$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft File: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft (raw, json) Hash identifier: fSNaN50v7hYeATQXYB+c8rFKjPK9zukLhu1BmaGthow= Subject key identifier: E1:B3:36:AF:60:42:EB:3C:02:AA:FD:D6:75:B3:7B:9B:4E:3E:39:CD Authority key identifier: 5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 Certificate issuer: /CN=A913B3F2/serialNumber=5CC91AFD5B8B37ED8C509F61189F448E73121F97 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft Manifest number: F9 Signing time: Sat 29 Mar 2025 04:39:42 +0000 Manifest this update: Sat 29 Mar 2025 04:39:41 +0000 Manifest next update: Sat 05 Apr 2025 04:39:41 +0000 Files and hashes: 1: XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl (hash: 5ETSExJUIy+2/JfD6PPd0LbrJPa2L+wsgupHohkGs6U=) 2: 16083E10A95E11EEBC0A7E5BC4F9AE02.roa (hash: oApvSZT8Sv3uSmM9SxIKbWqw6D6WWZsa1SWpMmDS0a4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3F2 Validity Not Before: Mar 29 04:39:41 2025 GMT Not After : Apr 5 04:39:41 2025 GMT Subject: CN=67e7798e-e0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:05:a2:a4:49:48:bb:0e:cb:9a:b7:a5:b1:10: 1d:37:3a:cb:c0:e4:81:ed:19:44:8a:97:db:2d:c3: 3c:a4:5a:ea:71:6d:38:59:fd:a6:8c:a8:bd:9d:a3: f4:c8:c4:b2:27:f4:2e:d8:46:d1:07:88:3e:0f:32: 55:32:c3:72:fe:7e:4d:83:fb:77:cc:83:70:e4:02: 12:06:4c:2f:08:35:03:31:a5:f3:b7:f3:a4:cc:c6: be:93:6b:2a:87:46:09:8f:aa:8b:da:8c:ce:31:42: 18:e0:bf:c2:1e:64:82:a0:b1:c1:eb:c0:6b:ea:cc: d1:1d:d9:bf:3a:7a:00:31:1d:41:75:26:2a:3a:7c: 3c:4d:31:c3:0e:6d:f5:bf:40:05:98:0b:16:67:8c: 85:51:9b:ea:3c:51:61:b3:bf:fa:00:c3:fc:07:30: 04:c5:71:fc:f2:00:38:9b:0d:3b:a5:85:ca:47:3a: 8f:d1:cd:86:d1:9b:ae:cf:58:d2:b2:32:c9:14:06: 01:d0:cd:45:98:9f:01:95:c1:69:0d:bc:d6:1e:af: 90:f1:5d:96:26:e1:c4:9b:e3:3f:3d:84:26:8a:31: b4:11:3a:37:be:23:72:78:c4:1d:dc:90:29:ec:f4: 4a:37:8b:91:dd:19:23:f5:9e:e1:84:19:8c:84:42: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B3:36:AF:60:42:EB:3C:02:AA:FD:D6:75:B3:7B:9B:4E:3E:39:CD X509v3 Authority Key Identifier: keyid:5C:C9:1A:FD:5B:8B:37:ED:8C:50:9F:61:18:9F:44:8E:73:12:1F:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3F2/0051DBCC97E211EE89813D23C4F9AE02/XMka_VuLN-2MUJ9hGJ9EjnMSH5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:8f:01:34:06:cd:bc:23:67:44:90:9f:ae:ba:08:1b:51:e1: f6:9a:a9:76:a5:34:69:78:68:98:8a:64:9c:9f:5b:71:44:85: 33:42:07:0c:10:1f:08:c8:57:60:fb:91:4d:e9:f8:45:f7:f1: 9e:0c:d9:6a:0f:51:66:8a:f6:c8:b3:11:ca:4e:0f:73:f8:ba: 11:42:ae:a2:75:1e:74:62:59:26:d2:de:c4:ce:55:e1:9d:80: f7:3c:73:09:c6:27:13:48:58:32:49:f2:c1:d0:d6:70:d9:65: 0c:f7:22:13:48:3d:76:60:6f:9a:05:ac:f9:14:2f:c7:c9:fe: fb:8c:0e:51:ca:d0:f4:39:72:f6:d2:e6:5e:26:68:6b:f9:a6: e4:7f:4c:2d:cc:31:5f:36:0f:85:3c:56:b5:21:ca:90:e5:16: e9:38:11:ef:e9:e2:93:ac:9c:26:7a:c3:4b:5c:f6:32:64:fd: 00:c0:ca:f5:31:7c:9b:3a:c0:56:1d:4b:22:99:9d:8c:a8:43: b5:b4:93:cc:f0:b1:6b:ae:ae:a0:8f:7d:6d:da:c6:61:24:fb: 9c:3d:cb:bf:5c:cf:3b:5f:17:f3:3c:0d:27:1e:d0:9f:2a:99: 98:32:c7:39:59:29:f5:6b:a4:73:27:81:09:ba:d3:9e:62:d3: 34:6d:5a:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRjIxMTAvBgNVBAUTKDVDQzkxQUZENUI4QjM3RUQ4QzUwOUY2MTE4OUY0NDhF NzMxMjFGOTcwHhcNMjUwMzI5MDQzOTQxWhcNMjUwNDA1MDQzOTQxWjAYMRYwFAYD VQQDEw02N2U3Nzk4ZS1lMGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQWipElIuw7LmrelsRAdNzrLwOSB7RlEipfbLcM8pFrqcW04Wf2mjKi9naP0 yMSyJ/Qu2EbRB4g+DzJVMsNy/n5Ng/t3zINw5AISBkwvCDUDMaXzt/OkzMa+k2sq h0YJj6qL2ozOMUIY4L/CHmSCoLHB68Br6szRHdm/OnoAMR1BdSYqOnw8TTHDDm31 v0AFmAsWZ4yFUZvqPFFhs7/6AMP8BzAExXH88gA4mw07pYXKRzqP0c2G0Zuuz1jS sjLJFAYB0M1FmJ8BlcFpDbzWHq+Q8V2WJuHEm+M/PYQmijG0ETo3viNyeMQd3JAp 7PRKN4uR3Rkj9Z7hhBmMhELt3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGzNq9g Qus8Aqr91nWze5tOPjnNMB8GA1UdIwQYMBaAFFzJGv1bizftjFCfYRifRI5zEh+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNGMi8wMDUxREJDQzk3 RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4tMk1VSjloR0o5RWpuTVNI NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hNa2FfVnVMTi0yTVVKOWhHSjlFam5NU0g1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNGMi8wMDUxREJDQzk3RTIxMUVFODk4MTNEMjNDNEY5QUUwMi9YTWthX1Z1TE4t Mk1VSjloR0o5RWpuTVNINWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJjwE0Bs28I2dEkJ+uuggbUeH2mql2pTRpeGiYimScn1txRIUzQgcM EB8IyFdg+5FN6fhF9/GeDNlqD1FmivbIsxHKTg9z+LoRQq6idR50Ylkm0t7EzlXh nYD3PHMJxicTSFgySfLB0NZw2WUM9yITSD12YG+aBaz5FC/Hyf77jA5RytD0OXL2 0uZeJmhr+abkf0wtzDFfNg+FPFa1IcqQ5RbpOBHv6eKTrJwmesNLXPYyZP0AwMr1 MXybOsBWHUsimZ2MqEO1tJPM8LFrrq6gj31t2sZhJPucPcu/XM87XxfzPA0nHtCf KpmYMsc5WSn1a6RzJ4EJutOeYtM0bVp/ -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:46 2025 by rpki-client