$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft File: Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json) Hash identifier: 2wKpCJyBOkXpz8WqNuq/FEkmMID8iGbxijIuzHssWso= Subject key identifier: A9:65:A8:15:35:4E:8E:3B:28:98:C5:0E:6E:4C:B8:9A:26:2C:26:5B Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F Certificate issuer: /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F Certificate serial: 0772 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft Manifest number: 076A Signing time: Wed 02 Apr 2025 21:28:21 +0000 Manifest this update: Wed 02 Apr 2025 21:28:21 +0000 Manifest next update: Wed 09 Apr 2025 21:28:21 +0000 Files and hashes: 1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: mFyvIFaqajpJBH4Yc/J+l/ig7eb2Jvq99lodWZtJUps=) 2: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: 2EESpGE96F3IVjtLV41daSR2L6O8KHOUeR6PY1Lrgz4=) 3: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: 0Y4V+EWkL3FbcoWlsNiGkR+IyKHT+HocUV9zzfnIVl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1906 (0x772) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122E09 Validity Not Before: Apr 2 21:28:21 2025 GMT Not After : Apr 9 21:28:21 2025 GMT Subject: CN=67edabf5-c784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:90:dd:d4:60:c3:ea:7b:c7:54:d7:c0:38:a9: 4d:4b:17:36:fa:e7:0c:46:f8:37:be:ca:03:e0:a2: 9c:4e:65:c0:4d:a2:59:2c:cf:a9:da:ae:66:3f:20: 88:d3:a1:53:8d:e7:6e:0c:b5:d9:77:9a:f0:9d:a9: d2:fa:61:7c:eb:57:a7:cc:25:cc:03:70:17:4a:68: 9e:4a:a7:79:76:71:f9:90:f0:66:51:e4:b0:38:22: d9:e0:07:98:2a:6e:fb:2a:b4:a1:ed:3d:bf:62:55: 26:de:dd:d7:29:f1:c6:d3:54:f3:df:3f:fd:6a:f4: db:47:59:2f:6e:fb:1a:6c:9c:a7:84:c8:78:14:df: 9c:f9:f2:ff:68:e9:05:eb:f2:94:99:4b:23:5d:f5: e2:e2:5c:eb:6b:c8:5e:d2:16:ea:b8:6d:8c:fd:3b: b0:ff:7e:98:a6:54:40:b7:70:1a:e3:3c:a6:d0:06: da:19:79:86:45:4d:b1:1c:66:b9:5d:9b:87:b2:6c: d7:7a:fe:6b:e1:cd:fa:f9:b0:40:65:fb:fe:c0:5d: b4:c0:d0:c2:69:c6:ba:1f:81:76:44:3d:31:c1:14: be:bf:c9:b2:2c:2b:14:91:85:c1:ba:d0:4b:c5:d5: 76:c2:ff:11:5a:02:94:08:4b:91:e0:b8:46:b4:83: d0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:65:A8:15:35:4E:8E:3B:28:98:C5:0E:6E:4C:B8:9A:26:2C:26:5B X509v3 Authority Key Identifier: keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:19:93:52:97:90:07:9d:69:3a:9d:ba:32:9e:4e:2a:f6:07: d7:e9:b9:ea:31:5c:7d:8f:23:e3:be:b2:2d:fa:46:0f:f5:fa: 38:89:82:bf:1b:0d:99:4f:6f:c9:8e:f5:0c:8f:59:37:5d:2c: 92:fe:be:2c:1d:2f:29:f5:23:05:67:d0:41:6f:f4:6e:10:a1: 1b:8f:02:3b:62:23:3a:29:f4:f0:82:58:3c:f0:c1:8a:10:42: a7:49:a7:d1:ed:3a:ff:ea:06:ba:a5:1c:92:98:f2:06:48:57: 39:9b:7f:0d:33:e2:ff:bd:00:f1:95:ed:6d:b6:1a:e4:fa:aa: 25:73:5a:24:b3:9f:d7:7a:c6:aa:cc:ec:da:ad:fe:99:c9:f8: 81:02:54:41:7d:c0:dd:41:49:7a:cf:b4:59:5e:52:4f:c9:5b: 13:d5:16:b1:b2:5a:42:64:61:b9:1f:37:8f:17:61:70:d5:9e: df:d5:44:c3:59:eb:95:b1:01:07:40:03:da:86:5e:1b:ea:5e: 12:e8:ea:48:25:78:b4:d7:de:b4:88:24:6c:f9:1f:db:b8:6a: 5b:f8:04:c2:ec:62:93:81:d6:7f:aa:77:ad:90:3e:3c:45:9f: a8:6b:34:16:fe:1f:44:8a:18:95:10:64:fc:21:fd:bb:3b:f4: 50:ac:e0:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFMDkxMTAvBgNVBAUTKDVGMUQzMEU5NzNCNUMxQzhBODBGNjA0N0RDNTI5Nzc4 OTQwNDRDM0YwHhcNMjUwNDAyMjEyODIxWhcNMjUwNDA5MjEyODIxWjAYMRYwFAYD VQQDEw02N2VkYWJmNS1jNzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA75Dd1GDD6nvHVNfAOKlNSxc2+ucMRvg3vsoD4KKcTmXATaJZLM+p2q5mPyCI 06FTjeduDLXZd5rwnanS+mF861enzCXMA3AXSmieSqd5dnH5kPBmUeSwOCLZ4AeY Km77KrSh7T2/YlUm3t3XKfHG01Tz3z/9avTbR1kvbvsabJynhMh4FN+c+fL/aOkF 6/KUmUsjXfXi4lzra8he0hbquG2M/Tuw/36YplRAt3Aa4zym0AbaGXmGRU2xHGa5 XZuHsmzXev5r4c36+bBAZfv+wF20wNDCaca6H4F2RD0xwRS+v8myLCsUkYXButBL xdV2wv8RWgKUCEuR4LhGtIPQrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKllqBU1 To47KJjFDm5MuJomLCZbMB8GA1UdIwQYMBaAFF8dMOlztcHIqA9gR9xSl3iUBEw/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkUwOS8wMUE1ODM3QTBG NjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdjaW9EMkJIM0ZLWGVKUUVU RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4MHc2WE8xd2Npb0QyQkgzRktYZUpRRVREOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkUwOS8wMUE1ODM3QTBGNjQxMUVCOUZENTM3NDlDNEY5QUUwMi9YeDB3NlhPMXdj aW9EMkJIM0ZLWGVKUUVURDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiGZNSl5AHnWk6nboynk4q9gfX6bnqMVx9jyPjvrIt+kYP9fo4iYK/ Gw2ZT2/JjvUMj1k3XSyS/r4sHS8p9SMFZ9BBb/RuEKEbjwI7YiM6KfTwglg88MGK EEKnSafR7Tr/6ga6pRySmPIGSFc5m38NM+L/vQDxle1tthrk+qolc1oks5/Xesaq zOzarf6ZyfiBAlRBfcDdQUl6z7RZXlJPyVsT1RaxslpCZGG5HzePF2Fw1Z7f1UTD WeuVsQEHQAPahl4b6l4S6OpIJXi01960iCRs+R/buGpb+ATC7GKTgdZ/qnetkD48 RZ+oazQW/h9EihiVEGT8If27O/RQrOB/ -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:29 2025 by rpki-client