$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json) Hash identifier: tgtykVFuWYAPGQ+e+nxDMp/+ms9XsazF3OitbjvJW6k= Subject key identifier: A6:4E:9C:D3:12:C3:7B:42:A4:7D:B2:D1:00:D2:47:40:36:C3:78:0E Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Certificate serial: 0526 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft Manifest number: 0522 Signing time: Wed 02 Apr 2025 23:32:14 +0000 Manifest this update: Wed 02 Apr 2025 23:32:13 +0000 Manifest next update: Wed 09 Apr 2025 23:32:13 +0000 Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: /mZn75DRIPpRcekRLPfyt1SBX8EBOLkUGO1iFECXqOA=) 2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: mmb+6qMWLAl/o5ujhFGq4lHoA5XfllDMtxdPhnJR8HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1318 (0x526) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126D40 Validity Not Before: Apr 2 23:32:13 2025 GMT Not After : Apr 9 23:32:13 2025 GMT Subject: CN=67edc8fd-5603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:36:c3:2a:34:f3:b3:b6:66:4f:cb:54:00:8e: 3c:fd:c4:b5:dc:a7:2c:11:26:88:71:18:b7:18:43: 97:bf:be:9c:8e:45:84:07:d3:19:04:21:7d:89:56: 43:69:98:55:4e:98:a8:19:c3:e7:79:b2:8d:4c:3b: c0:64:70:82:b4:cb:71:5e:e4:49:d1:08:b8:dc:80: 01:3f:46:f1:96:16:79:bf:a2:8b:c3:6c:ab:74:ab: 1a:57:25:ef:a2:6a:5b:2b:be:fa:f7:97:16:c6:74: c1:b5:62:43:00:5f:36:dd:21:61:08:bb:9e:8a:19: ee:1d:7e:55:9d:a5:1f:a7:ba:af:e6:2e:b1:47:28: a6:17:7c:26:c4:b7:f7:f2:93:d4:71:33:f6:f9:35: 33:a4:de:08:81:92:d8:f5:6b:12:8c:b2:53:86:94: f3:5e:5d:9b:fa:0f:b8:b0:c1:9a:82:90:e3:86:e9: cf:d9:40:e4:cf:93:0a:56:d9:b4:c4:cf:bc:51:8b: c6:d0:3f:36:74:39:a3:10:41:97:21:73:1f:c1:5a: 71:20:54:44:de:3b:28:82:e4:9c:f9:fb:ea:c8:0c: cb:d0:f5:f2:43:52:88:b3:fc:67:bb:4b:49:60:bd: d4:b4:36:b2:b3:0f:53:71:ec:68:a7:a0:70:16:0e: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4E:9C:D3:12:C3:7B:42:A4:7D:B2:D1:00:D2:47:40:36:C3:78:0E X509v3 Authority Key Identifier: keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b6:22:f8:6f:24:85:83:de:e3:f7:83:81:3a:8a:ab:a9:20: 80:81:e9:c7:66:b9:21:56:ce:26:2f:4f:bf:fa:b4:f5:c1:b1: a2:33:43:dd:91:71:99:46:58:2d:1a:ea:dc:f2:51:95:6b:17: 65:4b:f6:32:da:f7:5f:aa:8d:e3:75:ba:b2:a3:46:80:8b:66: 15:b4:42:e9:c6:71:fb:c1:5e:c2:0e:64:b4:a7:d1:dd:30:91: 8f:b6:c0:3d:3c:99:f4:d7:e8:e9:f6:30:6e:fd:59:ea:44:53: c8:0a:97:3c:ff:86:da:8d:e8:ff:ec:14:87:13:a6:0d:59:5a: 5b:55:42:4f:dc:be:9b:75:32:74:45:1d:cb:4d:73:7c:d4:be: 40:9f:af:91:3e:51:c4:53:31:e3:5e:d8:f5:60:c8:84:de:b3: e6:3d:31:d6:1d:47:5b:31:d0:a5:6c:31:de:7d:68:19:a0:9f: ba:c5:82:12:ed:b0:e1:1a:89:a7:40:27:c0:d8:6c:ae:ac:84: 9c:96:1a:e6:0d:c0:5a:f3:31:22:1c:68:16:3c:c4:6b:5d:48: 40:05:c9:39:a0:fa:49:e7:02:6c:18:3c:aa:f4:db:d3:7d:42: b5:06:59:9b:33:20:ff:d0:37:f2:84:c3:7a:5a:f4:cd:53:92: a3:1f:40:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZENDAxMTAvBgNVBAUTKEE3MTAzRkQzM0Y2QzhBNjQ0OEZDNjM5NDBBQTk3RDkz RjgxRjgxMDUwHhcNMjUwNDAyMjMzMjEzWhcNMjUwNDA5MjMzMjEzWjAYMRYwFAYD VQQDEw02N2VkYzhmZC01NjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TbDKjTzs7ZmT8tUAI48/cS13KcsESaIcRi3GEOXv76cjkWEB9MZBCF9iVZD aZhVTpioGcPnebKNTDvAZHCCtMtxXuRJ0Qi43IABP0bxlhZ5v6KLw2yrdKsaVyXv ompbK77695cWxnTBtWJDAF823SFhCLueihnuHX5VnaUfp7qv5i6xRyimF3wmxLf3 8pPUcTP2+TUzpN4IgZLY9WsSjLJThpTzXl2b+g+4sMGagpDjhunP2UDkz5MKVtm0 xM+8UYvG0D82dDmjEEGXIXMfwVpxIFRE3jsoguSc+fvqyAzL0PXyQ1KIs/xnu0tJ YL3UtDaysw9Tcexop6BwFg7TlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZOnNMS w3tCpH2y0QDSR0A2w3gOMB8GA1UdIwQYMBaAFKcQP9M/bIpkSPxjlAqpfZP4H4EF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkQ0MC8zQzYzMzNDNkYz RjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2ltUklfR09VQ3FsOWtfZ2Zn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B4QV8wejlzaW1SSV9HT1VDcWw5a19nZmdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkQ0MC8zQzYzMzNDNkYzRjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2lt UklfR09VQ3FsOWtfZ2ZnUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7tiL4bySFg97j94OBOoqrqSCAgenHZrkhVs4mL0+/+rT1wbGiM0Pd kXGZRlgtGurc8lGVaxdlS/Yy2vdfqo3jdbqyo0aAi2YVtELpxnH7wV7CDmS0p9Hd MJGPtsA9PJn01+jp9jBu/VnqRFPICpc8/4bajej/7BSHE6YNWVpbVUJP3L6bdTJ0 RR3LTXN81L5An6+RPlHEUzHjXtj1YMiE3rPmPTHWHUdbMdClbDHefWgZoJ+6xYIS 7bDhGomnQCfA2GyurISclhrmDcBa8zEiHGgWPMRrXUhABck5oPpJ5wJsGDyq9NvT fUK1BlmbMyD/0DfyhMN6WvTNU5KjH0BT -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:14 2025 by rpki-client