$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: 4BHkxw0413gHqaauVeOLVjUm7iYg10kn/nGsZibxUsA= Subject key identifier: 2D:CD:1C:21:5C:E4:7E:67:7C:AB:3E:E8:2A:4D:84:B0:6C:E8:18:ED Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 01CF Signing time: Wed 09 Apr 2025 01:54:54 +0000 Manifest this update: Wed 09 Apr 2025 01:54:53 +0000 Manifest next update: Wed 16 Apr 2025 01:54:53 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: CmTqSczLSj3FJrX9Rc7bBUHFPVLxTiJcefkDw5ZA8jE=) 2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: 41cGdysFB7ELok3zBoJln9hijehCtCniAdRLT6XAhVQ=) 3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: 9MrQo9vUmAekuiwNJY8bO0MSIs29CkXwLMPEFiKNA44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 01:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538 Validity Not Before: Apr 9 01:54:53 2025 GMT Not After : Apr 16 01:54:53 2025 GMT Subject: CN=67f5d36e-72de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ee:a7:7e:65:e4:af:76:de:4c:6c:bc:b8:60: 90:a4:67:6b:2e:72:9f:e7:08:63:52:d2:34:21:60: 5a:56:59:84:e2:6a:fa:b0:01:d4:d4:84:6f:c3:21: c0:61:c3:56:71:67:b9:fb:cf:3f:87:d0:7b:59:1d: 7a:31:08:29:8d:b1:ab:6a:40:b1:91:d6:ea:36:e1: 69:87:b2:8b:52:f9:f5:44:b8:4f:20:91:99:85:e9: 54:fa:f3:97:6f:0b:ec:77:c7:dd:87:ed:d1:61:12: a2:ae:94:99:ff:a1:39:cc:07:37:f3:5d:bf:86:ec: 27:46:fa:f9:e7:b2:6b:73:a5:88:e4:c3:36:52:4f: bd:92:8d:b7:d0:29:08:4b:c2:27:0b:de:b0:d7:2b: 48:38:e0:7d:39:61:f9:3e:0c:ee:cb:35:db:37:66: 1c:81:8e:7c:c6:f6:9a:27:68:a8:da:51:60:57:02: 99:46:01:df:1c:bc:b9:94:18:25:bc:14:03:63:e6: ec:0c:52:4c:e4:32:76:9f:82:d2:99:f6:13:c2:a8: 58:66:bc:f2:a1:43:02:44:0a:2b:18:bf:6b:2e:34: 00:57:52:93:c8:d6:3c:ab:95:cc:c6:d2:9e:6e:c3: e1:ec:79:8b:0a:52:fb:46:04:a6:bf:49:ff:8f:4e: e7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CD:1C:21:5C:E4:7E:67:7C:AB:3E:E8:2A:4D:84:B0:6C:E8:18:ED X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:1a:15:05:92:48:7b:5a:e0:0a:3a:0e:68:01:be:55:ae:7f: c9:b5:96:da:05:bb:b9:79:a3:bb:eb:d3:a5:be:64:25:32:a1: c4:91:77:11:8c:27:58:5f:2f:40:91:bf:23:7a:36:8b:a1:ec: a9:e1:2e:52:e3:49:18:8d:1c:d6:8f:9b:b9:85:0f:ab:3f:76: f0:83:96:0a:3b:f4:6e:13:0a:9c:f0:b1:96:31:45:5e:7a:e7: e5:bb:59:14:b4:cb:81:f7:3b:9c:d9:3f:6f:b1:db:66:65:09: 79:84:75:fb:24:e6:93:e2:9b:9f:66:68:cc:c8:24:97:ae:02: 73:b7:9b:7f:bb:bc:03:95:86:86:c1:42:97:66:fe:69:1d:df: 8b:af:a1:3d:85:90:7b:ef:fd:86:89:55:5d:c5:25:2b:d7:d4: 74:14:7e:8e:05:fe:1e:0b:fa:9d:5d:c6:24:e2:3e:1d:85:af: 87:8f:a0:36:7e:fc:1f:55:bc:18:41:86:cd:4a:64:9e:37:bb: b9:1e:e2:c1:06:1d:93:27:af:e5:f9:bd:a8:4b:09:d9:af:63: 55:62:9b:88:aa:09:aa:72:6e:75:bf:32:33:f0:e3:4a:fd:6e: a6:7b:7e:84:66:85:bf:ff:dd:a6:57:b0:35:a3:0d:3d:54:fe: e3:b7:c9:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjUwNDA5MDE1NDUzWhcNMjUwNDE2MDE1NDUzWjAYMRYwFAYD VQQDEw02N2Y1ZDM2ZS03MmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0e6nfmXkr3beTGy8uGCQpGdrLnKf5whjUtI0IWBaVlmE4mr6sAHU1IRvwyHA YcNWcWe5+88/h9B7WR16MQgpjbGrakCxkdbqNuFph7KLUvn1RLhPIJGZhelU+vOX bwvsd8fdh+3RYRKirpSZ/6E5zAc3812/huwnRvr557Jrc6WI5MM2Uk+9ko230CkI S8InC96w1ytIOOB9OWH5PgzuyzXbN2YcgY58xvaaJ2io2lFgVwKZRgHfHLy5lBgl vBQDY+bsDFJM5DJ2n4LSmfYTwqhYZrzyoUMCRAorGL9rLjQAV1KTyNY8q5XMxtKe bsPh7HmLClL7RgSmv0n/j07n5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3NHCFc 5H5nfKs+6CpNhLBs6BjtMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyGhUFkkh7WuAKOg5oAb5Vrn/JtZbaBbu5eaO769OlvmQlMqHEkXcR jCdYXy9Akb8jejaLoeyp4S5S40kYjRzWj5u5hQ+rP3bwg5YKO/RuEwqc8LGWMUVe euflu1kUtMuB9zuc2T9vsdtmZQl5hHX7JOaT4pufZmjMyCSXrgJzt5t/u7wDlYaG wUKXZv5pHd+Lr6E9hZB77/2GiVVdxSUr19R0FH6OBf4eC/qdXcYk4j4dha+Hj6A2 fvwfVbwYQYbNSmSeN7u5HuLBBh2TJ6/l+b2oSwnZr2NVYpuIqgmqcm51vzIz8ONK /W6me36EZoW//92mV7A1ow09VP7jt8mg -----END CERTIFICATE-----Generated at Thu Apr 10 18:40:20 2025 by rpki-client