$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft File: xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft (raw, json) Hash identifier: hXWps1cWphybppAHsCmSUPee7uLAdSYu2RY3xsdZssI= Subject key identifier: B2:36:A1:58:B4:9B:06:6E:03:AD:69:97:BA:5A:77:42:28:3D:96:AF Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39 Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939 Certificate serial: 0BD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft Manifest number: 0BC9 Signing time: Fri 18 Apr 2025 18:54:17 +0000 Manifest this update: Fri 18 Apr 2025 18:54:16 +0000 Manifest next update: Fri 25 Apr 2025 18:54:16 +0000 Files and hashes: 1: xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl (hash: RUfPOPonpKu/itWyhU8YW832kYJYT/noJecNxkDwbYE=) 2: 7A7B776A1F0E11EA92AA6824C4F9AE02.roa (hash: vuAfqS+oupAqLtbWHhdz3OsiJgWg5sczosdrHd8kXwo=) 3: FBFF89FC3AC611EEB790D485C4F9AE02.roa (hash: DQuIcDvil4xhDWRcyNWiHmLcTyjG0SYLvwiCuCDmI90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3028 (0xbd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939 Validity Not Before: Apr 18 18:54:16 2025 GMT Not After : Apr 25 18:54:16 2025 GMT Subject: CN=68029fd8-d226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:c4:1b:50:ac:f4:2d:8a:b0:b5:aa:a0:7d: 39:db:cd:41:e1:49:89:aa:22:5e:bc:2f:13:e0:f8: f2:d4:11:8b:a5:98:93:b3:55:9c:03:b4:6a:aa:21: 0e:d4:0d:cf:ae:27:28:60:d1:72:9c:1e:c3:f1:f4: 6f:30:56:84:90:2f:fa:a0:5d:41:d0:c3:fb:03:d7: 35:3b:db:0e:88:2f:ca:52:f7:70:a9:8d:e3:ad:5e: 74:fe:14:e7:36:41:21:63:a2:a0:ba:17:87:29:ba: b4:85:85:e5:a9:e9:00:73:bc:7c:7b:f3:33:49:c4: 82:07:01:64:b4:53:81:2e:9f:12:c3:ae:76:ef:22: ec:1e:91:c8:c1:a3:26:d9:89:09:3f:d2:1c:71:cc: 72:70:5c:68:e1:b0:e4:b3:18:92:1b:65:25:62:79: f8:08:34:d3:45:cc:c6:b5:5e:d9:69:9b:4b:8c:08: 75:a9:98:ad:ee:6a:65:20:8d:b2:45:32:04:d2:74: 4c:3c:1b:90:ba:09:dd:6f:fc:3b:45:63:49:fd:23: 54:ee:6f:1e:cd:21:45:10:cf:f4:bf:db:ca:f6:22: f6:e4:9f:07:97:5a:02:dd:aa:1a:b5:72:97:54:e9: c7:a3:70:ec:2e:ee:d3:d2:68:a6:5d:51:b4:f0:81: 29:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:36:A1:58:B4:9B:06:6E:03:AD:69:97:BA:5A:77:42:28:3D:96:AF X509v3 Authority Key Identifier: keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a3:a5:37:00:7a:73:59:1c:39:e2:dd:54:9b:8a:da:5b:d0: c3:03:f7:56:bf:57:39:07:ca:2d:d4:4e:db:ff:b6:f4:78:61: 9c:c3:69:81:35:35:0b:d9:27:b2:ee:23:16:38:21:2c:5c:94: d7:03:8c:71:ac:34:00:3c:11:38:da:75:fb:12:3e:ec:42:a1: fc:69:0c:54:00:e3:77:f6:e5:06:86:ae:aa:41:21:8f:c3:99: 33:85:d8:c7:46:6f:f0:c1:e0:1c:d7:07:9e:4a:00:02:9e:c3: ad:f7:7c:87:3e:5a:98:fc:27:0e:e1:d9:9a:90:33:6d:55:a7: 3c:73:80:11:34:a0:46:d3:63:0e:6e:ef:e0:7b:16:25:8a:22: 21:b9:1d:12:ac:5e:9d:dd:95:77:48:cf:ad:e1:a1:07:0f:49: db:4e:f4:4b:48:8c:9b:d7:e3:56:11:0e:66:ae:45:fb:10:56: a3:26:9a:7d:6b:3d:c9:4e:88:4c:bc:48:e8:84:4b:e7:25:af: 25:6d:9a:81:57:b2:87:65:de:0a:24:d5:60:12:d8:84:0f:70: 7c:f5:57:62:0f:98:db:91:9e:4a:cb:ad:23:7f:e2:e1:6f:53: 5f:a4:92:6d:8d:59:d6:1b:37:f8:13:b7:45:ce:2e:da:0c:85: b9:ce:e8:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc4NkExMTAvBgNVBAUTKEM3MTUzMUQyNUY4MDU0OEY1QjY1MUY4NjQ5MzI1RjND OEZEODU5MzkwHhcNMjUwNDE4MTg1NDE2WhcNMjUwNDI1MTg1NDE2WjAYMRYwFAYD VQQDEw02ODAyOWZkOC1kMjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsfEG1Cs9C2KsLWqoH05281B4UmJqiJevC8T4Pjy1BGLpZiTs1WcA7RqqiEO 1A3PricoYNFynB7D8fRvMFaEkC/6oF1B0MP7A9c1O9sOiC/KUvdwqY3jrV50/hTn NkEhY6KguheHKbq0hYXlqekAc7x8e/MzScSCBwFktFOBLp8Sw6527yLsHpHIwaMm 2YkJP9IcccxycFxo4bDksxiSG2UlYnn4CDTTRczGtV7ZaZtLjAh1qZit7mplII2y RTIE0nRMPBuQugndb/w7RWNJ/SNU7m8ezSFFEM/0v9vK9iL25J8Hl1oC3aoatXKX VOnHo3DsLu7T0mimXVG08IEp9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLI2oVi0 mwZuA61pl7pad0IoPZavMB8GA1UdIwQYMBaAFMcVMdJfgFSPW2UfhkkyXzyP2Fk5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2QS8xMjZERkM5NjFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJOWJaUi1HU1RKZlBJX1lX VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h4VXgwbC1BVkk5YlpSLUdTVEpmUElfWVdUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Nzg2QS8xMjZERkM5NjFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJ OWJaUi1HU1RKZlBJX1lXVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJo6U3AHpzWRw54t1Um4raW9DDA/dWv1c5B8ot1E7b/7b0eGGcw2mB NTUL2Sey7iMWOCEsXJTXA4xxrDQAPBE42nX7Ej7sQqH8aQxUAON39uUGhq6qQSGP w5kzhdjHRm/wweAc1weeSgACnsOt93yHPlqY/CcO4dmakDNtVac8c4ARNKBG02MO bu/gexYliiIhuR0SrF6d3ZV3SM+t4aEHD0nbTvRLSIyb1+NWEQ5mrkX7EFajJpp9 az3JTohMvEjohEvnJa8lbZqBV7KHZd4KJNVgEtiED3B89VdiD5jbkZ5Ky60jf+Lh b1NfpJJtjVnWGzf4E7dFzi7aDIW5zugs -----END CERTIFICATE-----Generated at Sat Apr 19 08:27:34 2025 by rpki-client