$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json) Hash identifier: naTU9Vngp7hdhcW92cYliMO3wBVh1YSFNCOEPs9t61k= Subject key identifier: 80:83:EB:13:A2:32:9B:6F:45:1F:A5:50:54:2E:FF:81:9C:0E:D0:CC Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft Manifest number: C6 Signing time: Thu 03 Apr 2025 05:06:46 +0000 Manifest this update: Thu 03 Apr 2025 05:06:46 +0000 Manifest next update: Thu 10 Apr 2025 05:06:46 +0000 Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: 6RJMEirSTQ/+cXO0gDwOqwGPJRIWpCC15L8Ocu3bB8E=) 2: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: w8SNcu2W86NVWJqOd27to5fWU6al9qmk5VnBP7mMOjs=) 3: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: q12pisfHJtoL9XkqG0on+CXyPl8Ax23nksmjhCAQXBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173B29 Validity Not Before: Apr 3 05:06:46 2025 GMT Not After : Apr 10 05:06:46 2025 GMT Subject: CN=67ee1766-69ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:91:1d:b4:a6:30:a1:36:39:88:a8:c5:c9:4f: c3:a4:22:cc:b3:36:82:38:ab:7d:2c:4e:5b:bc:d2: b9:85:04:f0:a5:a8:fd:0e:ae:5e:46:cd:81:e6:8b: 1f:0b:56:17:45:6b:e7:09:71:91:e6:e5:bc:22:65: 74:2f:ad:75:dc:43:37:e0:cd:e4:9c:9c:a8:19:b5: 4e:f5:f9:f1:48:90:1c:0f:41:74:96:87:66:e0:26: 86:8d:80:b3:c3:3e:c1:64:4f:83:1b:04:80:79:cb: 0e:c3:d3:34:72:07:58:be:71:c9:31:2f:6b:26:db: d5:b4:e5:5b:06:f7:b6:8f:c6:71:30:5f:15:52:c8: 22:5e:92:63:58:5a:20:1d:7b:30:21:e0:0e:96:45: 99:80:1f:e5:8a:70:9b:43:db:58:24:ae:27:a3:48: d6:b3:64:76:09:8f:59:43:13:60:c3:ad:90:a3:26: 74:74:56:9f:c0:5d:17:dd:0e:9a:bc:d6:b4:95:85: fb:c2:58:57:80:31:47:af:20:0f:89:36:c4:45:7b: 46:a1:7d:d1:99:13:33:68:14:77:d4:98:5a:5f:1d: e0:b9:50:88:0b:7a:de:a7:33:12:b2:5b:9a:cc:25: 70:55:a9:7a:ab:7f:91:31:0e:b8:a3:78:72:81:c1: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:83:EB:13:A2:32:9B:6F:45:1F:A5:50:54:2E:FF:81:9C:0E:D0:CC X509v3 Authority Key Identifier: keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f3:21:0a:fd:6f:df:1a:13:2e:40:d2:a6:a7:3e:85:f3:07: e4:63:af:02:4b:7d:e1:44:a3:86:67:50:12:55:ed:9b:7b:2e: b3:0a:59:75:9b:d6:51:a7:b8:51:1f:83:f8:72:d5:67:b1:bf: cf:7c:9d:b3:f5:01:6c:5b:11:9d:16:2f:d6:45:ae:d4:ee:dd: 24:04:70:8c:ab:24:55:e4:6f:c8:6a:be:bd:25:82:9a:5a:57: d0:12:a9:fe:d6:b6:44:df:b9:37:61:ac:0f:c8:bc:2d:ab:4e: 7a:3b:fe:39:30:f3:67:99:1d:12:7e:3a:4f:cf:18:14:07:5f: 46:10:29:d5:5e:e6:d3:72:36:57:67:58:05:5d:11:81:55:18: b8:42:66:d2:77:7d:21:5e:d0:43:c2:c7:2b:c8:e6:7a:dd:77: 05:29:ac:1b:2b:4e:bc:a7:1f:3b:bb:17:63:08:62:28:b7:64: b8:13:7d:1c:b3:fa:b9:85:88:e4:11:51:65:97:6c:ec:2a:be: fd:fa:e4:77:91:78:85:90:b2:a0:89:41:06:1f:6a:fd:2d:15: 2a:43:f4:bf:1a:b2:3c:32:a9:f7:6b:78:a9:16:70:9a:fc:f4: b1:8e:21:72:4f:92:8a:3f:98:8b:c3:e3:e9:e7:86:79:31:64: 74:8b:46:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCMjkxMTAvBgNVBAUTKEM1NTE4N0IwMEIxQTczMzc1Rjg0NTY4ODVGNkExMDdF RTFEOTM1Q0YwHhcNMjUwNDAzMDUwNjQ2WhcNMjUwNDEwMDUwNjQ2WjAYMRYwFAYD VQQDEw02N2VlMTc2Ni02OWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZEdtKYwoTY5iKjFyU/DpCLMszaCOKt9LE5bvNK5hQTwpaj9Dq5eRs2B5osf C1YXRWvnCXGR5uW8ImV0L6113EM34M3knJyoGbVO9fnxSJAcD0F0lodm4CaGjYCz wz7BZE+DGwSAecsOw9M0cgdYvnHJMS9rJtvVtOVbBve2j8ZxMF8VUsgiXpJjWFog HXswIeAOlkWZgB/linCbQ9tYJK4no0jWs2R2CY9ZQxNgw62QoyZ0dFafwF0X3Q6a vNa0lYX7wlhXgDFHryAPiTbERXtGoX3RmRMzaBR31JhaXx3guVCIC3repzMSslua zCVwVal6q3+RMQ64o3hygcHCnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICD6xOi MptvRR+lUFQu/4GcDtDMMB8GA1UdIwQYMBaAFMVRh7ALGnM3X4RWiF9qEH7h2TXP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IyOS82MTdFOTQ0OEU4 MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6ZGZoRmFJWDJvUWZ1SFpO YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hWR0hzQXNhY3pkZmhGYUlYMm9RZnVIWk5jOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0IyOS82MTdFOTQ0OEU4MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6 ZGZoRmFJWDJvUWZ1SFpOYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu8yEK/W/fGhMuQNKmpz6F8wfkY68CS33hRKOGZ1ASVe2bey6zCll1 m9ZRp7hRH4P4ctVnsb/PfJ2z9QFsWxGdFi/WRa7U7t0kBHCMqyRV5G/Iar69JYKa WlfQEqn+1rZE37k3YawPyLwtq056O/45MPNnmR0SfjpPzxgUB19GECnVXubTcjZX Z1gFXRGBVRi4QmbSd30hXtBDwscryOZ63XcFKawbK068px87uxdjCGIot2S4E30c s/q5hYjkEVFll2zsKr79+uR3kXiFkLKgiUEGH2r9LRUqQ/S/GrI8Mqn3a3ipFnCa /PSxjiFyT5KKP5iLw+Pp54Z5MWR0i0ar -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:07 2025 by rpki-client