$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json) Hash identifier: 2BOBHjZe/nJctgY75E2+e2TZX/BaiFQh98Ej2Jf1kT8= Subject key identifier: 1A:93:3A:58:F7:F9:00:89:D9:3F:8B:70:45:9D:48:CE:BA:A2:6F:1B Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Certificate serial: 259B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft Manifest number: 2582 Signing time: Sun 04 May 2025 15:40:20 +0000 Manifest this update: Sun 04 May 2025 15:40:19 +0000 Manifest next update: Sun 11 May 2025 15:40:19 +0000 Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: GtFFO0i9CR8Pz3NQxtu2d8AS91AQPeWXa4awU9qhbIc=) 2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: pVWyhrhr52dDPOhFrnd0oPU2DOTP+1UBjUuKhhhwO0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9627 (0x259b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Validity Not Before: May 4 15:40:19 2025 GMT Not After : May 11 15:40:19 2025 GMT Subject: CN=68178a63-825a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f8:8d:e9:86:51:99:2a:b9:fa:0d:bc:e1:27: ce:e9:1b:bc:d3:43:fc:c5:82:77:e6:b7:30:ef:81: 13:13:33:b3:29:1a:aa:d0:ad:83:3a:cd:ec:96:d1: c9:85:4a:ac:be:e5:45:8d:11:20:82:99:37:09:53: 2d:0c:6a:d8:27:17:31:df:27:5d:b6:d8:85:41:49: 11:42:66:12:99:02:82:3b:76:38:c6:83:eb:aa:22: 64:aa:f4:aa:cb:42:a5:67:07:1f:b6:52:28:33:7c: a4:10:78:01:da:01:5a:6f:90:64:ea:9f:39:b6:fb: ba:16:0e:af:11:83:0a:b5:7e:d1:e2:af:8e:a2:28: 65:74:1b:9f:69:49:7d:71:84:7f:af:00:d7:52:41: 93:d6:3e:e2:23:31:1c:77:41:56:ff:16:57:d1:3d: f5:23:cb:58:d7:32:5a:b3:11:7e:7b:aa:75:17:58: 25:cd:b1:53:76:2d:9b:26:6f:ce:41:d2:04:97:47: 1d:25:b1:47:a8:53:ee:16:1d:13:8a:00:2b:4b:89: 95:55:bd:7c:38:49:f9:6a:66:40:aa:bb:ba:9b:ca: 35:76:7b:b0:f5:a6:ee:56:fe:fb:70:2f:f0:86:27: 4b:2c:fb:d5:7a:e9:2e:29:99:91:33:98:a9:8a:d7: 2c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:93:3A:58:F7:F9:00:89:D9:3F:8B:70:45:9D:48:CE:BA:A2:6F:1B X509v3 Authority Key Identifier: keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e2:56:c6:d9:52:70:f2:55:32:dc:c8:8e:50:b8:c2:67:bb: 4e:d6:45:9d:71:74:37:45:5c:05:0d:85:cc:cd:1d:97:59:bc: 02:48:00:47:cf:21:a5:ae:5d:28:68:bc:e1:5a:97:04:c1:3a: 79:8a:62:43:0a:ed:a8:b2:52:40:f0:aa:7a:08:03:e5:78:10: 93:e8:91:05:d2:0c:c9:21:e3:17:02:13:0c:a1:1c:60:7f:29: 02:82:53:b6:ce:37:a5:01:86:59:18:de:18:88:c9:b9:33:3c: 2e:e3:d6:3b:c2:09:31:56:00:9c:1d:9a:c9:d8:4c:0e:73:98: f3:07:11:52:ba:43:22:ca:de:de:79:1d:11:cb:e5:aa:91:50: 38:5d:6b:c1:79:4b:3c:ed:56:a3:e1:13:f5:25:a3:f6:d8:1f: e9:6f:77:f9:c9:ac:ee:be:8e:a2:1e:60:30:15:cd:ee:d8:9b: 9d:92:d1:31:63:6f:c5:31:95:66:16:c4:26:d5:f9:2b:55:2f: 04:b6:2a:42:3f:18:7d:df:5f:54:13:88:dd:db:b6:83:80:ec: 36:be:a8:e5:a8:60:29:28:ba:90:f1:6f:84:10:af:38:06:1d: 49:35:14:86:80:7d:b3:46:c5:a4:13:33:5c:de:e8:2a:23:18: ec:cf:8d:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxMTkxMTAvBgNVBAUTKDVGMzhGNDE5NTE2MTYyQkQ4ODZFNDBCREE5MjdGNTVE QzZGRjNFNjIwHhcNMjUwNTA0MTU0MDE5WhcNMjUwNTExMTU0MDE5WjAYMRYwFAYD VQQDEw02ODE3OGE2My04MjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fiN6YZRmSq5+g284SfO6Ru800P8xYJ35rcw74ETEzOzKRqq0K2DOs3sltHJ hUqsvuVFjREggpk3CVMtDGrYJxcx3yddttiFQUkRQmYSmQKCO3Y4xoPrqiJkqvSq y0KlZwcftlIoM3ykEHgB2gFab5Bk6p85tvu6Fg6vEYMKtX7R4q+OoihldBufaUl9 cYR/rwDXUkGT1j7iIzEcd0FW/xZX0T31I8tY1zJasxF+e6p1F1glzbFTdi2bJm/O QdIEl0cdJbFHqFPuFh0TigArS4mVVb18OEn5amZAqru6m8o1dnuw9abuVv77cC/w hidLLPvVeukuKZmRM5ipitcspwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqTOlj3 +QCJ2T+LcEWdSM66om8bMB8GA1UdIwQYMBaAFF849BlRYWK9iG5Avakn9V3G/z5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS9BN0VDNTk2QzEz MzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFlyMklia0M5cVNmMVhjYl9Q bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6ajBHVkZoWXIySWJrQzlxU2YxWGNiX1BtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODExOS9BN0VDNTk2QzEzMzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFly Mklia0M5cVNmMVhjYl9QbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY4lbG2VJw8lUy3MiOULjCZ7tO1kWdcXQ3RVwFDYXMzR2XWbwCSABH zyGlrl0oaLzhWpcEwTp5imJDCu2oslJA8Kp6CAPleBCT6JEF0gzJIeMXAhMMoRxg fykCglO2zjelAYZZGN4YiMm5Mzwu49Y7wgkxVgCcHZrJ2EwOc5jzBxFSukMiyt7e eR0Ry+WqkVA4XWvBeUs87Vaj4RP1JaP22B/pb3f5yazuvo6iHmAwFc3u2JudktEx Y2/FMZVmFsQm1fkrVS8EtipCPxh9319UE4jd27aDgOw2vqjlqGApKLqQ8W+EEK84 Bh1JNRSGgH2zRsWkEzNc3ugqIxjsz42k -----END CERTIFICATE-----Generated at Mon May 5 03:10:41 2025 by rpki-client