$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft File: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft (raw, json) Hash identifier: NSnZguKpU7hs8R/o5XlaIrp4KMFmMEc5kmjpSZxlEfQ= Subject key identifier: 67:AD:D7:34:1C:DD:9E:5A:9A:1B:94:15:32:9E:B6:C9:E3:EF:B5:0E Authority key identifier: D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 Certificate issuer: /CN=A9172D65/serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22 Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft Manifest number: 0480 Signing time: Sun 20 Apr 2025 23:42:15 +0000 Manifest this update: Sun 20 Apr 2025 23:42:14 +0000 Manifest next update: Sun 27 Apr 2025 23:42:14 +0000 Files and hashes: 1: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl (hash: i7abKzZPP+gM98Iw55HqNKQ1I/pQPVcAk/iBfTRrxOM=) 2: 56530120D47E11EFB2639C53C4F9AE02.roa (hash: 1whcSR6JX/pYt55ZCs0pw4Y1DC7NV0axD3riMwYblGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 23:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D65, serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22 Validity Not Before: Apr 20 23:42:14 2025 GMT Not After : Apr 27 23:42:14 2025 GMT Subject: CN=68058656-b6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:2f:b0:48:39:f0:41:f1:b1:41:ba:d9:97: 21:44:04:7c:58:2b:ac:23:84:e3:bd:16:5c:cb:58: 13:9b:bb:96:23:03:85:0b:36:4c:8f:f3:99:99:0c: 4e:56:e3:f2:7d:e6:92:28:d8:41:77:63:15:1a:3b: fc:da:e0:c9:79:a4:c4:5c:db:fb:ff:f7:75:60:81: dc:e1:fb:ad:d9:25:0c:22:fa:b5:a5:85:c3:76:f9: dc:86:c3:c4:0a:2b:35:e5:a8:c8:dc:90:fc:4f:1c: 43:16:bc:76:b5:09:d6:8e:34:f7:ac:06:6a:07:24: be:fe:67:75:0f:2b:f6:06:ef:99:10:af:dd:c9:c8: 41:65:88:b2:08:5e:c0:10:9b:7f:d1:53:9c:61:55: 43:c7:92:81:06:a8:9c:5c:e5:54:e2:ea:45:45:d9: 5b:cd:e7:5a:78:ae:88:0f:53:2b:b3:00:57:1c:23: 56:dd:66:6a:68:3d:94:9a:a6:bf:6b:78:fc:f1:4d: 3a:c3:b8:57:ac:66:35:36:f8:84:03:dd:e8:c7:fc: 78:55:a6:85:f6:19:86:2b:d2:f3:f8:f8:4d:e4:63: 23:a8:c2:fe:e2:ab:9b:06:ec:b6:97:07:0b:d2:50: ef:5b:a4:9f:52:62:40:a2:f1:64:e3:36:ab:ec:fa: 40:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AD:D7:34:1C:DD:9E:5A:9A:1B:94:15:32:9E:B6:C9:E3:EF:B5:0E X509v3 Authority Key Identifier: keyid:D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:61:8c:d7:0e:8e:95:78:3c:fa:e7:45:78:10:54:76:da:9d: ce:6f:f8:e7:74:2c:76:af:a3:f2:84:3f:6a:06:df:07:dc:40: 55:0d:54:02:65:0a:41:76:c3:06:23:f9:9d:0c:f7:ae:fc:ea: bb:5b:93:dd:86:24:1b:a1:eb:44:ff:ea:c0:74:2c:78:5c:78: 23:87:e2:82:4a:37:08:f6:bf:c2:e9:9a:1f:6d:f1:5a:32:cc: f2:6d:cd:75:45:cb:0b:a4:ca:9e:bc:71:3b:23:47:e2:a9:75: 88:6a:11:76:ae:e6:1e:c7:37:e9:36:46:ad:15:9b:34:3d:97: c2:b1:ac:74:33:1e:b2:e6:e9:05:4e:d3:b7:e5:5f:d1:b6:a5: d6:41:73:28:d2:f1:e8:95:20:c5:9f:a1:8e:86:6d:1c:72:cc: 21:ac:c0:79:43:c7:ba:a4:a1:96:04:74:7a:00:40:74:2d:bb: 9c:c2:47:ed:1d:e3:9b:29:ca:df:da:91:cc:2a:e4:09:d8:39: e5:d7:94:fe:24:86:4c:1e:f2:36:6c:11:ff:9f:7f:87:7a:55: 24:1d:0e:6a:f1:b7:ce:5c:f6:85:a7:62:8d:73:7e:21:c9:84: e0:63:67:b4:64:d3:86:95:ae:41:4d:f8:87:ca:71:52:b8:98: 09:9f:74:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJENjUxMTAvBgNVBAUTKEQ3MTUxOEZDNkU1NkM3QzRFQ0E5RUExOEIxQjU0MUQ4 QjBDMkNBMjIwHhcNMjUwNDIwMjM0MjE0WhcNMjUwNDI3MjM0MjE0WjAYMRYwFAYD VQQDEw02ODA1ODY1Ni1iNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKAvsEg58EHxsUG62ZchRAR8WCusI4TjvRZcy1gTm7uWIwOFCzZMj/OZmQxO VuPyfeaSKNhBd2MVGjv82uDJeaTEXNv7//d1YIHc4fut2SUMIvq1pYXDdvnchsPE Cis15ajI3JD8TxxDFrx2tQnWjjT3rAZqByS+/md1Dyv2Bu+ZEK/dychBZYiyCF7A EJt/0VOcYVVDx5KBBqicXOVU4upFRdlbzedaeK6ID1MrswBXHCNW3WZqaD2Umqa/ a3j88U06w7hXrGY1NviEA93ox/x4VaaF9hmGK9Lz+PhN5GMjqML+4qubBuy2lwcL 0lDvW6SfUmJAovFk4zar7PpASQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGet1zQc 3Z5amhuUFTKetsnj77UOMB8GA1UdIwQYMBaAFNcVGPxuVsfE7KnqGLG1Qdiwwsoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ2NS80RjQyMUY1MjNC MEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4VHNxZW9Zc2JWQjJMREN5 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4VVlfRzVXeDhUc3Flb1lzYlZCMkxEQ3lpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkQ2NS80RjQyMUY1MjNCMEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4 VHNxZW9Zc2JWQjJMREN5aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAYYzXDo6VeDz650V4EFR22p3Ob/jndCx2r6PyhD9qBt8H3EBVDVQC ZQpBdsMGI/mdDPeu/Oq7W5PdhiQboetE/+rAdCx4XHgjh+KCSjcI9r/C6ZofbfFa Mszybc11RcsLpMqevHE7I0fiqXWIahF2ruYexzfpNkatFZs0PZfCsax0Mx6y5ukF TtO35V/RtqXWQXMo0vHolSDFn6GOhm0ccswhrMB5Q8e6pKGWBHR6AEB0Lbucwkft HeObKcrf2pHMKuQJ2Dnl15T+JIZMHvI2bBH/n3+HelUkHQ5q8bfOXPaFp2KNc34h yYTgY2e0ZNOGla5BTfiHynFSuJgJn3Tt -----END CERTIFICATE-----Generated at Tue Apr 22 05:56:13 2025 by rpki-client