$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: O6K/VUFGwQ/41WxXBub0MZtihHIoMUT/Dc9qidV02P0= Subject key identifier: 38:1B:B9:6A:E3:F1:C0:1D:A5:E5:22:53:69:96:D4:BF:91:0D:84:A3 Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0C25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0C1E Signing time: Fri 04 Apr 2025 18:39:25 +0000 Manifest this update: Fri 04 Apr 2025 18:39:24 +0000 Manifest next update: Fri 11 Apr 2025 18:39:24 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: IlgLhgNeHtTNu+D+PWXnqD7ntRrsrt5/esX2PwcamjM=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: jepyyGmhyczAJbapeZ5nuaRxeukad7rFEbIHfvNySKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:39:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3109 (0xc25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F Validity Not Before: Apr 4 18:39:24 2025 GMT Not After : Apr 11 18:39:24 2025 GMT Subject: CN=67f0275c-e126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:dc:45:2d:6c:55:b4:aa:00:72:66:57:1a: 53:6f:e7:ab:6d:62:62:f4:f4:ec:63:0b:44:a1:ce: 66:d2:21:a3:ca:ae:11:3c:38:17:50:77:38:4c:12: 47:fc:e2:c4:3c:85:f7:3c:6c:7c:64:0c:0e:67:48: 90:2e:45:32:ea:58:f3:0f:3c:a3:aa:3f:61:97:85: 9d:f9:18:b2:5a:d2:39:8b:2c:d6:9e:1e:4a:7d:f3: b6:53:e9:51:a2:7c:b8:33:8a:7c:83:5b:4d:45:0d: 15:73:0f:a4:53:43:b5:43:8d:58:ad:5b:d0:aa:20: 23:aa:95:13:3a:02:44:bc:8b:d3:70:e7:70:9b:06: 62:cc:52:30:f7:85:3d:d4:2b:12:d1:9c:f4:13:4b: 86:f6:65:d2:e0:e1:45:4f:8a:14:d7:45:79:7a:2d: 1c:94:6a:ab:5c:49:51:9d:4f:1a:e3:87:fb:29:1e: c5:73:bc:ef:1a:ce:0b:2b:09:ef:c1:46:f9:98:68: 20:8d:59:a3:3b:b2:24:74:59:e2:0f:ec:c1:16:0f: 23:b3:8a:5c:03:0b:8d:38:74:7f:b5:53:4e:f9:af: aa:d2:da:84:2f:3b:fa:27:1c:b0:f5:e9:20:45:c8: 6c:37:fd:d5:af:da:01:75:68:ee:3d:ad:e7:cb:81: e9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1B:B9:6A:E3:F1:C0:1D:A5:E5:22:53:69:96:D4:BF:91:0D:84:A3 X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1a:58:34:e2:0f:3c:44:ee:8b:c9:a1:22:f1:ff:ab:71:54: 60:23:3f:1e:24:af:23:ae:e4:f0:9f:99:4c:11:67:8c:bf:35: 29:4f:da:c1:38:c1:29:0e:8e:21:6c:23:f3:39:13:45:56:0f: 0e:b2:0f:74:40:90:6f:b4:95:dc:3e:bf:58:15:9b:21:a5:13: 6d:46:d2:ac:2b:53:3f:85:46:49:e1:fa:e7:4e:58:ca:b2:0b: c9:9a:35:13:7d:d3:31:2d:8a:3d:4e:27:3f:03:d3:f6:fa:1f: 8a:4f:c6:72:1c:93:b5:9b:5e:c9:61:01:76:2b:50:04:be:d1: da:0f:bb:dd:67:03:01:89:6b:94:4c:ad:b6:7d:aa:2e:8e:02: 20:72:5e:25:3b:3b:06:0b:2a:9e:3a:2e:83:8c:f4:50:7f:5d: 5b:eb:8a:b4:a3:3d:76:b1:65:70:76:eb:0a:8c:3d:c5:1d:32: 0c:de:f7:b8:1a:6d:08:1a:74:b4:ce:72:92:d8:97:ec:20:69: a3:c5:9d:b4:26:93:97:90:66:ea:26:da:7e:f0:33:de:12:8f: 90:73:69:db:ac:84:a9:3b:5f:ad:6c:2b:a1:27:d9:d4:40:4a: 89:82:f1:ad:24:21:66:35:09:87:a0:e2:fa:b7:27:8d:41:c0: 1a:b5:b1:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjUwNDA0MTgzOTI0WhcNMjUwNDExMTgzOTI0WjAYMRYwFAYD VQQDEw02N2YwMjc1Yy1lMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9HcRS1sVbSqAHJmVxpTb+erbWJi9PTsYwtEoc5m0iGjyq4RPDgXUHc4TBJH /OLEPIX3PGx8ZAwOZ0iQLkUy6ljzDzyjqj9hl4Wd+RiyWtI5iyzWnh5KffO2U+lR ony4M4p8g1tNRQ0Vcw+kU0O1Q41YrVvQqiAjqpUTOgJEvIvTcOdwmwZizFIw94U9 1CsS0Zz0E0uG9mXS4OFFT4oU10V5ei0clGqrXElRnU8a44f7KR7Fc7zvGs4LKwnv wUb5mGggjVmjO7IkdFniD+zBFg8js4pcAwuNOHR/tVNO+a+q0tqELzv6Jxyw9ekg RchsN/3Vr9oBdWjuPa3ny4HpbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgbuWrj 8cAdpeUiU2mW1L+RDYSjMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbGlg04g88RO6LyaEi8f+rcVRgIz8eJK8jruTwn5lMEWeMvzUpT9rB OMEpDo4hbCPzORNFVg8Osg90QJBvtJXcPr9YFZshpRNtRtKsK1M/hUZJ4frnTljK sgvJmjUTfdMxLYo9Tic/A9P2+h+KT8ZyHJO1m17JYQF2K1AEvtHaD7vdZwMBiWuU TK22faoujgIgcl4lOzsGCyqeOi6DjPRQf11b64q0oz12sWVwdusKjD3FHTIM3ve4 Gm0IGnS0znKS2JfsIGmjxZ20JpOXkGbqJtp+8DPeEo+Qc2nbrISpO1+tbCuhJ9nU QEqJgvGtJCFmNQmHoOL6tyeNQcAatbES -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:46 2025 by rpki-client