$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft File: XrCY701WVcxmtq-Bw83kBi2ALzs.mft (raw, json) Hash identifier: ffhxa5xVTtJyEc4tdImqbQCrJQnXN69rv/Fqj5tAWWM= Subject key identifier: 24:DF:23:AF:5E:EB:B8:15:CB:45:9D:1D:3C:BA:98:91:47:77:80:31 Authority key identifier: 5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B Certificate issuer: /CN=A919E3FB/serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft Manifest number: 04A6 Signing time: Sat 29 Mar 2025 00:10:59 +0000 Manifest this update: Sat 29 Mar 2025 00:10:58 +0000 Manifest next update: Sat 05 Apr 2025 00:10:58 +0000 Files and hashes: 1: XrCY701WVcxmtq-Bw83kBi2ALzs.crl (hash: YqvcXjLDfhU2v95Y3L96JDyniGqew8TtE7ZF3IR2kuQ=) 2: B4D8E692267111ECA0546981C4F9AE02.roa (hash: APl5b4vCPo52FjFgWioqB5D0vfXVOhLUTwuTuf6xSiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 00:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E3FB Validity Not Before: Mar 29 00:10:58 2025 GMT Not After : Apr 5 00:10:58 2025 GMT Subject: CN=67e73a92-1ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:45:04:16:84:b9:3e:de:a7:b4:d3:b4:7c:75: 6a:0b:04:93:56:70:40:be:c7:af:11:01:62:fc:83: ae:06:cb:88:00:cf:db:a0:a1:f2:34:12:78:cb:00: 92:df:00:59:34:5e:ce:4c:d3:cf:db:da:77:fd:2e: 69:0c:bb:47:78:2a:c0:00:41:91:3e:57:85:1b:f9: 56:ca:da:4b:ce:86:42:4a:b5:45:05:40:ac:df:5c: b8:75:ed:90:f0:f5:95:75:9a:fb:4f:f2:f7:73:f7: 4d:35:95:12:08:b2:98:39:0a:d2:ec:41:18:c8:89: e9:5c:83:a2:1d:ca:84:c7:18:c2:c7:70:93:ae:9a: d3:63:f0:7a:cb:bc:2e:8c:62:ae:5c:e0:4d:33:49: be:d2:6e:58:27:e4:0e:e4:f6:c4:ca:b1:bf:3c:0e: 34:7f:ae:ab:1e:a7:f0:ab:e4:3a:14:2d:14:a9:11: 35:54:a7:2b:fc:14:b0:96:99:4b:28:3a:bd:15:22: 74:b3:51:08:ec:80:6f:fc:d4:0f:35:b2:7e:ef:7d: 8e:1e:d8:49:91:19:6f:04:e2:f2:af:43:ca:1f:14: 22:cf:fb:62:1e:89:03:7a:c9:8f:b7:87:71:0e:6a: b5:28:a1:bd:4f:bd:8e:8c:1e:0c:79:bd:da:88:e4: 39:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DF:23:AF:5E:EB:B8:15:CB:45:9D:1D:3C:BA:98:91:47:77:80:31 X509v3 Authority Key Identifier: keyid:5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:5d:64:7c:22:c7:26:2f:35:41:8a:51:b2:78:e3:30:a8:22: 23:8e:6e:05:1a:64:ab:3a:71:93:b5:bb:41:40:89:50:8f:6c: 37:73:77:be:dd:99:ec:1a:34:7c:f7:38:53:d9:1c:8b:a0:7d: 39:d5:50:a9:18:b6:81:1c:7c:4d:18:66:53:53:f3:23:f8:bb: e1:40:a5:8d:1f:ca:f6:a1:22:25:26:8f:a2:ab:26:8b:d2:72: 7f:97:1e:e7:79:e4:4d:32:82:35:22:c0:75:13:77:d4:c4:53: ad:c2:26:cf:d7:b6:c5:0a:bc:7e:09:68:45:c3:bc:e0:a4:19: 41:98:72:53:3c:e9:ee:68:23:fa:e6:c7:2c:5d:43:e1:ac:ca: 0e:de:f7:27:66:20:66:0c:e5:53:08:bb:d0:d4:2d:50:0b:29: e2:1a:dd:90:56:6f:16:1b:a5:8a:4f:35:7c:2f:3b:b7:b0:b9: 8d:4d:9e:f1:39:61:fb:04:40:d4:f0:dd:4e:2d:74:b6:12:ec: 59:23:4d:c6:d5:e8:e1:67:0e:0d:6d:d1:7f:f1:1e:ec:fc:ef: 8c:50:cb:02:fd:8a:fd:1e:f5:c0:da:35:ed:c6:63:02:e8:83: cf:e1:c3:21:60:e9:1f:0b:51:57:a4:0f:aa:f7:4e:b7:b2:1f: b6:43:43:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUzRkIxMTAvBgNVBAUTKDVFQjA5OEVGNEQ1NjU1Q0M2NkI2QUY4MUMzQ0RFNDA2 MkQ4MDJGM0IwHhcNMjUwMzI5MDAxMDU4WhcNMjUwNDA1MDAxMDU4WjAYMRYwFAYD VQQDEw02N2U3M2E5Mi0xZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10UEFoS5Pt6ntNO0fHVqCwSTVnBAvsevEQFi/IOuBsuIAM/boKHyNBJ4ywCS 3wBZNF7OTNPP29p3/S5pDLtHeCrAAEGRPleFG/lWytpLzoZCSrVFBUCs31y4de2Q 8PWVdZr7T/L3c/dNNZUSCLKYOQrS7EEYyInpXIOiHcqExxjCx3CTrprTY/B6y7wu jGKuXOBNM0m+0m5YJ+QO5PbEyrG/PA40f66rHqfwq+Q6FC0UqRE1VKcr/BSwlplL KDq9FSJ0s1EI7IBv/NQPNbJ+732OHthJkRlvBOLyr0PKHxQiz/tiHokDesmPt4dx Dmq1KKG9T72OjB4Meb3aiOQ5gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTfI69e 67gVy0WdHTy6mJFHd4AxMB8GA1UdIwQYMBaAFF6wmO9NVlXMZravgcPN5AYtgC87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTNGQi9GREQ0NEMyMjI2 NkUxMUVDQUMwOTdDN0JDNEY5QUUwMi9YckNZNzAxV1ZjeG10cS1Cdzgza0JpMkFM enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hyQ1k3MDFXVmN4bXRxLUJ3ODNrQmkyQUx6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTNGQi9GREQ0NEMyMjI2NkUxMUVDQUMwOTdDN0JDNEY5QUUwMi9YckNZNzAxV1Zj eG10cS1Cdzgza0JpMkFMenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJXWR8IscmLzVBilGyeOMwqCIjjm4FGmSrOnGTtbtBQIlQj2w3c3e+ 3ZnsGjR89zhT2RyLoH051VCpGLaBHHxNGGZTU/Mj+LvhQKWNH8r2oSIlJo+iqyaL 0nJ/lx7neeRNMoI1IsB1E3fUxFOtwibP17bFCrx+CWhFw7zgpBlBmHJTPOnuaCP6 5scsXUPhrMoO3vcnZiBmDOVTCLvQ1C1QCyniGt2QVm8WG6WKTzV8Lzu3sLmNTZ7x OWH7BEDU8N1OLXS2EuxZI03G1ejhZw4NbdF/8R7s/O+MUMsC/Yr9HvXA2jXtxmMC 6IPP4cMhYOkfC1FXpA+q9063sh+2Q0N1 -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:06 2025 by rpki-client