$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json) Hash identifier: A9O3NMym+je+IlOvmExA9ZIXE9kZeRWdGgBIlvu5Mc8= Subject key identifier: 71:22:2E:66:34:C9:51:D2:92:F6:7A:85:CC:52:8B:7E:77:19:46:24 Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft Manifest number: 01B9 Signing time: Sat 05 Apr 2025 02:39:14 +0000 Manifest this update: Sat 05 Apr 2025 02:39:13 +0000 Manifest next update: Sat 12 Apr 2025 02:39:13 +0000 Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: ytyBeTDvF6IyCYRCHK6dbKrmFTnGv2hWIREQYa8jUUE=) 2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: ziWoAY2hbvtxePvnZWAtSB5jp5zkw3S8bF9M6H2eX84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EC0 Validity Not Before: Apr 5 02:39:13 2025 GMT Not After : Apr 12 02:39:13 2025 GMT Subject: CN=67f097d2-351e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1f:8f:f1:fb:b7:84:12:ed:57:ca:29:98:f2: 34:86:b1:ad:f8:0d:49:e6:bc:d5:e3:98:e6:67:06: 90:78:7e:6a:f1:fa:a2:25:5f:87:7e:08:da:4c:98: 5d:ce:fe:a3:2e:c6:1f:f4:a7:b2:41:3a:41:11:d3: eb:b3:ed:1c:62:78:c7:52:46:e9:af:83:89:98:3c: 9e:50:6b:1f:2b:80:3d:c0:50:f8:8e:43:73:57:1b: b8:85:8f:6c:72:a5:e2:63:2e:28:00:2b:db:77:76: e4:e9:e5:69:c1:c1:c8:6f:8f:53:12:71:77:6d:10: 44:ba:ac:1b:07:85:27:a2:7d:aa:91:59:68:2a:6c: 03:f4:e9:36:36:32:7c:ad:20:d1:0a:71:27:63:ac: ce:1a:27:f8:f4:41:0b:a6:37:38:8e:fd:0c:53:1c: 5a:6e:b4:6e:32:0d:07:71:73:40:02:0c:e6:60:c3: 3b:1c:f1:70:fe:c7:63:08:96:a5:73:99:d2:c9:ad: e5:1c:cd:57:92:fc:a9:a8:d1:3b:bf:a4:bb:28:31: a4:34:63:d7:d6:98:a6:9c:ef:51:49:11:59:52:25: ec:e9:51:b4:c1:18:60:5f:2d:26:b2:b6:0c:4b:0b: f4:0d:82:63:e0:4e:c0:97:9a:3a:50:9e:9e:9c:98: 1a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:22:2E:66:34:C9:51:D2:92:F6:7A:85:CC:52:8B:7E:77:19:46:24 X509v3 Authority Key Identifier: keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:9a:85:74:a0:cb:37:be:1b:bd:2d:7c:f3:d9:fa:20:34:dc: 72:e2:69:6b:81:56:ff:c3:39:19:5b:07:41:4e:85:e8:09:05: dc:a8:6c:47:af:16:d5:a1:fd:48:b7:c0:f1:40:41:cb:2a:f7: 5d:e3:9e:0a:1c:ca:6c:7d:4a:ed:d9:72:4d:d9:99:df:b0:5a: 6d:56:6e:2a:20:5c:d6:f9:21:ad:b3:3e:06:5c:e3:ac:8c:40: 52:87:e4:39:11:ac:75:1a:b9:88:47:93:e5:98:b5:63:a1:c1: 9b:58:de:6b:c1:02:cc:df:99:1a:97:7f:24:10:2d:e0:ac:11: 3b:6d:48:29:d4:48:ac:28:39:52:ff:7c:5c:65:32:10:df:e1: 1a:53:ba:98:7c:40:23:53:8f:e8:45:6b:36:31:5b:d4:fc:b7: a9:0b:5c:d5:36:4d:34:e6:a1:0c:13:a9:24:52:3e:1e:99:3e: d0:84:a2:c4:b1:4d:c1:66:be:0f:d5:e9:2a:1b:8b:00:8e:51: 89:8a:fd:96:9a:b1:e9:9e:d3:87:49:a7:76:6a:11:01:c4:51: c5:c1:67:f2:32:15:35:21:97:d4:35:2a:35:55:74:d1:25:06: 84:a1:f7:dc:dd:62:65:77:32:6c:47:af:ca:e9:9c:b8:47:1a: 10:96:f0:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0 N0E1Qzc0NzEwHhcNMjUwNDA1MDIzOTEzWhcNMjUwNDEyMDIzOTEzWjAYMRYwFAYD VQQDEw02N2YwOTdkMi0zNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAux+P8fu3hBLtV8opmPI0hrGt+A1J5rzV45jmZwaQeH5q8fqiJV+HfgjaTJhd zv6jLsYf9KeyQTpBEdPrs+0cYnjHUkbpr4OJmDyeUGsfK4A9wFD4jkNzVxu4hY9s cqXiYy4oACvbd3bk6eVpwcHIb49TEnF3bRBEuqwbB4Unon2qkVloKmwD9Ok2NjJ8 rSDRCnEnY6zOGif49EELpjc4jv0MUxxabrRuMg0HcXNAAgzmYMM7HPFw/sdjCJal c5nSya3lHM1XkvypqNE7v6S7KDGkNGPX1pimnO9RSRFZUiXs6VG0wRhgXy0msrYM Swv0DYJj4E7Al5o6UJ6enJgaiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEiLmY0 yVHSkvZ6hcxSi353GUYkMB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEVDMC9EQUU2NzQwQzdGM0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBS aWNlZURuU294N2hIcGNkSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8moV0oMs3vhu9LXzz2fogNNxy4mlrgVb/wzkZWwdBToXoCQXcqGxH rxbVof1It8DxQEHLKvdd454KHMpsfUrt2XJN2ZnfsFptVm4qIFzW+SGtsz4GXOOs jEBSh+Q5Eax1GrmIR5PlmLVjocGbWN5rwQLM35kal38kEC3grBE7bUgp1EisKDlS /3xcZTIQ3+EaU7qYfEAjU4/oRWs2MVvU/LepC1zVNk005qEME6kkUj4emT7QhKLE sU3BZr4P1ekqG4sAjlGJiv2WmrHpntOHSad2ahEBxFHFwWfyMhU1IZfUNSo1VXTR JQaEoffc3WJldzJsR6/K6Zy4RxoQlvAD -----END CERTIFICATE-----Generated at Sun Apr 6 10:16:02 2025 by rpki-client