$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: qTVx7ENMCaPZVBY4E+h1qtqDFdT+ebkuLlwGy5VjtVY= Subject key identifier: 8B:AB:E9:07:C4:AA:7C:48:67:D7:A8:D5:1F:F8:43:DD:14:43:96:2A Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 07A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 07A1 Signing time: Thu 24 Apr 2025 21:03:22 +0000 Manifest this update: Thu 24 Apr 2025 21:03:22 +0000 Manifest next update: Thu 01 May 2025 21:03:22 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: XbzF8xkAH8AwNQmnpmKEhFYlTp0b9dHueVHdBcVa9jg=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: pS3E0icAhyYawyxkXSLUFbWuAzA0NV/jlalvE1DTh1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1958 (0x7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: Apr 24 21:03:22 2025 GMT Not After : May 1 21:03:22 2025 GMT Subject: CN=680aa71a-e375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:75:f1:55:8c:cf:f9:83:25:7b:59:09:7a:84: 3e:8f:c9:ff:d1:0e:7f:22:57:5c:04:67:02:30:30: 61:ab:0f:46:f9:79:1f:62:86:0a:e2:24:f3:6d:ce: d3:03:94:bf:09:34:45:9e:53:d9:b2:07:d5:bc:68: 77:ee:46:d9:24:9e:e8:3e:27:16:ef:dc:41:87:e8: 27:f5:92:ae:97:b8:eb:6e:a8:9e:44:43:bc:65:db: 1c:00:43:38:a4:1f:a8:6d:3b:3d:13:49:16:90:bb: 51:a1:7f:c6:55:08:2f:f0:ab:bd:0a:cd:17:81:90: 8d:4b:dd:7e:3b:99:d4:2e:e3:b4:9f:19:5e:57:3f: bf:32:41:05:5f:63:1e:f2:0e:4e:ee:5c:a9:8b:89: ca:44:d7:97:99:6a:07:f8:f6:da:54:4a:4d:0f:d3: 2d:b6:66:74:ec:5e:0c:1c:c2:ca:f8:cb:1d:9c:61: 85:39:1f:f1:ae:31:f9:22:c5:ae:4a:00:79:fc:0a: 31:7a:9b:df:7d:a6:40:11:a1:64:1d:c1:b6:ba:48: 0e:80:49:f2:88:be:c3:33:d7:7f:dd:0e:b4:a7:8b: 7e:13:c0:11:bd:84:f5:76:7c:aa:a6:a0:4a:22:7d: 16:6c:8e:61:78:95:e5:0d:38:98:ee:76:28:be:fc: ea:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AB:E9:07:C4:AA:7C:48:67:D7:A8:D5:1F:F8:43:DD:14:43:96:2A X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:61:71:83:13:57:9e:3a:7d:a2:91:bc:45:56:2c:df:25:23: a6:25:4f:ff:db:e9:f2:1b:9f:49:33:70:00:28:25:13:6e:1e: a8:80:76:2d:0e:0d:bc:01:07:47:51:f7:e4:8f:c1:f2:62:f0: f9:5b:c1:01:1c:52:0a:95:1f:d3:00:62:19:64:be:e4:8b:a5: 75:58:9b:5c:51:1a:1f:d4:21:b2:6b:95:da:54:ca:c4:96:96: 61:6f:2a:d8:ff:b4:95:fc:38:7f:2b:aa:1c:99:53:e1:42:7b: 24:d1:d8:49:8e:85:45:03:3b:93:43:14:dc:b0:c3:70:60:33: 26:56:34:59:9e:20:50:8e:ee:a8:89:c2:e0:96:cc:54:18:87: 45:3c:4d:a6:bb:27:35:30:f3:95:ed:4c:c0:e4:4d:45:0b:d2: 32:61:0e:cb:1f:e9:ff:54:30:66:31:16:a1:05:d4:85:73:b7: 4e:8e:bb:e0:6c:8b:5e:6a:30:38:b6:b6:c6:98:10:24:5c:23: 86:9a:36:d4:26:d3:0e:06:7a:8c:60:34:c3:96:45:3f:fe:a4: 6c:42:43:9f:51:f8:25:54:c3:84:fe:c2:62:16:50:83:b1:87: bd:b6:e5:76:6b:ea:f0:d8:a3:88:65:6f:f3:ba:ed:1f:66:97: 3a:a1:d2:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjUwNDI0MjEwMzIyWhcNMjUwNTAxMjEwMzIyWjAYMRYwFAYD VQQDEw02ODBhYTcxYS1lMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9XXxVYzP+YMle1kJeoQ+j8n/0Q5/IldcBGcCMDBhqw9G+XkfYoYK4iTzbc7T A5S/CTRFnlPZsgfVvGh37kbZJJ7oPicW79xBh+gn9ZKul7jrbqieREO8ZdscAEM4 pB+obTs9E0kWkLtRoX/GVQgv8Ku9Cs0XgZCNS91+O5nULuO0nxleVz+/MkEFX2Me 8g5O7lypi4nKRNeXmWoH+PbaVEpND9MttmZ07F4MHMLK+MsdnGGFOR/xrjH5IsWu SgB5/AoxepvffaZAEaFkHcG2ukgOgEnyiL7DM9d/3Q60p4t+E8ARvYT1dnyqpqBK In0WbI5heJXlDTiY7nYovvzq2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIur6QfE qnxIZ9eo1R/4Q90UQ5YqMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEYXGDE1eeOn2ikbxFVizfJSOmJU//2+nyG59JM3AAKCUTbh6ogHYt Dg28AQdHUffkj8HyYvD5W8EBHFIKlR/TAGIZZL7ki6V1WJtcURof1CGya5XaVMrE lpZhbyrY/7SV/Dh/K6ocmVPhQnsk0dhJjoVFAzuTQxTcsMNwYDMmVjRZniBQju6o icLglsxUGIdFPE2muyc1MPOV7UzA5E1FC9IyYQ7LH+n/VDBmMRahBdSFc7dOjrvg bIteajA4trbGmBAkXCOGmjbUJtMOBnqMYDTDlkU//qRsQkOfUfglVMOE/sJiFlCD sYe9tuV2a+rw2KOIZW/zuu0fZpc6odJ+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:42 2025 by rpki-client