$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft File: c0XTOFGViQaITYcWQKS-0shG0U4.mft (raw, json) Hash identifier: HTeM/66QKN/KHXDBlItw9ziy+GkUz//z2TPO4WrbfTQ= Subject key identifier: 1F:E8:28:4C:BD:58:9B:F4:3F:CB:5B:1A:99:F6:03:72:76:13:82:26 Authority key identifier: 73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E Certificate issuer: /CN=A912F3B6/serialNumber=7345D33851958906884D871640A4BED2C846D14E Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft Manifest number: 8B Signing time: Thu 17 Apr 2025 05:19:30 +0000 Manifest this update: Thu 17 Apr 2025 05:19:30 +0000 Manifest next update: Thu 24 Apr 2025 05:19:30 +0000 Files and hashes: 1: c0XTOFGViQaITYcWQKS-0shG0U4.crl (hash: e6reHd1GsMoZVegarPEFodlnrDf7z4qFU802kPQdnMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 05:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=7345D33851958906884D871640A4BED2C846D14E Validity Not Before: Apr 17 05:19:30 2025 GMT Not After : Apr 24 05:19:30 2025 GMT Subject: CN=68008f62-6d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f1:66:e9:1e:79:ab:af:32:ae:e4:88:f6:c6: 99:36:c4:ef:41:f1:3c:57:3f:a5:7d:49:28:3f:b6: c4:57:84:8c:bc:6f:83:40:49:f7:8b:38:40:de:a4: 8f:61:f0:75:9e:cb:4e:fb:4a:5b:e2:b4:3a:1f:53: 9b:45:ce:ec:4d:4c:43:b3:fb:79:3e:77:7e:19:e9: da:b2:ac:7c:26:64:aa:82:83:21:6c:64:27:1f:e8: e9:5e:51:6d:be:24:96:7e:4d:64:7b:74:81:e5:63: ab:f2:c4:cc:a3:71:8f:1b:60:e9:64:ad:6d:9d:ae: a4:a4:f1:4e:7a:17:6e:c5:5b:db:5e:4b:4e:98:5d: 46:b8:bb:90:1d:57:b8:65:32:4a:47:45:87:2a:42: b3:c4:8d:4e:22:d4:c0:f0:46:2f:6c:43:db:5e:06: 2d:60:66:ab:4e:14:e2:23:fa:8b:65:bf:d5:fc:5b: df:0a:92:c4:0b:83:fd:f8:00:cf:51:39:f0:b2:b5: cb:af:4a:99:ab:a8:ef:f7:e5:6f:47:a7:dc:cb:e3: 1a:a9:f6:31:e7:09:97:94:77:fc:b5:43:e2:9a:3e: 3d:c8:41:31:58:1a:f9:9b:71:11:49:3c:40:5d:79: af:b4:2e:7b:af:80:36:41:64:74:4c:56:d1:68:87: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E8:28:4C:BD:58:9B:F4:3F:CB:5B:1A:99:F6:03:72:76:13:82:26 X509v3 Authority Key Identifier: keyid:73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:31:6a:a1:ec:fe:0e:47:20:2d:a9:e7:17:c7:24:ae:a5:40: b1:2d:90:7e:70:47:45:35:63:4a:25:6a:4c:57:7c:1d:fe:58: b9:2d:b3:89:f1:70:f6:26:64:93:5c:26:3a:8f:b8:03:16:79: 87:92:8f:b5:2a:d4:5d:de:28:4a:bf:7b:a5:82:2b:98:f0:ef: 3a:16:3b:7a:40:66:b9:6d:cf:7d:37:06:6a:27:cf:41:c2:e8: c3:8e:8d:24:e2:95:99:22:bb:9b:bf:32:0e:b4:cf:ea:e1:fd: 5a:fa:11:fb:a7:fd:8c:13:18:4b:dc:99:91:4e:34:6c:f4:ff: 88:f1:c8:98:75:88:f1:b4:26:26:23:73:b0:a8:2b:05:8f:f1: 36:4d:a4:ef:3c:dc:24:c6:89:cb:ab:47:76:80:04:2a:cf:cc: ed:fc:3e:b0:40:25:0c:94:32:f5:89:e4:90:24:c5:08:c5:c8: 73:51:99:63:fd:00:35:d0:8c:76:b3:f2:d3:54:5d:08:f0:ce: 84:f7:79:ac:1f:e7:10:4f:63:0b:b2:66:1d:5c:3b:aa:68:c6: 06:da:78:cc:58:64:b9:15:77:88:c3:7a:49:fa:f6:71:2c:73: 8c:49:44:52:93:e3:ee:b6:1f:88:e7:ed:8f:6a:67:0c:90:54: 1e:b5:a4:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDczNDVEMzM4NTE5NTg5MDY4ODREODcxNjQwQTRCRUQy Qzg0NkQxNEUwHhcNMjUwNDE3MDUxOTMwWhcNMjUwNDI0MDUxOTMwWjAYMRYwFAYD VQQDEw02ODAwOGY2Mi02ZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/Fm6R55q68yruSI9saZNsTvQfE8Vz+lfUkoP7bEV4SMvG+DQEn3izhA3qSP YfB1nstO+0pb4rQ6H1ObRc7sTUxDs/t5Pnd+Genasqx8JmSqgoMhbGQnH+jpXlFt viSWfk1ke3SB5WOr8sTMo3GPG2DpZK1tna6kpPFOehduxVvbXktOmF1GuLuQHVe4 ZTJKR0WHKkKzxI1OItTA8EYvbEPbXgYtYGarThTiI/qLZb/V/FvfCpLEC4P9+ADP UTnwsrXLr0qZq6jv9+VvR6fcy+MaqfYx5wmXlHf8tUPimj49yEExWBr5m3ERSTxA XXmvtC57r4A2QWR0TFbRaIeNGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/oKEy9 WJv0P8tbGpn2A3J2E4ImMB8GA1UdIwQYMBaAFHNF0zhRlYkGiE2HFkCkvtLIRtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81OUM0QUQ0QTQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlRYUlUWWNXUUtTLTBzaEcw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwWFRPRkdWaVFhSVRZY1dRS1MtMHNoRzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81OUM0QUQ0QTQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlR YUlUWWNXUUtTLTBzaEcwVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANMWqh7P4ORyAtqecXxySupUCxLZB+cEdFNWNKJWpMV3wd/li5LbOJ 8XD2JmSTXCY6j7gDFnmHko+1KtRd3ihKv3ulgiuY8O86Fjt6QGa5bc99NwZqJ89B wujDjo0k4pWZIrubvzIOtM/q4f1a+hH7p/2MExhL3JmRTjRs9P+I8ciYdYjxtCYm I3OwqCsFj/E2TaTvPNwkxonLq0d2gAQqz8zt/D6wQCUMlDL1ieSQJMUIxchzUZlj /QA10Ix2s/LTVF0I8M6E93msH+cQT2MLsmYdXDuqaMYG2njMWGS5FXeIw3pJ+vZx LHOMSURSk+Puth+I5+2PamcMkFQetaQp -----END CERTIFICATE-----Generated at Fri Apr 18 19:19:51 2025 by rpki-client