$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft File: xMZ-u2st3Gkku7llXn4PghhTDGU.mft (raw, json) Hash identifier: +10Be3UyFU37QmoGM2sk6x6Ahx8xCVe7WSWdcwGOZJA= Subject key identifier: 99:01:CA:1B:77:5F:C3:E4:F7:FD:A5:91:BB:48:08:35:A7:AE:60:4A Authority key identifier: C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 Certificate issuer: /CN=A9122D51/serialNumber=C4C67EBB6B2DDC6924BBB9655E7E0F8218530C65 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft Manifest number: BB Signing time: Thu 03 Apr 2025 05:10:49 +0000 Manifest this update: Thu 03 Apr 2025 05:10:48 +0000 Manifest next update: Thu 10 Apr 2025 05:10:48 +0000 Files and hashes: 1: xMZ-u2st3Gkku7llXn4PghhTDGU.crl (hash: XPc2kHZ7deOWQu33QfUhnMEoHGRrZnJMLbD7QGPdeyI=) 2: 6D610A58F23711EEA11AA759C4F9AE02.roa (hash: JP9Pvfyfa3vW7gxEOqKzfjawNJzZLQs3btJhigzzzxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D51 Validity Not Before: Apr 3 05:10:48 2025 GMT Not After : Apr 10 05:10:48 2025 GMT Subject: CN=67ee1858-a920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:77:e7:fd:68:70:71:51:e4:a4:a2:11:24:a6: 71:c9:f2:55:b7:68:a9:5c:c9:fe:5b:5d:e1:ea:47: 8c:cf:87:f0:f4:02:e7:c3:08:2a:a9:b8:7f:7d:93: c2:8a:e8:40:66:ad:8b:a7:a9:e9:e6:d7:50:bf:bb: 30:2a:1f:7a:77:c9:57:a0:e4:51:49:39:09:d0:5f: 7c:c6:db:13:d8:e5:ac:ad:98:34:0c:5a:01:67:e1: 47:0f:64:24:48:a3:06:74:f9:25:71:33:05:e6:d7: 6f:97:e5:37:2c:ea:47:54:24:9d:98:48:3b:aa:7f: 61:82:d6:a4:39:08:d3:d5:c2:61:a3:bd:ca:d8:54: c5:ad:ff:b4:27:e5:d1:04:01:ec:6e:c7:6b:ee:f9: eb:f9:d0:dd:32:88:08:af:9f:55:b0:24:51:46:50: 30:b4:69:ba:e2:c3:02:fd:6b:d7:3c:9c:08:15:82: f8:34:2d:9f:e0:bd:22:e4:74:c9:38:48:9b:bd:03: 47:81:e9:a9:dd:da:21:84:e0:0d:a0:ab:31:f3:a4: 58:10:78:b6:05:19:88:fc:a4:4c:b4:38:c2:7d:ff: 0d:d8:28:5c:12:17:e1:b0:9d:5d:b0:dd:83:12:b9: f7:46:6b:d1:d1:1a:22:bb:33:e2:5b:b5:98:ce:83: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:01:CA:1B:77:5F:C3:E4:F7:FD:A5:91:BB:48:08:35:A7:AE:60:4A X509v3 Authority Key Identifier: keyid:C4:C6:7E:BB:6B:2D:DC:69:24:BB:B9:65:5E:7E:0F:82:18:53:0C:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xMZ-u2st3Gkku7llXn4PghhTDGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D51/EAE5FCAAF23611EE8C8B9758C4F9AE02/xMZ-u2st3Gkku7llXn4PghhTDGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d0:11:25:10:9a:54:b6:b3:9e:d9:e4:09:df:26:26:57:e5: f8:72:f2:5d:9f:2b:2c:50:97:9e:6c:98:69:0d:cf:44:2e:55: c0:6a:8f:e2:13:ed:20:e3:75:99:6b:62:3c:27:5c:47:9d:d9: de:0f:3c:95:76:08:1b:71:e2:1c:56:53:1f:b5:90:f1:4a:74: 97:85:d1:08:c7:e3:e8:5b:d1:e0:55:5f:e1:56:58:af:d1:a6: 1a:5c:43:c4:c2:40:7d:e1:e0:8c:e7:21:8f:76:0f:f3:b4:69: e9:d5:8e:6f:1d:e3:d4:dc:c0:e7:4a:d4:b6:da:48:82:6e:92: ac:7f:bf:09:08:ed:2f:ba:b6:cd:c3:76:1a:ba:9c:85:2f:4f: 5b:1b:83:37:46:04:dc:66:99:83:aa:7e:24:ab:c2:68:1d:06: 5d:d7:16:20:04:0f:76:b7:40:0a:0c:ae:2c:2d:3f:8d:b6:8e: 8c:3f:85:ef:a7:1d:37:e8:6c:e0:a6:d9:5b:d0:15:0c:14:98: ad:b7:8b:e6:88:a0:72:16:a5:7a:f3:8e:5d:8d:f2:51:3c:7e: 95:59:f3:c8:8f:1b:5f:6d:25:3f:9f:68:e7:c8:de:8f:40:f0: 12:e9:ba:28:ef:fd:88:b6:10:43:80:ef:40:b2:0c:86:25:b6: e8:22:2a:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJENTExMTAvBgNVBAUTKEM0QzY3RUJCNkIyRERDNjkyNEJCQjk2NTVFN0UwRjgy MTg1MzBDNjUwHhcNMjUwNDAzMDUxMDQ4WhcNMjUwNDEwMDUxMDQ4WjAYMRYwFAYD VQQDEw02N2VlMTg1OC1hOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nfn/WhwcVHkpKIRJKZxyfJVt2ipXMn+W13h6keMz4fw9ALnwwgqqbh/fZPC iuhAZq2Lp6np5tdQv7swKh96d8lXoORRSTkJ0F98xtsT2OWsrZg0DFoBZ+FHD2Qk SKMGdPklcTMF5tdvl+U3LOpHVCSdmEg7qn9hgtakOQjT1cJho73K2FTFrf+0J+XR BAHsbsdr7vnr+dDdMogIr59VsCRRRlAwtGm64sMC/WvXPJwIFYL4NC2f4L0i5HTJ OEibvQNHgemp3dohhOANoKsx86RYEHi2BRmI/KRMtDjCff8N2ChcEhfhsJ1dsN2D Ern3RmvR0RoiuzPiW7WYzoOtpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkByht3 X8Pk9/2lkbtICDWnrmBKMB8GA1UdIwQYMBaAFMTGfrtrLdxpJLu5ZV5+D4IYUwxl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ1MS9FQUU1RkNBQUYy MzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNHa2t1N2xsWG40UGdoaFRE R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNWi11MnN0M0dra3U3bGxYbjRQZ2hoVERHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ1MS9FQUU1RkNBQUYyMzYxMUVFOEM4Qjk3NThDNEY5QUUwMi94TVotdTJzdDNH a2t1N2xsWG40UGdoaFRER1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr0BElEJpUtrOe2eQJ3yYmV+X4cvJdnyssUJeebJhpDc9ELlXAao/i E+0g43WZa2I8J1xHndneDzyVdggbceIcVlMftZDxSnSXhdEIx+PoW9HgVV/hVliv 0aYaXEPEwkB94eCM5yGPdg/ztGnp1Y5vHePU3MDnStS22kiCbpKsf78JCO0vurbN w3YaupyFL09bG4M3RgTcZpmDqn4kq8JoHQZd1xYgBA92t0AKDK4sLT+Nto6MP4Xv px036Gzgptlb0BUMFJitt4vmiKByFqV6845djfJRPH6VWfPIjxtfbSU/n2jnyN6P QPAS6boo7/2IthBDgO9AsgyGJbboIioE -----END CERTIFICATE-----Generated at Sat Apr 5 04:45:45 2025 by rpki-client