$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft File: xHWJli7Q04kmIr5be4vu_ozniKc.mft (raw, json) Hash identifier: iGzI754ArdsQyzckrGn1/U8D0gNtISz040mdbC29r0I= Subject key identifier: 71:7F:2E:A0:9B:F4:E0:54:F7:3C:81:CE:5B:21:84:19:04:1B:69:5B Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft Manifest number: FA Signing time: Sun 11 May 2025 04:08:46 +0000 Manifest this update: Sun 11 May 2025 04:08:46 +0000 Manifest next update: Sun 18 May 2025 04:08:46 +0000 Files and hashes: 1: xHWJli7Q04kmIr5be4vu_ozniKc.crl (hash: 2yDm2WWeGXoi8lmHBz47cIvDJiFiI2xGqSzyZww0MhY=) 2: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (hash: rFJbuDYL88Z9KeNowFp3y8pDODtibJ7P1KjjzQ7u73o=) 3: 8C7D223C2DAB11EF88127264C4F9AE02.roa (hash: qHX8rwWLzYwQ68AYEwJa6sYGgUw03regWlERxMTMTs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7 Validity Not Before: May 11 04:08:46 2025 GMT Not After : May 18 04:08:46 2025 GMT Subject: CN=682022ce-1c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:fc:00:1a:16:ee:16:d3:cb:c4:42:32:0c: f5:b9:fd:eb:99:6c:b0:bc:f3:84:bf:71:bb:42:46: 5d:b6:d8:55:6d:f9:e7:6b:e6:4c:24:eb:04:f0:b7: 7b:9d:a8:6d:df:20:fd:48:ec:f0:4a:d6:60:33:0a: 96:f5:45:1c:c9:eb:0d:f6:9a:b8:75:6b:f4:4a:37: 86:97:c8:90:dc:9e:d1:de:86:5a:9f:52:81:56:08: fd:cb:db:11:45:4c:f1:1c:f2:c3:1e:23:4f:d1:a9: 1e:30:59:85:4b:df:65:ab:da:04:f5:f5:a8:a6:7d: 53:b4:cc:fc:41:8a:a3:9d:86:84:bb:54:5f:91:05: b3:b7:c0:ef:67:51:ae:bf:85:45:8e:51:46:c2:32: 98:a3:d8:31:5a:e6:eb:3f:05:6f:1a:de:d0:5b:c1: a2:4b:2d:16:fb:79:1c:e3:3d:9d:05:6e:54:2d:79: c2:22:f4:fe:9f:3c:71:e9:8b:d9:ad:0d:6e:f8:fd: 2d:e6:a3:57:1f:b7:44:20:5e:63:12:23:08:98:06: a4:94:eb:59:e5:95:f9:47:24:a4:f1:72:e8:74:2d: cf:f4:63:a8:8a:ae:8d:7e:d6:6d:6b:e0:fa:00:05: fa:cc:82:93:81:a8:46:32:6b:e9:28:51:3c:a8:29: 5d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7F:2E:A0:9B:F4:E0:54:F7:3C:81:CE:5B:21:84:19:04:1B:69:5B X509v3 Authority Key Identifier: keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f0:3e:a3:b0:0a:aa:04:bb:51:2e:98:4e:72:a0:f0:b3:f2: 65:05:46:9b:f5:10:66:4a:c6:c1:d9:f2:90:c7:28:b9:0b:f9: a4:b5:1a:92:c1:75:34:67:18:19:e0:41:fc:8e:8c:43:30:71: 82:45:22:86:e2:cb:8f:6d:c9:11:b1:d4:10:06:48:26:a0:2d: 62:0f:14:38:8d:f2:9e:af:d2:47:2a:8e:49:bf:80:fa:cf:b4: 9f:45:7d:b1:0f:9a:82:1f:23:08:64:8a:0e:29:40:06:35:45: 77:65:2c:84:16:fc:8e:14:e1:4d:b4:a3:d7:c4:02:72:73:4a: 23:8d:71:ca:07:fb:2e:55:b7:7b:69:59:f1:a3:24:bf:49:d3: 86:31:cc:f7:ff:46:c6:ee:1b:55:54:6f:81:7f:6e:1b:27:a3: b0:df:af:31:17:53:86:92:57:66:00:e3:2d:2f:bd:f6:64:85: 85:af:a0:a6:a8:ae:88:cb:ed:8d:fb:0b:c2:b7:14:32:a1:05: 6b:00:86:66:7c:2e:5c:ed:ca:fd:c5:16:7f:1f:e5:be:aa:59: 37:d8:65:e9:d6:ee:6c:0d:70:f3:fb:52:00:6e:5f:18:9f:b9: b9:5a:33:20:e1:7e:cd:9c:ed:9c:2c:c2:3c:6e:18:18:c6:fc: 24:b8:ac:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQTYxMTAvBgNVBAUTKEM0NzU4OTk2MkVEMEQzODkyNjIyQkU1QjdCOEJFRUZF OENFNzg4QTcwHhcNMjUwNTExMDQwODQ2WhcNMjUwNTE4MDQwODQ2WjAYMRYwFAYD VQQDEw02ODIwMjJjZS0xYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC/8ABoW7hbTy8RCMgz1uf3rmWywvPOEv3G7QkZdtthVbfnna+ZMJOsE8Ld7 naht3yD9SOzwStZgMwqW9UUcyesN9pq4dWv0SjeGl8iQ3J7R3oZan1KBVgj9y9sR RUzxHPLDHiNP0akeMFmFS99lq9oE9fWopn1TtMz8QYqjnYaEu1RfkQWzt8DvZ1Gu v4VFjlFGwjKYo9gxWubrPwVvGt7QW8GiSy0W+3kc4z2dBW5ULXnCIvT+nzxx6YvZ rQ1u+P0t5qNXH7dEIF5jEiMImAaklOtZ5ZX5RySk8XLodC3P9GOoiq6NftZta+D6 AAX6zIKTgahGMmvpKFE8qCldDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHF/LqCb 9OBU9zyBzlshhBkEG2lbMB8GA1UdIwQYMBaAFMR1iZYu0NOJJiK+W3uL7v6M54in MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNBNi84MDc5NEM5QUMw OEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0a21JcjViZTR2dV9vem5p S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hIV0psaTdRMDRrbUlyNWJlNHZ1X296bmlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNBNi84MDc5NEM5QUMwOEMxMUVFQkQ4MDVCMjRDNEY5QUUwMi94SFdKbGk3UTA0 a21JcjViZTR2dV9vem5pS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB8D6jsAqqBLtRLphOcqDws/JlBUab9RBmSsbB2fKQxyi5C/mktRqS wXU0ZxgZ4EH8joxDMHGCRSKG4suPbckRsdQQBkgmoC1iDxQ4jfKer9JHKo5Jv4D6 z7SfRX2xD5qCHyMIZIoOKUAGNUV3ZSyEFvyOFOFNtKPXxAJyc0ojjXHKB/suVbd7 aVnxoyS/SdOGMcz3/0bG7htVVG+Bf24bJ6Ow368xF1OGkldmAOMtL732ZIWFr6Cm qK6Iy+2N+wvCtxQyoQVrAIZmfC5c7cr9xRZ/H+W+qlk32GXp1u5sDXDz+1IAbl8Y n7m5WjMg4X7NnO2cLMI8bhgYxvwkuKwI -----END CERTIFICATE-----Generated at Sun May 11 16:04:39 2025 by rpki-client