$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft File: xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json) Hash identifier: 32+OYzat+8GVg9mbaudI3bpDTLGLzMlQoeggaLo01vI= Subject key identifier: 3F:7C:45:86:A1:AE:1F:C3:08:F2:33:2D:22:4C:32:51:F9:0C:67:F4 Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 Certificate issuer: /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft Manifest number: 54 Signing time: Wed 09 Apr 2025 03:59:25 +0000 Manifest this update: Wed 09 Apr 2025 03:59:24 +0000 Manifest next update: Wed 16 Apr 2025 03:59:24 +0000 Files and hashes: 1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: MQsTiuMTMcD3Fo0ThiBnXrjPqKT52ckSy+tDg6kcPc4=) 2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: xY5rRYGsWrcsy57HxUo/DUZymmQ+QbhnmZvTvm4JJxQ=) 3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: 3NBZi9t73NGUqewcrwzUwAEjzkPNxuY/EA9dZDJA11Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 03:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85 Validity Not Before: Apr 9 03:59:24 2025 GMT Not After : Apr 16 03:59:24 2025 GMT Subject: CN=67f5f09c-3f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:96:d3:49:80:b3:1b:19:03:66:28:17:07: 48:14:2e:df:bb:a5:74:ee:d2:d8:e4:97:f3:7b:f2: c4:e8:7f:c9:a4:30:3a:a5:70:16:63:a0:3f:6d:8c: 72:a9:cb:1e:f7:d0:b6:fd:3c:b3:3d:38:e1:24:c9: 6a:ac:aa:b0:c5:6a:43:19:f2:25:a3:6b:5c:a8:fe: be:c4:aa:ca:0f:01:b7:2a:4c:c2:cd:e0:40:46:57: 82:01:89:3e:4b:8d:06:df:e2:44:6f:c3:5e:91:cc: 59:ac:23:d1:54:e4:81:f7:b3:11:1c:bf:9e:a6:a4: af:75:93:ff:ad:00:1b:68:4b:3c:d3:8a:57:a7:15: 0b:2a:dc:4a:27:5d:91:11:75:a2:97:3c:63:dc:0c: d0:b3:03:4e:95:67:e6:3c:1b:e1:bc:70:86:29:ee: 41:81:ec:01:5c:e5:bb:d1:4f:3c:82:e5:8e:e8:e8: 18:b2:a6:c5:b5:05:59:3b:7d:17:65:83:5e:7a:e0: 99:a3:f4:d3:30:c3:2c:f6:60:ee:ea:8c:a9:18:27: fb:82:72:ff:97:ca:db:e0:97:6d:8e:63:2a:a7:ef: f9:f0:ab:8c:16:03:31:15:d5:26:0f:14:02:54:99: cc:51:e5:9d:67:51:f5:c9:bd:84:a4:1b:a1:6d:1a: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7C:45:86:A1:AE:1F:C3:08:F2:33:2D:22:4C:32:51:F9:0C:67:F4 X509v3 Authority Key Identifier: keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:58:27:94:99:22:1d:83:00:84:b3:19:fd:4b:1a:6d:ed:04: 16:d4:53:22:70:3e:cf:46:83:e3:1e:62:15:a8:82:71:56:32: a9:28:51:e0:12:a4:db:eb:b1:eb:f7:0e:89:7a:9c:92:42:fe: a1:6e:28:d3:a4:ef:50:f7:5a:75:81:44:3b:aa:23:a7:0f:af: de:3b:a0:6d:f2:49:7a:fa:42:ac:7d:b2:26:e3:fe:12:77:27: b6:e3:c5:66:ab:d3:d9:e3:8d:9c:88:8b:9d:ba:d0:0c:85:c8: 2e:e2:d9:92:a4:18:d8:77:e0:b7:38:30:a4:b5:71:64:ed:b3: 13:21:47:a2:c9:55:48:b0:c9:74:fb:af:a3:fe:5b:37:fc:39: 83:f4:e3:8f:10:e4:2e:14:5f:18:e2:e9:04:af:32:dd:58:c3: a5:2f:9e:cf:8a:bc:b9:3b:28:c2:71:8f:f8:16:22:68:c9:5f: 38:b3:40:82:db:64:ed:91:ac:c5:45:da:e7:00:4c:d7:94:7a: 19:04:59:2a:24:c7:42:49:f6:df:d3:a6:3d:77:61:6f:10:16: bc:f8:6c:b0:ae:50:d6:30:15:32:5f:c2:f8:10:11:8f:93:63: 6f:75:90:d4:e0:0e:90:a4:33:59:38:e1:90:06:9a:bd:13:a3: a0:38:47:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkI4NTExMC8GA1UEBRMoQzU1NjRERUMxMDE2NjNCRjQzRDNGMkUzNDAzOTRDMDA3 NjZBNjNFMzAeFw0yNTA0MDkwMzU5MjRaFw0yNTA0MTYwMzU5MjRaMBgxFjAUBgNV BAMTDTY3ZjVmMDljLTNmMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9cpbTSYCzGxkDZigXB0gULt+7pXTu0tjkl/N78sTof8mkMDqlcBZjoD9tjHKp yx730Lb9PLM9OOEkyWqsqrDFakMZ8iWja1yo/r7EqsoPAbcqTMLN4EBGV4IBiT5L jQbf4kRvw16RzFmsI9FU5IH3sxEcv56mpK91k/+tABtoSzzTilenFQsq3EonXZER daKXPGPcDNCzA06VZ+Y8G+G8cIYp7kGB7AFc5bvRTzyC5Y7o6BiypsW1BVk7fRdl g1564Jmj9NMwwyz2YO7qjKkYJ/uCcv+Xytvgl22OYyqn7/nwq4wWAzEV1SYPFAJU mcxR5Z1nUfXJvYSkG6FtGoh7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP3xFhqGu H8MI8jMtIkwyUfkMZ/QwHwYDVR0jBBgwFoAUxVZN7BAWY79D0/LjQDlMAHZqY+Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyQjg1L0NDQkJBQkVBOUY2 NDExRUZBOTMxNDczQ0M0RjlBRTAyL3hWWk43QkFXWTc5RDBfTGpRRGxNQUhacVkt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveFZaTjdCQVdZNzlEMF9MalFEbE1BSFpxWS1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy Qjg1L0NDQkJBQkVBOUY2NDExRUZBOTMxNDczQ0M0RjlBRTAyL3hWWk43QkFXWTc5 RDBfTGpRRGxNQUhacVktTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIVYJ5SZIh2DAISzGf1LGm3tBBbUUyJwPs9Gg+MeYhWognFWMqkoUeAS pNvrsev3Dol6nJJC/qFuKNOk71D3WnWBRDuqI6cPr947oG3ySXr6Qqx9sibj/hJ3 J7bjxWar09njjZyIi5260AyFyC7i2ZKkGNh34Lc4MKS1cWTtsxMhR6LJVUiwyXT7 r6P+Wzf8OYP0448Q5C4UXxji6QSvMt1Yw6Uvns+KvLk7KMJxj/gWImjJXzizQILb ZO2RrMVF2ucATNeUehkEWSokx0JJ9t/Tpj13YW8QFrz4bLCuUNYwFTJfwvgQEY+T Y291kNTgDpCkM1k44ZAGmr0To6A4Ry0= -----END CERTIFICATE-----Generated at Thu Apr 10 23:56:38 2025 by rpki-client