$ rpki-client -vvf rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft File: xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft (raw, json) Hash identifier: GCUxeCV1qB+ZcvyDDZR76lPKY+CyBej+qGZJhk0yFBo= Subject key identifier: 7A:C1:FB:29:78:8C:4C:1D:94:B6:96:F8:93:10:3B:B9:D8:61:B6:0F Authority key identifier: C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF Certificate issuer: /CN=A91E37D1/serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft Manifest number: 017C Signing time: Sat 03 May 2025 03:09:00 +0000 Manifest this update: Sat 03 May 2025 03:09:00 +0000 Manifest next update: Sat 10 May 2025 03:09:00 +0000 Files and hashes: 1: xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl (hash: cr1rvlb9/xMJqP4wTWVJX3nqLslmAMCrVHga5rdLEtc=) 2: 59A00A402C7111EFA821586AC4F9AE02.roa (hash: 0JcJhlyjlF7wNse9vwSRpqDIz9jgkXs09QG/XtA+FYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 03:08:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E37D1, serialNumber=C5BD8A50CAD5A05EFE577C49C4714E5D9ABB7FEF Validity Not Before: May 3 03:09:00 2025 GMT Not After : May 10 03:09:00 2025 GMT Subject: CN=681588cc-b743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:8e:f2:a2:fe:c5:f9:b6:33:8b:f6:0d:aa: d4:c8:3d:f3:de:76:39:bb:28:c6:8e:2f:66:77:43: e4:eb:a3:cb:48:17:17:ed:7a:a9:4e:f4:ac:c1:05: dc:95:be:7a:b9:e4:3f:46:f3:f1:02:78:46:e9:0f: ee:eb:aa:51:ee:b4:67:d8:52:d3:a3:32:b8:ed:99: 42:c8:b6:27:8e:f1:11:9d:c1:42:52:23:e6:ff:27: 27:2e:2c:57:80:be:ef:a7:69:a9:1a:cf:1b:34:52: 16:80:32:2f:c3:5a:20:a1:08:5c:db:8f:2c:da:07: e4:bb:48:47:14:2a:f3:44:d1:e5:6c:02:ba:11:58: 74:88:a7:e8:94:a2:c2:d3:4c:5b:38:72:83:81:11: 6d:52:91:82:07:9d:28:82:e7:c6:c7:44:11:ac:30: a2:0b:43:17:6b:bb:ad:13:82:98:f0:4e:3c:27:96: 0f:fc:b3:2d:c5:92:2d:9a:3a:53:d8:6c:90:c4:96: d3:1c:7d:16:e2:d4:e1:0e:34:7e:26:77:7f:85:ef: 51:9b:17:6f:c7:2b:96:8b:9b:56:ca:5a:e1:fe:b6: c7:69:e4:28:fc:ad:4f:ce:ef:fe:de:40:98:43:eb: e8:c6:61:da:ba:ce:6f:70:ba:a3:bb:06:2a:82:32: 5a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C1:FB:29:78:8C:4C:1D:94:B6:96:F8:93:10:3B:B9:D8:61:B6:0F X509v3 Authority Key Identifier: keyid:C5:BD:8A:50:CA:D5:A0:5E:FE:57:7C:49:C4:71:4E:5D:9A:BB:7F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xb2KUMrVoF7-V3xJxHFOXZq7f-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E37D1/05A98F0EE3B311EDB2F4DA28C4F9AE02/xb2KUMrVoF7-V3xJxHFOXZq7f-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c1:f5:be:11:8a:11:aa:40:33:b6:2a:aa:30:f7:56:87:d3: 04:fd:b4:4c:8d:11:22:c4:26:c2:6c:f8:25:ba:91:78:f9:dc: d5:ae:c0:cf:8d:e0:8c:b2:dd:ad:eb:21:40:95:d3:1d:8c:3f: d7:b8:6b:71:d7:f2:0b:fc:0d:da:b4:71:29:90:b4:37:31:b4: ad:6e:91:b8:2b:1a:44:f8:25:18:da:bb:60:46:96:68:44:d2: 8d:12:28:c2:53:37:ca:d0:ee:fa:0f:46:e1:d8:41:ef:b1:bb: cc:fb:83:84:c0:12:c0:eb:ba:f8:c0:b2:9e:7d:1d:e9:e4:d3: be:50:8f:c2:80:d4:7b:f2:c2:75:31:8f:61:0e:06:fd:ca:cf: 4b:f7:8c:e7:e1:5e:68:8a:c7:ee:47:33:6f:ce:43:45:5c:c2: f4:99:3f:62:cf:3a:fb:c0:69:8d:d0:03:57:fa:f4:86:58:c0: 41:a4:83:6e:7d:ab:77:00:8e:04:6f:9e:39:77:aa:dd:0c:2c: 70:a4:a8:dc:a7:09:32:1a:be:c1:4c:6f:41:d1:ce:61:e6:f8: 7a:59:7c:b7:1e:63:94:2d:2e:48:79:f1:08:a0:bf:34:a0:1e: de:4b:7f:64:bc:a3:f9:55:20:ca:bd:06:b5:b6:22:83:42:c1: 33:93:9d:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3RDExMTAvBgNVBAUTKEM1QkQ4QTUwQ0FENUEwNUVGRTU3N0M0OUM0NzE0RTVE OUFCQjdGRUYwHhcNMjUwNTAzMDMwOTAwWhcNMjUwNTEwMDMwOTAwWjAYMRYwFAYD VQQDEw02ODE1ODhjYy1iNzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWeO8qL+xfm2M4v2DarUyD3z3nY5uyjGji9md0Pk66PLSBcX7XqpTvSswQXc lb56ueQ/RvPxAnhG6Q/u66pR7rRn2FLTozK47ZlCyLYnjvERncFCUiPm/ycnLixX gL7vp2mpGs8bNFIWgDIvw1ogoQhc248s2gfku0hHFCrzRNHlbAK6EVh0iKfolKLC 00xbOHKDgRFtUpGCB50ogufGx0QRrDCiC0MXa7utE4KY8E48J5YP/LMtxZItmjpT 2GyQxJbTHH0W4tThDjR+Jnd/he9RmxdvxyuWi5tWylrh/rbHaeQo/K1Pzu/+3kCY Q+voxmHaus5vcLqjuwYqgjJaUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrB+yl4 jEwdlLaW+JMQO7nYYbYPMB8GA1UdIwQYMBaAFMW9ilDK1aBe/ld8ScRxTl2au3/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzdEMS8wNUE5OEYwRUUz QjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9GNy1WM3hKeEhGT1hacTdm LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hiMktVTXJWb0Y3LVYzeEp4SEZPWFpxN2YtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzdEMS8wNUE5OEYwRUUzQjMxMUVEQjJGNERBMjhDNEY5QUUwMi94YjJLVU1yVm9G Ny1WM3hKeEhGT1hacTdmLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvwfW+EYoRqkAztiqqMPdWh9ME/bRMjREixCbCbPglupF4+dzVrsDP jeCMst2t6yFAldMdjD/XuGtx1/IL/A3atHEpkLQ3MbStbpG4KxpE+CUY2rtgRpZo RNKNEijCUzfK0O76D0bh2EHvsbvM+4OEwBLA67r4wLKefR3p5NO+UI/CgNR78sJ1 MY9hDgb9ys9L94zn4V5oisfuRzNvzkNFXML0mT9izzr7wGmN0ANX+vSGWMBBpINu fat3AI4Eb545d6rdDCxwpKjcpwkyGr7BTG9B0c5h5vh6WXy3HmOULS5IefEIoL80 oB7eS39kvKP5VSDKvQa1tiKDQsEzk500 -----END CERTIFICATE-----Generated at Mon May 5 03:21:59 2025 by rpki-client