$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: kIzCm12Y4EcizTaEU9yYWtXjBKsuzH5d6uSyus1urKY= Subject key identifier: CE:93:6A:31:FF:8A:6F:6E:27:6D:99:D7:43:F0:8C:03:31:B4:5B:BA Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0BD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0A94 Signing time: Mon 12 May 2025 20:00:38 +0000 Manifest this update: Mon 12 May 2025 20:00:37 +0000 Manifest next update: Mon 19 May 2025 20:00:37 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: Z0j2Syp5UP9UWwcCXLVkjYWFGqwCvSm2wzKNY5WbG1g=) 2: CED9053CE35211EDB7F6B44EC4F9AE02.roa (hash: JmnrBzA6dJ9YsMu7pz9xXLOAQrwChmETl1tBrYYwR4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3026 (0xbd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: May 12 20:00:37 2025 GMT Not After : May 19 20:00:37 2025 GMT Subject: CN=68225366-3859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:23:f1:d1:49:61:e1:0f:c2:05:a1:6c:7f: a3:51:0d:87:b3:75:1f:7b:31:3b:cb:0c:1d:78:2c: 74:2e:e1:af:0d:c4:cf:04:c4:e0:ff:2f:d8:47:a8: 97:06:5d:b9:86:5b:77:30:f1:d1:86:d2:2f:1f:d1: 4d:a8:54:db:c3:65:bc:b1:62:ce:63:10:c7:7e:ba: 77:a4:ce:8c:03:60:df:f0:75:35:12:33:68:5f:10: 76:14:e6:28:f8:f1:b3:2e:22:bd:1c:ce:c8:8f:59: a4:b4:d9:a5:b3:a1:3a:ef:43:eb:20:8c:e8:a9:c9: fc:7a:c4:59:d5:4d:66:54:a3:ef:ca:49:d2:ba:9a: 29:d7:42:5c:32:27:af:0e:7e:b3:c3:c0:8a:d9:d8: d0:a5:a1:95:3e:a2:04:08:b1:cd:08:19:f6:34:fb: 64:ed:b4:77:78:1d:63:52:83:49:69:0a:b2:b6:5b: c5:02:40:95:2b:dc:05:6b:9f:a2:06:c9:5f:d5:88: 2a:e7:64:61:86:17:e3:7d:4d:49:eb:d4:4d:e9:04: dd:82:05:70:ca:29:03:98:bd:8f:22:e7:aa:e4:53: 02:23:f6:a7:f7:b3:d1:8b:5c:d8:a0:3f:1b:0c:49: 67:9e:b7:69:ab:ec:b3:59:7f:b4:6a:70:16:86:10: 6b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:93:6A:31:FF:8A:6F:6E:27:6D:99:D7:43:F0:8C:03:31:B4:5B:BA X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:13:68:81:16:53:fe:ad:08:d0:b3:64:dd:0b:93:93:d2:14: 05:b7:4e:2f:84:87:b1:17:01:e9:40:de:95:14:67:62:3a:59: 5c:23:b0:51:2d:80:8e:c0:a9:90:6c:af:f3:41:45:8f:b7:cc: e7:1b:be:53:4c:5b:47:42:45:e2:f0:30:c1:2c:f9:8b:2b:43: 51:c2:47:03:da:dc:a6:16:b1:6b:a4:cc:b1:89:0f:e8:c7:89: 3b:10:4c:bc:88:6c:97:ef:be:41:75:02:21:d5:b3:3c:14:d8: 52:53:35:39:e3:ee:e6:41:44:2b:98:86:3c:9c:99:9a:1f:03: 2e:26:ad:a0:34:11:b8:39:f6:da:d6:a8:bc:83:cd:ca:a9:c4: 8d:2a:eb:db:64:1a:9c:13:ac:c0:b0:66:8a:74:4d:73:a0:0b: 72:9b:77:2f:c4:53:f7:83:35:b4:7d:3c:77:05:55:64:ce:71: 8a:bf:e4:05:ad:ca:83:c0:80:b8:82:08:af:cb:93:fd:3b:55: d6:f5:6c:b3:0f:85:3e:22:14:76:ef:1d:50:3d:06:41:18:43: 03:27:fe:ac:e6:56:97:72:99:d8:ad:e5:81:31:49:5b:93:54: 52:5d:a0:30:2c:ea:cb:ae:7b:fd:b4:be:5f:f0:86:e1:65:5d: 5a:1d:42:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjUwNTEyMjAwMDM3WhcNMjUwNTE5MjAwMDM3WjAYMRYwFAYD VQQDEw02ODIyNTM2Ni0zODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dcj8dFJYeEPwgWhbH+jUQ2Hs3UfezE7ywwdeCx0LuGvDcTPBMTg/y/YR6iX Bl25hlt3MPHRhtIvH9FNqFTbw2W8sWLOYxDHfrp3pM6MA2Df8HU1EjNoXxB2FOYo +PGzLiK9HM7Ij1mktNmls6E670PrIIzoqcn8esRZ1U1mVKPvyknSupop10JcMiev Dn6zw8CK2djQpaGVPqIECLHNCBn2NPtk7bR3eB1jUoNJaQqytlvFAkCVK9wFa5+i Bslf1Ygq52RhhhfjfU1J69RN6QTdggVwyikDmL2PIueq5FMCI/an97PRi1zYoD8b DElnnrdpq+yzWX+0anAWhhBrowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6TajH/ im9uJ22Z10PwjAMxtFu6MB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWE2iBFlP+rQjQs2TdC5OT0hQFt04vhIexFwHpQN6VFGdiOllcI7BR LYCOwKmQbK/zQUWPt8znG75TTFtHQkXi8DDBLPmLK0NRwkcD2tymFrFrpMyxiQ/o x4k7EEy8iGyX775BdQIh1bM8FNhSUzU54+7mQUQrmIY8nJmaHwMuJq2gNBG4Ofba 1qi8g83KqcSNKuvbZBqcE6zAsGaKdE1zoAtym3cvxFP3gzW0fTx3BVVkznGKv+QF rcqDwIC4ggivy5P9O1XW9WyzD4U+IhR27x1QPQZBGEMDJ/6s5laXcpnYreWBMUlb k1RSXaAwLOrLrnv9tL5f8IbhZV1aHUK7 -----END CERTIFICATE-----Generated at Wed May 14 08:27:54 2025 by rpki-client