$ rpki-client -vvf rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft File: -XeXeNpwxYpaeWRd0olhEbpv68w.mft (raw, json) Hash identifier: Jr89bW8WsiRIRLQPsUleoybnn0KPUNNh+m8Ix+4pqZ4= Subject key identifier: A4:47:89:16:DF:4A:B6:67:C4:44:8A:CC:A3:73:B4:47:3D:1B:80:9A Authority key identifier: F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC Certificate issuer: /CN=A9196629/serialNumber=F9779778DA70C58A5A79645DD2896111BA6FEBCC Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft Manifest number: 01B4 Signing time: Sat 29 Mar 2025 02:45:39 +0000 Manifest this update: Sat 29 Mar 2025 02:45:38 +0000 Manifest next update: Sat 05 Apr 2025 02:45:38 +0000 Files and hashes: 1: -XeXeNpwxYpaeWRd0olhEbpv68w.crl (hash: 8LJSIkipc5rRqkd5SlMR6C+WMDDzIFL0TUZsYAO1Amo=) 2: BC5434647ABF11EDA9C3947EC4F9AE02.roa (hash: P1cDwO0JwMVyMvSRcaDGiISLVg7IuTCLj2a8HaJzNI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196629 Validity Not Before: Mar 29 02:45:38 2025 GMT Not After : Apr 5 02:45:38 2025 GMT Subject: CN=67e75ed2-5919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:18:e2:af:8d:3f:1e:6d:c4:da:d5:e9:bb:9a: 2f:aa:4e:50:28:df:51:c9:79:de:0a:8b:38:00:f1: c0:a3:36:3d:40:de:e3:30:41:0c:5f:f8:7b:28:2b: 28:58:4d:69:b8:4d:a4:9a:5d:bb:6b:db:bf:15:fb: 41:f1:10:9f:64:00:ea:f5:9d:bf:d2:27:29:ea:a6: 5d:5e:bf:c7:38:2d:86:d7:f7:2d:8d:be:b9:05:40: 80:22:c3:3b:71:f3:65:00:a1:0e:4c:52:78:92:7b: e3:c6:2e:77:48:2e:33:0c:4b:9f:de:d0:b8:34:d9: 94:7c:3d:f2:d8:fd:6a:b7:66:60:80:44:31:90:71: 48:b5:cd:33:d6:9f:3b:91:52:6f:d8:9e:77:9a:72: b3:50:64:07:f6:af:df:f1:47:18:6d:56:32:8b:57: a7:39:13:07:e8:42:7c:f2:10:a1:92:84:6b:ea:5e: c5:cf:e7:c4:7f:9d:48:15:63:6f:de:05:fa:f7:db: 06:f4:4a:f9:88:51:3b:7f:ba:c5:15:39:b0:a1:7a: a6:36:37:0c:05:0d:b6:a6:f1:d7:48:b2:21:a5:20: 5c:04:c3:f2:ae:a0:dc:0f:8a:bf:52:11:6b:40:ce: 3b:10:d6:80:5d:7e:26:7b:00:26:82:f6:6e:21:db: f7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:47:89:16:DF:4A:B6:67:C4:44:8A:CC:A3:73:B4:47:3D:1B:80:9A X509v3 Authority Key Identifier: keyid:F9:77:97:78:DA:70:C5:8A:5A:79:64:5D:D2:89:61:11:BA:6F:EB:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XeXeNpwxYpaeWRd0olhEbpv68w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196629/E098463E7ABB11EDA89C4809C4F9AE02/-XeXeNpwxYpaeWRd0olhEbpv68w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d8:a4:33:8f:c1:ec:67:47:b7:0e:f3:03:89:2b:a3:4f:45: 0b:5b:8a:9c:a8:92:87:4b:ee:f6:59:a1:59:88:9c:ec:f4:69: e6:b8:94:7c:ec:d5:2c:97:c6:3f:ff:9e:f6:8d:36:e3:dd:a5: 71:ca:de:fe:97:68:8e:06:a3:ee:4c:75:20:ae:28:b0:3e:85: ff:89:71:09:3a:94:27:a1:a5:64:a2:07:c1:e2:14:8c:e3:8e: fc:91:8e:af:c9:66:63:65:b7:95:3f:1f:25:6f:cc:c3:fd:7f: fd:a5:03:f2:96:d8:4d:73:77:af:e0:58:7e:55:f9:5c:de:7a: 1e:83:50:5a:8b:d8:ad:8f:cd:2f:fe:ea:2e:aa:c0:0d:d5:3a: b6:3c:78:29:1f:b5:0a:3c:f2:bb:c1:19:24:cc:06:1e:fd:ac: a4:25:37:7c:9a:97:54:69:df:ea:1b:06:ad:24:b0:1b:fe:2a: 34:bc:09:f9:0b:ea:64:85:63:91:31:dc:cf:68:59:75:0c:7a: eb:93:42:65:78:93:27:0c:af:30:32:81:4f:c7:f5:66:67:d4: 1b:10:5a:a3:d5:15:a4:69:bf:8c:ac:0d:dd:f6:33:b6:e6:62: de:92:17:a4:8e:c3:ef:9c:f5:4e:f2:85:56:03:4e:7b:e9:32: 67:82:cf:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY2MjkxMTAvBgNVBAUTKEY5Nzc5Nzc4REE3MEM1OEE1QTc5NjQ1REQyODk2MTEx QkE2RkVCQ0MwHhcNMjUwMzI5MDI0NTM4WhcNMjUwNDA1MDI0NTM4WjAYMRYwFAYD VQQDEw02N2U3NWVkMi01OTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBjir40/Hm3E2tXpu5ovqk5QKN9RyXneCos4APHAozY9QN7jMEEMX/h7KCso WE1puE2kml27a9u/FftB8RCfZADq9Z2/0icp6qZdXr/HOC2G1/ctjb65BUCAIsM7 cfNlAKEOTFJ4knvjxi53SC4zDEuf3tC4NNmUfD3y2P1qt2ZggEQxkHFItc0z1p87 kVJv2J53mnKzUGQH9q/f8UcYbVYyi1enORMH6EJ88hChkoRr6l7Fz+fEf51IFWNv 3gX699sG9Er5iFE7f7rFFTmwoXqmNjcMBQ22pvHXSLIhpSBcBMPyrqDcD4q/UhFr QM47ENaAXX4mewAmgvZuIdv3ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRHiRbf SrZnxESKzKNztEc9G4CaMB8GA1UdIwQYMBaAFPl3l3jacMWKWnlkXdKJYRG6b+vM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjYyOS9FMDk4NDYzRTdB QkIxMUVEQTg5QzQ4MDlDNEY5QUUwMi8tWGVYZU5wd3hZcGFlV1JkMG9saEVicHY2 OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YZVhlTnB3eFlwYWVXUmQwb2xoRWJwdjY4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjYyOS9FMDk4NDYzRTdBQkIxMUVEQTg5QzQ4MDlDNEY5QUUwMi8tWGVYZU5wd3hZ cGFlV1JkMG9saEVicHY2OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD2KQzj8HsZ0e3DvMDiSujT0ULW4qcqJKHS+72WaFZiJzs9GnmuJR8 7NUsl8Y//572jTbj3aVxyt7+l2iOBqPuTHUgriiwPoX/iXEJOpQnoaVkogfB4hSM 4478kY6vyWZjZbeVPx8lb8zD/X/9pQPylthNc3ev4Fh+Vflc3noeg1Bai9itj80v /uouqsAN1Tq2PHgpH7UKPPK7wRkkzAYe/aykJTd8mpdUad/qGwatJLAb/io0vAn5 C+pkhWORMdzPaFl1DHrrk0JleJMnDK8wMoFPx/VmZ9QbEFqj1RWkab+MrA3d9jO2 5mLekhekjsPvnPVO8oVWA0576TJngs/Q -----END CERTIFICATE-----Generated at Fri Apr 4 22:17:42 2025 by rpki-client