$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json) Hash identifier: cVJhsSj2wzAecXEdH3Mx9CEUGb1pqbPh6MnMuTK9V30= Subject key identifier: B8:44:DE:0E:1C:03:90:80:D4:F1:CA:C0:12:48:DB:E3:D9:DB:F2:67 Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft Manifest number: 0179 Signing time: Sat 31 May 2025 03:24:45 +0000 Manifest this update: Sat 31 May 2025 03:24:45 +0000 Manifest next update: Sat 07 Jun 2025 03:24:45 +0000 Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: 6Wv/TXVaJ9hHQ3i1GsYXx50yrWxmKIbV0yEPAarc9DM=) 2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: JQglPoDIL3Eq1y2JiUK8F3q2nUek/I2P1c153lPMYTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Validity Not Before: May 31 03:24:45 2025 GMT Not After : Jun 7 03:24:45 2025 GMT Subject: CN=683a767d-f6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cc:a6:7b:0e:93:9d:bf:b7:ec:cc:3f:02:d6: 46:30:97:95:cd:2c:e0:24:1b:af:93:bb:88:43:f8: a9:97:31:70:e9:15:a8:55:61:45:ba:b1:7f:9d:b9: 89:b8:cb:45:96:30:3c:2d:94:71:4e:cf:ac:d9:65: 82:d5:47:b6:8d:8b:04:a0:07:e7:9f:3e:e6:97:1f: 3f:79:a5:98:1d:bc:27:7f:9a:a0:76:e5:58:57:28: 9e:ef:7d:e6:ea:ac:be:9e:f3:fd:44:dd:be:56:65: ff:4e:20:97:b2:f3:18:cc:e2:85:d5:f0:23:3a:6b: e4:e0:bb:f1:ac:e9:ef:91:07:af:54:dd:16:da:57: aa:49:17:b4:e9:a3:e9:5d:e1:79:84:5a:59:c0:0d: 37:20:f7:c5:44:6a:d7:e1:17:25:ba:65:c3:e1:a5: 74:9e:6a:dd:78:31:6f:6a:e1:fc:48:21:68:36:85: 77:49:ba:1d:01:8d:49:47:14:ad:9c:5f:d3:3a:7c: 19:ab:8b:3e:d6:de:5f:70:c6:7e:d3:43:81:51:81: 93:6d:91:2e:27:e8:74:65:4f:f5:29:8d:67:ff:ee: 54:46:c0:39:5a:db:ce:85:0c:f1:f5:bf:f9:34:40: 44:dc:05:bd:c8:7b:c7:65:2b:71:10:ea:01:b0:3f: 86:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:44:DE:0E:1C:03:90:80:D4:F1:CA:C0:12:48:DB:E3:D9:DB:F2:67 X509v3 Authority Key Identifier: keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:89:e8:93:31:6b:d1:f7:10:43:e2:36:87:f3:42:f0:80:53: 7e:bd:52:54:b8:7e:e2:6e:2b:7f:f6:b0:4d:66:41:ac:78:0f: 4e:84:d3:1a:4d:ac:5c:46:13:63:09:e9:7b:a3:a8:0a:e5:ca: 32:52:f6:df:06:83:06:b5:94:09:d1:a1:ec:ff:81:7e:08:f4: a1:49:70:38:8b:db:fe:68:65:16:e0:70:86:f0:48:bf:68:8b: 98:f1:86:ca:e5:cf:52:ec:5c:1a:6e:d0:50:a3:1d:dd:1b:56: b0:1a:2f:b6:6c:3e:96:5a:54:fc:9b:10:92:7d:55:86:62:a5: e0:4b:d7:c6:c6:00:a6:eb:33:c5:c2:4f:99:cb:0f:7b:8e:f2: dd:7b:db:d3:85:87:ad:43:01:57:db:da:5c:6f:d4:c2:a3:6f: f7:dd:6e:d1:18:ba:f3:36:2c:db:7a:b4:8a:90:88:4c:98:bf: b7:e1:fb:e9:65:10:5e:f3:e0:e3:b5:0a:cf:ab:e3:50:65:b4: e4:56:f0:68:8f:34:b8:4c:de:3f:4a:3b:2a:52:89:8d:e6:90: 28:6d:4d:3d:9a:7e:8c:0d:f7:18:df:48:e9:f7:41:d5:ed:76: 92:1b:fa:e8:a9:0e:3a:e7:63:f7:7c:83:10:e4:55:1b:fd:ac: f9:3f:a8:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDQjQxMTAvBgNVBAUTKEZCMTZCMTlERkJGN0NBNkFDNDBBNkI2QTM1M0Y3ODU3 ODkxN0UwRkQwHhcNMjUwNTMxMDMyNDQ1WhcNMjUwNjA3MDMyNDQ1WjAYMRYwFAYD VQQDEw02ODNhNzY3ZC1mNmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1symew6Tnb+37Mw/AtZGMJeVzSzgJBuvk7uIQ/iplzFw6RWoVWFFurF/nbmJ uMtFljA8LZRxTs+s2WWC1Ue2jYsEoAfnnz7mlx8/eaWYHbwnf5qgduVYVyie733m 6qy+nvP9RN2+VmX/TiCXsvMYzOKF1fAjOmvk4LvxrOnvkQevVN0W2leqSRe06aPp XeF5hFpZwA03IPfFRGrX4RclumXD4aV0nmrdeDFvauH8SCFoNoV3SbodAY1JRxSt nF/TOnwZq4s+1t5fcMZ+00OBUYGTbZEuJ+h0ZU/1KY1n/+5URsA5WtvOhQzx9b/5 NEBE3AW9yHvHZStxEOoBsD+GiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhE3g4c A5CA1PHKwBJI2+PZ2/JnMB8GA1UdIwQYMBaAFPsWsZ3798pqxAprajU/eFeJF+D9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkNCNC8yQTg0RDFEOEZE QzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3ltckVDbXRxTlQ5NFY0a1g0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14YXhuZnYzeW1yRUNtdHFOVDk0VjRrWDRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkNCNC8yQTg0RDFEOEZEQzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3lt ckVDbXRxTlQ5NFY0a1g0UDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQieiTMWvR9xBD4jaH80LwgFN+vVJUuH7ibit/9rBNZkGseA9OhNMa TaxcRhNjCel7o6gK5coyUvbfBoMGtZQJ0aHs/4F+CPShSXA4i9v+aGUW4HCG8Ei/ aIuY8YbK5c9S7FwabtBQox3dG1awGi+2bD6WWlT8mxCSfVWGYqXgS9fGxgCm6zPF wk+Zyw97jvLde9vThYetQwFX29pcb9TCo2/33W7RGLrzNizberSKkIhMmL+34fvp ZRBe8+DjtQrPq+NQZbTkVvBojzS4TN4/SjsqUomN5pAobU09mn6MDfcY30jp90HV 7XaSG/roqQ4652P3fIMQ5FUb/az5P6gM -----END CERTIFICATE-----Generated at Sat May 31 17:02:19 2025 by rpki-client