$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft File: xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft (raw, json) Hash identifier: 7gk3OZOplmhAuJEU7dWthQRRCCMsdCWKfFa4vx2AMK0= Subject key identifier: A0:23:24:DA:13:CB:95:8B:B9:77:1B:F4:CB:C4:DF:F9:EA:93:F8:5A Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 Certificate issuer: /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft Manifest number: 0155 Signing time: Thu 03 Apr 2025 03:23:07 +0000 Manifest this update: Thu 03 Apr 2025 03:23:07 +0000 Manifest next update: Thu 10 Apr 2025 03:23:06 +0000 Files and hashes: 1: xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl (hash: mgan8iBUTPiSMFMHfpZRLszYWiUwdXn9h+Y5slJdr2M=) 2: CD377A6C06B411EE841D6C4AC4F9AE02.roa (hash: eGRq+1XhrILN9pC7Bu29wtZG2xTxwIWpAe96/Tzv+yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 03:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A750 Validity Not Before: Apr 3 03:23:07 2025 GMT Not After : Apr 10 03:23:06 2025 GMT Subject: CN=67edff1b-0f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c0:55:71:57:8e:49:aa:25:a5:4a:e3:61:d0: 29:88:79:e9:bf:f9:9a:67:bc:05:73:d0:4c:e4:d2: 77:84:19:3a:07:5b:fd:7b:cc:99:ce:d9:99:30:36: 66:ce:97:48:e2:3e:da:77:7d:e9:52:b8:c6:08:3b: ae:51:80:f4:f6:c4:6e:4c:a5:19:95:a8:d0:0c:82: 99:1b:15:9f:92:83:fb:e6:17:21:72:7f:49:55:85: ef:a9:3f:34:17:93:38:82:23:49:f1:85:95:44:86: 97:22:16:c2:2b:b1:18:5d:78:a3:e4:9f:89:97:1d: c9:da:c0:3e:16:1a:9e:47:24:c7:6c:4a:80:a3:a6: c5:3c:b0:23:9f:b6:0d:c6:b9:74:7a:f6:2b:57:ce: 87:6f:da:e1:cb:16:9f:01:e8:d4:52:f3:3b:d0:77: 09:1e:ac:0b:cf:f3:08:5a:0e:66:f2:5b:36:70:0a: 21:b9:e1:58:08:08:ff:7d:fb:d8:2e:6b:31:e5:28: 5e:37:12:7e:82:09:dd:62:c7:30:5c:77:e3:d0:3d: 80:6d:dd:d3:a9:85:4b:97:eb:6b:81:e3:9a:28:7d: e8:2b:69:67:7c:a4:59:0c:e6:83:33:dd:2a:2f:1e: b0:f4:df:d7:b4:cd:48:30:07:6f:07:6f:e1:67:ee: 62:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:23:24:DA:13:CB:95:8B:B9:77:1B:F4:CB:C4:DF:F9:EA:93:F8:5A X509v3 Authority Key Identifier: keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:4d:77:45:2c:a0:ca:ec:3d:84:bb:c2:89:8a:b7:09:c9:f1: 63:27:b2:eb:42:6b:da:fb:71:0c:aa:04:ca:95:0e:ed:1b:cd: 8a:a0:96:db:18:4c:a1:4e:b1:98:91:e4:b2:7f:d7:98:19:bd: 07:f7:86:b9:2f:bf:57:13:70:74:ee:fd:5a:15:87:9f:f9:35: ce:4f:54:86:15:cc:7f:72:2c:90:80:10:bd:03:fc:ff:3f:f8: 9d:6d:1d:c7:ad:77:28:f2:c4:23:1c:b6:31:1c:b1:4d:b6:88: c5:46:67:fe:1f:e7:b9:c8:b5:ab:8a:5c:bd:5b:46:f9:aa:29: 34:a8:6f:8c:77:7a:c0:29:58:cd:d1:e0:79:ed:88:18:fe:e4: 12:b4:3d:3b:a3:99:ca:57:78:ac:7d:4e:e6:0c:e6:f7:e4:64: 75:1e:5a:01:07:f7:ca:cf:97:07:72:ae:c3:1a:12:76:5f:18: 92:58:bc:03:55:4d:65:c6:47:47:2f:a5:94:e5:64:44:cf:ee: 1c:84:50:4b:09:46:94:a7:09:5b:b8:ca:91:f4:eb:d8:d4:bb: 84:08:f4:e9:7c:ac:16:6e:bb:ef:29:cf:7e:db:63:43:bd:ae: b4:cf:84:ca:ed:f7:e0:3d:fd:a3:4d:ee:45:dd:c9:8b:5d:a9: 76:b5:88:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE3NTAxMTAvBgNVBAUTKEM2NTRGQzQ3NkNERjJFMzA2QkUyNzcwREFFOTEwNDIz NjExQTMxOTIwHhcNMjUwNDAzMDMyMzA3WhcNMjUwNDEwMDMyMzA2WjAYMRYwFAYD VQQDEw02N2VkZmYxYi0wZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8BVcVeOSaolpUrjYdApiHnpv/maZ7wFc9BM5NJ3hBk6B1v9e8yZztmZMDZm zpdI4j7ad33pUrjGCDuuUYD09sRuTKUZlajQDIKZGxWfkoP75hchcn9JVYXvqT80 F5M4giNJ8YWVRIaXIhbCK7EYXXij5J+Jlx3J2sA+FhqeRyTHbEqAo6bFPLAjn7YN xrl0evYrV86Hb9rhyxafAejUUvM70HcJHqwLz/MIWg5m8ls2cAohueFYCAj/ffvY Lmsx5SheNxJ+ggndYscwXHfj0D2Abd3TqYVLl+trgeOaKH3oK2lnfKRZDOaDM90q Lx6w9N/XtM1IMAdvB2/hZ+5i5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAjJNoT y5WLuXcb9MvE3/nqk/haMB8GA1UdIwQYMBaAFMZU/Eds3y4wa+J3Da6RBCNhGjGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTc1MC80NTFENkE2QTA2 QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6ZkxqQnI0bmNOcnBFRUkyRWFN WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsVDhSMnpmTGpCcjRuY05ycEVFSTJFYU1aSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTc1MC80NTFENkE2QTA2QUYxMUVFODc5QTcwNDVDNEY5QUUwMi94bFQ4UjJ6Zkxq QnI0bmNOcnBFRUkyRWFNWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaTXdFLKDK7D2Eu8KJircJyfFjJ7LrQmva+3EMqgTKlQ7tG82KoJbb GEyhTrGYkeSyf9eYGb0H94a5L79XE3B07v1aFYef+TXOT1SGFcx/ciyQgBC9A/z/ P/idbR3HrXco8sQjHLYxHLFNtojFRmf+H+e5yLWrily9W0b5qik0qG+Md3rAKVjN 0eB57YgY/uQStD07o5nKV3isfU7mDOb35GR1HloBB/fKz5cHcq7DGhJ2XxiSWLwD VU1lxkdHL6WU5WREz+4chFBLCUaUpwlbuMqR9OvY1LuECPTpfKwWbrvvKc9+22ND va60z4TK7ffgPf2jTe5F3cmLXal2tYi3 -----END CERTIFICATE-----Generated at Fri Apr 4 22:32:05 2025 by rpki-client