$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft File: XAVrgGGoYiwsBruFeG6dxhNhS8o.mft (raw, json) Hash identifier: dow7qaxi+PDjG+HVYbflGpiRAPzy+D35MrlRs1hZJBg= Subject key identifier: FC:09:2E:AE:55:25:A0:B4:4E:4C:6B:08:82:4E:D5:F6:2C:4B:A0:82 Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft Manifest number: 01D3 Signing time: Sat 05 Apr 2025 02:36:19 +0000 Manifest this update: Sat 05 Apr 2025 02:36:19 +0000 Manifest next update: Sat 12 Apr 2025 02:36:19 +0000 Files and hashes: 1: XAVrgGGoYiwsBruFeG6dxhNhS8o.crl (hash: aHUbgxV0c8h4Tth+QgzU/uy+wLhzFWTc7VGUls4RzJk=) 2: 29FFF260669111EE8D5C864EC4F9AE02.roa (hash: 3pHN2fqKLyseaZ6WyOFdERsAWtwGnuD8JCF2gN634Ws=) 3: 8C1315A8060611EFB7EFA66CC4F9AE02.roa (hash: pPi15z/Whv1VOzdwch9x1UduIv6zmo0v/XxtgZH7i/0=) 4: 710A095EB62A11EF9D01E53DC4F9AE02.roa (hash: 5lEL9eS9yJhHrkaY87CyfNgKHrW5Wh6Msg6SUfVkO2Q=) 5: CD152404495B11EF93EA3757C4F9AE02.roa (hash: 4cq9yG51A0O6Vq8JFh6wKZKMWZPp3grbIJj2LCtHk+0=) 6: 71DFDF18890111EEB3F2581FC4F9AE02.roa (hash: qM0AwU6iF9zfpDGKy2SZ3RCibpnSgHxUctYX3hAWago=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A814 Validity Not Before: Apr 5 02:36:19 2025 GMT Not After : Apr 12 02:36:19 2025 GMT Subject: CN=67f09723-a51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:9e:e6:84:2e:4f:db:7c:83:a7:d0:1b:40: 85:b5:b8:53:2e:de:04:6c:75:41:5a:15:fb:8d:06: 5d:7d:34:a0:03:5a:e1:a0:31:29:f5:c7:8f:c9:7d: e8:bb:7d:63:06:36:ee:74:dc:e4:47:cd:7b:b2:59: 5c:b1:f1:21:23:82:e9:07:10:ad:63:63:b1:a5:46: d4:a5:69:d0:41:d4:2b:0d:b4:0d:be:95:11:4f:0f: a0:fc:81:2f:6f:ee:26:90:61:b9:1e:7e:65:a7:c6: 4c:03:9f:5a:c2:8f:9d:d2:ed:2d:da:27:10:09:5b: db:b2:57:5b:f5:5e:b6:aa:aa:ce:57:97:de:d3:59: 95:05:51:18:12:c5:7e:cd:61:17:2f:5d:35:3f:45: c6:de:cf:16:35:41:ea:67:eb:db:22:f9:32:37:b4: 9c:c2:bf:3f:2b:29:11:35:62:be:c0:f9:53:a1:74: 63:4f:b8:7a:72:a1:9a:16:d1:48:a6:24:42:8b:e2: f7:b6:fe:3f:91:0c:0c:cf:ce:45:a7:35:2a:fe:0b: 47:2f:3c:c4:49:2e:fb:40:97:25:22:0c:85:00:b5: bc:61:d0:69:c6:e4:56:46:b8:5a:3f:9c:c5:f5:1b: 80:ab:7e:96:0a:c4:43:07:17:58:1f:e8:ab:23:83: 8b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:09:2E:AE:55:25:A0:B4:4E:4C:6B:08:82:4E:D5:F6:2C:4B:A0:82 X509v3 Authority Key Identifier: keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:54:47:40:bf:0d:e1:96:60:ad:55:3c:2d:ef:2d:70:a8:56: 29:52:ca:35:bb:04:99:51:3f:d8:8d:ef:7b:f9:6f:e4:a0:c8: 27:47:ac:94:17:84:51:81:1e:00:59:92:a4:4d:26:7a:25:60: 8a:11:69:a9:66:95:13:43:d4:bf:9b:3a:45:6e:b5:3c:48:0f: 4d:24:b4:4b:7f:f7:24:1c:f1:a0:eb:42:14:0c:46:0b:60:2a: fe:59:ef:d1:4f:8c:de:5f:aa:11:1b:4f:1c:36:47:13:34:48: 0b:49:4c:60:c9:0e:d0:d4:27:38:1d:b1:80:ee:f1:fb:06:00: 4d:4d:56:ab:aa:6c:ec:32:65:81:26:76:ff:90:2b:5a:52:6e: af:ed:92:0d:65:71:9b:bc:ab:93:88:8d:c2:2c:76:d3:44:a1: 3f:c6:a4:b5:41:3d:43:3b:02:0c:21:a9:90:e3:e6:f8:b0:a6: d2:ef:5b:77:3f:d2:94:68:16:05:28:07:0b:0d:58:c1:61:b1: dc:52:8e:eb:1f:3a:99:0f:b9:3b:f4:ac:1b:18:8f:69:aa:49: 70:f8:f0:5b:86:32:e9:47:d6:b9:a6:d8:bb:75:8b:9d:6c:94: d9:21:02:e8:5d:fc:1a:56:31:fa:ce:e3:34:e3:fe:88:31:77: 81:8e:74:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4MTQxMTAvBgNVBAUTKDVDMDU2QjgwNjFBODYyMkMyQzA2QkI4NTc4NkU5REM2 MTM2MTRCQ0EwHhcNMjUwNDA1MDIzNjE5WhcNMjUwNDEyMDIzNjE5WjAYMRYwFAYD VQQDEw02N2YwOTcyMy1hNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVKe5oQuT9t8g6fQG0CFtbhTLt4EbHVBWhX7jQZdfTSgA1rhoDEp9cePyX3o u31jBjbudNzkR817sllcsfEhI4LpBxCtY2OxpUbUpWnQQdQrDbQNvpURTw+g/IEv b+4mkGG5Hn5lp8ZMA59awo+d0u0t2icQCVvbsldb9V62qqrOV5fe01mVBVEYEsV+ zWEXL101P0XG3s8WNUHqZ+vbIvkyN7Scwr8/KykRNWK+wPlToXRjT7h6cqGaFtFI piRCi+L3tv4/kQwMz85FpzUq/gtHLzzESS77QJclIgyFALW8YdBpxuRWRrhaP5zF 9RuAq36WCsRDBxdYH+irI4OLjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwJLq5V JaC0TkxrCIJO1fYsS6CCMB8GA1UdIwQYMBaAFFwFa4BhqGIsLAa7hXhuncYTYUvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTgxNC9EMzhBMTkxMjc0 NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lpd3NCcnVGZUc2ZHhoTmhT OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9YQVZyZ0dHb1lp d3NCcnVGZUc2ZHhoTmhTOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3VEdAvw3hlmCtVTwt7y1wqFYpUso1uwSZUT/Yje97+W/koMgnR6yU F4RRgR4AWZKkTSZ6JWCKEWmpZpUTQ9S/mzpFbrU8SA9NJLRLf/ckHPGg60IUDEYL YCr+We/RT4zeX6oRG08cNkcTNEgLSUxgyQ7Q1Cc4HbGA7vH7BgBNTVarqmzsMmWB Jnb/kCtaUm6v7ZINZXGbvKuTiI3CLHbTRKE/xqS1QT1DOwIMIamQ4+b4sKbS71t3 P9KUaBYFKAcLDVjBYbHcUo7rHzqZD7k79KwbGI9pqklw+PBbhjLpR9a5pti7dYud bJTZIQLoXfwaVjH6zuM04/6IMXeBjnTK -----END CERTIFICATE-----Generated at Sat Apr 5 19:25:32 2025 by rpki-client