$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft File: XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft (raw, json) Hash identifier: hSYconEusms9BbTe8py6JPrHODny71Bj+OqhRlzDXPo= Subject key identifier: D1:D9:6A:CB:D4:3E:C2:20:FC:89:70:AF:CB:A1:06:8C:8E:A7:E7:67 Authority key identifier: 5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E Certificate issuer: /CN=A9127EAD/serialNumber=5E84251665704CDDDF2F3F9BE82E31FFB074A58E Certificate serial: 07D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft Manifest number: 07CC Signing time: Wed 02 Apr 2025 21:03:08 +0000 Manifest this update: Wed 02 Apr 2025 21:03:08 +0000 Manifest next update: Wed 09 Apr 2025 21:03:08 +0000 Files and hashes: 1: XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl (hash: sRIGV7BgqLyubvVH9wBWveTWvUFQsAVk43/R52qdH4Y=) 2: 6CAC2064EA2211EA9C2F064AC4F9AE02.roa (hash: 8MctpWGtN4TB9CaLOxK2lVRFp6WdGzpjql1y9Hz4Ctk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127EAD Validity Not Before: Apr 2 21:03:08 2025 GMT Not After : Apr 9 21:03:08 2025 GMT Subject: CN=67eda60c-c508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:7e:ce:b1:b2:8b:08:23:de:53:4d:50:ab: 78:c5:f0:e3:26:aa:dc:cf:87:f7:d4:e0:aa:07:f9: 9f:81:e6:14:a9:7e:51:dc:51:a6:2b:dd:f2:d7:c1: d2:c7:bb:a7:9c:30:4b:62:06:ca:47:92:13:56:2c: 66:86:15:e2:4e:1a:78:08:65:f8:5a:ae:2c:3d:4f: e4:9c:74:a6:8c:3c:6c:38:64:f5:d5:56:b5:df:57: 92:a7:5c:af:f6:f7:64:6b:a8:c4:ef:92:33:25:d5: 21:6c:51:22:db:69:1d:51:55:0f:59:d3:8e:17:02: 43:ec:1f:27:de:30:8b:8c:a5:1d:e1:f9:1c:ae:b2: e8:44:6a:81:42:b2:b2:23:3e:f0:d8:dc:7c:0e:4d: 02:51:e9:b8:3c:c0:aa:89:06:27:55:ea:01:c6:c9: 5e:5a:53:0c:43:0c:ba:11:78:49:85:19:7e:23:da: ea:99:7f:2d:91:a8:53:31:6b:0c:09:5f:8b:42:f0: df:32:b5:fe:3b:ea:12:b3:0f:a0:f8:7f:1d:6d:b1: 57:78:d4:1e:e3:db:58:63:d1:00:9e:e1:92:41:96: a6:37:78:3a:b8:ea:5d:4e:51:46:4d:8d:3b:a1:7b: 5b:d7:18:bf:1b:bc:ea:93:bd:5a:5f:09:51:fa:ba: ef:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D9:6A:CB:D4:3E:C2:20:FC:89:70:AF:CB:A1:06:8C:8E:A7:E7:67 X509v3 Authority Key Identifier: keyid:5E:84:25:16:65:70:4C:DD:DF:2F:3F:9B:E8:2E:31:FF:B0:74:A5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoQlFmVwTN3fLz-b6C4x_7B0pY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EAD/E9B70666EA2011EA9CBFAD48C4F9AE02/XoQlFmVwTN3fLz-b6C4x_7B0pY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:87:3a:b8:5d:a3:16:d5:fc:d5:b3:27:49:e0:34:60:cc:9b: 2c:fc:12:ff:b8:af:1e:a4:5f:96:69:92:33:40:c5:b6:e0:12: b6:40:06:4c:b3:ed:e3:3d:f5:3a:f1:c5:5d:bb:19:8e:c4:be: 0f:bf:86:63:ea:9a:d8:75:c5:5e:fa:81:12:16:c5:ed:9b:e5: 2a:77:75:67:ae:40:ee:16:03:79:f8:79:26:74:56:11:9f:b7: be:3b:8b:b6:20:b8:1b:9e:4a:21:7c:fc:4b:9b:f6:57:78:1a: 4b:5d:d6:c2:91:a7:6f:af:d3:86:52:e7:aa:d6:46:35:f6:70: 99:ea:1c:00:95:de:f2:4e:ee:a8:f7:97:d0:52:2c:8f:fe:ee: be:4a:a9:86:74:23:86:31:0d:43:85:cb:27:c3:4e:86:7f:3c: 0f:4b:74:6f:7f:59:c3:0c:4e:ea:30:8f:1d:41:3e:54:c1:82: b0:96:ed:2f:fc:2e:92:cc:40:3e:7c:60:c2:8e:eb:0b:53:e5: 29:fd:4d:3c:aa:18:dd:48:75:8f:d2:c2:ee:51:af:0f:24:27: b6:6a:d0:b9:4e:5d:d0:56:67:16:11:d1:1c:6a:44:b9:1b:a3: 03:cc:a9:cc:0b:60:de:6e:56:a4:9c:2e:2b:fe:a9:fa:c6:f0: b1:7e:ba:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFQUQxMTAvBgNVBAUTKDVFODQyNTE2NjU3MDRDRERERjJGM0Y5QkU4MkUzMUZG QjA3NEE1OEUwHhcNMjUwNDAyMjEwMzA4WhcNMjUwNDA5MjEwMzA4WjAYMRYwFAYD VQQDEw02N2VkYTYwYy1jNTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz61+zrGyiwgj3lNNUKt4xfDjJqrcz4f31OCqB/mfgeYUqX5R3FGmK93y18HS x7unnDBLYgbKR5ITVixmhhXiThp4CGX4Wq4sPU/knHSmjDxsOGT11Va131eSp1yv 9vdka6jE75IzJdUhbFEi22kdUVUPWdOOFwJD7B8n3jCLjKUd4fkcrrLoRGqBQrKy Iz7w2Nx8Dk0CUem4PMCqiQYnVeoBxsleWlMMQwy6EXhJhRl+I9rqmX8tkahTMWsM CV+LQvDfMrX+O+oSsw+g+H8dbbFXeNQe49tYY9EAnuGSQZamN3g6uOpdTlFGTY07 oXtb1xi/G7zqk71aXwlR+rrvvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHZasvU PsIg/Ilwr8uhBoyOp+dnMB8GA1UdIwQYMBaAFF6EJRZlcEzd3y8/m+guMf+wdKWO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VBRC9FOUI3MDY2NkVB MjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1ROM2ZMei1iNkM0eF83QjBw WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvUWxGbVZ3VE4zZkx6LWI2QzR4XzdCMHBZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0VBRC9FOUI3MDY2NkVBMjAxMUVBOUNCRkFENDhDNEY5QUUwMi9Yb1FsRm1Wd1RO M2ZMei1iNkM0eF83QjBwWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLhzq4XaMW1fzVsydJ4DRgzJss/BL/uK8epF+WaZIzQMW24BK2QAZM s+3jPfU68cVduxmOxL4Pv4Zj6prYdcVe+oESFsXtm+Uqd3VnrkDuFgN5+HkmdFYR n7e+O4u2ILgbnkohfPxLm/ZXeBpLXdbCkadvr9OGUueq1kY19nCZ6hwAld7yTu6o 95fQUiyP/u6+SqmGdCOGMQ1Dhcsnw06GfzwPS3Rvf1nDDE7qMI8dQT5UwYKwlu0v /C6SzEA+fGDCjusLU+Up/U08qhjdSHWP0sLuUa8PJCe2atC5Tl3QVmcWEdEcakS5 G6MDzKnMC2DeblaknC4r/qn6xvCxfrqE -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:05 2025 by rpki-client