$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft File: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft (raw, json) Hash identifier: upOfYlZcA/LujyrEMgHa83MFUYItVe5euxCY+v6rGa8= Subject key identifier: 39:41:ED:0F:95:B4:9E:16:D2:CC:33:1A:90:69:C1:67:B5:00:F1:09 Authority key identifier: D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 Certificate issuer: /CN=A9172D65/serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22 Certificate serial: 0471 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft Manifest number: 046C Signing time: Wed 12 Mar 2025 23:43:37 +0000 Manifest this update: Wed 12 Mar 2025 23:43:37 +0000 Manifest next update: Wed 19 Mar 2025 23:43:37 +0000 Files and hashes: 1: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl (hash: GRarK9Q5z4h4hEeHhC0rE6SsoSW4B55tEA4NDZsiz3w=) 2: 56530120D47E11EFB2639C53C4F9AE02.roa (hash: 1whcSR6JX/pYt55ZCs0pw4Y1DC7NV0axD3riMwYblGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 23:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1137 (0x471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D65 Validity Not Before: Mar 12 23:43:37 2025 GMT Not After : Mar 19 23:43:37 2025 GMT Subject: CN=67d21c29-6978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:90:6d:db:f5:24:8b:58:91:dd:47:85:7d:8c: 3e:e4:38:cd:53:15:ef:03:52:86:69:cb:bd:21:38: b0:8e:ef:d0:43:67:42:54:9e:41:7a:53:ca:b5:e3: db:8e:22:6e:9f:03:4f:d5:ef:1d:f9:32:3c:d0:b7: 24:7b:ab:d3:42:48:f0:d8:f7:11:00:cd:e9:8e:a1: b8:a1:77:75:b4:c7:04:c3:3d:61:cc:cc:86:74:cf: 65:34:35:cb:9b:b4:9a:b8:9b:16:39:40:a8:a2:6f: 6d:fd:e3:11:99:69:df:05:a6:71:a8:d7:ad:1f:90: 37:4e:09:51:55:c9:ae:93:bb:2d:50:d3:8a:5b:d8: df:b8:46:14:54:2f:e7:6c:5d:4d:04:62:13:22:3e: d7:d5:92:b2:54:bf:dc:9a:09:ae:72:69:69:db:02: 05:39:e2:2e:19:2b:69:9d:32:17:25:89:78:12:70: 8e:8c:78:dd:60:1a:66:ef:8d:62:0c:c4:19:84:85: 9f:e4:23:2a:e1:33:77:c0:9f:04:ed:23:8d:25:3c: fe:f5:68:4a:42:55:fb:13:75:5b:5d:36:16:ba:46: 0f:83:5d:6a:e1:d2:8e:3b:f0:e6:c3:c5:ee:3c:32: 61:4d:b1:7c:58:7b:de:8e:4b:6c:ec:98:6e:83:f5: 32:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:41:ED:0F:95:B4:9E:16:D2:CC:33:1A:90:69:C1:67:B5:00:F1:09 X509v3 Authority Key Identifier: keyid:D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:80:bb:c5:be:fa:ca:3d:18:5c:8a:fb:81:bd:32:41:20:6c: af:d1:ee:2c:a1:b4:a8:14:bc:4e:d6:fd:90:52:53:9a:92:0c: 94:e7:13:33:a0:95:34:79:d9:48:48:a5:06:73:1b:7e:03:cd: 00:9b:94:c0:de:51:ce:59:53:2b:42:11:2a:a5:87:ab:30:5d: 5d:ab:1c:da:8c:74:43:33:37:7c:0a:fb:e6:22:ff:0f:51:9d: ab:27:ba:fe:73:91:06:45:05:04:1d:cd:29:bc:62:d2:29:89: 58:47:fc:d1:b9:b2:ca:85:27:27:3a:13:5b:1c:64:20:e0:f3: 69:8f:9f:cc:a0:a7:35:5f:45:0a:66:4a:d5:29:24:45:d0:37: b1:92:8a:70:f2:e2:98:88:b0:86:81:ed:c6:ac:63:28:9d:a0: 50:60:3b:20:bc:e1:c1:7d:da:1d:ba:77:63:61:69:38:3d:d7: a5:13:7a:5f:f5:fc:69:1b:0c:14:bc:57:3c:0e:ed:75:eb:32: 45:b2:3e:9d:12:96:db:00:cf:9d:60:a4:ab:0a:3a:f6:c5:fb: 42:2c:62:4e:f5:4e:4a:51:07:8a:97:79:d8:1d:17:98:0a:53: f3:f0:f8:35:c0:fb:0d:00:e7:da:c8:b2:a4:42:e2:bb:5d:d2: 10:63:dd:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJENjUxMTAvBgNVBAUTKEQ3MTUxOEZDNkU1NkM3QzRFQ0E5RUExOEIxQjU0MUQ4 QjBDMkNBMjIwHhcNMjUwMzEyMjM0MzM3WhcNMjUwMzE5MjM0MzM3WjAYMRYwFAYD VQQDEw02N2QyMWMyOS02OTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZBt2/Uki1iR3UeFfYw+5DjNUxXvA1KGacu9ITiwju/QQ2dCVJ5BelPKtePb jiJunwNP1e8d+TI80Lcke6vTQkjw2PcRAM3pjqG4oXd1tMcEwz1hzMyGdM9lNDXL m7SauJsWOUCoom9t/eMRmWnfBaZxqNetH5A3TglRVcmuk7stUNOKW9jfuEYUVC/n bF1NBGITIj7X1ZKyVL/cmgmucmlp2wIFOeIuGStpnTIXJYl4EnCOjHjdYBpm741i DMQZhIWf5CMq4TN3wJ8E7SONJTz+9WhKQlX7E3VbXTYWukYPg11q4dKOO/Dmw8Xu PDJhTbF8WHvejkts7Jhug/UyLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlB7Q+V tJ4W0swzGpBpwWe1APEJMB8GA1UdIwQYMBaAFNcVGPxuVsfE7KnqGLG1Qdiwwsoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ2NS80RjQyMUY1MjNC MEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4VHNxZW9Zc2JWQjJMREN5 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4VVlfRzVXeDhUc3Flb1lzYlZCMkxEQ3lpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkQ2NS80RjQyMUY1MjNCMEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4 VHNxZW9Zc2JWQjJMREN5aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKgLvFvvrKPRhcivuBvTJBIGyv0e4sobSoFLxO1v2QUlOakgyU5xMz oJU0edlISKUGcxt+A80Am5TA3lHOWVMrQhEqpYerMF1dqxzajHRDMzd8CvvmIv8P UZ2rJ7r+c5EGRQUEHc0pvGLSKYlYR/zRubLKhScnOhNbHGQg4PNpj5/MoKc1X0UK ZkrVKSRF0Dexkopw8uKYiLCGge3GrGMonaBQYDsgvOHBfdodundjYWk4PdelE3pf 9fxpGwwUvFc8Du116zJFsj6dEpbbAM+dYKSrCjr2xftCLGJO9U5KUQeKl3nYHReY ClPz8Pg1wPsNAOfayLKkQuK7XdIQY90l -----END CERTIFICATE-----Generated at Thu Mar 13 21:28:24 2025 by rpki-client