$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft File: XOWb6kBJP8xXRnFpIvGYjZYpH74.mft (raw, json) Hash identifier: U8GNtxEjEWw/LRyFGiL3BfjvwB+5wF106Wf+1eRPdHw= Subject key identifier: 63:41:98:A9:F5:47:FF:B8:3E:00:3C:3A:63:E0:15:98:EB:1B:0D:62 Authority key identifier: 5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE Certificate issuer: /CN=A9116D68/serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Certificate serial: 0847 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft Manifest number: 172F Signing time: Thu 24 Apr 2025 17:38:05 +0000 Manifest this update: Thu 24 Apr 2025 17:38:04 +0000 Manifest next update: Thu 01 May 2025 17:38:04 +0000 Files and hashes: 1: XOWb6kBJP8xXRnFpIvGYjZYpH74.crl (hash: KcKFX7KUXvoePvEVJoGY3ZxUqmnUThaGJKRi4NJB93I=) 2: 98A1BAB6E9B611EE89994B66C4F9AE02.roa (hash: BZiR4Dc1ddblUQXJsTaFKfSdrUTvmlQ8LVKV+/pLZz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2119 (0x847) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D68, serialNumber=5CE59BEA40493FCC5746716922F1988D96291FBE Validity Not Before: Apr 24 17:38:04 2025 GMT Not After : May 1 17:38:04 2025 GMT Subject: CN=680a76fd-a4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:47:3e:b9:76:dc:13:32:b4:28:00:6d:9f:93: fd:ec:4e:1f:a2:36:6e:ea:c4:30:59:85:5c:81:f5: 85:cd:a9:22:65:f4:8d:da:ef:11:4f:c4:2e:41:bf: e6:22:b0:be:50:6d:bb:f3:d2:03:a5:16:81:1b:8a: 01:e8:e8:e4:18:66:3a:e2:d0:a5:0a:d8:24:39:01: 6c:ba:91:ff:da:40:0b:fd:a0:a5:87:5b:f5:eb:68: 6e:96:20:5f:a1:cf:ef:8b:84:68:2e:11:15:86:79: 25:a7:6b:a9:e6:71:e2:f0:20:7f:c0:d4:7e:ce:4b: 73:40:85:c7:c7:0f:6e:d5:db:10:fc:a4:f5:21:5e: 9e:ac:0b:bd:aa:4b:15:4f:e1:21:8e:be:1d:95:8a: 7f:15:83:d0:99:8a:a7:0f:84:28:a6:5c:36:9a:ec: eb:33:17:6a:e8:1c:1c:61:51:39:70:23:74:51:74: 46:b6:46:fa:c6:c1:c0:e6:8b:b2:a7:04:a2:54:19: b6:3c:bc:e6:db:25:b0:f8:41:cd:9f:6e:a0:bd:c8: d0:cf:3c:7e:90:53:e4:c2:ff:56:b1:f7:79:69:61: ea:ff:85:1e:72:f4:94:23:da:02:c0:b6:65:f3:f8: a2:84:62:7b:3a:69:9e:b7:81:61:0e:df:fe:db:b1: 5b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:41:98:A9:F5:47:FF:B8:3E:00:3C:3A:63:E0:15:98:EB:1B:0D:62 X509v3 Authority Key Identifier: keyid:5C:E5:9B:EA:40:49:3F:CC:57:46:71:69:22:F1:98:8D:96:29:1F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOWb6kBJP8xXRnFpIvGYjZYpH74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D68/724CC84C788711E9A08AEC60C4F9AE02/XOWb6kBJP8xXRnFpIvGYjZYpH74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:7b:c2:66:24:d6:e3:0d:19:8e:cf:f4:08:1d:fa:ff:d2:77: c8:2c:ee:20:2d:ff:54:df:4b:ca:ef:7c:a6:39:28:59:94:26: 28:9b:4c:9b:b3:b9:30:91:07:1f:cc:c7:38:5e:c3:cb:3f:6e: 94:12:b8:16:9b:b8:ee:51:d9:d8:0f:e4:3f:a2:99:a8:57:65: 93:39:b3:1b:75:c2:07:aa:33:95:61:f1:ea:fa:43:85:1a:3d: 96:ed:90:fe:63:3c:71:b9:cf:cd:1c:64:f6:f4:e9:50:c3:44: 92:0b:72:b4:5a:ac:b3:a1:c0:3c:e1:2d:f0:dd:fe:6d:7c:ed: f4:43:ab:1b:7a:e8:96:73:d5:d9:07:82:12:b1:b8:03:67:6e: 03:06:77:88:2a:7d:80:3a:09:6b:57:eb:15:e9:44:da:c5:1f: f8:40:39:0a:26:0f:14:d6:e0:0e:dc:fc:83:31:71:12:6e:8d: b5:21:60:bc:1b:e9:88:40:de:d4:7b:d1:a4:82:fc:8a:44:58: 73:b2:9e:dc:d1:b9:64:0b:8b:aa:83:6a:d5:b3:d7:35:0c:2f: d8:96:eb:ea:a8:f7:88:7a:35:b1:52:cb:3c:15:76:2a:c5:3a: 3c:1c:26:ab:78:a8:f9:50:47:21:dc:fc:b8:9c:22:4b:2c:72: 29:be:bf:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjgxMTAvBgNVBAUTKDVDRTU5QkVBNDA0OTNGQ0M1NzQ2NzE2OTIyRjE5ODhE OTYyOTFGQkUwHhcNMjUwNDI0MTczODA0WhcNMjUwNTAxMTczODA0WjAYMRYwFAYD VQQDEw02ODBhNzZmZC1hNGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkc+uXbcEzK0KABtn5P97E4fojZu6sQwWYVcgfWFzakiZfSN2u8RT8QuQb/m IrC+UG2789IDpRaBG4oB6OjkGGY64tClCtgkOQFsupH/2kAL/aClh1v162huliBf oc/vi4RoLhEVhnklp2up5nHi8CB/wNR+zktzQIXHxw9u1dsQ/KT1IV6erAu9qksV T+Ehjr4dlYp/FYPQmYqnD4Qoplw2muzrMxdq6BwcYVE5cCN0UXRGtkb6xsHA5ouy pwSiVBm2PLzm2yWw+EHNn26gvcjQzzx+kFPkwv9Wsfd5aWHq/4UecvSUI9oCwLZl 8/iihGJ7Ommet4FhDt/+27FbnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNBmKn1 R/+4PgA8OmPgFZjrGw1iMB8GA1UdIwQYMBaAFFzlm+pAST/MV0ZxaSLxmI2WKR++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2OC83MjRDQzg0Qzc4 ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4eFhSbkZwSXZHWWpaWXBI NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPV2I2a0JKUDh4WFJuRnBJdkdZalpZcEg3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2OC83MjRDQzg0Qzc4ODcxMUU5QTA4QUVDNjBDNEY5QUUwMi9YT1diNmtCSlA4 eFhSbkZwSXZHWWpaWXBINzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApe8JmJNbjDRmOz/QIHfr/0nfILO4gLf9U30vK73ymOShZlCYom0yb s7kwkQcfzMc4XsPLP26UErgWm7juUdnYD+Q/opmoV2WTObMbdcIHqjOVYfHq+kOF Gj2W7ZD+Yzxxuc/NHGT29OlQw0SSC3K0WqyzocA84S3w3f5tfO30Q6sbeuiWc9XZ B4ISsbgDZ24DBneIKn2AOglrV+sV6UTaxR/4QDkKJg8U1uAO3PyDMXESbo21IWC8 G+mIQN7Ue9GkgvyKRFhzsp7c0blkC4uqg2rVs9c1DC/YluvqqPeIejWxUss8FXYq xTo8HCareKj5UEch3Py4nCJLLHIpvr9Y -----END CERTIFICATE-----Generated at Sat Apr 26 13:38:41 2025 by rpki-client