$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft File: X1zijATRbpUODrzVlVVCSD05VtA.mft (raw, json) Hash identifier: XMSP7N+myqf6hvnTGGXtC3/0r4guXUZbRYYx1Mr7nj0= Subject key identifier: B6:EB:6E:96:09:4A:76:EC:43:82:32:D3:7B:F0:A5:88:46:55:4E:5C Authority key identifier: 5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0 Certificate issuer: /CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft Manifest number: 0127 Signing time: Sun 11 May 2025 03:30:34 +0000 Manifest this update: Sun 11 May 2025 03:30:34 +0000 Manifest next update: Sun 18 May 2025 03:30:34 +0000 Files and hashes: 1: X1zijATRbpUODrzVlVVCSD05VtA.crl (hash: VJWjUHn4CHBheYTS7uT4vfYSlcBV/jlj6ywqqyt2BA4=) 2: B7E86E0C6D8711EEB912BD62C4F9AE02.roa (hash: 1i4x5btwBoyVs/bOkBs3utfiU+YxigrlqpfcPAr0jaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0D86, serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0 Validity Not Before: May 11 03:30:34 2025 GMT Not After : May 18 03:30:34 2025 GMT Subject: CN=682019da-6fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:55:62:b6:81:31:8d:a0:96:8c:80:c7:f1:16: bc:9d:db:af:eb:3c:2b:15:ef:43:23:f3:ee:02:5f: bb:eb:e4:01:9f:8b:f6:5f:46:35:b3:9a:59:d6:0c: 38:38:3f:15:94:a7:b3:c7:a1:61:ba:3b:4b:8b:46: 8f:43:d7:af:32:01:3a:cc:82:2f:5a:b6:30:c6:54: 04:f7:df:6c:5b:15:36:45:d5:0b:c0:84:93:29:bd: ae:91:2e:87:f3:e3:2d:34:f5:b8:11:64:3c:0a:bc: 7a:84:a5:e7:59:32:23:d7:cb:f9:65:5f:b1:90:0f: 74:f1:d6:70:74:eb:aa:d5:21:f7:63:80:73:0a:c5: 2a:6e:66:a3:6e:5e:b7:36:13:9d:be:0d:c0:ba:9a: 4c:58:a1:6d:a7:7a:73:8c:81:d5:78:64:26:14:26: 8a:70:28:2c:a8:4f:90:13:5a:9f:7b:81:86:00:79: 6a:f1:b7:6b:0a:3f:6f:f2:0f:36:9f:0f:77:6f:48: 59:70:8e:26:26:72:1a:e0:07:7b:7a:9c:23:09:c4: d5:86:ed:31:c6:69:b5:79:42:7d:18:e0:07:68:5a: e6:ad:ba:3d:ef:90:7a:0c:4c:6c:62:ae:0e:de:9c: 50:09:23:5c:f7:b4:10:68:9f:60:56:28:c8:7a:51: ba:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EB:6E:96:09:4A:76:EC:43:82:32:D3:7B:F0:A5:88:46:55:4E:5C X509v3 Authority Key Identifier: keyid:5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ed:22:e2:0c:57:2b:3a:13:d0:57:85:a1:b5:5c:df:0d:94: 68:53:63:84:6a:78:ae:8c:13:da:cf:ed:51:4d:7e:5f:ad:ea: 5c:01:39:af:0a:fc:5d:f8:3c:b2:3e:a4:ed:5a:e3:50:01:cd: c7:a7:ca:de:bb:0f:a9:63:f7:be:49:0a:ed:54:95:27:57:10: 19:26:a9:13:4d:e2:84:7f:40:61:19:06:85:7c:10:86:3a:57: b4:8d:d9:fe:76:86:47:b8:69:8f:ba:c2:3f:73:98:50:75:79: 67:a7:3b:4c:f5:ab:52:35:40:93:b6:2b:1f:d6:85:53:06:f7: 29:42:7f:03:2f:ce:a0:a5:b2:35:b7:2f:e5:5d:5b:59:dc:07: 22:b0:4e:23:e8:fb:a7:f0:c8:70:0a:0d:a2:55:81:23:48:33: f5:59:f2:69:1b:74:fc:85:1e:93:85:f1:48:7e:de:bb:3b:2f: 6e:79:d7:f4:17:7f:f8:81:5a:70:be:32:ae:31:33:14:f1:85: 01:39:de:43:3d:e1:19:be:06:62:37:50:83:9f:fc:61:b8:f8: c4:78:08:00:e7:74:8e:fc:a5:a3:99:81:80:d5:f6:ab:40:44: 51:bf:ac:33:09:c0:c3:51:77:ae:04:b5:37:84:31:75:9f:56: fc:d1:6b:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBEODYxMTAvBgNVBAUTKDVGNUNFMjhDMDREMTZFOTUwRTBFQkNENTk1NTU0MjQ4 M0QzOTU2RDAwHhcNMjUwNTExMDMzMDM0WhcNMjUwNTE4MDMzMDM0WjAYMRYwFAYD VQQDEw02ODIwMTlkYS02ZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1VitoExjaCWjIDH8Ra8nduv6zwrFe9DI/PuAl+76+QBn4v2X0Y1s5pZ1gw4 OD8VlKezx6FhujtLi0aPQ9evMgE6zIIvWrYwxlQE999sWxU2RdULwISTKb2ukS6H 8+MtNPW4EWQ8Crx6hKXnWTIj18v5ZV+xkA908dZwdOuq1SH3Y4BzCsUqbmajbl63 NhOdvg3AuppMWKFtp3pzjIHVeGQmFCaKcCgsqE+QE1qfe4GGAHlq8bdrCj9v8g82 nw93b0hZcI4mJnIa4Ad7epwjCcTVhu0xxmm1eUJ9GOAHaFrmrbo975B6DExsYq4O 3pxQCSNc97QQaJ9gVijIelG6nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbrbpYJ SnbsQ4Iy03vwpYhGVU5cMB8GA1UdIwQYMBaAFF9c4owE0W6VDg681ZVVQkg9OVbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEQ4Ni82OEU3OTc4QTZD QkQxMUVFQjg0NkYzNzlDNEY5QUUwMi9YMXppakFUUmJwVU9EcnpWbFZWQ1NEMDVW dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gxemlqQVRSYnBVT0RyelZsVlZDU0QwNVZ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEQ4Ni82OEU3OTc4QTZDQkQxMUVFQjg0NkYzNzlDNEY5QUUwMi9YMXppakFUUmJw VU9EcnpWbFZWQ1NEMDVWdEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW7SLiDFcrOhPQV4WhtVzfDZRoU2OEaniujBPaz+1RTX5frepcATmv Cvxd+DyyPqTtWuNQAc3Hp8reuw+pY/e+SQrtVJUnVxAZJqkTTeKEf0BhGQaFfBCG Ole0jdn+doZHuGmPusI/c5hQdXlnpztM9atSNUCTtisf1oVTBvcpQn8DL86gpbI1 ty/lXVtZ3AcisE4j6Pun8MhwCg2iVYEjSDP1WfJpG3T8hR6ThfFIft67Oy9uedf0 F3/4gVpwvjKuMTMU8YUBOd5DPeEZvgZiN1CDn/xhuPjEeAgA53SO/KWjmYGA1far QERRv6wzCcDDUXeuBLU3hDF1n1b80Wv6 -----END CERTIFICATE-----Generated at Sun May 11 22:31:27 2025 by rpki-client