$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json) Hash identifier: KYYIZC3MsEApPfryDYI8N8IRsM1xqFr/AnduA/3Dgo0= Subject key identifier: A7:90:C4:E6:CA:E9:2C:A7:BB:90:D4:6D:63:3B:DB:94:A7:86:23:D9 Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft Manifest number: 0645 Signing time: Fri 28 Mar 2025 22:47:33 +0000 Manifest this update: Fri 28 Mar 2025 22:47:33 +0000 Manifest next update: Fri 04 Apr 2025 22:47:32 +0000 Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: d8Ln8gqtO4xC7TQ7V/41VM8eG9vxF+tVY2ehlBGGD7Y=) 2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: ag70wfYgobotc0eBfgl6nwgFKbzwbxZlbSBpAf0e7ww=) 3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: BsYkZFLIqWXVcL7BCbS3LDfkV0RrqTrFNxdoppvTHY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 22:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142812 Validity Not Before: Mar 28 22:47:33 2025 GMT Not After : Apr 4 22:47:32 2025 GMT Subject: CN=67e72705-d5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:38:af:ce:7e:50:ee:59:99:61:20:c9:61:bd: 7d:0d:2b:f5:3a:ea:30:80:1a:34:5a:45:c2:3a:2d: 74:da:b4:e1:61:06:39:b9:85:93:b5:00:70:c1:f8: 34:46:64:40:22:ab:0b:a3:9e:13:c0:b2:3b:fa:81: ad:d4:28:25:f4:0b:72:06:2f:36:6a:12:98:0c:6d: 87:d7:e1:c1:f1:9e:19:fd:8b:24:89:33:f6:9f:90: 05:7a:93:06:94:77:0e:fa:bd:00:b3:a0:d4:74:b3: 1c:a1:20:53:a1:e6:ac:2d:b6:2d:e0:41:ff:de:ad: 0d:ac:45:84:85:98:93:cc:48:08:87:ed:45:1a:35: 41:09:6e:3a:98:14:c0:08:5a:d1:8c:fa:40:da:15: ad:96:4b:aa:83:3f:78:5f:90:6a:6a:3d:97:de:c8: 99:9a:3d:42:c5:47:80:36:b3:23:e0:54:cc:df:bd: 32:f6:be:b3:b3:ee:c1:7e:c4:ac:76:6d:51:3e:bf: ed:c7:07:0d:99:a8:bd:12:42:f2:24:ed:54:f4:d5: b2:4b:ab:c1:a3:53:b6:cd:63:3a:e9:db:a6:c1:c8: 3f:ec:24:60:6a:47:30:1d:42:82:7b:60:e8:f1:ef: e3:05:80:2b:df:ca:8e:c0:6f:00:70:bd:78:3f:5d: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:90:C4:E6:CA:E9:2C:A7:BB:90:D4:6D:63:3B:DB:94:A7:86:23:D9 X509v3 Authority Key Identifier: keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:01:8a:47:60:f1:64:28:28:cb:91:2f:21:60:bb:fd:17:7c: 92:35:43:8d:c1:a5:16:52:cb:9e:43:95:e6:5c:2a:31:55:24: bf:90:0c:0b:14:8c:da:2d:da:73:96:73:50:fc:98:70:06:37: 9f:e1:95:ef:bf:f8:03:e1:7e:21:4d:6f:6b:84:56:0b:0f:f3: af:e5:80:5c:37:28:c9:82:d6:17:10:27:dd:14:33:1b:0c:64: 34:c1:7e:dc:27:1c:06:1e:2b:d7:a9:2b:b0:be:c4:40:58:5f: e3:e6:69:f2:3b:9d:76:8d:17:1c:7d:41:45:c9:6f:95:0d:3f: 94:bf:da:82:74:56:07:8c:cd:7b:4c:06:82:4e:92:f3:b7:a0: 5e:d9:81:f5:bd:46:1f:eb:8b:70:bd:7c:01:aa:47:fd:26:e9: 67:1e:c9:8f:a0:4c:b3:ff:c8:d8:fa:52:ca:90:87:38:19:48: 15:24:3c:4c:3b:4a:74:48:4d:ad:9b:07:74:dc:86:f8:ff:d9: 4e:68:a3:73:bb:1e:4a:a9:05:d9:01:26:4d:43:d0:ca:ae:1d: ff:cd:95:a3:d3:af:86:cd:0a:21:62:dd:30:b1:9f:31:e4:89: 8d:94:05:3f:15:ff:46:c5:bc:d2:dc:6f:c0:68:88:2b:47:50: e9:ef:f3:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw QTUyOEVEQzAwHhcNMjUwMzI4MjI0NzMzWhcNMjUwNDA0MjI0NzMyWjAYMRYwFAYD VQQDEw02N2U3MjcwNS1kNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDivzn5Q7lmZYSDJYb19DSv1OuowgBo0WkXCOi102rThYQY5uYWTtQBwwfg0 RmRAIqsLo54TwLI7+oGt1Cgl9AtyBi82ahKYDG2H1+HB8Z4Z/YskiTP2n5AFepMG lHcO+r0As6DUdLMcoSBToeasLbYt4EH/3q0NrEWEhZiTzEgIh+1FGjVBCW46mBTA CFrRjPpA2hWtlkuqgz94X5Bqaj2X3siZmj1CxUeANrMj4FTM370y9r6zs+7BfsSs dm1RPr/txwcNmai9EkLyJO1U9NWyS6vBo1O2zWM66dumwcg/7CRgakcwHUKCe2Do 8e/jBYAr38qOwG8AcL14P112WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeQxObK 6Synu5DUbWM725SnhiPZMB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL Y1BrNlhMY0xabWdLVW83Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzAYpHYPFkKCjLkS8hYLv9F3ySNUONwaUWUsueQ5XmXCoxVSS/kAwL FIzaLdpzlnNQ/JhwBjef4ZXvv/gD4X4hTW9rhFYLD/Ov5YBcNyjJgtYXECfdFDMb DGQ0wX7cJxwGHivXqSuwvsRAWF/j5mnyO512jRccfUFFyW+VDT+Uv9qCdFYHjM17 TAaCTpLzt6Be2YH1vUYf64twvXwBqkf9JulnHsmPoEyz/8jY+lLKkIc4GUgVJDxM O0p0SE2tmwd03Ib4/9lOaKNzux5KqQXZASZNQ9DKrh3/zZWj06+GzQohYt0wsZ8x 5ImNlAU/Ff9GxbzS3G/AaIgrR1Dp7/Oz -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:40 2025 by rpki-client