$ rpki-client -vvf rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft File: XQ11AElW7cyrm4QnGnNA5jhV_4o.mft (raw, json) Hash identifier: Sm3wP5lARBytzdzJjrbibbS8IYU/RB/ea7QiViXgxO4= Subject key identifier: 02:F7:86:44:C0:86:2A:76:8D:4A:9C:EF:CC:CF:4D:34:0D:8B:F7:AC Authority key identifier: 5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A Certificate issuer: /CN=A912BC39/serialNumber=5D0D75004956EDCCAB9B84271A7340E63855FF8A Certificate serial: 06FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft Manifest number: 06F0 Signing time: Fri 28 Mar 2025 22:16:33 +0000 Manifest this update: Fri 28 Mar 2025 22:16:33 +0000 Manifest next update: Fri 04 Apr 2025 22:16:33 +0000 Files and hashes: 1: XQ11AElW7cyrm4QnGnNA5jhV_4o.crl (hash: TTp6DllrszLuKn2WhMq2tUc8VZcXF1IWLW53zFm1e5M=) 2: 8EBA772E3F2B11EB87759716C4F9AE02.roa (hash: IwbM0qanfV+e3+145YunmnHjT+laZw+y8+B4ZLa5xus=) 3: 688EAE1E8A1911EC94921D85C4F9AE02.roa (hash: l86iuU4A1knmyjZ3msJqjoeK6VLpJ7MZC8Ec9/M8Wvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1788 (0x6fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BC39 Validity Not Before: Mar 28 22:16:33 2025 GMT Not After : Apr 4 22:16:33 2025 GMT Subject: CN=67e71fc1-f838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:5d:b5:de:0a:1c:82:cb:d5:3a:2d:d4:7f: e3:87:67:62:d5:cd:06:32:3f:d6:43:74:57:26:af: 18:d9:ad:ba:62:f0:8c:6e:de:bb:27:15:be:35:80: 29:5a:e3:39:3a:3f:64:d4:76:60:04:16:16:be:71: 4a:ba:8b:6b:8a:10:5c:1a:2b:5f:f8:bd:42:42:57: f4:c2:b1:37:9c:c3:82:2c:60:46:33:d9:90:8b:d9: 8e:ca:5e:e3:db:16:39:c3:b6:9a:d3:9a:c0:0f:23: fa:6c:f5:23:5c:1f:e1:9b:3f:17:d1:1d:45:a4:fc: 13:e4:7d:fd:05:ee:74:21:c2:30:8a:a2:ad:71:4c: d4:e1:66:5b:0e:00:13:1c:7b:99:a4:e7:02:ec:7b: b4:9b:71:db:ba:d6:d6:55:e4:30:51:71:a1:0c:15: 28:18:db:d0:04:b7:90:5b:a0:84:ed:6c:a7:d2:70: 25:5a:12:11:d5:5d:d9:e7:bd:b2:2d:6b:01:11:05: e0:6a:84:7e:3b:0b:3e:3c:4a:30:7f:59:55:40:16: 54:5d:7b:d1:0f:da:8c:9c:6a:7a:a1:f5:e0:90:67: 7a:f4:ac:ff:e4:80:89:bf:0f:05:fc:75:e3:24:0e: 29:db:5c:4c:de:16:c8:55:f7:c3:74:81:91:18:83: 9b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F7:86:44:C0:86:2A:76:8D:4A:9C:EF:CC:CF:4D:34:0D:8B:F7:AC X509v3 Authority Key Identifier: keyid:5D:0D:75:00:49:56:ED:CC:AB:9B:84:27:1A:73:40:E6:38:55:FF:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XQ11AElW7cyrm4QnGnNA5jhV_4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BC39/B37B158E3F2911EB9B9A2314C4F9AE02/XQ11AElW7cyrm4QnGnNA5jhV_4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:99:ac:b2:f2:aa:0d:11:22:05:18:4e:37:72:d1:5f:53:ae: 84:47:75:a1:88:50:c4:47:ec:70:63:e8:12:eb:67:73:9b:a5: 7a:9d:1c:36:e1:26:23:49:d4:45:22:8e:5b:97:fd:87:f9:81: b5:e4:93:29:37:98:0f:57:d4:94:28:4f:7e:ba:3f:27:e0:ae: f3:b0:42:d9:94:3a:d1:83:85:9a:2a:7b:d3:e4:34:42:a2:14: 95:48:a0:fa:8f:02:c6:74:f4:f4:b6:49:cb:fd:e4:93:1b:d5: 5a:99:ed:05:d6:db:31:1a:e4:bf:0f:c7:5c:ea:d0:2a:bb:e2: 14:22:e4:6b:81:cb:0b:1a:5e:55:d8:6c:9f:31:0c:9e:4e:0d: a9:25:16:e5:dc:a3:54:34:00:5a:ab:8a:84:86:59:40:e9:da: a4:67:f6:48:30:4c:f0:f4:20:74:58:dd:c2:ea:fb:9a:37:e9: c7:4a:3f:55:51:5f:45:b3:19:9c:2d:ed:d3:e0:91:4f:de:4a: c5:11:7f:4d:70:d0:74:14:ec:14:8b:c6:0d:13:6c:f6:cf:59: 37:ef:f9:70:bc:86:ed:75:1b:1e:37:93:2b:b5:84:37:e9:88: 7a:bb:80:f6:d4:e1:7b:a6:dd:23:07:f1:29:b8:5c:92:fa:4b: b2:a8:6a:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJDMzkxMTAvBgNVBAUTKDVEMEQ3NTAwNDk1NkVEQ0NBQjlCODQyNzFBNzM0MEU2 Mzg1NUZGOEEwHhcNMjUwMzI4MjIxNjMzWhcNMjUwNDA0MjIxNjMzWjAYMRYwFAYD VQQDEw02N2U3MWZjMS1mODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxltdtd4KHILL1Tot1H/jh2di1c0GMj/WQ3RXJq8Y2a26YvCMbt67JxW+NYAp WuM5Oj9k1HZgBBYWvnFKuotrihBcGitf+L1CQlf0wrE3nMOCLGBGM9mQi9mOyl7j 2xY5w7aa05rADyP6bPUjXB/hmz8X0R1FpPwT5H39Be50IcIwiqKtcUzU4WZbDgAT HHuZpOcC7Hu0m3HbutbWVeQwUXGhDBUoGNvQBLeQW6CE7Wyn0nAlWhIR1V3Z572y LWsBEQXgaoR+Ows+PEowf1lVQBZUXXvRD9qMnGp6ofXgkGd69Kz/5ICJvw8F/HXj JA4p21xM3hbIVffDdIGRGIOb1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAL3hkTA hip2jUqc78zPTTQNi/esMB8GA1UdIwQYMBaAFF0NdQBJVu3Mq5uEJxpzQOY4Vf+K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkMzOS9CMzdCMTU4RTNG MjkxMUVCOUI5QTIzMTRDNEY5QUUwMi9YUTExQUVsVzdjeXJtNFFuR25OQTVqaFZf NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hRMTFBRWxXN2N5cm00UW5Hbk5BNWpoVl80by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkMzOS9CMzdCMTU4RTNGMjkxMUVCOUI5QTIzMTRDNEY5QUUwMi9YUTExQUVsVzdj eXJtNFFuR25OQTVqaFZfNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVmayy8qoNESIFGE43ctFfU66ER3WhiFDER+xwY+gS62dzm6V6nRw2 4SYjSdRFIo5bl/2H+YG15JMpN5gPV9SUKE9+uj8n4K7zsELZlDrRg4WaKnvT5DRC ohSVSKD6jwLGdPT0tknL/eSTG9Vame0F1tsxGuS/D8dc6tAqu+IUIuRrgcsLGl5V 2GyfMQyeTg2pJRbl3KNUNABaq4qEhllA6dqkZ/ZIMEzw9CB0WN3C6vuaN+nHSj9V UV9FsxmcLe3T4JFP3krFEX9NcNB0FOwUi8YNE2z2z1k37/lwvIbtdRseN5MrtYQ3 6Yh6u4D21OF7pt0jB/EpuFyS+kuyqGq1 -----END CERTIFICATE-----Generated at Fri Apr 4 18:30:02 2025 by rpki-client