$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: ftxH8lmGaPIjZIjoQ8YM9P7wy4SxU4cQU6fC8T2BT38= Subject key identifier: 17:F3:10:AF:AB:F9:26:D7:34:4E:69:63:F0:80:B5:B1:54:4F:9F:0D Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 0111 Signing time: Sun 11 May 2025 04:09:41 +0000 Manifest this update: Sun 11 May 2025 04:09:40 +0000 Manifest next update: Sun 18 May 2025 04:09:40 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: xJJgiIsrVxGLuz4sAXnCrUUvAsCiX90jy0qxHfSGxUc=) 2: 295F005C2B4911F09184D156C4F9AE02.roa (hash: qF6XTtFmca/FEh4XqwcAQucotffA6JCFF3lJWhUx5fQ=) 3: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: XfIHm/MhIPSh6jZecIK72twugLDWV563OBM4HVySVuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: May 11 04:09:40 2025 GMT Not After : May 18 04:09:40 2025 GMT Subject: CN=68202305-0aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2d:91:c6:99:cf:e7:16:0f:0a:b1:df:49:49: cc:34:15:d7:33:cb:2c:cd:c9:a7:a5:8c:75:d9:ff: 9d:31:56:6d:5d:1a:9e:90:3e:1c:5f:66:c9:26:2b: c3:c4:cf:d1:e9:fa:7f:8c:d9:da:2b:a9:41:99:59: 94:79:f3:6d:6f:8d:e9:a9:7c:79:90:4f:89:c2:0c: 5b:13:12:d4:0b:b1:63:eb:40:e3:f1:74:91:d5:3b: ca:72:f3:a1:42:a0:d1:07:c0:41:7c:5d:99:a5:94: 2b:6e:c8:89:47:b7:22:8d:57:8c:d9:a1:dd:44:2d: 3f:c4:8c:1b:89:7f:1e:f2:3a:7a:f5:a5:49:fb:65: 67:ea:aa:72:76:66:c9:df:2c:1f:a1:67:77:7f:88: 6f:62:79:90:7c:bf:0d:d4:ee:00:50:1d:bb:30:b1: b7:de:2a:ee:65:c5:7e:84:61:ef:16:ac:89:7f:b7: d1:7f:74:6f:75:45:3a:11:60:5b:23:e0:2d:5a:74: 10:ae:44:2c:e4:d5:25:6b:a2:6c:33:86:d6:2e:1b: f5:cc:fe:10:48:f4:fc:de:7e:40:6d:34:1a:39:a1: b4:44:61:c0:f3:4a:de:ba:fd:7b:b4:da:af:c4:e9: 51:f6:63:bf:09:39:dd:03:f8:70:98:49:a9:ec:71: b2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F3:10:AF:AB:F9:26:D7:34:4E:69:63:F0:80:B5:B1:54:4F:9F:0D X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:47:6f:86:3e:f5:78:b9:86:f7:ed:64:5f:bb:e8:a4:fb:44: a0:70:1e:41:52:2d:f5:17:9a:8a:e8:2f:74:ad:d4:6f:e9:cd: 1f:d7:e4:44:b8:64:bc:86:59:8a:cb:c6:19:35:e0:89:4d:76: cd:21:bb:f9:1e:24:4e:cc:18:e4:61:bf:4e:07:cb:b7:42:92: 76:0c:b7:d1:68:52:52:13:c2:9b:02:ea:5a:94:e4:37:42:05: 82:3a:bc:8f:b9:14:1d:9f:f0:af:0b:d7:a1:03:79:bd:f9:b2: 29:f7:d6:2f:96:4d:b7:5b:14:de:fc:23:dd:b9:c3:c4:3b:44: d1:00:76:86:6f:d3:31:ed:72:4c:67:87:b4:83:29:68:a9:5a: dc:ef:b5:1f:5f:c1:6d:56:1b:18:b7:aa:8b:0c:f6:69:15:63: 74:2a:2b:a6:77:68:a9:cb:a9:d2:e2:49:cc:1f:3d:2a:93:21: 3a:a2:07:28:ee:32:dd:c9:1d:2a:f7:85:07:c3:c2:4c:4a:54: 7a:87:f3:4f:ae:7c:9d:7b:fb:99:ad:6d:29:f3:a7:0e:b9:b7: 30:9e:27:87:64:ce:cf:aa:11:f0:c4:be:3d:d4:04:db:e9:ab: 91:9f:dd:a7:b4:1a:5d:ee:d2:e3:f8:02:64:99:4c:1f:4d:75: e7:a6:88:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjUwNTExMDQwOTQwWhcNMjUwNTE4MDQwOTQwWjAYMRYwFAYD VQQDEw02ODIwMjMwNS0wYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxS2RxpnP5xYPCrHfSUnMNBXXM8sszcmnpYx12f+dMVZtXRqekD4cX2bJJivD xM/R6fp/jNnaK6lBmVmUefNtb43pqXx5kE+JwgxbExLUC7Fj60Dj8XSR1TvKcvOh QqDRB8BBfF2ZpZQrbsiJR7cijVeM2aHdRC0/xIwbiX8e8jp69aVJ+2Vn6qpydmbJ 3ywfoWd3f4hvYnmQfL8N1O4AUB27MLG33iruZcV+hGHvFqyJf7fRf3RvdUU6EWBb I+AtWnQQrkQs5NUla6JsM4bWLhv1zP4QSPT83n5AbTQaOaG0RGHA80reuv17tNqv xOlR9mO/CTndA/hwmEmp7HGy+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfzEK+r +SbXNE5pY/CAtbFUT58NMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiR2+GPvV4uYb37WRfu+ik+0SgcB5BUi31F5qK6C90rdRv6c0f1+RE uGS8hlmKy8YZNeCJTXbNIbv5HiROzBjkYb9OB8u3QpJ2DLfRaFJSE8KbAupalOQ3 QgWCOryPuRQdn/CvC9ehA3m9+bIp99Yvlk23WxTe/CPducPEO0TRAHaGb9Mx7XJM Z4e0gyloqVrc77UfX8FtVhsYt6qLDPZpFWN0Kiumd2ipy6nS4knMHz0qkyE6ogco 7jLdyR0q94UHw8JMSlR6h/NPrnyde/uZrW0p86cOubcwnieHZM7PqhHwxL491ATb 6auRn92ntBpd7tLj+AJkmUwfTXXnpojS -----END CERTIFICATE-----Generated at Mon May 12 07:17:19 2025 by rpki-client