$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft File: Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft (raw, json) Hash identifier: 4x8CYgzeVoa5n5HmO8SzedBqKL7JKTWc7INDtI8f/LQ= Subject key identifier: B3:B9:18:D4:AB:B7:C2:B1:77:0C:D7:4C:03:E1:DD:C9:CF:95:8B:A8 Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC Certificate serial: 0393 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft Manifest number: 036F Signing time: Thu 03 Apr 2025 01:01:22 +0000 Manifest this update: Thu 03 Apr 2025 01:01:22 +0000 Manifest next update: Thu 10 Apr 2025 01:01:22 +0000 Files and hashes: 1: Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl (hash: NAsedu6o4TuZIFsLfAMbCSi2OREJXhrpiQxqbBhPK+Q=) 2: 7B6F6276E03811EFAC3C5652C4F9AE02.roa (hash: melteXR1cRharD5muHTsf70+edihxivjKNNQzAZNpLE=) 3: 79C2D638E03811EFAC3C5652C4F9AE02.roa (hash: pIl/ybOSWeNJuXyu7vI+RsUvtpL0KXP/t0jEbgQtU7I=) 4: 7AA94F3CE03811EFAC3C5652C4F9AE02.roa (hash: ImUvDtTwcm68idWdwXB7tEHKc5rG51UP9vCEMxdSyRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 915 (0x393) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E8E Validity Not Before: Apr 3 01:01:22 2025 GMT Not After : Apr 10 01:01:22 2025 GMT Subject: CN=67eddde2-4259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:1e:0c:95:02:23:23:25:f0:73:f0:0d:bb: 63:59:b8:bd:ec:02:95:03:50:97:b0:0b:2e:30:59: e6:71:d4:d7:56:b8:51:4e:0d:c0:82:c4:de:4b:13: 96:5f:b4:d3:e9:42:12:d1:a6:d4:79:52:5a:9c:0a: 55:c0:13:73:98:f5:49:0c:e8:7f:fe:8e:13:e9:77: 70:28:3b:39:e9:e2:fa:c6:8d:6a:c0:cf:46:7e:cf: b8:18:8d:b2:2b:15:02:58:8d:f5:c7:dd:8f:5f:77: 1f:00:e3:e9:b2:27:30:b8:38:a1:99:77:d7:9d:2b: 14:d8:7c:09:64:88:f2:0e:4e:ee:68:77:44:d1:2c: 9a:21:a4:43:98:db:0e:04:a5:f6:c2:f2:5e:53:fa: 1f:07:2e:de:d3:5a:6d:4b:bf:7d:f2:67:29:6e:6f: 3b:bf:1c:c5:52:38:ad:0c:ef:08:99:21:30:fb:a9: c8:71:6d:87:2d:b6:cc:b9:cb:10:c6:00:54:04:c4: fb:cc:01:e5:c6:ae:37:bf:43:e6:d2:29:41:cb:7b: c6:a5:b3:12:eb:d4:e1:d5:20:70:83:d1:ae:60:1f: 40:9c:04:50:c3:c0:76:af:35:f3:52:3b:36:3e:ed: ce:8d:d7:20:75:44:3b:36:c6:b9:64:fc:0b:59:83: a4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B9:18:D4:AB:B7:C2:B1:77:0C:D7:4C:03:E1:DD:C9:CF:95:8B:A8 X509v3 Authority Key Identifier: keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:16:43:c0:19:d7:71:7f:f7:8b:58:37:70:bb:1b:43:96:89: 9a:a6:c7:81:35:8c:11:4f:07:af:8b:40:a7:36:97:e8:10:8d: ed:f7:fa:6d:73:0f:be:6e:c6:61:b6:47:66:c9:d3:65:47:6b: 1b:aa:a5:30:36:e4:f4:dd:bf:98:00:ff:fe:ae:35:43:e2:90: 7e:68:23:05:40:e2:1b:38:b2:9e:4b:96:c7:b0:93:a1:40:94: c1:6c:1b:7f:ca:76:41:78:e8:10:30:d1:fc:33:36:86:f4:4d: 85:d5:63:a8:18:ca:3f:b9:19:4b:9e:da:de:b3:d6:47:f5:35: b7:f3:d9:40:9d:bc:d6:c2:0e:0a:fd:24:d7:a9:8f:86:3b:c3: d3:95:d7:6b:00:bd:a3:7c:f8:65:bd:7c:8e:f6:88:8f:78:3a: 91:d7:15:94:cf:06:56:cc:8a:fd:d6:28:f4:8c:33:26:60:b7: bb:ca:df:03:43:ef:72:b2:44:d2:ef:14:10:4e:f7:ef:03:7e: c3:56:a1:c4:71:55:9c:88:aa:44:22:06:2a:04:bf:f3:4a:84: ce:76:44:bf:70:e2:78:55:45:25:bb:99:9a:c2:ac:b0:f9:b9: 3c:1d:11:d0:b0:d4:0c:59:ec:18:23:fc:ef:50:c7:1e:bf:83: 5d:ff:1c:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB REQ1RjM0QUMwHhcNMjUwNDAzMDEwMTIyWhcNMjUwNDEwMDEwMTIyWjAYMRYwFAYD VQQDEw02N2VkZGRlMi00MjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLUeDJUCIyMl8HPwDbtjWbi97AKVA1CXsAsuMFnmcdTXVrhRTg3AgsTeSxOW X7TT6UIS0abUeVJanApVwBNzmPVJDOh//o4T6XdwKDs56eL6xo1qwM9Gfs+4GI2y KxUCWI31x92PX3cfAOPpsicwuDihmXfXnSsU2HwJZIjyDk7uaHdE0SyaIaRDmNsO BKX2wvJeU/ofBy7e01ptS7998mcpbm87vxzFUjitDO8ImSEw+6nIcW2HLbbMucsQ xgBUBMT7zAHlxq43v0Pm0ilBy3vGpbMS69Th1SBwg9GuYB9AnARQw8B2rzXzUjs2 Pu3OjdcgdUQ7Nsa5ZPwLWYOkGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLO5GNSr t8KxdwzXTAPh3cnPlYuoMB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEU4RS8wNEZCQjhGMEFFMEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRR cUZfeS1hWHpHeXV0MWZOS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnFkPAGddxf/eLWDdwuxtDlomapseBNYwRTwevi0CnNpfoEI3t9/pt cw++bsZhtkdmydNlR2sbqqUwNuT03b+YAP/+rjVD4pB+aCMFQOIbOLKeS5bHsJOh QJTBbBt/ynZBeOgQMNH8MzaG9E2F1WOoGMo/uRlLntres9ZH9TW389lAnbzWwg4K /STXqY+GO8PTlddrAL2jfPhlvXyO9oiPeDqR1xWUzwZWzIr91ij0jDMmYLe7yt8D Q+9yskTS7xQQTvfvA37DVqHEcVWciKpEIgYqBL/zSoTOdkS/cOJ4VUUlu5mawqyw +bk8HRHQsNQMWewYI/zvUMcev4Nd/xzR -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:02 2025 by rpki-client