$ rpki-client -vvf rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft File: XctT6r5qkI7KhlLekkgHxQnFLTA.mft (raw, json) Hash identifier: hSlYfc++8KYdn+BWJq0Jtem7SyEzBzO38XLYzbUxqXA= Subject key identifier: 8F:B1:C1:F5:34:E6:A6:1D:EF:4F:D3:B2:63:58:83:23:D5:2E:32:D4 Authority key identifier: 5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 Certificate issuer: /CN=A918560D/serialNumber=5DCB53EABE6A908ECA8652DE924807C509C52D30 Certificate serial: 0CCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft Manifest number: 0CC6 Signing time: Fri 04 Apr 2025 18:15:37 +0000 Manifest this update: Fri 04 Apr 2025 18:15:37 +0000 Manifest next update: Fri 11 Apr 2025 18:15:37 +0000 Files and hashes: 1: XctT6r5qkI7KhlLekkgHxQnFLTA.crl (hash: WReF4bWz8aws3UwwbDO5DOUDH/ronLGKF+IXcxwSyzM=) 2: 41A8E738045111EA9C7DF516C4F9AE02.roa (hash: 549cEJi0czWRyHHS6o5u4NQ6YCs80VKq9MH5xptp8mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3279 (0xccf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918560D Validity Not Before: Apr 4 18:15:37 2025 GMT Not After : Apr 11 18:15:37 2025 GMT Subject: CN=67f021c9-1df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:b0:80:bc:10:a5:e5:bf:9b:7a:7f:ba:4e: 62:cb:6e:42:0c:e6:82:ca:c8:d5:3c:95:bf:9b:a6: f2:74:ef:17:b6:e4:f8:0d:62:02:16:cd:12:e9:3c: 43:11:e8:87:26:36:34:67:56:8e:c1:c9:9e:8e:ac: 26:6a:db:91:1f:ae:ac:4d:8a:92:03:89:3b:f3:79: 27:2b:1b:45:e4:55:24:04:a3:f4:59:9d:10:b7:fa: 5b:90:48:2d:60:02:79:d2:4a:17:61:7d:f8:af:0f: 93:fa:49:a9:2c:7b:f6:eb:52:03:58:a3:93:6d:4f: 28:fc:ce:04:26:e0:8e:03:14:67:76:b2:9e:a5:30: 3c:eb:52:82:d0:e9:7f:9a:12:43:cf:96:c3:78:2c: ac:19:9d:ad:da:b4:b2:fb:3c:30:55:1f:5b:b2:38: 96:1a:5b:8c:db:c6:87:68:8a:49:84:b6:52:e8:af: 6c:04:8c:ec:cc:38:da:11:22:62:91:66:a3:ea:1b: c3:36:bd:de:82:dc:b2:5e:c0:86:4c:34:e0:dc:b7: aa:48:89:c3:39:f3:25:a6:a9:46:4f:e3:f5:d6:54: e1:28:3a:f7:03:b3:1e:1c:c8:71:31:ee:21:e7:3f: df:bf:67:ee:9d:82:46:99:07:d7:45:89:ec:39:48: 0e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B1:C1:F5:34:E6:A6:1D:EF:4F:D3:B2:63:58:83:23:D5:2E:32:D4 X509v3 Authority Key Identifier: keyid:5D:CB:53:EA:BE:6A:90:8E:CA:86:52:DE:92:48:07:C5:09:C5:2D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XctT6r5qkI7KhlLekkgHxQnFLTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918560D/F5DCA6D4E5B811E98A76120EC4F9AE02/XctT6r5qkI7KhlLekkgHxQnFLTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:38:b7:13:c2:51:03:42:c4:8b:c2:83:e0:b8:ec:9d:09:98: 60:d0:a9:ae:12:77:e0:22:51:c3:2e:92:16:e2:a9:0e:ee:ed: 07:f9:be:96:f8:43:f9:d1:23:44:a0:87:c8:2f:2b:80:a8:cf: a6:5e:35:ad:ec:f4:b9:0a:b7:ee:db:43:aa:c2:76:b0:e5:6c: fd:6e:ec:fe:0b:96:e6:80:25:ce:ef:4a:ba:71:13:0d:51:1a: 27:04:a6:f2:f9:3a:ca:39:f9:c5:ef:4d:71:d0:e4:1c:6e:b3: ff:c0:09:69:9f:11:34:07:c7:68:be:94:50:d5:ff:90:90:b2: 3a:1c:a8:33:a8:3d:61:b3:18:7e:61:51:1a:4a:51:34:d8:a1: 00:13:df:d5:6c:7f:ef:c8:5a:59:95:a7:0e:b7:1a:5c:eb:f3: 0e:bb:d3:b1:3b:3c:57:a7:b1:36:56:6f:49:53:7c:db:01:bc: ce:9e:99:d6:0f:dd:5c:85:99:20:40:90:9a:21:26:0c:43:59: 00:ec:c4:20:c0:79:c5:90:c4:17:ed:d4:3b:00:a3:60:6e:0b: 4f:6b:0f:66:18:f0:8a:31:77:46:97:e5:90:f2:3f:24:08:b7: 49:2c:0b:d4:21:c7:52:0b:d9:1c:b8:8e:0c:4e:09:ca:16:01: ff:b2:a0:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU2MEQxMTAvBgNVBAUTKDVEQ0I1M0VBQkU2QTkwOEVDQTg2NTJERTkyNDgwN0M1 MDlDNTJEMzAwHhcNMjUwNDA0MTgxNTM3WhcNMjUwNDExMTgxNTM3WjAYMRYwFAYD VQQDEw02N2YwMjFjOS0xZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqqwgLwQpeW/m3p/uk5iy25CDOaCysjVPJW/m6bydO8XtuT4DWICFs0S6TxD EeiHJjY0Z1aOwcmejqwmatuRH66sTYqSA4k783knKxtF5FUkBKP0WZ0Qt/pbkEgt YAJ50koXYX34rw+T+kmpLHv261IDWKOTbU8o/M4EJuCOAxRndrKepTA861KC0Ol/ mhJDz5bDeCysGZ2t2rSy+zwwVR9bsjiWGluM28aHaIpJhLZS6K9sBIzszDjaESJi kWaj6hvDNr3egtyyXsCGTDTg3LeqSInDOfMlpqlGT+P11lThKDr3A7MeHMhxMe4h 5z/fv2funYJGmQfXRYnsOUgODQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+xwfU0 5qYd70/TsmNYgyPVLjLUMB8GA1UdIwQYMBaAFF3LU+q+apCOyoZS3pJIB8UJxS0w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTYwRC9GNURDQTZENEU1 QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJN0tobExla2tnSHhRbkZM VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hjdFQ2cjVxa0k3S2hsTGVra2dIeFFuRkxUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTYwRC9GNURDQTZENEU1QjgxMUU5OEE3NjEyMEVDNEY5QUUwMi9YY3RUNnI1cWtJ N0tobExla2tnSHhRbkZMVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7OLcTwlEDQsSLwoPguOydCZhg0KmuEnfgIlHDLpIW4qkO7u0H+b6W +EP50SNEoIfILyuAqM+mXjWt7PS5Crfu20Oqwnaw5Wz9buz+C5bmgCXO70q6cRMN URonBKby+TrKOfnF701x0OQcbrP/wAlpnxE0B8dovpRQ1f+QkLI6HKgzqD1hsxh+ YVEaSlE02KEAE9/VbH/vyFpZlacOtxpc6/MOu9OxOzxXp7E2Vm9JU3zbAbzOnpnW D91chZkgQJCaISYMQ1kA7MQgwHnFkMQX7dQ7AKNgbgtPaw9mGPCKMXdGl+WQ8j8k CLdJLAvUIcdSC9kcuI4MTgnKFgH/sqC/ -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:06 2025 by rpki-client