$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft File: xCoYwre3JR8lBvX6J4oWLoRETaY.mft (raw, json) Hash identifier: B2T/O4ddKbnhOQFcYzUGkTCsV6izOTc11+oASWDyLUM= Subject key identifier: 7B:BA:1E:EA:63:53:C0:1F:70:00:7B:97:E1:F1:A3:87:E1:52:DB:F5 Authority key identifier: C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6 Certificate issuer: /CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6 Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft Manifest number: 04A4 Signing time: Mon 12 May 2025 23:46:19 +0000 Manifest this update: Mon 12 May 2025 23:46:18 +0000 Manifest next update: Mon 19 May 2025 23:46:18 +0000 Files and hashes: 1: xCoYwre3JR8lBvX6J4oWLoRETaY.crl (hash: TnoYaEvxIGEmDc8LE/+AzsK+MUW0LaC/drO6sk2R8WI=) 2: 980E2450325111EC93E97C35C4F9AE02.roa (hash: NBcgBUuRK2Oc31nKRp+BExXYFoPfjJAOt1Hb95kMeP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7740, serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6 Validity Not Before: May 12 23:46:18 2025 GMT Not After : May 19 23:46:18 2025 GMT Subject: CN=6822884a-3600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:27:87:ab:8d:24:b5:fe:72:54:a1:4d:c8:ef: 23:c0:ac:0b:50:7b:50:ff:97:e4:5f:3a:e9:a9:ea: 90:fe:9d:31:81:e0:c3:0e:91:37:1c:46:fb:01:3b: e0:a5:75:9d:b3:30:26:46:04:5f:e5:7e:74:e3:0f: d3:f0:56:2c:71:b1:92:74:14:52:14:85:b9:7c:f3: 43:1f:6b:17:8b:3b:3c:c8:7f:d1:43:3c:d0:bd:e8: 26:ae:5a:f6:1a:56:a0:9e:20:a7:71:b5:95:bf:67: 46:74:39:de:0e:da:4c:6f:10:86:44:ba:00:d3:d1: e2:b9:56:89:16:1f:f1:56:6f:59:ee:15:52:04:a0: cb:13:da:37:9b:da:fa:df:2e:1e:a2:1b:f0:ad:63: ef:56:d6:16:4c:bf:91:3a:26:26:61:36:9b:3a:54: 13:9f:21:af:d6:00:13:8d:27:7e:0c:bb:30:eb:4d: 77:84:32:c8:83:d5:7e:1d:18:b3:6d:47:72:d6:eb: 0d:84:7a:b3:f1:c9:72:b4:be:e3:50:c2:71:fa:a8: 69:d5:ce:43:81:f4:56:91:36:58:32:16:12:49:a1: f7:c4:96:86:fb:9b:13:c1:6e:cd:84:e9:be:a5:ef: 75:99:3f:8a:59:dc:cb:f4:fa:45:95:90:e6:60:a3: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BA:1E:EA:63:53:C0:1F:70:00:7B:97:E1:F1:A3:87:E1:52:DB:F5 X509v3 Authority Key Identifier: keyid:C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:e9:a3:f8:b4:1c:85:ca:83:8f:12:60:8d:ed:40:77:72:68: 17:a7:b5:d1:80:3d:6e:7c:1a:20:9d:14:ed:b8:fe:dc:f6:49: ce:44:9b:57:eb:aa:fb:37:00:62:9e:0b:77:85:5c:84:d7:6b: 7d:fa:1d:0a:68:87:f4:72:41:06:fd:70:f7:48:aa:83:06:2f: e1:f1:6d:96:92:da:39:1d:ab:ed:ff:f9:a7:aa:9c:ba:2f:0a: df:f0:a6:07:a3:58:c2:26:b0:7f:7a:3f:df:88:e5:6e:49:1b: 92:7b:8d:34:85:08:8d:59:ef:0b:6e:7d:c9:96:38:a0:0d:cb: 06:5f:32:fe:04:64:81:01:ce:26:64:86:99:4b:93:45:40:03: 14:b0:e9:60:24:cf:ec:de:4d:d9:2c:3f:c6:89:4d:ab:2f:d6: a6:a1:5d:6f:c7:c7:8b:8b:bf:d5:ee:a1:44:22:2c:68:97:d6: 14:0c:d6:8e:4e:df:83:8e:b0:89:89:d0:a7:75:5e:86:09:58: 72:1a:e0:d8:a2:93:4c:47:98:b8:de:76:20:ad:b6:fe:c4:01: 46:28:e2:f4:ec:c6:d3:0f:ab:15:5b:f3:4e:15:d8:7b:1f:e9: 56:e9:37:c0:9c:86:c9:89:17:b0:0a:6b:e4:92:65:db:69:8d: 54:61:d4:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NDAxMTAvBgNVBAUTKEM0MkExOEMyQjdCNzI1MUYyNTA2RjVGQTI3OEExNjJF ODQ0NDREQTYwHhcNMjUwNTEyMjM0NjE4WhcNMjUwNTE5MjM0NjE4WjAYMRYwFAYD VQQDEw02ODIyODg0YS0zNjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ieHq40ktf5yVKFNyO8jwKwLUHtQ/5fkXzrpqeqQ/p0xgeDDDpE3HEb7ATvg pXWdszAmRgRf5X504w/T8FYscbGSdBRSFIW5fPNDH2sXizs8yH/RQzzQvegmrlr2 GlagniCncbWVv2dGdDneDtpMbxCGRLoA09HiuVaJFh/xVm9Z7hVSBKDLE9o3m9r6 3y4eohvwrWPvVtYWTL+ROiYmYTabOlQTnyGv1gATjSd+DLsw6013hDLIg9V+HRiz bUdy1usNhHqz8clytL7jUMJx+qhp1c5DgfRWkTZYMhYSSaH3xJaG+5sTwW7NhOm+ pe91mT+KWdzL9PpFlZDmYKOn3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHu6Hupj U8AfcAB7l+Hxo4fhUtv1MB8GA1UdIwQYMBaAFMQqGMK3tyUfJQb1+ieKFi6ERE2m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc0MC9GM0E3MTlERTMy MzMxMUVDQjJCNDM0NjNDNEY5QUUwMi94Q29Zd3JlM0pSOGxCdlg2SjRvV0xvUkVU YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDb1l3cmUzSlI4bEJ2WDZKNG9XTG9SRVRhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc0MC9GM0E3MTlERTMyMzMxMUVDQjJCNDM0NjNDNEY5QUUwMi94Q29Zd3JlM0pS OGxCdlg2SjRvV0xvUkVUYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB36aP4tByFyoOPEmCN7UB3cmgXp7XRgD1ufBognRTtuP7c9knORJtX 66r7NwBingt3hVyE12t9+h0KaIf0ckEG/XD3SKqDBi/h8W2Wkto5Havt//mnqpy6 Lwrf8KYHo1jCJrB/ej/fiOVuSRuSe400hQiNWe8Lbn3JljigDcsGXzL+BGSBAc4m ZIaZS5NFQAMUsOlgJM/s3k3ZLD/GiU2rL9amoV1vx8eLi7/V7qFEIixol9YUDNaO Tt+DjrCJidCndV6GCVhyGuDYopNMR5i43nYgrbb+xAFGKOL07MbTD6sVW/NOFdh7 H+lW6TfAnIbJiRewCmvkkmXbaY1UYdT4 -----END CERTIFICATE-----Generated at Thu May 15 00:34:28 2025 by rpki-client