$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: z3DjSKBQCmyauPmA9VSF11yjQyrGM7WpMdAyAge5Ml8= Subject key identifier: 6A:4C:B0:56:1B:E6:4F:B8:62:82:E7:37:F9:BC:5F:5F:92:79:D1:62 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 0642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 060D Signing time: Wed 02 Apr 2025 23:02:18 +0000 Manifest this update: Wed 02 Apr 2025 23:02:17 +0000 Manifest next update: Wed 09 Apr 2025 23:02:17 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: 7SMN60HvicXfsnaSUen/sog8AupbrooU2TREkppqzcA=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: P11sIa+o699M+Jrp/6j9KRqVJetMbcC+wvd26lTDVLs=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: /zbyHciIwndBXlxJhKITEkhA9vsFIRYPFElbWadsiXw=) 4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: 6KG4K+YscUuCOPJskrNXUVs3OZB2ppYjCB4dtTgCAMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1602 (0x642) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D Validity Not Before: Apr 2 23:02:17 2025 GMT Not After : Apr 9 23:02:17 2025 GMT Subject: CN=67edc1fa-8bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0e:1a:a4:f8:4c:45:8f:c7:48:82:84:2c:9f: 66:93:5a:ba:90:a3:d4:a9:bc:5d:b5:f2:94:30:d6: bd:16:ee:7f:6e:bc:4d:3f:d3:4f:bd:ef:3d:08:45: f8:58:d4:5e:f4:5b:dd:38:bf:79:e0:b7:30:bc:b9: dc:10:59:ae:87:eb:5b:85:1f:02:f8:f5:c6:2d:46: b2:10:49:06:b2:47:64:d5:aa:4a:13:71:26:e0:8a: 01:7b:25:f9:09:21:da:a4:dd:2a:82:83:d2:a7:96: 09:b6:6b:e0:b4:9e:5b:1f:0f:1d:74:27:8f:22:23: 44:c1:a6:3c:92:79:6f:5a:69:09:86:90:4f:9c:4f: 6a:0b:9d:26:e3:00:07:01:a4:cd:1c:dd:f6:08:81: e9:00:61:f9:fe:2f:da:8f:de:95:c9:49:04:a4:ae: f5:17:b7:1a:30:c2:71:0d:71:32:69:fe:d4:a1:f5: e9:03:dc:84:61:5d:d1:de:80:fb:c5:29:f5:cd:a5: 5b:13:f5:cd:14:74:a8:89:7d:fd:a1:ae:5e:dd:75: de:19:4b:d0:74:0b:04:f0:1c:20:e4:ed:8c:1b:5a: 42:61:b9:12:a4:6f:b1:85:1d:16:cb:ed:2c:ca:36: ed:32:a5:69:06:c0:a8:cb:eb:38:a7:eb:92:90:a2: 94:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4C:B0:56:1B:E6:4F:B8:62:82:E7:37:F9:BC:5F:5F:92:79:D1:62 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:60:a1:a5:48:18:37:b0:66:d5:d7:17:71:ec:ab:34:c9:14: a1:60:fa:a0:f4:e8:1a:76:88:b7:39:f3:15:01:23:f9:4c:a3: cf:69:5f:dd:cb:ca:9a:d3:5e:b9:f8:6d:06:1f:a2:ab:15:0b: 26:d2:26:46:25:3c:fb:14:a7:0b:3c:4d:a4:4b:99:7e:54:0f: 41:de:78:46:0b:cd:52:9c:3d:39:6b:03:c6:13:89:97:7c:3d: ba:f2:7d:85:88:08:4a:e9:c6:f0:e9:f0:a5:1b:bf:67:a4:bd: ca:e9:a9:f0:96:8c:90:f6:07:ac:73:3a:3d:73:e7:19:1f:b3: f8:ed:b7:ec:cf:39:30:04:10:79:70:fd:c4:ba:8b:5d:35:56: 03:4a:a5:41:1d:34:33:fb:30:32:56:33:a3:48:f1:5a:8f:95: 7f:04:cf:e5:d5:6a:ef:0d:0d:95:95:e4:91:78:1e:eb:d7:08: 43:b4:cb:ec:65:43:67:69:91:c4:fa:0c:9f:cc:b7:60:a0:a0: fe:d1:00:61:b3:d6:c9:ed:f6:ff:af:d5:31:c9:5c:75:5e:2e: 36:23:5b:56:47:3f:68:ff:32:4f:c6:46:ec:bd:9d:92:b5:9d: 45:91:8d:54:e2:21:cf:16:5f:d0:b6:ea:8d:52:3a:15:cb:4b: d2:45:6b:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjUwNDAyMjMwMjE3WhcNMjUwNDA5MjMwMjE3WjAYMRYwFAYD VQQDEw02N2VkYzFmYS04YmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1w4apPhMRY/HSIKELJ9mk1q6kKPUqbxdtfKUMNa9Fu5/brxNP9NPve89CEX4 WNRe9FvdOL954LcwvLncEFmuh+tbhR8C+PXGLUayEEkGskdk1apKE3Em4IoBeyX5 CSHapN0qgoPSp5YJtmvgtJ5bHw8ddCePIiNEwaY8knlvWmkJhpBPnE9qC50m4wAH AaTNHN32CIHpAGH5/i/aj96VyUkEpK71F7caMMJxDXEyaf7UofXpA9yEYV3R3oD7 xSn1zaVbE/XNFHSoiX39oa5e3XXeGUvQdAsE8Bwg5O2MG1pCYbkSpG+xhR0Wy+0s yjbtMqVpBsCoy+s4p+uSkKKUjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpMsFYb 5k+4YoLnN/m8X1+SedFiMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6YKGlSBg3sGbV1xdx7Ks0yRShYPqg9Ogadoi3OfMVASP5TKPPaV/d y8qa0165+G0GH6KrFQsm0iZGJTz7FKcLPE2kS5l+VA9B3nhGC81SnD05awPGE4mX fD268n2FiAhK6cbw6fClG79npL3K6anwloyQ9gesczo9c+cZH7P47bfszzkwBBB5 cP3EuotdNVYDSqVBHTQz+zAyVjOjSPFaj5V/BM/l1WrvDQ2VleSReB7r1whDtMvs ZUNnaZHE+gyfzLdgoKD+0QBhs9bJ7fb/r9UxyVx1Xi42I1tWRz9o/zJPxkbsvZ2S tZ1FkY1U4iHPFl/QtuqNUjoVy0vSRWsP -----END CERTIFICATE-----Generated at Fri Apr 4 21:53:57 2025 by rpki-client