$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft File: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json) Hash identifier: Qwreoxky0NeW1DOGI7p6Fo5wFsDVfduHHXnQ3GrVufA= Subject key identifier: CA:36:B1:7A:53:54:7E:69:10:63:34:8E:3E:6B:5F:3C:6E:BA:92:42 Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B Certificate serial: 0621 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft Manifest number: 061B Signing time: Sun 06 Apr 2025 22:24:22 +0000 Manifest this update: Sun 06 Apr 2025 22:24:21 +0000 Manifest next update: Sun 13 Apr 2025 22:24:21 +0000 Files and hashes: 1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: RlrB4Z00Xn2Yyx+itrbUxKmeQ3KIeLm4LL0oJ3hIi/0=) 2: 6E1BCBC495BD11EB89199F37C4F9AE02.roa (hash: 6VtKNEIG9FeALH3s40nNCwARNeebdE67fF6D4UlnLsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 22:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1569 (0x621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152A4E Validity Not Before: Apr 6 22:24:21 2025 GMT Not After : Apr 13 22:24:21 2025 GMT Subject: CN=67f2ff15-1420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:48:43:bb:a9:47:0f:62:e1:71:0f:91:be: e7:69:b7:87:28:d8:88:96:10:a4:1a:5f:78:74:9a: a3:11:0f:2b:7c:83:eb:29:4b:42:5b:92:02:2f:e3: 68:c0:14:09:80:15:c0:3c:32:35:d2:81:53:9a:cd: fb:76:55:c3:9f:86:e2:b6:21:74:fb:79:fb:06:47: 01:cc:96:5a:0d:89:75:3b:35:41:ef:ea:15:4c:42: 86:1d:99:9b:39:6d:41:b7:9d:1c:77:ad:df:3e:5c: 95:21:24:d3:92:c4:c3:ae:2f:34:e0:28:54:78:92: 94:15:32:4e:b2:a8:dd:b7:ab:40:7c:6d:9f:73:0b: fd:28:60:14:68:e6:ce:bc:5b:7b:39:15:cc:45:1f: 57:95:15:48:50:23:73:f1:53:e4:35:c0:72:3a:bf: 38:95:c4:44:44:72:f3:37:c4:e2:bd:29:e8:f6:fe: 59:c6:33:95:88:ef:08:42:b3:aa:1c:c5:be:5d:67: e5:39:70:cc:1f:97:f2:c5:b3:1d:eb:22:f2:ca:b1: 9a:97:8b:a7:d6:6c:be:70:6e:08:bf:9b:60:7f:f7: f0:29:4e:f4:67:3e:54:d8:b8:51:c3:46:04:03:e5: d1:2b:bc:50:fa:df:d3:5c:68:0a:55:e8:3b:00:aa: 50:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:36:B1:7A:53:54:7E:69:10:63:34:8E:3E:6B:5F:3C:6E:BA:92:42 X509v3 Authority Key Identifier: keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:df:96:82:f8:db:99:b5:a3:be:80:d0:98:a3:1d:4a:be:96: 39:03:73:b3:4a:53:2a:44:74:9c:11:17:1c:d4:90:b4:6b:83: 1e:bf:b1:4b:0d:47:a2:4c:ab:93:db:90:33:0a:cf:37:bb:26: e9:46:e4:0a:cd:53:d7:ae:37:29:bc:df:fe:05:c7:82:73:05: fe:80:ab:22:fa:70:79:6c:7f:30:71:38:73:66:f0:a1:1d:51: 71:48:c4:14:a2:8c:79:09:13:93:16:ae:e6:ca:f1:c3:16:cb: c4:51:8d:63:f1:f8:45:d1:1f:d1:e9:5d:d7:14:c0:5f:3e:44: 69:fc:6d:97:aa:1d:8e:39:59:f4:55:95:73:8f:1f:54:7d:68: 7f:59:93:23:04:88:dc:6d:ca:2b:49:03:34:53:77:f5:5e:80: 75:ff:a7:17:2c:5b:c4:51:d6:83:22:18:d6:3c:d6:57:88:5f: 20:9c:2e:10:d2:a6:1f:65:8e:4d:3a:cf:1d:a6:c8:7f:a1:9b: 5d:b4:4d:0c:9e:84:e7:38:46:dd:f4:4e:20:33:cc:c1:1c:73: c9:89:ac:89:de:a6:3f:ed:ee:4e:9b:0d:19:29:8c:fc:02:b7: 6b:a2:4c:60:2d:84:be:d8:4c:94:f4:dc:53:b3:87:c5:fe:0b: 08:ea:08:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJBNEUxMTAvBgNVBAUTKDdENzNFRjExNUIwMkM1RTAxMDIzODQ3QTkxQjBCMEYw NzhCNUYwMkIwHhcNMjUwNDA2MjIyNDIxWhcNMjUwNDEzMjIyNDIxWjAYMRYwFAYD VQQDEw02N2YyZmYxNS0xNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6dIQ7upRw9i4XEPkb7nabeHKNiIlhCkGl94dJqjEQ8rfIPrKUtCW5ICL+No wBQJgBXAPDI10oFTms37dlXDn4bitiF0+3n7BkcBzJZaDYl1OzVB7+oVTEKGHZmb OW1Bt50cd63fPlyVISTTksTDri804ChUeJKUFTJOsqjdt6tAfG2fcwv9KGAUaObO vFt7ORXMRR9XlRVIUCNz8VPkNcByOr84lcRERHLzN8TivSno9v5ZxjOViO8IQrOq HMW+XWflOXDMH5fyxbMd6yLyyrGal4un1my+cG4Iv5tgf/fwKU70Zz5U2LhRw0YE A+XRK7xQ+t/TXGgKVeg7AKpQaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMo2sXpT VH5pEGM0jj5rXzxuupJCMB8GA1UdIwQYMBaAFH1z7xFbAsXgECOEepGwsPB4tfAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkE0RS9FM0UwODQ2NDk1 QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hlQVFJNFI2a2JDdzhIaTE4 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZYUHZFVnNDeGVBUUk0UjZrYkN3OEhpMThDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkE0RS9FM0UwODQ2NDk1QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hl QVFJNFI2a2JDdzhIaTE4Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa35aC+NuZtaO+gNCYox1KvpY5A3OzSlMqRHScERcc1JC0a4Mev7FL DUeiTKuT25AzCs83uybpRuQKzVPXrjcpvN/+BceCcwX+gKsi+nB5bH8wcThzZvCh HVFxSMQUoox5CROTFq7myvHDFsvEUY1j8fhF0R/R6V3XFMBfPkRp/G2Xqh2OOVn0 VZVzjx9UfWh/WZMjBIjcbcorSQM0U3f1XoB1/6cXLFvEUdaDIhjWPNZXiF8gnC4Q 0qYfZY5NOs8dpsh/oZtdtE0MnoTnOEbd9E4gM8zBHHPJiayJ3qY/7e5Omw0ZKYz8 ArdrokxgLYS+2EyU9NxTs4fF/gsI6ghV -----END CERTIFICATE-----Generated at Mon Apr 7 10:14:48 2025 by rpki-client