$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft File: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft (raw, json) Hash identifier: weeSjHS4lbMkDCwOTcwRB5vi+kmx1Oz5JGhJi/AN4YM= Subject key identifier: E8:43:8F:24:84:1C:40:26:98:98:FF:E8:CE:F0:0C:5D:2A:8D:9E:EF Authority key identifier: C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 Certificate issuer: /CN=A9148E62/serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft Manifest number: 027C Signing time: Thu 03 Apr 2025 01:39:24 +0000 Manifest this update: Thu 03 Apr 2025 01:39:24 +0000 Manifest next update: Thu 10 Apr 2025 01:39:24 +0000 Files and hashes: 1: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl (hash: Zxx6K1F+K0M21Xxucztj3JwAErsd/Tx01nh2qPP3RN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:39:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E62 Validity Not Before: Apr 3 01:39:24 2025 GMT Not After : Apr 10 01:39:24 2025 GMT Subject: CN=67ede6cc-efff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:58:01:11:9f:73:e4:a6:99:2b:3b:b4:23: 2f:8c:9e:c6:d7:c6:be:0b:7f:a8:06:2a:79:5f:29: 8e:b1:b0:8c:6c:5f:b9:06:d4:5a:b9:a5:6f:1a:4d: ed:75:8f:cb:89:30:a3:a7:c7:20:87:35:b1:56:a7: b0:71:05:ff:c9:69:f2:04:c4:af:0b:9f:9b:a5:89: c7:94:63:97:5d:31:27:1b:e4:8b:c5:93:eb:23:19: 1a:6b:02:77:ea:36:9d:95:16:70:1a:ef:7c:53:ae: 6d:0e:a8:fe:7d:77:25:5e:99:e4:90:c8:ce:b8:34: f8:15:60:f9:1f:1e:1c:9d:0b:b3:ea:90:ea:f3:be: ca:ca:c4:52:95:f4:40:e9:13:bb:0b:99:a2:ae:f8: 9e:ee:2b:7c:44:45:3e:41:9e:99:d6:5a:10:8e:34: 09:91:03:b4:39:b3:28:d2:a2:04:0e:6b:bb:e4:ce: c4:b5:1d:30:59:8f:fd:02:37:3b:7d:6a:08:d4:59: b0:07:0c:66:34:c2:ee:4f:0f:88:99:a6:8c:19:f1: e7:a2:9a:7d:f1:87:3d:fd:65:df:2d:16:6d:56:be: 21:5e:7e:59:21:f2:eb:a2:3a:d9:d9:37:2c:b4:ba: c6:5b:e7:ee:fc:f5:b6:6c:08:16:a6:b2:86:30:42: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:43:8F:24:84:1C:40:26:98:98:FF:E8:CE:F0:0C:5D:2A:8D:9E:EF X509v3 Authority Key Identifier: keyid:C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:43:7b:ec:29:4c:2b:47:cb:56:16:32:66:a6:c1:c6:38:c8: 01:d3:85:77:46:c1:74:24:24:8d:5f:39:66:83:0f:8c:b1:f9: a8:e5:3a:ec:f0:55:e9:38:bd:ea:df:3a:ff:22:d1:72:46:47: c3:5a:12:5b:13:30:65:a3:5e:5f:87:83:e6:74:7d:17:c0:9e: 05:4e:fe:14:86:5c:66:da:f1:e9:89:e6:39:32:71:7e:20:c4: 73:49:8a:70:6c:82:b5:5b:0f:db:88:4b:9a:4f:c1:cf:0f:5b: bc:15:a6:a1:80:35:fd:f3:c6:97:d5:f2:84:e4:d3:bc:64:43: 6c:7d:42:3e:7a:ce:58:39:5f:53:84:72:b4:05:3d:aa:4f:f2: 34:8d:65:e5:92:26:79:99:c7:59:00:4e:02:50:a0:cc:b9:b9: be:87:77:e4:99:ab:ed:c3:5c:f6:a6:c8:8d:ea:07:25:4e:e0: 67:83:b9:ec:e7:b3:a5:2e:55:6c:72:27:77:4e:ed:65:53:ca: 4a:92:f8:25:3b:79:e3:7b:c4:fc:3a:b3:53:37:e6:11:fc:5a: e4:f3:13:2c:d1:67:2e:a0:c0:b1:c8:b4:a0:98:6d:56:7b:7b: c4:a1:8d:90:ca:05:78:26:45:79:a4:9f:0b:04:d0:c7:6b:3a: 01:b1:2d:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFNjIxMTAvBgNVBAUTKEM2MzA1NjA0MUMwRjkwQjkyQjJCODdEQkZGQTk3RTNF OURBMDI4RDQwHhcNMjUwNDAzMDEzOTI0WhcNMjUwNDEwMDEzOTI0WjAYMRYwFAYD VQQDEw02N2VkZTZjYy1lZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6tYARGfc+SmmSs7tCMvjJ7G18a+C3+oBip5XymOsbCMbF+5BtRauaVvGk3t dY/LiTCjp8cghzWxVqewcQX/yWnyBMSvC5+bpYnHlGOXXTEnG+SLxZPrIxkaawJ3 6jadlRZwGu98U65tDqj+fXclXpnkkMjOuDT4FWD5Hx4cnQuz6pDq877KysRSlfRA 6RO7C5mirvie7it8REU+QZ6Z1loQjjQJkQO0ObMo0qIEDmu75M7EtR0wWY/9Ajc7 fWoI1FmwBwxmNMLuTw+ImaaMGfHnopp98Yc9/WXfLRZtVr4hXn5ZIfLrojrZ2Tcs tLrGW+fu/PW2bAgWprKGMEKeMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhDjySE HEAmmJj/6M7wDF0qjZ7vMB8GA1UdIwQYMBaAFMYwVgQcD5C5KyuH2/+pfj6doCjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU2Mi9ENkI5Nzk2MjAy QTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtMa3JLNGZiXzZsLVBwMmdL TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqQldCQndQa0xrcks0ZmJfNmwtUHAyZ0tOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU2Mi9ENkI5Nzk2MjAyQTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtM a3JLNGZiXzZsLVBwMmdLTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0Q3vsKUwrR8tWFjJmpsHGOMgB04V3RsF0JCSNXzlmgw+Msfmo5Trs 8FXpOL3q3zr/ItFyRkfDWhJbEzBlo15fh4PmdH0XwJ4FTv4Uhlxm2vHpieY5MnF+ IMRzSYpwbIK1Ww/biEuaT8HPD1u8FaahgDX988aX1fKE5NO8ZENsfUI+es5YOV9T hHK0BT2qT/I0jWXlkiZ5mcdZAE4CUKDMubm+h3fkmavtw1z2psiN6gclTuBng7ns 57OlLlVscid3Tu1lU8pKkvglO3nje8T8OrNTN+YR/Frk8xMs0WcuoMCxyLSgmG1W e3vEoY2QygV4JkV5pJ8LBNDHazoBsS0h -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:01 2025 by rpki-client