$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: nEE4eVMVBcLWl8AlBAHy3/y9J/KdkL52gYtPQn7a6LY= Subject key identifier: DA:91:A8:D3:92:E6:A0:9D:3E:42:DD:DB:80:53:AB:15:2E:DB:25:D6 Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: 019F Signing time: Sat 29 Mar 2025 02:57:24 +0000 Manifest this update: Sat 29 Mar 2025 02:57:24 +0000 Manifest next update: Sat 05 Apr 2025 02:57:24 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: 6z3Y40JzRUagg+c0/EnTAPzQVk4lS9Rxu9R8nwN/sjU=) 2: 14BB63805EC111EEBE63A109C4F9AE02.roa (hash: wrwNDqhTULnAoV3dT8oiFzEJGsEpucdP0ccKDc/iXNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597 Validity Not Before: Mar 29 02:57:24 2025 GMT Not After : Apr 5 02:57:24 2025 GMT Subject: CN=67e76194-3e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:4b:3f:6c:bd:37:00:aa:8d:a9:a6:2c:0c: 9d:ab:92:5f:c0:2b:ba:02:24:4d:ba:e8:71:85:0f: 45:bb:14:21:7c:3f:bf:4e:7d:0c:85:b2:49:fb:d2: 91:aa:c9:00:f5:3d:ce:90:d3:3c:47:39:ce:2e:2d: a7:73:2c:aa:ed:21:70:ea:75:fa:07:5d:77:65:f9: 62:bd:bb:7b:ab:f2:db:9a:fd:f1:85:c9:c0:64:6c: 51:61:1c:22:18:32:73:e4:3f:d6:b4:ca:25:41:4c: 6a:65:3f:16:39:56:b5:73:ea:7e:eb:32:40:b6:1a: 3d:b6:6c:0b:a8:5a:af:13:94:6a:0b:a3:99:81:d0: a5:31:8c:91:16:98:4c:42:94:d1:c0:e9:db:eb:6e: 34:df:0b:3c:be:69:6d:14:db:f3:be:7c:93:5e:34: 15:db:47:d6:9c:e8:1b:64:6b:fe:b7:83:05:29:d5: 58:2a:73:f2:78:42:f8:2b:fb:c4:ae:14:72:30:e9: b6:7c:91:6e:c4:de:d2:ba:dc:54:64:3e:33:29:69: cb:01:00:0b:ea:f1:09:64:df:e0:f6:91:7c:7a:62: da:96:c5:40:d1:29:06:d4:c7:80:3c:69:b2:c2:1b: e1:28:78:91:77:91:98:07:0f:15:34:57:ff:f6:d2: 5f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:91:A8:D3:92:E6:A0:9D:3E:42:DD:DB:80:53:AB:15:2E:DB:25:D6 X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e8:c6:d9:8a:a6:b2:9f:ae:aa:d9:13:df:a7:5e:77:c2:5b: c1:33:9e:6f:ee:42:3d:12:e9:c0:50:66:07:a6:bd:46:e4:3b: 7c:d2:84:ef:9d:c5:d7:7b:dc:a4:c2:d7:53:14:1a:f5:a2:a4: 78:ca:0a:d8:90:c9:58:b5:6f:6a:fd:29:ca:d8:87:23:4b:44: d6:5b:50:ba:91:0a:94:f6:b0:69:2e:45:0a:ef:6f:63:c3:f2: d6:40:45:c4:e9:12:40:60:d4:dc:59:7a:59:ed:2d:99:2f:0d: 39:31:1b:31:11:48:50:e2:85:17:3a:88:5c:c5:67:fb:15:95: 00:75:4a:2e:c8:f2:2e:34:e8:14:4d:3f:d6:96:fb:65:7c:a2: 28:4e:9f:a7:10:0d:92:48:cd:ac:d0:12:fb:bf:34:c6:da:e4: 8e:ac:d6:06:68:7a:3a:8a:f5:db:fe:96:5b:d2:a2:49:cf:13: e7:c1:79:02:33:cc:be:61:dd:bf:af:f8:26:38:a8:ef:10:76: 61:cd:0e:64:20:65:28:35:2d:12:65:2e:5d:80:db:69:b1:a2: cd:7d:88:06:5a:da:0d:ea:e5:04:cf:a2:c0:3b:75:86:a3:5b: 45:0b:3a:5e:30:2e:2f:e9:87:68:1c:e4:43:b6:00:21:f0:0c: ba:20:13:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjUwMzI5MDI1NzI0WhcNMjUwNDA1MDI1NzI0WjAYMRYwFAYD VQQDEw02N2U3NjE5NC0zZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvFLP2y9NwCqjammLAydq5JfwCu6AiRNuuhxhQ9FuxQhfD+/Tn0MhbJJ+9KR qskA9T3OkNM8RznOLi2ncyyq7SFw6nX6B113Zflivbt7q/Lbmv3xhcnAZGxRYRwi GDJz5D/WtMolQUxqZT8WOVa1c+p+6zJAtho9tmwLqFqvE5RqC6OZgdClMYyRFphM QpTRwOnb62403ws8vmltFNvzvnyTXjQV20fWnOgbZGv+t4MFKdVYKnPyeEL4K/vE rhRyMOm2fJFuxN7SutxUZD4zKWnLAQAL6vEJZN/g9pF8emLalsVA0SkG1MeAPGmy whvhKHiRd5GYBw8VNFf/9tJfIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNqRqNOS 5qCdPkLd24BTqxUu2yXWMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo6MbZiqayn66q2RPfp153wlvBM55v7kI9EunAUGYHpr1G5Dt80oTv ncXXe9ykwtdTFBr1oqR4ygrYkMlYtW9q/SnK2IcjS0TWW1C6kQqU9rBpLkUK729j w/LWQEXE6RJAYNTcWXpZ7S2ZLw05MRsxEUhQ4oUXOohcxWf7FZUAdUouyPIuNOgU TT/WlvtlfKIoTp+nEA2SSM2s0BL7vzTG2uSOrNYGaHo6ivXb/pZb0qJJzxPnwXkC M8y+Yd2/r/gmOKjvEHZhzQ5kIGUoNS0SZS5dgNtpsaLNfYgGWtoN6uUEz6LAO3WG o1tFCzpeMC4v6YdoHORDtgAh8Ay6IBOv -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:55 2025 by rpki-client