$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft File: xbajYOSK75Kf3CcpbR1S9b9umRY.mft (raw, json) Hash identifier: jvI+QjwZD841vVABCzf1LW4ioUVxsesLLFkywmW6BTw= Subject key identifier: 6D:E4:8D:19:59:4F:B3:BA:79:9F:9A:CA:1F:F0:15:1D:E2:83:A3:59 Authority key identifier: C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16 Certificate issuer: /CN=A91FD088/serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916 Certificate serial: 07AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft Manifest number: 07A3 Signing time: Thu 24 Apr 2025 21:03:29 +0000 Manifest this update: Thu 24 Apr 2025 21:03:28 +0000 Manifest next update: Thu 01 May 2025 21:03:28 +0000 Files and hashes: 1: xbajYOSK75Kf3CcpbR1S9b9umRY.crl (hash: JV0BSj99lyUawUUr6arDlMh7XRnBmdcmBOwcdfK2txU=) 2: 423EA4CC039B11EBB3C1465CC4F9AE02.roa (hash: LsVQKkTp9V5mDiVUJekj0bvUgPf5aQfKDpRqhhkjvWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1962 (0x7aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD088, serialNumber=C5B6A360E48AEF929FDC27296D1D52F5BF6E9916 Validity Not Before: Apr 24 21:03:28 2025 GMT Not After : May 1 21:03:28 2025 GMT Subject: CN=680aa721-b379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c0:e1:60:61:f0:63:ba:03:bc:c9:41:ce:0c: 90:43:69:f9:fb:7b:8f:c4:17:d1:fd:f4:62:46:15: b6:0b:82:7c:ef:e3:0b:0c:66:2b:e2:81:72:b3:75: bd:e3:72:1e:a9:e3:0b:e4:68:10:4b:56:eb:dc:ec: 6f:8e:10:6b:aa:40:b4:63:64:90:d5:91:58:20:69: 6f:ef:0b:a4:3a:b6:85:a7:d4:d0:4f:67:71:5d:f2: eb:ff:5a:19:8e:27:a9:1f:50:3d:b6:d0:9a:43:07: ec:31:d5:36:d8:3a:ff:e1:69:bb:e8:02:c6:f7:93: 94:32:aa:05:61:ac:e9:61:21:2c:00:e4:8f:24:30: 77:d2:17:4f:07:19:7f:16:b2:47:f5:34:6e:76:fc: fd:f6:55:c3:3f:b2:f3:12:3c:6f:6f:ff:46:58:b4: 1e:e7:ad:ad:84:1c:2e:7e:fb:1d:7a:45:a6:7a:50: cd:d5:c4:da:3d:69:c3:45:35:a7:68:41:ba:2f:67: 5b:b3:4e:fb:ca:58:56:94:1c:e5:f7:b7:01:13:0e: da:61:04:b3:69:99:35:cc:c3:ce:37:11:21:c9:b9: 7c:ce:44:f6:3a:de:43:dd:e0:32:68:c7:0f:f9:5c: cd:9d:76:b8:ca:61:36:5f:36:d4:76:0b:ba:6d:33: fc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E4:8D:19:59:4F:B3:BA:79:9F:9A:CA:1F:F0:15:1D:E2:83:A3:59 X509v3 Authority Key Identifier: keyid:C5:B6:A3:60:E4:8A:EF:92:9F:DC:27:29:6D:1D:52:F5:BF:6E:99:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbajYOSK75Kf3CcpbR1S9b9umRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD088/44BA7CA2FD9D11EAA04EB87DC4F9AE02/xbajYOSK75Kf3CcpbR1S9b9umRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:84:cb:51:e8:04:b6:14:ef:6a:99:52:e9:93:34:0d:0e:fb: 7f:df:b1:19:7a:54:40:9b:e4:ba:c7:58:f9:4d:5a:ac:91:0d: ef:dd:43:66:75:6e:09:55:ec:6d:1d:3f:a9:8a:97:43:e7:6d: 2b:93:d4:67:1c:53:2b:8c:d4:24:4d:c0:43:d5:e6:5c:10:75: 70:73:b5:cb:b2:e6:ff:27:77:47:78:2e:40:9c:0b:ab:7a:a1: 07:5b:0d:88:71:85:3b:fb:f9:56:4c:34:c8:16:e7:6d:03:d0: 20:31:9c:f2:ca:26:21:b9:45:74:a8:7b:f5:08:98:c5:c2:b4: 96:e5:7e:d3:56:7f:b7:8a:b7:47:9d:96:d8:1b:95:7a:96:97: 53:fc:2f:2f:91:ef:33:9b:84:a8:71:33:3c:37:bb:14:b2:44: c7:7c:39:29:7d:a7:ac:b4:dc:53:3a:01:cb:4d:e9:d1:2b:d3: e7:f0:28:ff:8f:7b:f1:ca:51:26:71:72:a7:70:c1:35:2b:0a: 27:75:6f:2f:d7:b8:9d:1f:89:95:1a:d6:8c:22:86:2d:0d:f8: 07:6d:c9:a0:6f:97:77:6a:39:b2:ba:2d:d3:2e:b7:0a:90:f9: 3e:5d:de:90:54:80:67:dc:2a:4b:e5:12:d9:5a:52:b4:bf:ed: 5a:9f:96:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQwODgxMTAvBgNVBAUTKEM1QjZBMzYwRTQ4QUVGOTI5RkRDMjcyOTZEMUQ1MkY1 QkY2RTk5MTYwHhcNMjUwNDI0MjEwMzI4WhcNMjUwNTAxMjEwMzI4WjAYMRYwFAYD VQQDEw02ODBhYTcyMS1iMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sDhYGHwY7oDvMlBzgyQQ2n5+3uPxBfR/fRiRhW2C4J87+MLDGYr4oFys3W9 43IeqeML5GgQS1br3OxvjhBrqkC0Y2SQ1ZFYIGlv7wukOraFp9TQT2dxXfLr/1oZ jiepH1A9ttCaQwfsMdU22Dr/4Wm76ALG95OUMqoFYazpYSEsAOSPJDB30hdPBxl/ FrJH9TRudvz99lXDP7LzEjxvb/9GWLQe562thBwufvsdekWmelDN1cTaPWnDRTWn aEG6L2dbs077ylhWlBzl97cBEw7aYQSzaZk1zMPONxEhybl8zkT2Ot5D3eAyaMcP +VzNnXa4ymE2XzbUdgu6bTP88QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3kjRlZ T7O6eZ+ayh/wFR3ig6NZMB8GA1UdIwQYMBaAFMW2o2Dkiu+Sn9wnKW0dUvW/bpkW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDA4OC80NEJBN0NBMkZE OUQxMUVBQTA0RUI4N0RDNEY5QUUwMi94YmFqWU9TSzc1S2YzQ2NwYlIxUzliOXVt UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hiYWpZT1NLNzVLZjNDY3BiUjFTOWI5dW1SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDA4OC80NEJBN0NBMkZEOUQxMUVBQTA0RUI4N0RDNEY5QUUwMi94YmFqWU9TSzc1 S2YzQ2NwYlIxUzliOXVtUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6hMtR6AS2FO9qmVLpkzQNDvt/37EZelRAm+S6x1j5TVqskQ3v3UNm dW4JVextHT+pipdD520rk9RnHFMrjNQkTcBD1eZcEHVwc7XLsub/J3dHeC5AnAur eqEHWw2IcYU7+/lWTDTIFudtA9AgMZzyyiYhuUV0qHv1CJjFwrSW5X7TVn+3irdH nZbYG5V6lpdT/C8vke8zm4SocTM8N7sUskTHfDkpfaestNxTOgHLTenRK9Pn8Cj/ j3vxylEmcXKncME1KwondW8v17idH4mVGtaMIoYtDfgHbcmgb5d3ajmyui3TLrcK kPk+Xd6QVIBn3CpL5RLZWlK0v+1an5YE -----END CERTIFICATE-----Generated at Sat Apr 26 03:36:12 2025 by rpki-client