$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft File: XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft (raw, json) Hash identifier: 8E+eAGluibC0MU/qMe1QWp8yBtwvKD+1v0+lrzd0TyA= Subject key identifier: 76:3F:68:F7:4D:01:D4:D1:B3:25:43:CB:0D:BC:85:3B:15:F9:AD:26 Authority key identifier: 5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F Certificate issuer: /CN=A91F0C73/serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F Certificate serial: 02B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft Manifest number: 02B2 Signing time: Fri 25 Apr 2025 01:14:08 +0000 Manifest this update: Fri 25 Apr 2025 01:14:08 +0000 Manifest next update: Fri 02 May 2025 01:14:08 +0000 Files and hashes: 1: XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl (hash: oJrCm/txQWmCA57gMh8eimx8SpcCeUTpJr8j6jNbpyE=) 2: FA3FF1D4F13D11EC9B673A2AC4F9AE02.roa (hash: cUJGyZcVowcCyXH2QiojzhWnaBYy0l9+HvH8D9IR1zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C73, serialNumber=5E709949BAA40A7D47D44D211690B377E051C45F Validity Not Before: Apr 25 01:14:08 2025 GMT Not After : May 2 01:14:08 2025 GMT Subject: CN=680ae1e0-e9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:b1:67:5c:67:0d:ab:2a:14:7a:35:39:ae: d2:84:b8:fa:52:ed:6c:58:58:3e:3b:f6:1a:7c:9f: 61:79:23:96:fc:f7:b2:76:6f:5f:f3:00:b5:9b:3f: 92:56:06:33:ab:f9:c2:fd:2f:80:d9:dc:5d:22:0c: 09:80:4f:80:e4:34:8a:57:01:94:49:74:80:9a:3d: 74:0a:c6:1e:2d:f5:8e:84:ec:c1:47:da:3b:61:01: bd:4d:c8:1b:2d:fb:03:93:40:51:86:ae:c8:df:89: 49:3d:31:c1:9b:02:3f:d9:6a:76:a1:93:44:43:06: 91:5e:29:40:41:ea:ca:04:6f:e5:46:32:53:5e:ef: bb:45:1a:a4:b2:b2:27:9c:4a:16:02:24:3e:9f:33: c9:9c:98:4e:b2:d0:d2:69:1b:eb:db:e1:e2:fa:37: 03:b0:9f:27:d4:e9:ea:d3:2b:ba:51:6e:01:c8:78: 9e:93:f8:9a:7c:7c:45:f2:d9:75:67:a2:eb:49:df: d6:95:9a:a0:b0:20:bb:b9:d1:4b:16:93:f1:7b:02: a6:bd:2c:0a:83:5e:b4:7d:fa:38:47:c5:00:c8:1b: 36:49:0b:62:77:a1:c0:97:8d:3c:e1:34:e9:7d:d9: 01:aa:cf:6d:4d:12:ee:ff:8c:6e:8d:46:2c:7c:b8: c5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3F:68:F7:4D:01:D4:D1:B3:25:43:CB:0D:BC:85:3B:15:F9:AD:26 X509v3 Authority Key Identifier: keyid:5E:70:99:49:BA:A4:0A:7D:47:D4:4D:21:16:90:B3:77:E0:51:C4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnCZSbqkCn1H1E0hFpCzd-BRxF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C73/821457D2F13711EC97F74F0CC4F9AE02/XnCZSbqkCn1H1E0hFpCzd-BRxF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ab:3f:9f:45:b3:eb:85:1f:36:da:ce:a5:56:b1:6d:70:74: 1e:29:c1:8d:96:92:0b:bd:17:73:07:63:84:f8:38:c0:dd:41: 35:0a:c7:cc:b0:56:08:28:15:28:22:9b:9d:53:30:35:c5:20: d3:5d:4c:34:b1:07:5c:48:c7:18:91:a1:ae:62:8b:e3:b6:8f: 0d:a7:3b:40:ab:77:82:d7:3d:ab:9a:7a:a9:1d:55:36:bc:3e: 5e:db:92:a8:a0:b2:f6:76:9f:99:ea:8f:e4:73:e2:00:78:be: 43:e8:71:ba:d0:f6:63:85:f6:e5:ce:dc:1d:28:6c:80:b6:2c: 77:e6:18:3e:45:a1:83:82:b5:2a:78:1c:af:33:bc:fb:5c:16: 72:b9:b5:51:c2:5e:09:e1:fd:72:1c:04:b8:39:87:fb:8c:9f: 16:bc:ff:61:2c:99:b3:ff:2a:d7:11:bd:8f:be:3a:cc:43:d4: 11:55:a2:6a:99:e8:71:f4:eb:7d:55:4f:59:7f:a5:d6:b4:18: 11:b5:f1:97:50:52:9d:10:50:aa:22:6c:cf:b7:55:be:71:be: 77:3c:b1:a9:4a:7d:16:98:f2:83:c1:c0:77:2a:2a:5c:2a:23: b4:c8:ac:39:54:7a:4d:17:db:a0:e9:ef:ab:08:55:a8:b1:12: 7a:8d:f4:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNzMxMTAvBgNVBAUTKDVFNzA5OTQ5QkFBNDBBN0Q0N0Q0NEQyMTE2OTBCMzc3 RTA1MUM0NUYwHhcNMjUwNDI1MDExNDA4WhcNMjUwNTAyMDExNDA4WjAYMRYwFAYD VQQDEw02ODBhZTFlMC1lOWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1yxZ1xnDasqFHo1Oa7ShLj6Uu1sWFg+O/YafJ9heSOW/Peydm9f8wC1mz+S VgYzq/nC/S+A2dxdIgwJgE+A5DSKVwGUSXSAmj10CsYeLfWOhOzBR9o7YQG9Tcgb LfsDk0BRhq7I34lJPTHBmwI/2Wp2oZNEQwaRXilAQerKBG/lRjJTXu+7RRqksrIn nEoWAiQ+nzPJnJhOstDSaRvr2+Hi+jcDsJ8n1Onq0yu6UW4ByHiek/iafHxF8tl1 Z6LrSd/WlZqgsCC7udFLFpPxewKmvSwKg160ffo4R8UAyBs2SQtid6HAl4084TTp fdkBqs9tTRLu/4xujUYsfLjFjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHY/aPdN AdTRsyVDyw28hTsV+a0mMB8GA1UdIwQYMBaAFF5wmUm6pAp9R9RNIRaQs3fgUcRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM3My84MjE0NTdEMkYx MzcxMUVDOTdGNzRGMENDNEY5QUUwMi9YbkNaU2Jxa0NuMUgxRTBoRnBDemQtQlJ4 RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huQ1pTYnFrQ24xSDFFMGhGcEN6ZC1CUnhGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM3My84MjE0NTdEMkYxMzcxMUVDOTdGNzRGMENDNEY5QUUwMi9YbkNaU2Jxa0Nu MUgxRTBoRnBDemQtQlJ4RjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4qz+fRbPrhR822s6lVrFtcHQeKcGNlpILvRdzB2OE+DjA3UE1CsfM sFYIKBUoIpudUzA1xSDTXUw0sQdcSMcYkaGuYovjto8NpztAq3eC1z2rmnqpHVU2 vD5e25KooLL2dp+Z6o/kc+IAeL5D6HG60PZjhfblztwdKGyAtix35hg+RaGDgrUq eByvM7z7XBZyubVRwl4J4f1yHAS4OYf7jJ8WvP9hLJmz/yrXEb2PvjrMQ9QRVaJq mehx9Ot9VU9Zf6XWtBgRtfGXUFKdEFCqImzPt1W+cb53PLGpSn0WmPKDwcB3Kipc KiO0yKw5VHpNF9ug6e+rCFWosRJ6jfRZ -----END CERTIFICATE-----Generated at Sat Apr 26 12:39:34 2025 by rpki-client