$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft File: XA0XaoArLkVX6IWmwOq10NBw16c.mft (raw, json) Hash identifier: GRsWmoxPCebteers6j9TjD7g0ZgTYHExxLxTNzErrHg= Subject key identifier: E1:CC:FB:E0:E6:AA:93:AA:52:C0:4A:A7:0D:04:AF:61:1F:A0:35:34 Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 Certificate issuer: /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Certificate serial: 05B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft Manifest number: 05B1 Signing time: Thu 24 Apr 2025 22:55:39 +0000 Manifest this update: Thu 24 Apr 2025 22:55:38 +0000 Manifest next update: Thu 01 May 2025 22:55:38 +0000 Files and hashes: 1: XA0XaoArLkVX6IWmwOq10NBw16c.crl (hash: Jgp5lv+h83/DKFj1Ogf/fDxGyXm00YemKgXE4I8blaA=) 2: E390F83EC1CD11EB86A00568C4F9AE02.roa (hash: l/jme7wWS4I9LN6Uqmqgm8y3qkl6ZZcy6rtZNU+mraw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911959A, serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Validity Not Before: Apr 24 22:55:38 2025 GMT Not After : May 1 22:55:38 2025 GMT Subject: CN=680ac16a-6972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:4f:da:15:3d:02:53:6b:e8:17:72:11:2a: b0:6f:1a:de:66:14:43:c9:fd:32:eb:2d:ef:3f:79: 72:9b:07:64:83:91:5b:bc:5e:c5:6e:1d:09:68:92: 8c:6b:e1:dd:82:08:dd:7d:19:e1:35:02:da:4b:99: 2a:eb:3d:cf:0b:92:85:b2:02:ea:6f:04:60:4e:56: aa:be:96:8e:5a:7f:34:8e:8f:fe:2a:f9:fc:55:21: 1b:19:06:38:0c:8c:3b:8b:23:d3:32:02:b3:35:0d: b1:26:0a:82:af:2d:5f:55:71:9f:a8:c3:8f:94:39: 7b:99:5d:41:ed:0a:08:aa:fa:62:d5:cf:0c:42:89: 76:ad:34:3d:e0:e4:69:1b:7b:12:92:60:6b:a0:8b: a2:a6:17:48:be:86:22:34:84:24:58:5b:fe:f8:88: 93:2e:88:d6:a3:00:9e:4f:66:53:d2:b8:37:69:d8: cb:89:74:d5:c0:a0:b9:95:4d:24:3d:6b:62:7d:bc: da:2e:27:ce:d1:32:d7:a3:32:de:b0:c3:7e:c2:3e: 2e:36:d3:94:a3:7b:3f:14:20:e3:68:96:9d:a0:e9: c0:36:16:04:55:7a:b6:b9:20:96:1c:e4:89:9e:25: 3d:1e:fc:4c:63:8b:1c:fa:a0:c4:ca:4c:51:1d:23: 95:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CC:FB:E0:E6:AA:93:AA:52:C0:4A:A7:0D:04:AF:61:1F:A0:35:34 X509v3 Authority Key Identifier: keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:0a:7d:9b:e7:de:a6:f5:d2:cf:59:44:ce:46:20:be:ca:b9: 1a:6f:7f:79:43:87:b6:a5:41:58:1f:8a:a8:87:44:c6:19:15: 6c:11:e0:7a:6b:98:e3:95:ed:a7:5d:23:c3:c5:ab:8e:55:5a: ee:18:ca:65:9b:b7:13:bf:87:f0:d5:37:31:b8:e5:38:26:bd: e0:3c:da:37:39:ae:7b:a5:19:80:d2:ca:7a:a4:c4:56:13:73: 2b:c7:b8:27:5c:eb:b2:f3:2e:0a:f6:e9:43:ef:11:37:84:34: e0:fe:b8:55:99:57:f5:8e:b2:36:f9:58:36:7f:df:1e:fb:55: cf:b1:08:b1:41:fb:21:2c:9a:2d:02:05:cb:c0:bd:87:48:b7: b6:93:de:fa:e0:33:b9:23:b7:d3:ea:1c:d8:03:28:2f:d9:97: 41:5c:0c:3e:57:64:00:fc:e5:9e:1a:50:65:a2:5c:da:9d:38: 97:81:80:07:ef:47:30:fc:66:33:07:1f:cc:19:4b:50:bc:16: 04:ce:65:7d:ec:5f:e7:88:75:65:ff:b4:fe:67:d6:53:99:a5: 6d:8e:cf:1c:47:e7:8d:c2:9a:f9:5a:86:36:a7:6c:ac:e1:0c: 89:c9:df:02:86:5c:49:f2:9d:fb:53:60:2f:83:74:a0:2c:14: ca:29:66:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1OUExMTAvBgNVBAUTKDVDMEQxNzZBODAyQjJFNDU1N0U4ODVBNkMwRUFCNUQw RDA3MEQ3QTcwHhcNMjUwNDI0MjI1NTM4WhcNMjUwNTAxMjI1NTM4WjAYMRYwFAYD VQQDEw02ODBhYzE2YS02OTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxpP2hU9AlNr6BdyESqwbxreZhRDyf0y6y3vP3lymwdkg5FbvF7Fbh0JaJKM a+HdggjdfRnhNQLaS5kq6z3PC5KFsgLqbwRgTlaqvpaOWn80jo/+Kvn8VSEbGQY4 DIw7iyPTMgKzNQ2xJgqCry1fVXGfqMOPlDl7mV1B7QoIqvpi1c8MQol2rTQ94ORp G3sSkmBroIuiphdIvoYiNIQkWFv++IiTLojWowCeT2ZT0rg3adjLiXTVwKC5lU0k PWtifbzaLifO0TLXozLesMN+wj4uNtOUo3s/FCDjaJadoOnANhYEVXq2uSCWHOSJ niU9HvxMY4sc+qDEykxRHSOVEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHM++Dm qpOqUsBKpw0Er2EfoDU0MB8GA1UdIwQYMBaAFFwNF2qAKy5FV+iFpsDqtdDQcNen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU5QS8yRjhEQ0IwMkMx Q0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9BckxrVlg2SVdtd09xMTBOQncx NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBMFhhb0FyTGtWWDZJV213T3ExME5CdzE2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU5QS8yRjhEQ0IwMkMxQ0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9Bckxr Vlg2SVdtd09xMTBOQncxNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFCn2b596m9dLPWUTORiC+yrkab395Q4e2pUFYH4qoh0TGGRVsEeB6 a5jjle2nXSPDxauOVVruGMplm7cTv4fw1TcxuOU4Jr3gPNo3Oa57pRmA0sp6pMRW E3Mrx7gnXOuy8y4K9ulD7xE3hDTg/rhVmVf1jrI2+Vg2f98e+1XPsQixQfshLJot AgXLwL2HSLe2k9764DO5I7fT6hzYAygv2ZdBXAw+V2QA/OWeGlBlolzanTiXgYAH 70cw/GYzBx/MGUtQvBYEzmV97F/niHVl/7T+Z9ZTmaVtjs8cR+eNwpr5WoY2p2ys 4QyJyd8ChlxJ8p37U2Avg3SgLBTKKWZQ -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:40 2025 by rpki-client