$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft File: xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json) Hash identifier: +Mrok2Zxk79yF7i81z/F1WLXZKWbgnJ8vhlnmbv0Xvk= Subject key identifier: BC:02:CF:9C:63:47:E2:B1:05:7B:C9:51:6B:D0:A0:FF:6E:D0:9B:03 Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56 Certificate issuer: /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256 Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft Manifest number: 017D Signing time: Sat 31 May 2025 03:22:10 +0000 Manifest this update: Sat 31 May 2025 03:22:10 +0000 Manifest next update: Sat 07 Jun 2025 03:22:10 +0000 Files and hashes: 1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: cST1cDDFyYcu2/Gpa6SrgcaO/tkVgv80VyScIyjuoC0=) 2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: 6AwMX4x/IYWolneJozQYQ/y6c1KiBasFJP05rV+jXS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256 Validity Not Before: May 31 03:22:10 2025 GMT Not After : Jun 7 03:22:10 2025 GMT Subject: CN=683a75e2-5e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:78:9b:ce:ff:f9:4d:4e:f8:7b:a1:d2:2c: 39:b0:92:e4:9b:95:41:14:3c:8f:ec:9f:69:f7:e4: a8:0e:41:a0:f5:af:1f:e6:41:8a:27:ae:25:8d:45: 5d:6c:79:b3:3f:ab:90:1a:7c:17:78:fb:19:5d:89: ba:90:e5:b5:c4:aa:93:8f:52:44:c4:8a:a6:0e:ef: 6e:4b:2f:c7:c7:5b:66:73:44:7d:83:c3:f6:ae:30: 3a:29:b1:f7:68:29:3f:65:df:29:43:87:de:0e:47: d5:e1:1c:32:7d:7d:bf:da:4d:e0:18:28:eb:c4:51: 41:74:61:ea:e9:9a:f7:6c:7a:32:f2:d6:b7:23:26: d9:33:28:5a:ff:13:e6:60:fc:95:3c:96:d0:c0:fe: 20:ea:48:80:44:72:93:a7:9a:c1:9f:1c:29:05:54: 08:ab:dc:ed:5b:ae:a0:b4:0d:f9:35:5f:77:59:ad: f0:d1:66:2b:a9:b5:da:d2:c1:21:64:b1:9d:86:18: 79:14:a3:a5:24:ca:c6:08:a4:af:59:30:db:8b:7c: 78:fb:f0:5a:ac:72:cb:92:f7:8d:85:95:66:1a:b0: 5f:b9:35:90:d4:e3:59:8c:6c:1b:14:6d:79:6a:a1: 18:cc:9a:3d:52:1c:12:79:12:2a:19:c3:b1:a4:72: 7b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:02:CF:9C:63:47:E2:B1:05:7B:C9:51:6B:D0:A0:FF:6E:D0:9B:03 X509v3 Authority Key Identifier: keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:91:99:8c:84:71:02:60:c4:aa:5d:c3:22:50:37:16:65:80: 00:85:1d:7e:37:d9:ef:85:d7:b9:cb:e6:57:6a:29:21:cd:78: 2f:68:cc:40:8e:01:de:77:a6:ed:d4:a3:a1:a8:8b:87:4d:0f: 8c:a2:41:05:23:10:f1:59:c0:e8:9a:b1:1a:b6:6f:79:5d:6a: 12:bf:f5:3d:df:de:6f:42:ee:bc:e9:aa:87:b5:09:e9:4a:17: 02:20:55:32:ad:59:f5:bb:3d:13:18:eb:c1:1f:44:95:49:1e: 37:04:ec:26:14:9a:82:fa:6a:73:1b:3c:73:ea:1b:59:5d:d3: b9:ad:a5:06:10:04:ac:d1:79:32:93:e0:59:ac:1f:8e:11:a6: 6c:3e:29:84:d0:ab:e4:cd:05:f8:7d:4d:bb:16:fd:c9:f0:ce: 7f:aa:26:3c:d3:ec:04:30:60:05:43:c4:1f:32:9b:2f:7f:cf: a6:f6:78:68:81:f3:00:e9:ef:cf:4a:55:d1:a0:d3:3c:34:3b: bf:ab:64:91:64:1c:88:58:05:30:be:d0:b7:a1:d7:49:53:38: 02:3d:b1:7c:ae:45:4c:9b:9d:37:39:36:33:b7:52:d3:a8:73: 6c:f5:b9:f1:0a:57:ce:f2:7d:2e:86:9a:6f:a9:d7:c3:8f:44: 15:8a:48:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1MzIxMTAvBgNVBAUTKEM0RkE2QkJBQkZEMTk5N0NDOEYxRDIwRkU2QTU1NzRE RUU5QjMyNTYwHhcNMjUwNTMxMDMyMjEwWhcNMjUwNjA3MDMyMjEwWjAYMRYwFAYD VQQDEw02ODNhNzVlMi01ZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLp4m87/+U1O+Huh0iw5sJLkm5VBFDyP7J9p9+SoDkGg9a8f5kGKJ64ljUVd bHmzP6uQGnwXePsZXYm6kOW1xKqTj1JExIqmDu9uSy/Hx1tmc0R9g8P2rjA6KbH3 aCk/Zd8pQ4feDkfV4RwyfX2/2k3gGCjrxFFBdGHq6Zr3bHoy8ta3IybZMyha/xPm YPyVPJbQwP4g6kiARHKTp5rBnxwpBVQIq9ztW66gtA35NV93Wa3w0WYrqbXa0sEh ZLGdhhh5FKOlJMrGCKSvWTDbi3x4+/BarHLLkveNhZVmGrBfuTWQ1ONZjGwbFG15 aqEYzJo9UhwSeRIqGcOxpHJ7nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwCz5xj R+KxBXvJUWvQoP9u0JsDMB8GA1UdIwQYMBaAFMT6a7q/0Zl8yPHSD+alV03umzJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzMi85QTY2RUI5RUY2 NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Yekk4ZElQNXFWWFRlNmJN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQcHJ1cl9SbVh6SThkSVA1cVZYVGU2Yk1sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzMi85QTY2RUI5RUY2NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Y ekk4ZElQNXFWWFRlNmJNbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFkZmMhHECYMSqXcMiUDcWZYAAhR1+N9nvhde5y+ZXaikhzXgvaMxA jgHed6bt1KOhqIuHTQ+MokEFIxDxWcDomrEatm95XWoSv/U9395vQu686aqHtQnp ShcCIFUyrVn1uz0TGOvBH0SVSR43BOwmFJqC+mpzGzxz6htZXdO5raUGEASs0Xky k+BZrB+OEaZsPimE0KvkzQX4fU27Fv3J8M5/qiY80+wEMGAFQ8QfMpsvf8+m9nho gfMA6e/PSlXRoNM8NDu/q2SRZByIWAUwvtC3oddJUzgCPbF8rkVMm503OTYzt1LT qHNs9bnxClfO8n0uhppvqdfDj0QVikg9 -----END CERTIFICATE-----Generated at Sat May 31 17:44:08 2025 by rpki-client