$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft File: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft (raw, json) Hash identifier: bP0ZgLoeB/2k8wqWqQAHcG2ZP13xpiJXIRw4t96i6SY= Subject key identifier: 96:DD:3C:DB:BA:E0:89:50:E1:71:D6:85:37:26:A3:BD:8A:F6:7F:10 Authority key identifier: 5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54 Certificate issuer: /CN=A91B4F01/serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154 Certificate serial: 0460 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft Manifest number: 045C Signing time: Thu 08 May 2025 23:57:49 +0000 Manifest this update: Thu 08 May 2025 23:57:49 +0000 Manifest next update: Thu 15 May 2025 23:57:49 +0000 Files and hashes: 1: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl (hash: 7GLMC8WAh2dfpNVyCmqfB9ccmA8fFU+y/6zn56BCs+4=) 2: BD115AB24B7C11ECA63C0038C4F9AE02.roa (hash: IcEuGPt4GTNEbPQpjAanlaif3gO8wRzi48eufGxQr4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 23:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F01, serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154 Validity Not Before: May 8 23:57:49 2025 GMT Not After : May 15 23:57:49 2025 GMT Subject: CN=681d44fd-8559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:5b:d2:a7:31:ff:e3:d0:25:63:80:d0:50: 7f:2b:bb:97:1f:3b:94:6e:4a:bc:8e:19:45:8c:d6: f4:8a:0a:1b:10:97:6d:10:7f:29:49:3c:2b:a7:bc: 98:ca:1d:da:75:af:c8:12:af:1e:02:29:46:bd:94: 24:d5:61:a2:c7:29:d7:16:85:5b:b3:26:7e:87:31: 76:d6:e1:2b:ec:28:d2:ac:7a:be:e7:82:73:af:55: f6:3a:3c:61:35:5c:20:7c:18:4c:58:5e:71:7e:60: 92:26:7d:0d:33:5a:5c:17:e2:f6:c1:b7:a4:51:0a: 85:1b:b6:33:6d:ef:4c:b6:78:82:eb:19:da:8f:88: 05:f5:5f:c7:aa:77:04:bd:26:d0:61:43:11:9f:50: b4:84:76:ce:84:9b:1e:8c:ad:47:82:4b:b2:4e:a1: 5a:97:20:32:22:05:7c:e0:4b:53:ed:2e:78:ef:13: 0e:d2:f7:2c:31:e6:96:f0:ef:df:33:19:cc:05:80: 84:66:f7:82:1d:91:ef:73:6f:fb:f1:49:cd:69:4b: 58:cd:5a:22:ed:f7:ab:7c:03:bc:5d:65:01:f2:d7: 51:d0:21:10:6f:85:c5:03:2e:24:1c:1b:bc:79:11: 66:d5:01:f0:da:7b:39:96:74:bf:ca:cb:e4:49:18: a0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DD:3C:DB:BA:E0:89:50:E1:71:D6:85:37:26:A3:BD:8A:F6:7F:10 X509v3 Authority Key Identifier: keyid:5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:1a:7f:ff:88:7d:62:1c:0e:dd:ba:75:67:7b:9c:26:e7:f3: 04:df:51:7b:88:12:f9:ec:78:16:8d:19:6a:62:3a:e5:df:69: 92:5b:2c:5c:f7:29:db:8f:97:c5:8b:3a:0c:63:a9:31:5a:de: e7:a1:84:4d:ca:2e:5e:19:56:7d:04:a6:db:0d:43:08:eb:99: e6:8c:77:e3:9d:19:ed:29:2b:cf:7f:0f:51:16:a4:8a:5f:2e: 11:87:26:29:30:2d:af:0d:e6:a8:11:24:4e:2e:8d:45:c2:43: 94:6d:41:85:00:6d:53:d4:51:13:c5:5c:f4:18:97:e0:bb:cc: 1a:81:05:e3:6d:b0:8c:b1:d9:0a:43:3c:84:03:11:88:d2:4e: 50:06:60:2f:97:c2:2c:29:fb:e5:8d:29:47:79:24:f4:e0:d5: 5b:4a:4e:61:10:cc:b6:02:cf:42:53:0b:b0:6c:4b:92:a3:17: 0d:18:ee:5c:82:81:de:8f:8a:63:fb:36:7e:8f:94:f1:79:21: bf:6d:b0:60:a8:7b:83:99:f6:84:aa:03:db:b8:fc:de:92:59: a3:8b:c7:8f:f2:48:aa:18:52:33:df:ce:d3:8b:80:91:67:c2: 77:d5:4c:0a:40:0a:4a:c1:64:b3:8a:87:dd:76:2c:43:d3:03: 26:62:bc:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGMDExMTAvBgNVBAUTKDVFQkRBN0ZBQTgwMUM1QTI3NERDMjNEMTcxRjg4QjQ2 QTExRTQxNTQwHhcNMjUwNTA4MjM1NzQ5WhcNMjUwNTE1MjM1NzQ5WjAYMRYwFAYD VQQDEw02ODFkNDRmZC04NTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRFb0qcx/+PQJWOA0FB/K7uXHzuUbkq8jhlFjNb0igobEJdtEH8pSTwrp7yY yh3ada/IEq8eAilGvZQk1WGixynXFoVbsyZ+hzF21uEr7CjSrHq+54Jzr1X2Ojxh NVwgfBhMWF5xfmCSJn0NM1pcF+L2wbekUQqFG7Yzbe9MtniC6xnaj4gF9V/HqncE vSbQYUMRn1C0hHbOhJsejK1HgkuyTqFalyAyIgV84EtT7S547xMO0vcsMeaW8O/f MxnMBYCEZveCHZHvc2/78UnNaUtYzVoi7ferfAO8XWUB8tdR0CEQb4XFAy4kHBu8 eRFm1QHw2ns5lnS/ysvkSRigDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbdPNu6 4IlQ4XHWhTcmo72K9n8QMB8GA1UdIwQYMBaAFF69p/qoAcWidNwj0XH4i0ahHkFU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYwMS9BNzAwQTg0NDRC NzgxMUVDODZFNTBBMzBDNEY5QUUwMi9YcjJuLXFnQnhhSjAzQ1BSY2ZpTFJxRWVR VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hyMm4tcWdCeGFKMDNDUFJjZmlMUnFFZVFWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYwMS9BNzAwQTg0NDRCNzgxMUVDODZFNTBBMzBDNEY5QUUwMi9YcjJuLXFnQnhh SjAzQ1BSY2ZpTFJxRWVRVlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFGn//iH1iHA7dunVne5wm5/ME31F7iBL57HgWjRlqYjrl32mSWyxc 9ynbj5fFizoMY6kxWt7noYRNyi5eGVZ9BKbbDUMI65nmjHfjnRntKSvPfw9RFqSK Xy4RhyYpMC2vDeaoESROLo1FwkOUbUGFAG1T1FETxVz0GJfgu8wagQXjbbCMsdkK QzyEAxGI0k5QBmAvl8IsKfvljSlHeST04NVbSk5hEMy2As9CUwuwbEuSoxcNGO5c goHej4pj+zZ+j5TxeSG/bbBgqHuDmfaEqgPbuPzeklmji8eP8kiqGFIz387Ti4CR Z8J31UwKQApKwWSziofddixD0wMmYryv -----END CERTIFICATE-----Generated at Sat May 10 22:22:16 2025 by rpki-client