$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft File: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json) Hash identifier: 410VGs5VYHoopKlwPuZIgmQM7r06B3XKaFeNE+4ptVg= Subject key identifier: 79:8A:34:47:A3:1E:C4:13:31:81:36:19:11:56:5F:0A:ED:DB:C3:C2 Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft Manifest number: 01A7 Signing time: Wed 09 Apr 2025 02:16:47 +0000 Manifest this update: Wed 09 Apr 2025 02:16:47 +0000 Manifest next update: Wed 16 Apr 2025 02:16:47 +0000 Files and hashes: 1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: Nrnk9PCeIzFnLaibZTELqxOZP8wD3nW/8Vj1ZZxsXuU=) 2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: RmJtDMkcxfQ3eQrKn0Yy1kaaLYDY2h9Y7DjrNYqUSm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 02:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA19 Validity Not Before: Apr 9 02:16:47 2025 GMT Not After : Apr 16 02:16:47 2025 GMT Subject: CN=67f5d88f-a93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:18:b7:41:dd:8f:68:e3:62:46:0a:f1:71:09: 54:65:f2:fc:9e:ee:55:b6:36:09:77:1a:fb:4c:9f: 25:92:a9:30:3e:b8:2c:79:3d:24:67:76:b9:f8:12: f7:15:40:90:6a:a7:ca:c9:de:8f:83:15:e4:74:a1: 4d:f2:72:7d:9c:f9:35:d5:04:bb:d3:b1:23:f1:2b: fd:24:0b:9c:e5:47:bf:52:22:47:61:47:4f:59:d9: 7a:e4:3a:d6:91:43:56:ad:e7:cc:eb:d7:4a:d2:55: 6b:d7:a9:bb:19:e6:bf:78:f7:d2:9e:53:01:33:1c: 82:82:13:58:c4:cb:a0:2a:80:08:80:08:53:c8:1f: ed:0b:e1:3f:67:c2:71:03:9e:45:ad:a8:14:e2:ab: 89:57:1f:85:fe:54:c0:34:1c:45:9b:a0:ac:44:8c: 9a:37:f1:71:b3:89:3f:37:c8:95:d3:0e:25:e4:af: c5:84:90:fc:42:dd:ef:56:c5:f8:39:f5:b9:49:ae: a6:a6:c5:a9:08:90:ff:b7:cb:1d:bf:aa:7c:55:2c: 6d:66:86:0b:92:79:b9:6c:92:a8:59:f3:4f:1b:4a: 8c:b6:9f:ab:4e:c8:50:45:ec:36:2a:23:3a:85:6b: 83:61:56:1e:ec:b3:bb:e9:fd:15:29:fb:f2:03:56: 0c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8A:34:47:A3:1E:C4:13:31:81:36:19:11:56:5F:0A:ED:DB:C3:C2 X509v3 Authority Key Identifier: keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:27:bc:34:ec:5a:2c:6c:32:c3:9a:d3:db:37:39:14:07:fe: f8:3c:9a:3a:b5:e1:fb:dc:d2:6f:2c:94:21:33:9e:a0:86:1c: 42:f6:04:4c:a7:36:a8:48:bd:fc:87:80:49:3b:3f:04:e4:b2: 50:d5:aa:7b:00:b6:67:6b:20:e4:c4:f6:7e:a9:44:9c:ce:8d: d3:6e:2a:5e:44:d9:56:96:71:58:9e:c5:5d:06:1e:df:8c:56: a7:65:df:6d:77:e7:b2:c6:96:f6:80:d0:1c:e5:bb:a6:a0:ab: 00:d2:1f:a7:db:8f:73:08:22:f7:63:f0:ba:a8:b9:ee:c0:02: e0:67:b3:90:3e:21:92:90:3a:ac:94:90:24:5c:ea:3a:88:ad: 0f:96:d0:26:ca:8f:b8:25:4e:10:66:ef:2e:82:d2:30:fd:6a: 54:68:d0:c9:00:de:13:4d:81:bd:fa:b0:27:7b:2d:bf:33:f4: 75:3d:a9:0b:89:c8:e3:52:a2:6e:c4:f7:f6:4c:f7:84:4a:0c: 24:fd:18:83:60:73:a4:ee:1f:bf:42:de:d8:6b:11:1e:29:06: a9:71:df:65:b4:5d:08:22:af:01:3a:9a:61:8f:9f:b7:f8:68: da:88:7b:03:1c:35:07:f9:50:3f:b6:dd:6b:7d:d3:00:1d:a7: 60:f9:f9:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMTkxMTAvBgNVBAUTKEM0RjkzMjJFRUU5NjcwOUU0MjIxQzZERDNDRUNCODQw Mzg0RjAyMDEwHhcNMjUwNDA5MDIxNjQ3WhcNMjUwNDE2MDIxNjQ3WjAYMRYwFAYD VQQDEw02N2Y1ZDg4Zi1hOTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRi3Qd2PaONiRgrxcQlUZfL8nu5VtjYJdxr7TJ8lkqkwPrgseT0kZ3a5+BL3 FUCQaqfKyd6PgxXkdKFN8nJ9nPk11QS707Ej8Sv9JAuc5Ue/UiJHYUdPWdl65DrW kUNWrefM69dK0lVr16m7Gea/ePfSnlMBMxyCghNYxMugKoAIgAhTyB/tC+E/Z8Jx A55FragU4quJVx+F/lTANBxFm6CsRIyaN/Fxs4k/N8iV0w4l5K/FhJD8Qt3vVsX4 OfW5Sa6mpsWpCJD/t8sdv6p8VSxtZoYLknm5bJKoWfNPG0qMtp+rTshQRew2KiM6 hWuDYVYe7LO76f0VKfvyA1YMwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmKNEej HsQTMYE2GRFWXwrt28PCMB8GA1UdIwQYMBaAFMT5Mi7ulnCeQiHG3TzsuEA4TwIB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ExOS9GODAyQTQyNDhD RDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NKNUNJY2JkUE95NFFEaFBB Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQa3lMdTZXY0o1Q0ljYmRQT3k0UURoUEFnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ExOS9GODAyQTQyNDhDRDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NK NUNJY2JkUE95NFFEaFBBZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeJ7w07FosbDLDmtPbNzkUB/74PJo6teH73NJvLJQhM56ghhxC9gRM pzaoSL38h4BJOz8E5LJQ1ap7ALZnayDkxPZ+qUSczo3TbipeRNlWlnFYnsVdBh7f jFanZd9td+eyxpb2gNAc5bumoKsA0h+n249zCCL3Y/C6qLnuwALgZ7OQPiGSkDqs lJAkXOo6iK0PltAmyo+4JU4QZu8ugtIw/WpUaNDJAN4TTYG9+rAney2/M/R1PakL icjjUqJuxPf2TPeESgwk/RiDYHOk7h+/Qt7YaxEeKQapcd9ltF0IIq8BOpphj5+3 +GjaiHsDHDUH+VA/tt1rfdMAHadg+fkz -----END CERTIFICATE-----Generated at Fri Apr 11 15:55:26 2025 by rpki-client