$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft File: XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft (raw, json) Hash identifier: /QhzxCYCrrCO+ZcVT16+3W79beB1vyD/t5K/hVQn9eI= Subject key identifier: 25:F7:C4:19:70:FF:04:57:BD:6F:71:5B:74:A0:24:47:BC:39:27:45 Authority key identifier: 5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 Certificate issuer: /CN=A91D0B34/serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Certificate serial: 09D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft Manifest number: 09C7 Signing time: Mon 12 May 2025 19:49:35 +0000 Manifest this update: Mon 12 May 2025 19:49:35 +0000 Manifest next update: Mon 19 May 2025 19:49:35 +0000 Files and hashes: 1: XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl (hash: FFNd7seusg5+/7YPHGSIWuXzHkCcKKjOg8s8x6HuxKY=) 2: 97E61FE46F2111EB85D19531C4F9AE02.roa (hash: QT/K5tGfOd7GalxXyOBi4xKWLa0cvDIyEyK/W9LM+Pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2516 (0x9d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B34, serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Validity Not Before: May 12 19:49:35 2025 GMT Not After : May 19 19:49:35 2025 GMT Subject: CN=682250cf-73e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e4:9b:8b:45:75:05:b5:20:6d:c6:7a:d8:4e: 30:08:e4:c7:4d:0b:96:78:32:78:39:a7:02:b3:e6: 6e:04:a0:f5:5e:62:8a:d3:74:93:44:b8:9c:6b:e1: 8f:9f:aa:46:c7:d4:1b:20:ed:99:b7:de:1b:05:15: 2b:60:64:cf:69:dd:c5:05:9c:96:60:98:87:6f:55: c4:bc:be:8b:a7:f3:d8:0e:08:05:b2:56:05:6a:ee: 02:2a:5e:c6:ce:48:38:d9:c0:45:8b:51:d0:2f:79: 42:77:39:55:40:d2:60:6f:b0:af:fd:d0:01:3c:61: 15:02:b6:96:d8:83:b8:61:44:b2:36:73:1e:f9:6a: 03:97:24:e2:05:8f:67:ea:c6:e5:cd:84:a1:9c:8d: 7d:e7:3b:a0:bb:af:f7:a6:6c:33:e4:cb:1d:2d:99: 48:ff:d7:70:0b:80:7e:4c:f7:2a:bf:74:ed:fb:56: cd:6b:c2:b3:ad:4d:69:da:94:ef:9b:33:62:45:f4: ec:d7:6c:b1:28:b5:a1:8d:1c:34:50:db:65:8b:54: 47:a0:1b:a6:dd:45:5a:89:4c:a8:c3:c7:6e:7d:c9: 5f:13:6e:b6:18:5d:56:e7:6f:46:2e:99:47:68:73: 00:0c:cc:5a:17:ae:ec:07:31:47:10:85:6c:d7:b3: 1f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F7:C4:19:70:FF:04:57:BD:6F:71:5B:74:A0:24:47:BC:39:27:45 X509v3 Authority Key Identifier: keyid:5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:6b:4e:35:a9:b8:4f:c9:87:a5:f0:e3:c2:ac:e1:27:3d:d5: 28:c3:e0:7d:90:56:e1:6b:9b:16:6f:2d:0f:d7:72:06:a7:0b: d1:db:ee:60:ac:bd:b1:73:f8:77:b9:e0:da:3a:a1:e4:04:a8: 20:49:f2:24:b6:aa:4c:38:8b:0c:f2:3e:42:55:0f:1e:16:d7: 14:9a:cf:e6:20:c9:dd:2c:a7:fd:c3:33:b5:74:25:f9:b1:7a: 0b:d1:c9:38:4a:22:e0:21:b7:b5:a7:a7:be:e7:39:8d:33:a4: a6:dc:19:3c:66:28:45:39:51:ea:3b:60:30:c7:ba:a4:b1:19: 5c:3d:2c:81:63:72:84:3d:fe:98:40:7d:e1:da:bc:56:4a:81: 88:fe:1a:0c:fd:d1:ee:c9:32:a1:8c:8f:0f:e3:d6:89:33:43: af:9f:df:9b:6a:ea:8e:6b:71:3c:b5:64:17:6d:de:aa:fb:a0: 80:14:29:79:2f:fc:78:67:41:73:e5:ac:cb:1f:09:67:22:a3: 87:31:e8:f5:ee:70:cf:7d:40:75:d3:f7:26:92:be:36:ff:4b: 05:a9:a4:71:be:c3:0a:ac:ec:fa:aa:0b:77:ee:36:b8:28:88: 1b:d7:94:a0:8e:86:f7:1a:24:40:f1:27:a0:20:3a:54:b2:5f: 73:03:58:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCMzQxMTAvBgNVBAUTKDVERjEwMkUyQTVFNzM2NzcyMUMxMThEQkVDREE2MDJB ODAyOUVFOTQwHhcNMjUwNTEyMTk0OTM1WhcNMjUwNTE5MTk0OTM1WjAYMRYwFAYD VQQDEw02ODIyNTBjZi03M2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OSbi0V1BbUgbcZ62E4wCOTHTQuWeDJ4OacCs+ZuBKD1XmKK03STRLica+GP n6pGx9QbIO2Zt94bBRUrYGTPad3FBZyWYJiHb1XEvL6Lp/PYDggFslYFau4CKl7G zkg42cBFi1HQL3lCdzlVQNJgb7Cv/dABPGEVAraW2IO4YUSyNnMe+WoDlyTiBY9n 6sblzYShnI195zugu6/3pmwz5MsdLZlI/9dwC4B+TPcqv3Tt+1bNa8KzrU1p2pTv mzNiRfTs12yxKLWhjRw0UNtli1RHoBum3UVaiUyow8dufclfE262GF1W529GLplH aHMADMxaF67sBzFHEIVs17MfLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCX3xBlw /wRXvW9xW3SgJEe8OSdFMB8GA1UdIwQYMBaAFF3xAuKl5zZ3IcEY2+zaYCqAKe6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIzNC82MDM3RDVEQzgy QTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5uY2h3UmpiN05wZ0tvQXA3 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmRUM0cVhuTm5jaHdSamI3TnBnS29BcDdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEIzNC82MDM3RDVEQzgyQTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5u Y2h3UmpiN05wZ0tvQXA3cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAa041qbhPyYel8OPCrOEnPdUow+B9kFbha5sWby0P13IGpwvR2+5g rL2xc/h3ueDaOqHkBKggSfIktqpMOIsM8j5CVQ8eFtcUms/mIMndLKf9wzO1dCX5 sXoL0ck4SiLgIbe1p6e+5zmNM6Sm3Bk8ZihFOVHqO2Awx7qksRlcPSyBY3KEPf6Y QH3h2rxWSoGI/hoM/dHuyTKhjI8P49aJM0Ovn9+bauqOa3E8tWQXbd6q+6CAFCl5 L/x4Z0Fz5azLHwlnIqOHMej17nDPfUB10/cmkr42/0sFqaRxvsMKrOz6qgt37ja4 KIgb15Sgjob3GiRA8SegIDpUsl9zA1gj -----END CERTIFICATE-----Generated at Wed May 14 19:37:02 2025 by rpki-client