$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: 3pWWugW+OSLXzBVz7nDg1KsJCcLQ148qAfN/U4OPiOg= Subject key identifier: 92:F1:4A:37:96:2A:C9:AA:DC:68:05:F4:DE:4D:30:05:7C:EC:97:94 Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 0119 Signing time: Sat 17 May 2025 04:32:11 +0000 Manifest this update: Sat 17 May 2025 04:32:11 +0000 Manifest next update: Sat 24 May 2025 04:32:11 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: Vaxhm2uy3X1OJuLJjMEaLUcFoZz6hECNjc4HECegHRs=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: 3NZc5h6ed9BUlmgYjohUHdHLn8ZtKRYjymamcmwqc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 04:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: May 17 04:32:11 2025 GMT Not After : May 24 04:32:11 2025 GMT Subject: CN=6828114b-e49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:5e:46:99:c2:c1:8d:45:63:17:6f:65:f5: 3d:3e:d8:86:87:8a:07:b4:8c:be:00:78:ad:d4:94: 63:79:ce:29:ca:e4:8a:f4:d0:2e:a8:74:b7:4b:f2: ff:96:61:a2:96:6c:0a:79:34:98:48:7d:80:82:ee: 85:58:d3:d2:5a:8e:0d:4f:f3:b5:f5:df:94:03:86: a0:18:6a:78:95:61:e0:35:1e:9a:6b:44:03:53:4f: fd:fb:05:4d:0c:34:66:4d:a3:12:1d:66:bb:82:c6: 08:b1:06:67:36:5f:c7:a9:9a:20:7d:79:ce:b5:37: ea:84:73:01:26:c7:01:62:75:04:71:1a:0e:28:ee: 90:07:f6:e2:98:9b:83:fc:b1:fe:5a:64:58:1d:7e: 35:b9:4d:9d:79:e6:01:09:5a:30:e9:77:8f:28:7c: 02:6a:ea:a8:1e:5c:76:fa:ec:db:52:b0:55:ba:d2: fb:76:9d:5b:d0:62:1e:1f:17:20:cc:b2:59:fa:d8: f5:35:b5:9c:0e:1b:ff:e4:0e:f1:d6:9f:8a:81:0d: 0d:4b:85:64:76:d8:83:6f:68:4f:d1:2e:31:3c:10: c4:33:4a:fb:e0:a2:0a:c7:17:bf:b0:32:19:c6:ca: cb:68:f7:3c:b6:3f:1c:c7:9d:f3:66:f0:9b:b0:a2: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F1:4A:37:96:2A:C9:AA:DC:68:05:F4:DE:4D:30:05:7C:EC:97:94 X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:1a:d2:61:5c:30:30:0f:58:6a:29:e9:72:b9:3a:67:dd:47: f8:64:a5:ee:03:f1:9f:a6:56:48:d6:03:5f:5a:c2:62:e8:20: c0:1b:47:56:eb:4f:76:04:df:92:ac:9f:ab:11:b5:3d:c5:b6: 4c:93:c0:ca:d7:c0:04:74:1e:f6:cc:a7:dd:d8:f6:be:ee:ae: dd:7d:a3:66:f2:84:9b:a8:e3:cd:35:3d:d0:0c:51:d2:55:3b: 9e:14:28:b5:34:19:9f:e1:36:6c:71:d8:24:07:08:53:57:25: b2:bd:0c:32:e1:3b:ee:73:94:88:96:9c:34:33:b4:f8:e8:d4: ce:9e:ce:9e:80:1a:e4:74:7d:3d:d5:be:f3:5c:59:33:db:e4: 98:b8:b0:10:e8:ce:bf:09:40:44:5e:33:a9:12:df:f6:4c:55: ae:7d:78:2c:71:9e:2c:ac:be:dc:35:1b:aa:23:7f:61:96:70: a1:d4:20:5b:a4:05:5e:bf:cc:ca:d8:e8:39:07:74:8b:82:cd: 02:2d:96:9e:03:c2:f2:08:3e:e1:b1:dc:2d:b8:0b:ae:bc:69: 32:46:ba:92:b2:38:54:60:11:95:38:d6:60:ee:c2:f9:4a:16: 74:c8:42:47:80:bd:35:78:17:70:75:41:b0:47:04:1b:37:c7: 8e:16:d8:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUwNTE3MDQzMjExWhcNMjUwNTI0MDQzMjExWjAYMRYwFAYD VQQDEw02ODI4MTE0Yi1lNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWdeRpnCwY1FYxdvZfU9PtiGh4oHtIy+AHit1JRjec4pyuSK9NAuqHS3S/L/ lmGilmwKeTSYSH2Agu6FWNPSWo4NT/O19d+UA4agGGp4lWHgNR6aa0QDU0/9+wVN DDRmTaMSHWa7gsYIsQZnNl/HqZogfXnOtTfqhHMBJscBYnUEcRoOKO6QB/bimJuD /LH+WmRYHX41uU2deeYBCVow6XePKHwCauqoHlx2+uzbUrBVutL7dp1b0GIeHxcg zLJZ+tj1NbWcDhv/5A7x1p+KgQ0NS4VkdtiDb2hP0S4xPBDEM0r74KIKxxe/sDIZ xsrLaPc8tj8cx53zZvCbsKJXhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLxSjeW Ksmq3GgF9N5NMAV87JeUMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAGtJhXDAwD1hqKelyuTpn3Uf4ZKXuA/GfplZI1gNfWsJi6CDAG0dW 6092BN+SrJ+rEbU9xbZMk8DK18AEdB72zKfd2Pa+7q7dfaNm8oSbqOPNNT3QDFHS VTueFCi1NBmf4TZscdgkBwhTVyWyvQwy4Tvuc5SIlpw0M7T46NTOns6egBrkdH09 1b7zXFkz2+SYuLAQ6M6/CUBEXjOpEt/2TFWufXgscZ4srL7cNRuqI39hlnCh1CBb pAVev8zK2Og5B3SLgs0CLZaeA8LyCD7hsdwtuAuuvGkyRrqSsjhUYBGVONZg7sL5 ShZ0yEJHgL01eBdwdUGwRwQbN8eOFtjS -----END CERTIFICATE-----Generated at Sat May 17 13:02:44 2025 by rpki-client