Hash identifier: IZJdLXJs50rvrSldbL0E24tgc3EGok52maK5yXUgdP8= Subject key identifier: 5D:D5:D4:50:6A:D6:3B:15:5F:E1:02:26:46:BF:27:A5:D9:F3:5B:B2 Authority key identifier: 5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 Certificate issuer: /CN=A91E9F89/serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Certificate serial: 0856 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft Manifest number: 0850 Signing time: Thu 24 Apr 2025 20:35:42 +0000 Manifest this update: Thu 24 Apr 2025 20:35:42 +0000 Manifest next update: Thu 01 May 2025 20:35:42 +0000 Files and hashes: 1: XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl (hash: WafYIcqNFb5z280L2Bdt+eVxfFLSY0edLGvF3pDPQWk=) 2: 05B67AF8C6A011EAA70D183FC4F9AE02.roa (hash: 04/HwV26/Fx1bZoGuRdSyRLiYV06aFK5mycaJ+/tqsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2134 (0x856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9F89, serialNumber=5F307E6274AC39E54E99866DABB85C2C9EFD16B1 Validity Not Before: Apr 24 20:35:42 2025 GMT Not After : May 1 20:35:42 2025 GMT Subject: CN=680aa09e-97fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:d7:e3:0b:c2:f3:3b:7b:42:1b:0a:19:58: c2:85:52:fe:28:7d:e8:cf:ec:2e:60:e1:96:22:5b: 7c:5f:8d:f2:67:ef:43:d4:72:c8:fc:c6:25:65:f0: 30:27:37:b6:c6:4d:73:d0:c2:cc:d5:f9:df:e2:13: 09:7e:c8:c0:72:21:07:ad:e1:ec:78:d8:46:05:f1: 69:65:a1:4c:a4:56:7e:48:e1:19:84:c1:b5:c0:7a: 0f:43:4f:92:62:ca:bc:66:49:7b:69:d1:1a:a6:29: 8d:79:fe:17:c0:1b:4d:e0:db:cb:65:3a:cc:ea:c6: 0d:ea:93:af:5a:b8:e0:52:17:be:c3:61:2a:71:ec: 65:38:73:bb:eb:21:8b:a0:2b:23:9b:1e:dc:4a:63: 12:16:55:f9:2a:f3:8c:d2:7f:d4:09:ba:69:0c:0f: 87:e0:32:a3:59:ed:fe:f4:5a:03:8d:a9:2d:6d:2d: 39:33:0d:9c:0c:4d:7d:7d:80:76:16:d8:1b:e8:25: fd:27:44:29:6e:6b:7d:4e:92:2d:9c:50:a5:bc:f8: 45:03:1b:30:41:f2:e3:f3:99:b1:13:c3:7a:72:35: 89:d3:7a:54:9f:14:43:ac:74:c0:91:d0:c1:0f:8d: 1c:eb:cd:bf:74:cb:43:65:66:d0:a9:02:8a:8a:28: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D5:D4:50:6A:D6:3B:15:5F:E1:02:26:46:BF:27:A5:D9:F3:5B:B2 X509v3 Authority Key Identifier: keyid:5F:30:7E:62:74:AC:39:E5:4E:99:86:6D:AB:B8:5C:2C:9E:FD:16:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XzB-YnSsOeVOmYZtq7hcLJ79FrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9F89/5BE74878C69E11EA9BF8A33CC4F9AE02/XzB-YnSsOeVOmYZtq7hcLJ79FrE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7c:ae:46:37:43:0a:7b:87:31:c3:fb:4e:27:36:b2:9b:e0: 66:0f:88:31:dc:f8:07:52:11:e1:55:0a:11:10:2e:81:4f:e7: 48:f2:73:99:10:1e:47:08:1c:05:10:9c:d3:07:82:62:25:fa: bc:6c:dd:b0:11:19:2d:34:cf:16:21:a9:e5:a4:22:eb:bc:82: b8:c6:f8:59:ef:5f:66:c5:82:af:72:8d:c2:ce:ce:37:a1:c7: 75:05:f0:e4:e8:d8:34:bc:01:77:4f:e3:24:7a:ea:56:4a:f3: 19:61:b0:53:1a:fd:f1:9a:ea:a1:38:9c:24:11:dc:f1:d7:39: 24:e9:72:f9:ec:14:6d:a3:3b:cc:c8:b8:2a:1f:e7:bc:da:b2: 78:c0:a9:41:6f:0d:5f:c2:67:73:49:ff:2c:f7:7b:82:88:22: 0a:36:75:6e:f6:1c:11:9b:40:19:59:bb:a3:69:c9:51:35:6a: 37:03:81:3e:8b:2b:7f:9c:7b:7d:1d:72:9d:96:0c:92:c2:08: a1:b6:3a:93:87:85:d2:17:fa:f0:6a:ec:e7:73:9f:5f:70:41: ad:cf:30:44:cc:58:8e:1d:fa:43:16:ee:ea:30:b0:ce:6c:8b: 58:e5:fa:98:a8:0f:20:02:1c:cd:e8:bd:72:3d:17:92:92:8a: 7b:31:f1:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlGODkxMTAvBgNVBAUTKDVGMzA3RTYyNzRBQzM5RTU0RTk5ODY2REFCQjg1QzJD OUVGRDE2QjEwHhcNMjUwNDI0MjAzNTQyWhcNMjUwNTAxMjAzNTQyWjAYMRYwFAYD VQQDEw02ODBhYTA5ZS05N2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwXX4wvC8zt7QhsKGVjChVL+KH3oz+wuYOGWIlt8X43yZ+9D1HLI/MYlZfAw Jze2xk1z0MLM1fnf4hMJfsjAciEHreHseNhGBfFpZaFMpFZ+SOEZhMG1wHoPQ0+S Ysq8Zkl7adEapimNef4XwBtN4NvLZTrM6sYN6pOvWrjgUhe+w2EqcexlOHO76yGL oCsjmx7cSmMSFlX5KvOM0n/UCbppDA+H4DKjWe3+9FoDjaktbS05Mw2cDE19fYB2 Ftgb6CX9J0Qpbmt9TpItnFClvPhFAxswQfLj85mxE8N6cjWJ03pUnxRDrHTAkdDB D40c682/dMtDZWbQqQKKiiht4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3V1FBq 1jsVX+ECJka/J6XZ81uyMB8GA1UdIwQYMBaAFF8wfmJ0rDnlTpmGbau4XCye/Rax MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUY4OS81QkU3NDg3OEM2 OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09lVk9tWVp0cTdoY0xKNzlG ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6Qi1ZblNzT2VWT21ZWnRxN2hjTEo3OUZyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUY4OS81QkU3NDg3OEM2OUUxMUVBOUJGOEEzM0NDNEY5QUUwMi9YekItWW5Tc09l Vk9tWVp0cTdoY0xKNzlGckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6fK5GN0MKe4cxw/tOJzaym+BmD4gx3PgHUhHhVQoREC6BT+dI8nOZ EB5HCBwFEJzTB4JiJfq8bN2wERktNM8WIanlpCLrvIK4xvhZ719mxYKvco3Czs43 ocd1BfDk6Ng0vAF3T+MkeupWSvMZYbBTGv3xmuqhOJwkEdzx1zkk6XL57BRtozvM yLgqH+e82rJ4wKlBbw1fwmdzSf8s93uCiCIKNnVu9hwRm0AZWbujaclRNWo3A4E+ iyt/nHt9HXKdlgySwgihtjqTh4XSF/rwauznc59fcEGtzzBEzFiOHfpDFu7qMLDO bItY5fqYqA8gAhzN6L1yPReSkop7MfFl -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:37 2025 by rpki-client