$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: WUpAOHOQS3fhYp4zpdCobgDaXNXGoMSIJooYPKzmMVc= Subject key identifier: 12:1A:4C:E6:DB:A7:A5:5E:A1:CF:96:F7:32:DE:75:DB:77:06:68:C3 Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 1F15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 1F09 Signing time: Wed 14 May 2025 16:06:40 +0000 Manifest this update: Wed 14 May 2025 16:06:39 +0000 Manifest next update: Wed 21 May 2025 16:06:39 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: +EFgY8DkatyiGIoztvq81FVO0audEn3qUirfLb+JQpE=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: GAb6VP25Sih6kuMJl/07aQz0S9qS9uziUSigVGvFQjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7957 (0x1f15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: May 14 16:06:39 2025 GMT Not After : May 21 16:06:39 2025 GMT Subject: CN=6824bf8f-11dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:44:3a:52:7b:2c:11:d9:e6:f5:41:aa:e9:4e: a5:06:40:79:7e:79:57:aa:f2:10:da:65:5e:b7:bc: ee:11:77:09:dd:ef:db:d3:d0:10:b9:9c:49:a1:90: 54:58:b8:8a:d2:b8:ee:88:ed:59:62:05:13:da:f2: ba:3f:0f:9b:0b:a1:2a:86:12:7d:6f:c7:45:6f:e4: 2b:8f:14:62:d2:3d:46:9c:86:0e:e9:6a:0c:7a:1f: 5b:ed:46:06:3a:65:86:8c:06:be:89:89:01:c0:f4: 7a:bd:a9:af:8a:08:55:29:f7:9a:29:02:eb:cc:9f: 91:65:c2:39:df:bd:1b:4a:71:2a:43:38:c0:80:92: 18:36:50:9a:4a:54:d6:30:2a:ed:f7:3f:29:b1:72: ed:eb:99:bd:af:9d:8b:ec:ad:f1:07:ac:b6:5f:56: 69:68:a5:d3:a7:5a:00:5d:fc:1c:ab:8e:5a:91:77: 21:4f:4d:7d:27:c7:87:d3:5a:3e:df:47:83:dc:8f: 69:26:cb:20:2f:a0:8a:0d:6d:8e:ce:b6:f2:e2:f3: 49:86:01:b6:c0:19:1b:c3:09:57:6b:99:f9:c2:38: 31:82:6f:30:ae:1d:7a:e7:ac:84:60:af:07:9c:e8: c4:a9:c4:ca:c3:cc:45:b3:8a:1c:9f:dc:e4:03:26: 3a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1A:4C:E6:DB:A7:A5:5E:A1:CF:96:F7:32:DE:75:DB:77:06:68:C3 X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:89:ce:2c:ff:10:21:8e:f4:55:28:4a:bc:22:cd:23:e4:d4: ef:8b:7e:58:69:cb:b4:ce:39:df:cf:4a:b2:53:c1:1a:8d:a5: 76:7c:16:56:32:6c:3d:e6:3b:0b:12:ca:7e:42:50:c9:d7:b3: 99:92:f4:21:86:1e:d1:c2:11:0e:43:cf:99:14:74:77:5c:bd: 13:5c:f8:48:43:3d:c4:9f:57:6b:d9:a5:2f:9a:ec:42:13:8c: c1:34:3a:a7:11:0a:81:6a:ab:90:4e:56:16:44:76:63:1d:91: 57:ce:ce:47:37:66:b3:a9:f5:2f:1e:1f:b4:f9:7d:94:75:1b: 8f:7a:9c:e4:3d:3f:fd:a2:c4:86:0d:46:f4:03:0e:ed:db:a7: a7:75:9f:f0:c2:6b:b2:90:77:b1:ee:61:7e:d9:15:fc:7d:14: a7:b6:eb:9e:cf:86:2a:0a:66:82:05:05:81:06:c2:b8:84:c1: dc:e1:f0:f4:62:dd:0e:3f:c1:f3:58:b7:ad:7d:88:32:41:58: 2a:37:48:4c:17:f9:11:e5:dd:59:f3:a3:82:fa:f2:cc:59:fa: 4b:c2:83:15:8e:db:74:20:f6:16:85:9c:55:55:5b:4b:4c:0f: 78:46:4a:5a:75:28:24:ef:71:f9:fc:44:a4:94:5b:e6:d6:3e: 8d:cb:07:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjUwNTE0MTYwNjM5WhcNMjUwNTIxMTYwNjM5WjAYMRYwFAYD VQQDEw02ODI0YmY4Zi0xMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kQ6UnssEdnm9UGq6U6lBkB5fnlXqvIQ2mVet7zuEXcJ3e/b09AQuZxJoZBU WLiK0rjuiO1ZYgUT2vK6Pw+bC6EqhhJ9b8dFb+QrjxRi0j1GnIYO6WoMeh9b7UYG OmWGjAa+iYkBwPR6vamvighVKfeaKQLrzJ+RZcI5370bSnEqQzjAgJIYNlCaSlTW MCrt9z8psXLt65m9r52L7K3xB6y2X1ZpaKXTp1oAXfwcq45akXchT019J8eH01o+ 30eD3I9pJssgL6CKDW2Ozrby4vNJhgG2wBkbwwlXa5n5wjgxgm8wrh1656yEYK8H nOjEqcTKw8xFs4ocn9zkAyY6VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIaTObb p6Veoc+W9zLeddt3BmjDMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIic4s/xAhjvRVKEq8Is0j5NTvi35Yacu0zjnfz0qyU8EajaV2fBZW Mmw95jsLEsp+QlDJ17OZkvQhhh7RwhEOQ8+ZFHR3XL0TXPhIQz3En1dr2aUvmuxC E4zBNDqnEQqBaquQTlYWRHZjHZFXzs5HN2azqfUvHh+0+X2UdRuPepzkPT/9osSG DUb0Aw7t26endZ/wwmuykHex7mF+2RX8fRSntuuez4YqCmaCBQWBBsK4hMHc4fD0 Yt0OP8HzWLetfYgyQVgqN0hMF/kR5d1Z86OC+vLMWfpLwoMVjtt0IPYWhZxVVVtL TA94RkpadSgk73H5/ESklFvm1j6NywfP -----END CERTIFICATE-----Generated at Thu May 15 19:15:53 2025 by rpki-client