$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json) Hash identifier: 7B0/m4rQw2pFgNpDmSU3vNrHSaMNi8Q/LBlKe/kRt78= Subject key identifier: DC:32:F7:0C:0F:96:AA:FE:72:8C:D9:4C:6A:8A:84:7F:55:94:F0:36 Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0E31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft Manifest number: 0E13 Signing time: Fri 04 Apr 2025 17:56:14 +0000 Manifest this update: Fri 04 Apr 2025 17:56:13 +0000 Manifest next update: Fri 11 Apr 2025 17:56:13 +0000 Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: X9K0V+EbDjMazlj3K00qnDqa7gf1r2ro/Unja4BG7BY=) 2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: K0BpqfADIAgpRrVb5VAxiR5k6a1N4eJk58+OYvAmefI=) 3: AF573166309511EABE9B5934C4F9AE02.roa (hash: wBVLudr4r1jyDPH+Ghnt4yYJmAXvAyl8ooTj+H1Y8oI=) 4: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: JffyrCPpCuKQ4JV9hKAHpBOYaMhGWQal4zN+8n2snKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3633 (0xe31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA Validity Not Before: Apr 4 17:56:13 2025 GMT Not After : Apr 11 17:56:13 2025 GMT Subject: CN=67f01d3e-2725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:a0:ee:c2:b9:01:ac:da:d5:9c:bc:8b:17: f1:d2:7b:c7:7b:5a:ae:6d:e1:95:a8:b8:50:00:c7: 7e:61:92:3b:69:cc:84:3c:1b:41:57:b6:08:04:0c: 25:f8:40:80:16:05:ca:00:5f:78:33:1e:c9:49:f8: a0:cd:09:7e:43:0b:f2:56:c3:d6:06:ee:c7:b4:84: 5c:38:0c:d7:77:39:dd:c3:a3:33:19:ee:ab:c8:2f: 28:dd:92:77:77:35:9d:12:fc:11:99:92:63:d3:86: 43:f1:24:57:ee:57:f4:e2:9e:5e:4f:70:97:0b:55: 1d:44:ea:3c:8e:82:cb:4b:74:70:f3:98:46:25:fa: 83:c4:bc:87:62:d6:54:37:46:24:4c:64:fc:4d:c3: e7:ef:f5:6c:6a:ea:1b:78:2c:8c:08:49:37:18:bc: 2b:c0:55:01:dd:f5:af:05:60:d5:51:c3:6e:d8:df: d9:19:a1:2b:d7:98:bf:20:6c:1c:a4:af:fb:0d:46: 13:d4:71:75:0d:92:ad:a7:46:fb:a6:ce:dc:b5:79: 39:f5:97:5b:8c:e8:f5:c6:d3:6c:5c:38:ee:63:64: 8d:17:ae:f4:54:c2:1d:86:c5:cc:85:56:5f:a7:14: 73:ee:ff:31:e0:59:c4:40:54:3c:90:25:5f:ff:5b: 41:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:32:F7:0C:0F:96:AA:FE:72:8C:D9:4C:6A:8A:84:7F:55:94:F0:36 X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:38:1e:12:f1:0e:11:c9:97:b6:5f:1a:4f:50:eb:43:73:ca: 99:70:a1:b5:e7:61:29:81:6a:9a:e1:c8:c7:c7:77:41:f8:da: c5:a5:d8:ae:8f:d8:1e:1c:7d:65:13:ca:db:35:ba:0b:93:c0: 08:24:fe:eb:8c:ab:67:ff:8f:b0:a4:32:66:1e:0e:ee:b2:9a: 26:26:77:b2:9f:bf:63:89:4b:84:b0:87:21:95:3f:d9:18:81: c8:a1:6d:72:27:8e:ba:16:96:84:2c:16:7e:e6:fd:e9:63:bf: d5:c6:4f:81:75:17:a4:9c:e4:ef:3f:c7:ac:2e:d5:b7:81:a9: 3e:fe:35:2a:33:de:22:15:f9:83:c9:0b:f7:46:61:25:4a:92: a7:99:7e:a2:bb:4e:8a:88:b1:e2:5d:76:41:6c:50:ab:25:fe: 92:d0:1e:bb:98:32:28:c9:86:fc:ec:1b:2b:8a:ee:b8:29:88: a4:9e:1e:8c:c5:44:fd:ea:0b:e2:f7:d5:fd:e3:c5:26:39:f5: dd:70:19:3b:3e:41:61:a1:4b:a6:88:cf:44:43:4d:9d:ce:aa: c5:bc:cf:06:bc:d6:e0:ed:1e:04:98:c0:3d:53:c6:2d:73:43: 2d:46:18:6f:e2:e0:0c:0c:75:02:cc:e1:f0:c7:2b:93:27:a5: f1:ac:cf:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjUwNDA0MTc1NjEzWhcNMjUwNDExMTc1NjEzWjAYMRYwFAYD VQQDEw02N2YwMWQzZS0yNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAug7sK5Aaza1Zy8ixfx0nvHe1qubeGVqLhQAMd+YZI7acyEPBtBV7YIBAwl +ECAFgXKAF94Mx7JSfigzQl+QwvyVsPWBu7HtIRcOAzXdzndw6MzGe6ryC8o3ZJ3 dzWdEvwRmZJj04ZD8SRX7lf04p5eT3CXC1UdROo8joLLS3Rw85hGJfqDxLyHYtZU N0YkTGT8TcPn7/VsauobeCyMCEk3GLwrwFUB3fWvBWDVUcNu2N/ZGaEr15i/IGwc pK/7DUYT1HF1DZKtp0b7ps7ctXk59ZdbjOj1xtNsXDjuY2SNF670VMIdhsXMhVZf pxRz7v8x4FnEQFQ8kCVf/1tBewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwy9wwP lqr+cozZTGqKhH9VlPA2MB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6 MlJJeVVQdTJVeDZJcEttZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAROB4S8Q4RyZe2XxpPUOtDc8qZcKG152EpgWqa4cjHx3dB+NrFpdiu j9geHH1lE8rbNboLk8AIJP7rjKtn/4+wpDJmHg7uspomJneyn79jiUuEsIchlT/Z GIHIoW1yJ466FpaELBZ+5v3pY7/Vxk+BdReknOTvP8esLtW3gak+/jUqM94iFfmD yQv3RmElSpKnmX6iu06KiLHiXXZBbFCrJf6S0B67mDIoyYb87Bsriu64KYiknh6M xUT96gvi99X948UmOfXdcBk7PkFhoUumiM9EQ02dzqrFvM8GvNbg7R4EmMA9U8Yt c0MtRhhv4uAMDHUCzOHwxyuTJ6XxrM9L -----END CERTIFICATE-----Generated at Fri Apr 4 22:10:37 2025 by rpki-client