$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft File: xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json) Hash identifier: ovMtyesOSACDJ7zZ/v/v5AcJ4kM5QT7GSUES1p37fBI= Subject key identifier: 00:28:60:89:E9:C0:78:D3:98:40:31:7B:76:BB:67:55:1F:FC:DB:DA Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Certificate serial: 1C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft Manifest number: 1C5E Signing time: Wed 12 Mar 2025 16:10:38 +0000 Manifest this update: Wed 12 Mar 2025 16:10:37 +0000 Manifest next update: Wed 19 Mar 2025 16:10:37 +0000 Files and hashes: 1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: B8WIJttPd63s/7MrdsrqW1LAA0G+qV2w7gzv44DMdzQ=) 2: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: Lk2qEHSCNbYOjvU+PcwacX3VW6CH6qyKSanfWEzTYmU=) 3: A149F286EFD311EFB37AB53EC4F9AE02.roa (hash: 7lOYsVaaqHqx4pgPOBBbAkvs7oMzJU4VOgvj6HMpoQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 16:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7322 (0x1c9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164390 Validity Not Before: Mar 12 16:10:37 2025 GMT Not After : Mar 19 16:10:37 2025 GMT Subject: CN=67d1b1fe-e25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:da:2c:1b:d9:64:11:f7:ce:8a:78:1f:22:ca: f5:c2:7b:66:1b:98:82:54:ba:b4:a0:43:b9:a0:55: 93:4b:de:3a:44:0a:02:dd:2a:84:63:5f:e1:4a:e4: 5b:69:cf:84:a0:b4:11:e7:a6:3e:57:c0:18:c8:c6: 79:f5:e1:4e:50:d4:a9:e6:d4:7b:4a:50:88:ff:ca: c5:17:f6:eb:1f:1e:8b:9c:df:d3:3c:01:51:7c:d7: 2b:48:93:a8:e2:50:3f:c5:bb:27:79:31:43:62:87: 57:66:ec:b8:ab:c7:4e:39:bf:1f:3b:26:81:bf:d2: 0e:89:9f:c8:ea:84:67:df:52:ef:da:2d:f0:71:52: f2:e3:cb:9a:5d:f3:90:9a:99:b4:88:3e:90:68:e1: d4:a5:9b:92:e0:c9:e5:1c:0a:8d:d3:fa:0c:7b:17: 2f:df:40:82:70:1e:29:77:19:c5:9b:32:0e:f0:88: 3a:23:bd:83:ee:49:e1:08:15:71:f5:f7:3d:f8:8d: b1:ac:fa:1f:36:d7:10:7a:fc:b2:1d:08:7a:61:16: 3e:31:7f:fb:b2:a3:ee:e8:90:36:b5:b3:cd:aa:3a: ad:d4:ab:4b:88:10:e2:42:c5:0a:93:0a:b7:32:c6: 78:a5:c7:be:c5:ed:45:57:8f:b9:47:e8:15:4a:dc: a8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:28:60:89:E9:C0:78:D3:98:40:31:7B:76:BB:67:55:1F:FC:DB:DA X509v3 Authority Key Identifier: keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:84:af:49:7d:f4:3f:57:c7:8a:9d:14:85:35:b4:84:0f:0b: bc:47:3d:3b:bf:7b:79:3c:ac:37:82:80:50:29:2b:de:0e:6e: c8:5e:db:93:be:43:e4:5d:7e:cf:64:42:3d:68:b7:fb:dd:72: 18:8d:00:83:66:6c:a0:c7:8d:96:f7:04:3a:0e:9d:12:0e:4c: b3:76:2f:c0:15:45:da:73:f5:ed:fd:97:e0:5d:1a:d1:99:4e: 20:a6:b9:bd:cb:a6:38:c4:97:13:c6:0e:01:03:fd:18:6d:d9: 4f:9a:83:f2:95:d4:b6:8f:22:bb:f8:6e:79:df:b3:c3:e7:30: a2:f3:dc:72:ae:d7:a9:50:c9:9e:99:c8:ed:a7:14:ae:fb:c1: 6e:b6:a5:04:e7:d8:81:82:29:7d:b5:84:d8:58:76:e9:f7:06: 37:e0:fa:7f:c8:d0:af:89:a4:6e:3d:08:70:8d:5d:b9:25:55: 5a:d5:94:73:12:33:87:b4:4c:04:83:53:92:8f:09:de:e1:3a: c1:cd:88:ba:5f:2a:fa:89:c0:fd:5c:be:46:bd:41:2b:e7:77: 9f:f3:29:4e:8a:90:5b:70:fb:41:59:55:09:68:37:10:de:48: fd:66:5e:04:32:fb:7a:08:98:eb:50:22:f7:5d:43:0b:a2:00: f8:14:4c:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzOTAxMTAvBgNVBAUTKEM2NDMzQzQ5RTYzQ0Q5MjAzNUIzMDdFOEY3OTYzNzYw OEZFQURCRjUwHhcNMjUwMzEyMTYxMDM3WhcNMjUwMzE5MTYxMDM3WjAYMRYwFAYD VQQDEw02N2QxYjFmZS1lMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA69osG9lkEffOingfIsr1wntmG5iCVLq0oEO5oFWTS946RAoC3SqEY1/hSuRb ac+EoLQR56Y+V8AYyMZ59eFOUNSp5tR7SlCI/8rFF/brHx6LnN/TPAFRfNcrSJOo 4lA/xbsneTFDYodXZuy4q8dOOb8fOyaBv9IOiZ/I6oRn31Lv2i3wcVLy48uaXfOQ mpm0iD6QaOHUpZuS4MnlHAqN0/oMexcv30CCcB4pdxnFmzIO8Ig6I72D7knhCBVx 9fc9+I2xrPofNtcQevyyHQh6YRY+MX/7sqPu6JA2tbPNqjqt1KtLiBDiQsUKkwq3 MsZ4pce+xe1FV4+5R+gVStyoPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAoYInp wHjTmEAxe3a7Z1Uf/NvaMB8GA1UdIwQYMBaAFMZDPEnmPNkgNbMH6PeWN2CP6tv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDM5MC8wRTkzNTRGQ0RD NUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJTQTFzd2ZvOTVZM1lJX3Ey X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrTThTZVk4MlNBMXN3Zm85NVkzWUlfcTJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDM5MC8wRTkzNTRGQ0RDNUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJT QTFzd2ZvOTVZM1lJX3EyX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWhK9JffQ/V8eKnRSFNbSEDwu8Rz07v3t5PKw3goBQKSveDm7IXtuT vkPkXX7PZEI9aLf73XIYjQCDZmygx42W9wQ6Dp0SDkyzdi/AFUXac/Xt/ZfgXRrR mU4gprm9y6Y4xJcTxg4BA/0YbdlPmoPyldS2jyK7+G5537PD5zCi89xyrtepUMme mcjtpxSu+8FutqUE59iBgil9tYTYWHbp9wY34Pp/yNCviaRuPQhwjV25JVVa1ZRz EjOHtEwEg1OSjwne4TrBzYi6Xyr6icD9XL5GvUEr53ef8ylOipBbcPtBWVUJaDcQ 3kj9Zl4EMvt6CJjrUCL3XUMLogD4FEwI -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:23 2025 by rpki-client