$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft File: Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json) Hash identifier: 9za7AvquXoJQIOyftWBgSsbgidjfiFXEAmX6lBE2hno= Subject key identifier: 87:42:F9:61:A0:CE:A7:ED:60:71:DB:6F:72:DE:46:FE:5C:65:C9:3B Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Certificate serial: 0474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft Manifest number: 046C Signing time: Sat 31 May 2025 00:19:45 +0000 Manifest this update: Sat 31 May 2025 00:19:45 +0000 Manifest next update: Sat 07 Jun 2025 00:19:45 +0000 Files and hashes: 1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: gyg840csQCJl2g4rmeaCeqh6Ky6UlkL2J/kqsLDoLQI=) 2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: 9zlcNMp71CcrKhJ6RcgbQ3pW8nUmE/ShM6R3qPGEpIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:19:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119B43, serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79 Validity Not Before: May 31 00:19:45 2025 GMT Not After : Jun 7 00:19:45 2025 GMT Subject: CN=683a4b21-75ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:03:08:dd:43:04:84:59:6b:d8:eb:02:97:39: bb:5f:c7:e1:c1:47:11:de:55:9c:ce:8e:32:21:e2: bb:3d:77:31:8e:38:92:8f:f5:b4:15:ca:08:f9:84: 37:94:5e:e6:a0:a0:59:10:cb:d8:0a:33:90:d8:d0: 1f:03:b0:f3:10:c9:1c:b4:eb:fe:7f:43:5d:2c:b4: 6e:ff:63:78:74:09:6d:c2:d7:78:97:1b:da:76:62: e7:6f:e3:2d:87:5b:71:b1:4e:18:90:0d:47:18:44: 45:43:6a:fb:09:79:19:d2:39:41:8b:a1:9c:ca:71: 17:7f:c2:fb:5d:85:9c:12:bd:8b:12:99:41:db:50: 71:b6:60:9d:89:e3:82:3f:e0:7d:08:ef:e9:2c:ea: 2f:44:8a:b9:b7:ec:cd:9e:96:2d:fb:b8:ae:1a:9a: 65:33:bc:04:12:b6:63:b0:87:94:05:21:ff:de:19: c0:94:bf:5b:f5:1e:f7:d1:02:03:35:f3:2f:4e:ec: 68:06:37:90:19:ab:c3:0b:d6:02:60:9f:9a:bd:6d: 38:22:d4:d8:12:a5:bc:23:e9:73:9e:34:64:98:fe: be:f0:31:02:a2:a6:76:c0:03:78:c1:47:df:c1:58: 9b:1f:35:95:b7:a6:e8:6e:59:e0:bb:24:8b:9d:e5: ea:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:42:F9:61:A0:CE:A7:ED:60:71:DB:6F:72:DE:46:FE:5C:65:C9:3B X509v3 Authority Key Identifier: keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:7b:75:48:91:82:35:b0:91:39:01:d5:fa:dd:86:d0:52:6d: 42:d2:c4:05:50:18:99:e0:b2:3d:09:73:06:a1:1f:c6:6c:b7: 2b:6b:9f:fb:15:38:9e:00:57:4d:b6:d7:5b:e2:55:ec:79:df: 53:34:24:17:e3:97:89:27:87:5a:cd:1f:5f:7a:2d:45:9a:20: 4c:b6:cf:b8:06:3e:4b:42:87:9b:c8:48:e8:ad:94:f3:36:fe: b6:9b:8a:89:32:66:4c:17:62:83:f5:ad:fe:4f:01:a2:c9:cc: 74:0a:83:81:04:b0:8f:95:14:53:f2:eb:fa:78:28:36:d8:d4: fd:e9:14:17:95:a6:e5:20:2d:3e:9a:5c:e6:3e:88:ec:74:b6: 02:34:a1:27:f0:ce:cc:d4:51:c9:4b:73:6a:36:a2:e2:39:c4: ab:e8:43:c1:ad:3d:9d:b2:89:48:ff:e1:f3:bb:ed:a6:f5:0d: fb:75:0f:c6:d7:07:f3:cc:d7:e7:91:0a:72:32:68:18:6b:0f: ee:b3:31:74:f1:4e:85:a2:d9:28:82:0f:40:fa:71:24:3d:4c: a1:ec:cd:f5:da:27:e3:8e:d4:60:54:5e:ed:76:c9:3c:03:80: 28:01:0e:50:da:ca:fc:3a:5a:de:1c:a7:bb:d5:6c:00:3d:c8: e4:cd:b7:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlCNDMxMTAvBgNVBAUTKDVFRDg2OERBODcyQUY4RDY5NkE1QzFBOUZBNzgyOUY2 NTI3M0NBNzkwHhcNMjUwNTMxMDAxOTQ1WhcNMjUwNjA3MDAxOTQ1WjAYMRYwFAYD VQQDEw02ODNhNGIyMS03NWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlwMI3UMEhFlr2OsClzm7X8fhwUcR3lWczo4yIeK7PXcxjjiSj/W0FcoI+YQ3 lF7moKBZEMvYCjOQ2NAfA7DzEMkctOv+f0NdLLRu/2N4dAltwtd4lxvadmLnb+Mt h1txsU4YkA1HGERFQ2r7CXkZ0jlBi6GcynEXf8L7XYWcEr2LEplB21BxtmCdieOC P+B9CO/pLOovRIq5t+zNnpYt+7iuGpplM7wEErZjsIeUBSH/3hnAlL9b9R730QID NfMvTuxoBjeQGavDC9YCYJ+avW04ItTYEqW8I+lznjRkmP6+8DECoqZ2wAN4wUff wVibHzWVt6boblnguySLneXqRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdC+WGg zqftYHHbb3LeRv5cZck7MB8GA1UdIwQYMBaAFF7YaNqHKvjWlqXBqfp4KfZSc8p5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUI0My9FNUI4Mzk4MjRC M0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1OYVdwY0dwLW5ncDlsSnp5 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h0aG8yb2NxLU5hV3BjR3AtbmdwOWxKenluay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OUI0My9FNUI4Mzk4MjRCM0ExMUVDOTkyRTgxNTBDNEY5QUUwMi9YdGhvMm9jcS1O YVdwY0dwLW5ncDlsSnp5bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBve3VIkYI1sJE5AdX63YbQUm1C0sQFUBiZ4LI9CXMGoR/GbLcra5/7 FTieAFdNttdb4lXsed9TNCQX45eJJ4dazR9fei1FmiBMts+4Bj5LQoebyEjorZTz Nv62m4qJMmZMF2KD9a3+TwGiycx0CoOBBLCPlRRT8uv6eCg22NT96RQXlablIC0+ mlzmPojsdLYCNKEn8M7M1FHJS3NqNqLiOcSr6EPBrT2dsolI/+Hzu+2m9Q37dQ/G 1wfzzNfnkQpyMmgYaw/uszF08U6Fotkogg9A+nEkPUyh7M312ifjjtRgVF7tdsk8 A4AoAQ5Q2sr8OlreHKe71WwAPcjkzbde -----END CERTIFICATE-----Generated at Sat May 31 15:14:38 2025 by rpki-client