$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft File: xIoOQPt_45dbEsI-AwrFTFIFcWM.mft (raw, json) Hash identifier: vInImZhPZHxeBC65hqvvjMOxPK+DMUKfuQf3FzBtsSk= Subject key identifier: 24:C5:54:78:E0:3D:BC:EF:C5:9D:7C:F7:CA:CD:D2:5F:29:37:4E:B1 Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 Certificate issuer: /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Certificate serial: 0554 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft Manifest number: 054F Signing time: Mon 12 May 2025 23:54:10 +0000 Manifest this update: Mon 12 May 2025 23:54:10 +0000 Manifest next update: Mon 19 May 2025 23:54:10 +0000 Files and hashes: 1: xIoOQPt_45dbEsI-AwrFTFIFcWM.crl (hash: KeE5fudFokCjgIJXPlN+tkW1oXKqiCNqZPVOnLZbqqM=) 2: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (hash: jxQWNR1P8sYKVza0W/49c3uTybsGhMQmKrsxrcNc/xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1364 (0x554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28BC, serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Validity Not Before: May 12 23:54:10 2025 GMT Not After : May 19 23:54:10 2025 GMT Subject: CN=68228a22-6cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:4f:65:b3:e0:c0:4d:11:8a:cc:ce:30:e4: 69:0d:ce:11:c5:51:ad:dd:13:ff:40:16:0a:3e:ae: 9b:43:1e:be:a8:01:b1:44:85:b1:8f:5f:53:60:d7: c9:19:65:2c:9f:d0:c1:28:05:2c:5d:10:9b:eb:eb: 98:15:bb:f2:0e:ab:88:eb:72:43:d1:a7:f6:6e:28: 5c:07:35:de:57:77:a4:e9:12:d7:ee:1e:76:eb:6b: 81:cd:c1:5a:00:96:40:b3:bf:de:80:1d:3f:e3:ac: ef:30:8d:57:0c:68:89:a9:85:26:52:7e:28:5f:9d: 7c:92:1d:d8:b5:48:19:d7:8e:44:e7:9d:20:e0:ec: 73:93:f4:ef:6c:97:c9:4e:98:1c:80:e0:c3:93:57: dc:b8:94:80:aa:f3:e0:af:c5:0f:b5:3c:12:c7:e4: c0:45:b5:7c:31:c2:dc:ee:62:b0:5b:20:5b:18:ac: 2d:6a:f1:aa:f6:64:31:77:cd:c2:98:16:49:3e:4f: c6:45:7a:53:13:9b:42:b2:f9:d9:fb:b6:bf:e9:dd: 71:68:52:7e:22:83:9d:6b:4a:fc:1f:89:1a:fc:07: df:07:39:85:0b:96:77:52:7f:85:c7:8e:bc:43:41: c9:d6:9b:1a:f3:35:01:76:dd:5c:27:72:a6:80:f8: 37:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C5:54:78:E0:3D:BC:EF:C5:9D:7C:F7:CA:CD:D2:5F:29:37:4E:B1 X509v3 Authority Key Identifier: keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:40:aa:18:3c:52:70:03:28:35:8c:1b:14:a3:94:81:54:88: 91:7b:98:c2:00:3c:fe:34:40:d3:16:6d:e4:25:dc:6b:20:b9: 37:7f:52:78:3a:84:60:dd:fd:34:60:65:cd:91:59:33:20:7a: 45:85:40:95:6a:d4:7f:1d:de:e3:d0:c5:4c:f3:57:2f:26:54: b9:5c:79:83:01:22:0f:16:39:78:a3:b7:8b:1c:5a:00:30:ee: 20:30:d1:20:a1:2b:b7:eb:db:dc:85:47:e0:df:00:57:9a:e0: 0d:30:17:a6:ff:46:f2:17:f3:32:2c:38:bb:03:ca:86:d1:fa: c9:22:96:d2:af:5d:86:26:4a:ce:96:c5:49:dd:52:57:cc:66: 19:73:b2:62:5e:57:a5:68:5a:ba:ef:ba:fc:fd:d2:eb:40:9f: 75:87:1f:13:c0:b1:b7:37:0c:46:17:65:32:85:c3:82:a3:b6: 40:eb:7b:c5:e2:1a:c9:30:f1:3a:c0:fa:1e:60:3d:40:27:92: fc:9c:9a:51:07:37:5b:48:b2:ee:7a:e1:96:ec:79:fb:9f:5d: ff:aa:01:0d:2e:da:94:19:e4:83:1e:d5:dc:14:b8:ec:e5:36: 69:f1:d3:88:75:81:cf:ce:16:5a:70:51:64:b6:77:c3:a2:3e: ba:30:fe:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QkMxMTAvBgNVBAUTKEM0OEEwRTQwRkI3RkUzOTc1QjEyQzIzRTAzMEFDNTRD NTIwNTcxNjMwHhcNMjUwNTEyMjM1NDEwWhcNMjUwNTE5MjM1NDEwWjAYMRYwFAYD VQQDEw02ODIyOGEyMi02Y2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm5PZbPgwE0RiszOMORpDc4RxVGt3RP/QBYKPq6bQx6+qAGxRIWxj19TYNfJ GWUsn9DBKAUsXRCb6+uYFbvyDquI63JD0af2bihcBzXeV3ek6RLX7h5262uBzcFa AJZAs7/egB0/46zvMI1XDGiJqYUmUn4oX518kh3YtUgZ145E550g4Oxzk/TvbJfJ TpgcgODDk1fcuJSAqvPgr8UPtTwSx+TARbV8McLc7mKwWyBbGKwtavGq9mQxd83C mBZJPk/GRXpTE5tCsvnZ+7a/6d1xaFJ+IoOda0r8H4ka/AffBzmFC5Z3Un+Fx468 Q0HJ1psa8zUBdt1cJ3KmgPg3SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTFVHjg PbzvxZ1898rN0l8pN06xMB8GA1UdIwQYMBaAFMSKDkD7f+OXWxLCPgMKxUxSBXFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhCQy85MjA5MjM5MEVB RDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1ZGJFc0ktQXdyRlRGSUZj V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJb09RUHRfNDVkYkVzSS1Bd3JGVEZJRmNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhCQy85MjA5MjM5MEVBRDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1 ZGJFc0ktQXdyRlRGSUZjV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxQKoYPFJwAyg1jBsUo5SBVIiRe5jCADz+NEDTFm3kJdxrILk3f1J4 OoRg3f00YGXNkVkzIHpFhUCVatR/Hd7j0MVM81cvJlS5XHmDASIPFjl4o7eLHFoA MO4gMNEgoSu369vchUfg3wBXmuANMBem/0byF/MyLDi7A8qG0frJIpbSr12GJkrO lsVJ3VJXzGYZc7JiXlelaFq677r8/dLrQJ91hx8TwLG3NwxGF2UyhcOCo7ZA63vF 4hrJMPE6wPoeYD1AJ5L8nJpRBzdbSLLueuGW7Hn7n13/qgENLtqUGeSDHtXcFLjs 5TZp8dOIdYHPzhZacFFktnfDoj66MP7K -----END CERTIFICATE-----Generated at Wed May 14 16:08:18 2025 by rpki-client