$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft File: rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json) Hash identifier: q9IiGepuNpQWDiSCeBb4ZfdbYZd/lRayYDRATHpm3bE= Subject key identifier: AA:7D:1A:B8:3A:C7:67:2B:78:07:B7:6B:1E:14:1F:30:F3:57:07:17 Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D Certificate issuer: /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft Manifest number: 0108 Signing time: Sat 05 Apr 2025 04:22:06 +0000 Manifest this update: Sat 05 Apr 2025 04:22:05 +0000 Manifest next update: Sat 12 Apr 2025 04:22:05 +0000 Files and hashes: 1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: kwaDUv35XWmWxRy0S/leJXYfIQVFF7U2ucAb9kBc8jM=) 2: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: x3typY+Rz1v7YQKoz8/eFq0vzVSoB9fMyJducWo5h8o=) 3: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: Zs0S8blgDDMs3jrlGY37AkPWRyP83xeb73R0yUfKf24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CC0C Validity Not Before: Apr 5 04:22:05 2025 GMT Not After : Apr 12 04:22:05 2025 GMT Subject: CN=67f0afee-18fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1d:3d:c7:62:1e:63:d3:1b:67:48:3e:11:27: d4:39:af:9c:e3:83:ba:91:49:91:d3:db:be:44:b4: 96:87:90:48:0a:db:c6:a0:f9:b2:d9:91:ae:ed:64: 01:0c:d0:2a:4f:55:0f:b4:45:b3:c6:36:ef:04:2e: 58:1a:84:18:f8:6a:fe:50:1f:18:72:e4:e2:52:86: 57:80:65:67:4e:71:1a:39:99:dc:c6:46:49:3d:1c: 11:43:25:9a:90:65:6e:95:f2:88:0b:24:57:37:7a: be:da:6c:24:62:32:66:17:12:9c:dc:22:49:8e:8d: 79:35:33:52:52:9b:54:db:3b:e3:6a:55:e1:b5:1e: 0e:83:0d:98:c6:7a:9a:3e:98:af:e5:2b:4f:79:12: 31:7d:93:1b:eb:f6:36:76:4e:ab:14:a1:8b:c9:95: 99:0a:35:06:b2:29:5a:e0:88:d8:19:66:fd:46:99: c0:58:e5:d4:ea:86:f8:62:76:f2:43:5b:fc:5d:84: d7:34:73:8f:ab:87:47:58:45:5e:28:78:43:bb:6f: 32:e6:23:48:1d:6a:65:8b:00:b0:c9:c0:ad:57:f4: 8c:73:b8:71:7f:9c:b0:a6:99:27:9b:0c:fc:b5:80: 39:dc:4e:fb:30:85:2a:b4:20:b6:07:c6:4f:d9:d7: fc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7D:1A:B8:3A:C7:67:2B:78:07:B7:6B:1E:14:1F:30:F3:57:07:17 X509v3 Authority Key Identifier: keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:65:88:64:7d:f9:0c:36:67:40:6e:97:f9:23:8e:e4:ed:19: c6:36:8f:39:e8:39:7f:77:8b:16:20:e7:b6:52:bc:43:29:fa: 7e:97:c4:c2:53:da:d9:a6:4d:ad:7a:2e:17:50:38:c3:60:73: 90:bf:b3:51:93:0b:e3:20:ea:d6:df:ae:33:ab:ca:e0:c0:81: ca:c7:1a:7b:39:d1:31:ca:ec:b8:3a:67:91:d4:6a:9e:b9:88: 07:a3:3e:71:dd:9d:9c:a4:c1:13:34:a2:d8:8b:24:b9:cb:67: e6:17:89:df:70:17:54:ed:ed:8e:5f:1a:6f:65:b8:3b:ae:c9: 01:db:99:b9:51:f5:c3:d0:c1:0e:c5:b5:4b:73:2a:5b:1a:cc: 75:ad:68:17:c6:08:e0:9c:eb:79:4e:0e:9f:0c:aa:f5:b0:96: 2f:33:53:9b:d7:25:62:3c:06:b3:72:68:43:7b:4c:5e:5b:78: 82:e3:ae:da:08:59:9d:d7:a8:be:b6:17:44:92:02:c6:db:63: 88:d4:79:87:21:9c:07:51:14:48:6b:45:8e:4b:64:c6:96:b0: 94:d8:51:11:88:02:a0:9d:5d:2c:58:a4:60:2f:30:85:eb:65: 68:63:ae:19:c5:d4:7d:bb:4f:4a:97:60:c4:27:37:4d:d2:bf: 82:11:1d:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC RUFDQkNDMkQwHhcNMjUwNDA1MDQyMjA1WhcNMjUwNDEyMDQyMjA1WjAYMRYwFAYD VQQDEw02N2YwYWZlZS0xOGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzR09x2IeY9MbZ0g+ESfUOa+c44O6kUmR09u+RLSWh5BICtvGoPmy2ZGu7WQB DNAqT1UPtEWzxjbvBC5YGoQY+Gr+UB8YcuTiUoZXgGVnTnEaOZncxkZJPRwRQyWa kGVulfKICyRXN3q+2mwkYjJmFxKc3CJJjo15NTNSUptU2zvjalXhtR4Ogw2Yxnqa Ppiv5StPeRIxfZMb6/Y2dk6rFKGLyZWZCjUGsila4IjYGWb9RpnAWOXU6ob4Ynby Q1v8XYTXNHOPq4dHWEVeKHhDu28y5iNIHWpliwCwycCtV/SMc7hxf5ywppknmwz8 tYA53E77MIUqtCC2B8ZP2df8TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKp9Grg6 x2creAe3ax4UHzDzVwcXMB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6 QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6 NzBoQjAtTklRb0Mtckx6QzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDZYhkffkMNmdAbpf5I47k7RnGNo856Dl/d4sWIOe2UrxDKfp+l8TC U9rZpk2tei4XUDjDYHOQv7NRkwvjIOrW364zq8rgwIHKxxp7OdExyuy4OmeR1Gqe uYgHoz5x3Z2cpMETNKLYiyS5y2fmF4nfcBdU7e2OXxpvZbg7rskB25m5UfXD0MEO xbVLcypbGsx1rWgXxgjgnOt5Tg6fDKr1sJYvM1Ob1yViPAazcmhDe0xeW3iC467a CFmd16i+thdEkgLG22OI1HmHIZwHURRIa0WOS2TGlrCU2FERiAKgnV0sWKRgLzCF 62VoY64ZxdR9u09Kl2DEJzdN0r+CER01 -----END CERTIFICATE-----Generated at Sat Apr 5 08:51:17 2025 by rpki-client