$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: 6FGnISXoOaqdl0OsrTfVQw0uBmVKO7lcL4ErrwIztuU= Subject key identifier: CF:60:3C:EF:DE:1A:9B:B5:3E:9B:6C:FB:E3:3D:FB:58:97:7F:56:44 Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 062A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 0621 Signing time: Fri 04 Apr 2025 22:53:02 +0000 Manifest this update: Fri 04 Apr 2025 22:53:01 +0000 Manifest next update: Fri 11 Apr 2025 22:53:01 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: vK6pdIFQmyaVVo6nrb3GzR6nuOSTeZvIrr6Zo8FjN1k=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: xnj1+DqNRGp1sU91Z+zGlbx4vpo9U2+YWkznSk4BLXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20 Validity Not Before: Apr 4 22:53:01 2025 GMT Not After : Apr 11 22:53:01 2025 GMT Subject: CN=67f062ce-8a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a3:17:f5:9f:e9:58:9d:72:22:43:8d:e2:5b: ea:d0:9e:70:fa:f4:67:63:0d:fc:b6:f8:5e:81:74: ac:11:bd:57:47:d9:df:32:cd:16:74:ec:14:f7:00: cb:08:50:72:9a:63:c1:00:1b:87:35:cf:2c:11:51: 5c:ce:40:97:a9:15:40:4d:e0:b9:99:1a:9e:84:b4: 91:e4:59:bd:4e:91:16:5d:6c:26:9b:aa:05:9b:84: 71:3c:36:9f:c9:18:ea:cc:24:11:ac:92:21:0e:12: 32:a9:e4:36:ab:5d:47:03:38:a0:58:57:a4:4b:75: 67:cb:50:54:7e:28:8c:16:90:7f:be:59:9b:a9:7d: be:c7:33:f9:bc:84:f8:bc:1f:bd:65:3b:2b:80:20: 12:c3:4d:b6:d9:e6:e0:15:f0:28:7c:86:ae:f6:12: 73:29:ec:91:6c:7d:cc:ff:63:f4:e6:a4:23:0f:1e: 53:87:7d:59:d9:04:18:4a:11:f6:93:7f:f8:25:ad: 42:53:51:0f:22:36:20:c3:da:2b:aa:df:16:7e:72: 54:db:8d:13:12:4d:56:56:39:a3:09:24:45:62:54: c4:8e:ce:af:b2:3e:57:0d:a3:ca:d0:03:b6:ed:dd: 2e:68:01:ac:92:8e:ae:df:84:f7:11:07:b7:e5:b6: e8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:60:3C:EF:DE:1A:9B:B5:3E:9B:6C:FB:E3:3D:FB:58:97:7F:56:44 X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:3a:da:1e:27:e3:6a:2b:a2:9c:2c:ec:d6:93:26:a7:61:14: f8:be:67:5c:4f:76:a1:25:19:ea:b3:3d:b5:24:67:5c:43:37: fc:fb:0d:02:d8:bd:9c:38:2f:71:d2:34:c8:89:55:41:2c:c6: 93:03:6f:78:fa:51:a9:fb:a5:b8:8c:5c:69:d6:3a:4d:ce:5f: 7a:28:63:e8:a3:22:67:c2:3d:61:59:32:9d:3d:c9:f9:de:2a: 95:bf:06:1a:61:42:ec:70:60:7c:b8:b4:94:62:d8:74:1b:43: 23:31:1c:00:26:f9:5d:62:1d:54:9f:b4:48:c5:9f:d4:b7:82: 8b:e1:ac:58:f4:e2:8a:3e:13:bc:88:bd:43:0a:52:ff:df:f7: 06:30:11:01:92:19:e0:68:29:cf:27:98:82:13:83:89:ac:92: ff:f9:92:cd:40:aa:79:4c:e3:6d:0a:e9:57:d7:5f:55:87:1e: 86:3c:fc:6c:65:8a:9a:55:94:c8:33:a6:8e:69:71:41:60:a2: e2:6d:5f:57:ca:d7:d9:0d:59:58:29:09:1d:71:8b:1d:3f:a6: 13:49:55:83:cc:9a:83:30:67:96:4c:04:5e:a6:36:9b:29:b4: c5:cc:7c:ad:3d:e8:d6:fa:45:2e:71:18:94:78:0b:2f:09:a5: 6f:ca:ea:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjUwNDA0MjI1MzAxWhcNMjUwNDExMjI1MzAxWjAYMRYwFAYD VQQDEw02N2YwNjJjZS04YTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aMX9Z/pWJ1yIkON4lvq0J5w+vRnYw38tvhegXSsEb1XR9nfMs0WdOwU9wDL CFBymmPBABuHNc8sEVFczkCXqRVATeC5mRqehLSR5Fm9TpEWXWwmm6oFm4RxPDaf yRjqzCQRrJIhDhIyqeQ2q11HAzigWFekS3Vny1BUfiiMFpB/vlmbqX2+xzP5vIT4 vB+9ZTsrgCASw0222ebgFfAofIau9hJzKeyRbH3M/2P05qQjDx5Th31Z2QQYShH2 k3/4Ja1CU1EPIjYgw9orqt8WfnJU240TEk1WVjmjCSRFYlTEjs6vsj5XDaPK0AO2 7d0uaAGsko6u34T3EQe35bboiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9gPO/e Gpu1Ppts++M9+1iXf1ZEMB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAOtoeJ+NqK6KcLOzWkyanYRT4vmdcT3ahJRnqsz21JGdcQzf8+w0C 2L2cOC9x0jTIiVVBLMaTA294+lGp+6W4jFxp1jpNzl96KGPooyJnwj1hWTKdPcn5 3iqVvwYaYULscGB8uLSUYth0G0MjMRwAJvldYh1Un7RIxZ/Ut4KL4axY9OKKPhO8 iL1DClL/3/cGMBEBkhngaCnPJ5iCE4OJrJL/+ZLNQKp5TONtCulX119Vhx6GPPxs ZYqaVZTIM6aOaXFBYKLibV9XytfZDVlYKQkdcYsdP6YTSVWDzJqDMGeWTARepjab KbTFzHytPejW+kUucRiUeAsvCaVvyuqi -----END CERTIFICATE-----Generated at Sat Apr 5 13:25:09 2025 by rpki-client