$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft File: rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft (raw, json) Hash identifier: BRPesC1gFxvfnSaB8GKF62Y0ci6cIdSNpGHAIa7h/pE= Subject key identifier: 82:AF:21:02:BD:CE:52:1A:4A:F0:7B:D3:76:21:96:67:F0:2D:9C:C1 Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 Certificate issuer: /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Certificate serial: 095F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft Manifest number: 0952 Signing time: Thu 24 Apr 2025 20:06:15 +0000 Manifest this update: Thu 24 Apr 2025 20:06:14 +0000 Manifest next update: Thu 01 May 2025 20:06:14 +0000 Files and hashes: 1: rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl (hash: 7fL6bv8gsrekf7oYnETdC1ndRkQVEtOwzE+vH0ncoU0=) 2: 34E183809E5F11EB97709628C4F9AE02.roa (hash: foE9s6/AQfQ6WPOMFTFBf1eqXxlDCuQ9XLb/49LNi4o=) 3: E7F141609E9911EBB4117632C4F9AE02.roa (hash: bPG+JKz2c8qz67QLcdFAZ1OKHiVMuC03ojwfXNaj3R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2399 (0x95f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE735, serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5 Validity Not Before: Apr 24 20:06:14 2025 GMT Not After : May 1 20:06:14 2025 GMT Subject: CN=680a99b6-8560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e0:49:b9:d2:f4:ce:3a:21:87:12:3b:55:75: 3a:61:3d:08:34:d7:99:be:91:d3:6f:8e:69:2a:6a: be:54:2a:10:7b:69:10:37:27:cf:8a:ad:db:9f:22: af:af:10:a8:c4:66:91:f7:ca:d1:aa:4a:58:99:ae: 45:f2:9f:ef:5a:fd:4a:1f:2e:75:3b:11:1a:6f:e6: b6:03:9e:98:45:35:ee:13:fb:44:0d:ab:93:8b:98: 27:b0:51:aa:5d:cb:c8:8d:35:10:4f:e1:35:b0:ce: 5e:40:c8:37:35:08:eb:3f:77:49:be:99:3b:05:12: 4a:e1:16:5a:24:06:18:b0:f1:70:d5:64:27:ca:34: 1b:82:1f:5c:d0:fd:43:32:5a:78:c8:f5:fe:89:3a: 40:07:63:23:70:8b:62:9c:9d:eb:ba:c3:5c:82:f6: a9:37:e4:b8:2d:03:a2:a7:6e:b8:5a:da:7b:b0:ac: 52:4e:ab:05:41:d4:03:83:5a:46:4a:7b:6f:87:56: b1:07:92:21:6e:fc:6e:bd:d2:e3:74:9a:a1:00:b3: 9e:27:c6:79:25:0c:cd:1b:15:0f:90:9f:2d:df:af: 2b:5c:f9:e2:f3:dc:eb:59:b9:ac:e8:a8:60:39:81: 3b:c1:fa:0c:80:c4:59:f8:3f:db:dd:3f:e9:36:47: cd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AF:21:02:BD:CE:52:1A:4A:F0:7B:D3:76:21:96:67:F0:2D:9C:C1 X509v3 Authority Key Identifier: keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:17:21:95:68:ac:f2:06:d7:65:76:68:99:5d:95:49:39:81: e5:93:a9:49:a2:89:c3:3e:c4:47:7f:cf:80:39:49:fb:d3:fd: e5:c7:35:a8:b0:56:e2:31:f1:18:ec:5d:10:b4:eb:43:16:d8: 2b:7b:6a:d7:f7:d8:ab:29:74:0a:5f:72:16:11:50:ab:b3:b6: da:06:1a:84:e1:fb:88:3b:d6:fc:be:47:33:fc:df:a4:6b:4f: 8b:ef:53:d7:dc:45:66:b0:eb:c1:ca:58:2e:a3:e3:03:11:42: f2:43:92:92:26:fb:89:39:a9:a4:f3:5b:6b:88:a9:b0:58:9e: 5f:ba:a5:bc:a6:2c:c5:3b:18:87:7a:fb:e8:f5:e4:08:df:65: 02:48:77:b6:93:66:0f:1c:d9:2c:3d:4d:5b:94:ee:9a:a1:af: 2c:6e:da:ac:e8:5b:1a:4c:7e:5e:de:f0:c3:19:2f:99:f7:7e: 47:7d:e8:da:d0:80:2e:34:a6:92:72:72:c6:80:46:81:ae:0c: 78:d8:73:97:1c:b5:d8:0b:e0:ce:47:1e:cd:6f:c9:66:94:e7: 7a:78:a6:f0:a3:c6:e2:5e:b6:81:42:63:88:19:a1:c3:d2:ab: fd:ba:cd:a6:d4:9f:c4:ee:e3:b5:91:9c:60:94:d8:fa:bc:60: 33:28:55:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU3MzUxMTAvBgNVBAUTKEFENzNBREI5MTQyMTM4NjJFRDhFMTRENzcwNjlGNDc0 RDgzQ0M4RjUwHhcNMjUwNDI0MjAwNjE0WhcNMjUwNTAxMjAwNjE0WjAYMRYwFAYD VQQDEw02ODBhOTliNi04NTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOBJudL0zjohhxI7VXU6YT0INNeZvpHTb45pKmq+VCoQe2kQNyfPiq3bnyKv rxCoxGaR98rRqkpYma5F8p/vWv1KHy51OxEab+a2A56YRTXuE/tEDauTi5gnsFGq XcvIjTUQT+E1sM5eQMg3NQjrP3dJvpk7BRJK4RZaJAYYsPFw1WQnyjQbgh9c0P1D Mlp4yPX+iTpAB2MjcItinJ3rusNcgvapN+S4LQOip264Wtp7sKxSTqsFQdQDg1pG Sntvh1axB5IhbvxuvdLjdJqhALOeJ8Z5JQzNGxUPkJ8t368rXPni89zrWbms6Khg OYE7wfoMgMRZ+D/b3T/pNkfNCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKvIQK9 zlIaSvB703YhlmfwLZzBMB8GA1UdIwQYMBaAFK1zrbkUIThi7Y4U13Bp9HTYPMj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTczNS9FOEU2NjdDQTk0 QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9HTHRqaFRYY0duMGROZzh5 UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYT3R1UlFoT0dMdGpoVFhjR24wZE5nOHlQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTczNS9FOEU2NjdDQTk0QkUxMUVBOTg0RkFENThDNEY5QUUwMi9yWE90dVJRaE9H THRqaFRYY0duMGROZzh5UFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAFyGVaKzyBtdldmiZXZVJOYHlk6lJoonDPsRHf8+AOUn70/3lxzWo sFbiMfEY7F0QtOtDFtgre2rX99irKXQKX3IWEVCrs7baBhqE4fuIO9b8vkcz/N+k a0+L71PX3EVmsOvBylguo+MDEULyQ5KSJvuJOamk81triKmwWJ5fuqW8pizFOxiH evvo9eQI32UCSHe2k2YPHNksPU1blO6aoa8sbtqs6FsaTH5e3vDDGS+Z935Hfeja 0IAuNKaScnLGgEaBrgx42HOXHLXYC+DORx7Nb8lmlOd6eKbwo8biXraBQmOIGaHD 0qv9us2m1J/E7uO1kZxglNj6vGAzKFUz -----END CERTIFICATE-----Generated at Sat Apr 26 04:38:33 2025 by rpki-client