$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft File: xH0VZB2jsUx05cspvMBIgSMK0U4.mft (raw, json) Hash identifier: zZfEpAU0JakVtKJBsCCwUZbL/1F80GTidr7kS0454VA= Subject key identifier: 2B:56:25:DB:91:A0:FF:D6:44:38:8A:1F:DC:48:99:9F:C7:24:C6:BA Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E Certificate issuer: /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft Manifest number: 025D Signing time: Sun 13 Apr 2025 01:25:16 +0000 Manifest this update: Sun 13 Apr 2025 01:25:16 +0000 Manifest next update: Sun 20 Apr 2025 01:25:16 +0000 Files and hashes: 1: xH0VZB2jsUx05cspvMBIgSMK0U4.crl (hash: o5RJ9lR12fSNpWc6UJUtXtAbXa7/OIPZTUKkQ7fMoCA=) 2: 62B575B8104C11ED8CE56267C4F9AE02.roa (hash: LJhv9R+LostgKj3I2cWW/yrIOe+4xlAQa1Sq/wPUOsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 01:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187364, serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Validity Not Before: Apr 13 01:25:16 2025 GMT Not After : Apr 20 01:25:16 2025 GMT Subject: CN=67fb127c-093e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:50:a2:72:bc:9d:90:2c:4b:e5:8e:c7:72: e3:d6:15:30:44:21:03:cf:15:ad:fe:4a:da:af:06: fc:a8:15:9e:05:6b:ed:e9:d4:4b:6f:2c:a1:b4:39: 1c:76:10:fe:e8:6f:4f:12:13:58:fd:72:7b:d0:06: 06:df:b6:96:8b:0b:5b:f2:94:dd:6c:22:41:9f:21: f9:5b:f3:8b:a5:eb:e8:16:1a:40:88:c7:70:75:b1: 0d:4e:b9:37:52:b2:09:0e:68:59:69:91:3d:a8:af: 9b:23:41:37:37:76:41:16:be:cf:2a:3c:4f:91:16: 93:90:d3:03:a8:ea:ab:08:2c:e7:15:a1:c6:8b:bb: 64:66:8f:e7:61:f4:fa:0f:f2:c9:b9:b5:0e:6e:76: f9:57:68:ed:4b:ce:83:31:bd:09:85:77:ec:db:1d: 63:ae:54:6a:28:d8:c9:18:b0:61:5c:35:14:1d:22: 27:81:0e:aa:43:98:9a:1d:32:d2:fe:5e:8f:23:3a: f5:55:94:15:8d:8f:a4:a1:d4:f5:ef:38:ec:6f:33: 3b:03:7a:2d:db:97:c2:43:30:8f:b0:05:1b:e6:8e: 13:51:18:f8:f9:d6:db:02:55:67:b3:8a:9d:c4:c9: fc:c7:f4:c7:fb:b5:64:1b:0f:fe:d5:75:72:4e:20: 37:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:56:25:DB:91:A0:FF:D6:44:38:8A:1F:DC:48:99:9F:C7:24:C6:BA X509v3 Authority Key Identifier: keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b9:07:53:0e:42:86:47:39:48:a7:0e:14:bf:db:97:f8:27: 40:fd:f0:2b:f0:95:24:8e:0b:93:3c:99:b0:98:91:69:6e:f7: 3a:73:ea:2b:bf:89:e2:bb:b5:f1:b4:9c:37:1e:a3:92:f9:3e: 23:bd:a5:8f:cf:59:5c:e0:76:30:0b:54:c5:06:2c:e1:c7:7d: da:4f:4e:3f:6e:6c:d5:53:12:34:d3:fa:61:94:e6:db:1f:54: 80:0d:b5:9c:1b:6f:f2:43:55:41:c5:75:93:0a:dd:d7:22:37: 1a:3a:22:6b:b5:57:c5:80:88:18:3c:bc:20:4a:0c:a8:bd:94: 9b:c3:05:1e:31:39:25:14:0c:3f:b5:f4:4f:ac:d9:7e:42:5f: 98:67:74:de:40:7d:37:1d:84:3e:51:27:62:a8:33:26:66:a6: f1:1f:17:e8:b7:a6:b6:90:fc:05:27:e2:7c:31:9b:06:f5:d0: 58:07:db:ce:b3:61:ec:cf:80:da:62:ee:5e:88:0b:a8:73:0c: b6:11:b0:05:e8:e4:d0:a1:6b:2c:26:3f:4e:52:e2:db:60:68: f1:a8:a1:82:97:73:a4:dc:b4:cc:46:f3:5f:5b:a6:30:1e:28: 0a:59:ab:2d:25:f7:6a:44:13:67:18:31:ed:ce:46:a7:4b:aa: 86:49:5d:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczNjQxMTAvBgNVBAUTKEM0N0QxNTY0MURBM0IxNEM3NEU1Q0IyOUJDQzA0ODgx MjMwQUQxNEUwHhcNMjUwNDEzMDEyNTE2WhcNMjUwNDIwMDEyNTE2WjAYMRYwFAYD VQQDEw02N2ZiMTI3Yy0wOTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPxQonK8nZAsS+WOx3Lj1hUwRCEDzxWt/krarwb8qBWeBWvt6dRLbyyhtDkc dhD+6G9PEhNY/XJ70AYG37aWiwtb8pTdbCJBnyH5W/OLpevoFhpAiMdwdbENTrk3 UrIJDmhZaZE9qK+bI0E3N3ZBFr7PKjxPkRaTkNMDqOqrCCznFaHGi7tkZo/nYfT6 D/LJubUObnb5V2jtS86DMb0JhXfs2x1jrlRqKNjJGLBhXDUUHSIngQ6qQ5iaHTLS /l6PIzr1VZQVjY+kodT17zjsbzM7A3ot25fCQzCPsAUb5o4TURj4+dbbAlVns4qd xMn8x/TH+7VkGw/+1XVyTiA3kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtWJduR oP/WRDiKH9xImZ/HJMa6MB8GA1UdIwQYMBaAFMR9FWQdo7FMdOXLKbzASIEjCtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM2NC9FOUE0RUE3MDEw NDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNVeDA1Y3Nwdk1CSWdTTUsw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIMFZaQjJqc1V4MDVjc3B2TUJJZ1NNSzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM2NC9FOUE0RUE3MDEwNDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNV eDA1Y3Nwdk1CSWdTTUswVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5uQdTDkKGRzlIpw4Uv9uX+CdA/fAr8JUkjguTPJmwmJFpbvc6c+or v4niu7XxtJw3HqOS+T4jvaWPz1lc4HYwC1TFBizhx33aT04/bmzVUxI00/phlObb H1SADbWcG2/yQ1VBxXWTCt3XIjcaOiJrtVfFgIgYPLwgSgyovZSbwwUeMTklFAw/ tfRPrNl+Ql+YZ3TeQH03HYQ+USdiqDMmZqbxHxfot6a2kPwFJ+J8MZsG9dBYB9vO s2Hsz4DaYu5eiAuocwy2EbAF6OTQoWssJj9OUuLbYGjxqKGCl3Ok3LTMRvNfW6Yw HigKWastJfdqRBNnGDHtzkanS6qGSV2l -----END CERTIFICATE-----Generated at Sun Apr 13 04:25:26 2025 by rpki-client