$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json) Hash identifier: 8tDX8x/G+w+PYsJsdmQONmJtVYUrik1Ct3VjtdFzoKI= Subject key identifier: EE:CF:6A:C1:BD:EE:D1:59:DD:E9:02:82:66:DA:7D:AC:CC:BE:89:80 Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft Manifest number: 0656 Signing time: Fri 04 Apr 2025 22:32:53 +0000 Manifest this update: Fri 04 Apr 2025 22:32:52 +0000 Manifest next update: Fri 11 Apr 2025 22:32:52 +0000 Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: UHJTUGtjh+XnwB+TuBkv0X9FVXNWdkI7McMTx5tGOEo=) 2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: yju+fZAWtM3RsMZrSlngexqtu4I3chkHV+7N/8ZbBdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6 Validity Not Before: Apr 4 22:32:52 2025 GMT Not After : Apr 11 22:32:52 2025 GMT Subject: CN=67f05e14-1863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:56:e7:3f:3c:0c:af:59:68:29:ef:11:f7: 8e:1f:6b:c3:90:68:5f:78:8a:7f:c1:16:08:c0:23: a3:0a:38:f9:0c:eb:d6:9f:70:05:d1:ca:e4:64:5b: ee:ed:eb:4f:bc:05:dc:57:8b:1b:87:7f:c5:f5:71: fb:bc:2f:15:9a:9f:95:ba:10:dd:c3:0f:03:e7:0b: 1b:5d:d0:98:3a:61:d7:8f:93:de:43:d2:bf:4f:08: 55:4b:14:d9:43:68:1b:f5:d8:0e:e3:ef:ab:0f:db: 70:e7:64:73:d8:f5:84:38:82:64:bd:e5:65:04:6a: f2:46:9d:72:72:84:64:ba:d0:84:ef:52:da:d1:a4: 17:b0:58:40:10:34:68:a3:99:f5:0e:d6:46:84:c6: ad:60:d1:b2:b9:63:7f:53:21:92:63:6f:71:4f:f0: 4f:af:2a:05:52:7c:5b:50:74:b1:b3:f1:c0:b2:b8: 7f:fe:0b:ed:7e:c9:1a:6e:1e:ea:7d:f5:e0:9f:27: aa:80:b5:3e:73:76:be:c3:80:6b:86:7f:3f:c4:54: c4:a2:e6:28:a1:7a:89:70:4f:17:10:98:29:e7:1c: ce:d1:aa:86:91:2c:3c:43:bf:fd:d2:67:fa:f7:fa: b4:9a:03:48:20:7e:0d:77:58:68:62:8c:d0:e4:da: 77:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CF:6A:C1:BD:EE:D1:59:DD:E9:02:82:66:DA:7D:AC:CC:BE:89:80 X509v3 Authority Key Identifier: keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4b:aa:1c:8a:9b:aa:48:c1:09:7f:24:2c:11:db:93:3c:8c: aa:14:80:2b:4f:fd:21:4a:66:a9:03:96:1d:bd:c0:31:1d:e6: 85:0f:c8:71:83:a2:48:56:c2:39:03:da:9c:72:ef:83:a7:17: 81:1a:cf:3d:60:31:1b:eb:e4:c3:01:70:ec:4e:f0:71:a1:e8: 9d:84:b4:5e:b0:d9:62:11:0b:37:4a:68:ea:81:b9:57:8e:df: 7e:61:a0:99:42:46:48:78:e4:92:56:61:50:ad:18:c6:3b:41: 38:f8:43:69:d5:e2:b2:f8:81:ef:9a:9c:f7:01:ef:57:df:a6: fc:7e:ec:df:cc:b6:05:9a:08:18:ed:e0:25:21:9d:03:a8:b9: 46:16:d8:f9:d8:ea:17:bb:04:d0:08:60:bc:84:4b:a5:b6:ed: fb:ad:49:e2:84:1a:72:60:66:46:92:ef:21:c5:62:74:89:5f: 54:2a:fd:2b:c2:4d:4e:34:3f:26:c0:ad:8e:8a:99:65:2e:65: d9:c9:89:f7:14:8c:77:ab:8f:a9:c8:c0:26:5a:04:c5:46:26: 72:65:a5:94:11:ff:76:ba:ad:b8:4e:bd:71:47:df:05:66:d9: d3:ef:d5:1a:84:2a:29:86:c2:c6:8b:dc:a6:0c:27:13:74:4e: 02:56:62:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDVGQUQxQjM5QkU0NTU1MjYyMjA2RDE5RjVBNjY5QkM3 QjY5RjcyQzgwHhcNMjUwNDA0MjIzMjUyWhcNMjUwNDExMjIzMjUyWjAYMRYwFAYD VQQDEw02N2YwNWUxNC0xODYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEZW5z88DK9ZaCnvEfeOH2vDkGhfeIp/wRYIwCOjCjj5DOvWn3AF0crkZFvu 7etPvAXcV4sbh3/F9XH7vC8Vmp+VuhDdww8D5wsbXdCYOmHXj5PeQ9K/TwhVSxTZ Q2gb9dgO4++rD9tw52Rz2PWEOIJkveVlBGryRp1ycoRkutCE71La0aQXsFhAEDRo o5n1DtZGhMatYNGyuWN/UyGSY29xT/BPryoFUnxbUHSxs/HAsrh//gvtfskabh7q ffXgnyeqgLU+c3a+w4Brhn8/xFTEouYooXqJcE8XEJgp5xzO0aqGkSw8Q7/90mf6 9/q0mgNIIH4Nd1hoYozQ5Np3nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7PasG9 7tFZ3ekCgmbafazMvomAMB8GA1UdIwQYMBaAFF+tGzm+RVUmIgbRn1pmm8e2n3LI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wM0EwMTc4NDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZTWWlCdEdmV21hYng3YWZj c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1g2MGJPYjVGVlNZaUJ0R2ZXbWFieDdhZmNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wM0EwMTc4NDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZT WWlCdEdmV21hYng3YWZjc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLS6ocipuqSMEJfyQsEduTPIyqFIArT/0hSmapA5YdvcAxHeaFD8hx g6JIVsI5A9qccu+DpxeBGs89YDEb6+TDAXDsTvBxoeidhLResNliEQs3SmjqgblX jt9+YaCZQkZIeOSSVmFQrRjGO0E4+ENp1eKy+IHvmpz3Ae9X36b8fuzfzLYFmggY 7eAlIZ0DqLlGFtj52OoXuwTQCGC8hEultu37rUnihBpyYGZGku8hxWJ0iV9UKv0r wk1OND8mwK2OipllLmXZyYn3FIx3q4+pyMAmWgTFRiZyZaWUEf92uq24Tr1xR98F ZtnT79UahCophsLGi9ymDCcTdE4CVmLt -----END CERTIFICATE-----Generated at Sun Apr 6 19:42:45 2025 by rpki-client