$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json) Hash identifier: nFDycwuu6dczXtiLEyER63FSfPLZuiv2DuJbJXJiLGo= Subject key identifier: B6:30:7F:32:54:81:91:D5:95:09:F4:C9:D4:B8:20:CE:A2:99:CF:2C Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft Manifest number: 0455 Signing time: Thu 24 Apr 2025 23:58:00 +0000 Manifest this update: Thu 24 Apr 2025 23:58:00 +0000 Manifest next update: Thu 01 May 2025 23:58:00 +0000 Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: iMuOHA+6+DzaBiFQl9Izz89xS7SvMPzRjQkdR49tKSc=) 2: 11330A4663F611ECB344F979C4F9AE02.roa (hash: EUhD1CogfYx019LqOHk5ZADPXKjO2pURWvfLLk3fqG8=) 3: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: 0C7V986gHLfF3RPO5trmAPFLdLtlvzlCJ3+47YeVJHU=) 4: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: CMOccFw4JW9T0ieBo3En9p6kBriebw6aKjGeEamJ19Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Validity Not Before: Apr 24 23:58:00 2025 GMT Not After : May 1 23:58:00 2025 GMT Subject: CN=680ad008-3bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1b:bd:fe:f0:88:4d:99:97:82:c4:b7:1e:3d: ad:df:cd:40:d2:d8:aa:41:97:de:8c:69:52:af:18: 9b:ae:d8:61:34:e9:ba:de:47:08:ad:cd:2f:23:d6: 54:a3:05:9b:5f:40:0f:0b:44:64:aa:d8:b7:5a:3b: e4:71:cd:8b:3d:b5:26:b3:8f:ba:0c:9f:de:78:c3: 7e:65:17:ca:89:e6:47:4e:20:db:6c:72:2f:26:35: 87:c6:d3:f7:be:c0:40:1d:4f:a2:7d:69:85:e1:36: 80:88:4f:f0:8d:ef:50:5d:41:0e:c0:72:97:14:ba: 9b:11:8b:9e:c2:17:fc:36:e7:b8:48:7e:7c:86:33: 7a:9a:23:7c:f6:d4:71:eb:bd:80:98:df:51:bb:fe: 6c:8c:6c:fb:57:fd:c2:81:c0:40:be:2e:0e:6a:1e: 94:11:1c:a7:11:53:4a:ed:65:c0:8a:7f:c8:3b:64: 75:e1:82:4c:01:bd:16:49:a6:65:86:b9:56:5f:0a: ca:1a:8f:95:3a:13:8f:47:06:eb:bf:45:4d:5a:7d: 96:e5:0e:84:ad:5d:31:3f:18:7a:95:9a:bf:eb:6f: 39:a2:a3:b7:bb:d5:0c:7f:24:77:dc:59:15:92:31: ca:18:52:63:4d:c4:cf:83:3a:21:8f:7f:2d:8b:73: 2d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:30:7F:32:54:81:91:D5:95:09:F4:C9:D4:B8:20:CE:A2:99:CF:2C X509v3 Authority Key Identifier: keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:45:01:d1:50:59:42:03:60:ff:54:5c:81:1f:8f:03:ba:80: 14:b5:ca:84:f8:45:94:2c:b0:ee:0c:a9:5a:25:13:3f:15:e0: 3a:88:04:83:76:37:99:08:64:94:e1:27:8a:8d:9a:25:5f:4b: 64:94:e9:13:cb:94:23:8d:72:cc:9e:1d:e5:ba:70:40:11:ca: 12:67:71:00:f5:25:91:d2:78:a5:33:c6:00:9e:b5:0b:34:88: 43:06:93:2f:d2:bb:c7:2c:b3:7e:71:67:c5:e7:26:8b:48:8f: 6d:83:4f:c6:2c:ca:d2:5a:15:93:7f:25:b6:d6:2b:b7:5a:85: de:51:a2:0f:6c:70:25:82:65:0b:d4:c2:ab:c3:a7:8e:d9:1c: 99:b1:09:bf:33:68:81:60:08:0d:22:95:e6:91:48:91:34:87: 53:82:03:cc:72:3b:f1:03:ab:22:5c:84:48:09:2f:20:09:1e: d6:cc:28:e4:36:e2:ab:b1:8b:2e:be:45:84:6c:f6:be:00:f0: a9:65:2c:9a:84:3d:0b:47:46:e2:c9:83:b1:76:ba:d0:ce:00: 67:0c:10:66:60:33:b7:3b:d0:88:0c:46:8c:75:f6:93:d9:92: 7a:55:f3:5d:f3:04:f6:77:ec:a2:70:db:bf:ab:e8:2c:9b:c6: 1b:d7:a5:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2 OTM4NUU2NTUwHhcNMjUwNDI0MjM1ODAwWhcNMjUwNTAxMjM1ODAwWjAYMRYwFAYD VQQDEw02ODBhZDAwOC0zYmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhu9/vCITZmXgsS3Hj2t381A0tiqQZfejGlSrxibrthhNOm63kcIrc0vI9ZU owWbX0APC0Rkqti3Wjvkcc2LPbUms4+6DJ/eeMN+ZRfKieZHTiDbbHIvJjWHxtP3 vsBAHU+ifWmF4TaAiE/wje9QXUEOwHKXFLqbEYuewhf8Nue4SH58hjN6miN89tRx 672AmN9Ru/5sjGz7V/3CgcBAvi4Oah6UERynEVNK7WXAin/IO2R14YJMAb0WSaZl hrlWXwrKGo+VOhOPRwbrv0VNWn2W5Q6ErV0xPxh6lZq/6285oqO3u9UMfyR33FkV kjHKGFJjTcTPgzohj38ti3MteQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYwfzJU gZHVlQn0ydS4IM6imc8sMB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0 SE1DdmtKa04yZ05wT0Y1bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnRQHRUFlCA2D/VFyBH48DuoAUtcqE+EWULLDuDKlaJRM/FeA6iASD djeZCGSU4SeKjZolX0tklOkTy5QjjXLMnh3lunBAEcoSZ3EA9SWR0nilM8YAnrUL NIhDBpMv0rvHLLN+cWfF5yaLSI9tg0/GLMrSWhWTfyW21iu3WoXeUaIPbHAlgmUL 1MKrw6eO2RyZsQm/M2iBYAgNIpXmkUiRNIdTggPMcjvxA6siXIRICS8gCR7WzCjk NuKrsYsuvkWEbPa+APCpZSyahD0LR0biyYOxdrrQzgBnDBBmYDO3O9CIDEaMdfaT 2ZJ6VfNd8wT2d+yicNu/q+gsm8Yb16XV -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:08 2025 by rpki-client