$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft File: xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json) Hash identifier: I0oKgOP6nhxW8vSw0K/YmRmuk8YocRVey3VeOxEVgSE= Subject key identifier: 5E:71:17:3F:9F:08:97:FC:37:76:76:71:74:4A:89:F4:08:80:FB:D7 Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 Certificate issuer: /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft Manifest number: 5C Signing time: Fri 25 Apr 2025 04:02:56 +0000 Manifest this update: Fri 25 Apr 2025 04:02:55 +0000 Manifest next update: Fri 02 May 2025 04:02:55 +0000 Files and hashes: 1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: dVoUFPMOUNfyMXjRSXEGrMXiHSEoi5o7YUOp3hp6y2k=) 2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: xY5rRYGsWrcsy57HxUo/DUZymmQ+QbhnmZvTvm4JJxQ=) 3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: 3NBZi9t73NGUqewcrwzUwAEjzkPNxuY/EA9dZDJA11Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Validity Not Before: Apr 25 04:02:55 2025 GMT Not After : May 2 04:02:55 2025 GMT Subject: CN=680b0970-f834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:66:71:25:7a:1d:26:d8:6f:63:5c:2c:ec:a3: ca:5a:a1:60:4d:d8:31:eb:da:78:72:64:a1:9e:8a: 64:4c:85:78:ac:d7:f4:90:a9:66:86:e6:7e:af:bd: 4e:d6:1a:6a:a5:d0:22:e8:c7:c8:1f:5a:e1:c8:44: 31:1c:14:33:71:53:38:97:2e:3e:89:a1:38:65:68: 9e:78:d8:e2:1a:6c:3d:e3:c7:db:38:fe:28:0b:7a: 2b:fe:22:39:54:3b:8b:f2:20:ba:e4:a1:1d:c0:7b: f6:78:05:69:8a:d8:8f:e4:96:3a:4a:29:35:c3:e0: f8:d0:05:04:89:64:26:a6:6f:c3:3a:c3:18:2a:0a: 3b:08:2b:db:37:e5:a5:bf:51:b2:8d:ff:06:20:69: 51:68:72:e8:2f:54:ac:96:e2:76:6c:48:d7:fc:af: 1b:e8:91:dc:f1:9b:b1:f3:27:39:e4:21:03:40:d0: 7b:9f:ce:02:6a:5a:8c:de:3d:3e:82:2d:e9:fd:6f: 1a:1f:c1:4f:3a:48:3d:d7:0a:07:e6:c2:af:98:34: e1:36:ea:b7:37:f6:7a:79:c7:f7:b7:1a:b5:0a:66: 80:90:46:5b:7b:4d:86:91:42:42:18:b4:3e:06:33: 50:0b:09:ca:97:69:6f:a2:8d:26:f0:15:81:11:42: cd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:71:17:3F:9F:08:97:FC:37:76:76:71:74:4A:89:F4:08:80:FB:D7 X509v3 Authority Key Identifier: keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:a1:44:44:6d:ac:a0:8d:37:fc:04:95:cd:d3:86:d8:01:fc: a0:59:5e:01:fc:03:e0:d5:2e:43:88:67:43:bc:af:c0:c5:ef: 23:9d:f6:cc:41:90:de:c4:d3:da:f2:9c:2d:dd:c0:56:8b:89: 92:7e:dd:d7:35:e1:e7:41:39:51:58:6e:70:ad:4a:3a:a7:70: 77:1a:e9:71:87:cd:22:39:40:db:6b:0c:78:52:29:20:7a:a9: c6:2d:a8:c8:97:74:67:05:6d:9b:22:6b:23:9b:36:2b:4a:53: cf:50:c8:35:9f:51:76:31:0d:4f:34:21:c0:de:38:a0:58:cf: c8:2e:ca:8f:0b:68:f8:f2:d8:98:78:ba:6e:54:c0:20:cd:48: dc:89:86:2d:99:2b:d3:14:e7:60:a4:f4:95:52:7d:b0:07:04: 9c:f1:eb:f2:09:19:e8:bd:02:83:64:61:8f:73:ce:53:db:a1: 22:69:45:72:bf:d1:88:6f:32:28:4c:8f:46:81:e6:db:db:6d: 75:1c:cb:57:4d:4e:b5:94:f4:20:bb:a7:4b:22:66:91:27:bf: fa:db:3d:05:41:e2:5a:c3:cc:c2:78:0f:24:3e:9d:13:35:71: 88:c2:68:92:11:9c:f7:a9:cc:8d:dd:67:bf:bf:97:c7:34:c1: 15:1c:b7:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkI4NTExMC8GA1UEBRMoQzU1NjRERUMxMDE2NjNCRjQzRDNGMkUzNDAzOTRDMDA3 NjZBNjNFMzAeFw0yNTA0MjUwNDAyNTVaFw0yNTA1MDIwNDAyNTVaMBgxFjAUBgNV BAMTDTY4MGIwOTcwLWY4MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwZnEleh0m2G9jXCzso8paoWBN2DHr2nhyZKGeimRMhXis1/SQqWaG5n6vvU7W Gmql0CLox8gfWuHIRDEcFDNxUziXLj6JoThlaJ542OIabD3jx9s4/igLeiv+IjlU O4vyILrkoR3Ae/Z4BWmK2I/kljpKKTXD4PjQBQSJZCamb8M6wxgqCjsIK9s35aW/ UbKN/wYgaVFocugvVKyW4nZsSNf8rxvokdzxm7HzJznkIQNA0HufzgJqWozePT6C Len9bxofwU86SD3XCgfmwq+YNOE26rc39np5x/e3GrUKZoCQRlt7TYaRQkIYtD4G M1ALCcqXaW+ijSbwFYERQs1VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXnEXP58I l/w3dnZxdEqJ9AiA+9cwHwYDVR0jBBgwFoAUxVZN7BAWY79D0/LjQDlMAHZqY+Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyQjg1L0NDQkJBQkVBOUY2 NDExRUZBOTMxNDczQ0M0RjlBRTAyL3hWWk43QkFXWTc5RDBfTGpRRGxNQUhacVkt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveFZaTjdCQVdZNzlEMF9MalFEbE1BSFpxWS1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy Qjg1L0NDQkJBQkVBOUY2NDExRUZBOTMxNDczQ0M0RjlBRTAyL3hWWk43QkFXWTc5 RDBfTGpRRGxNQUhacVktTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAChRERtrKCNN/wElc3ThtgB/KBZXgH8A+DVLkOIZ0O8r8DF7yOd9sxB kN7E09rynC3dwFaLiZJ+3dc14edBOVFYbnCtSjqncHca6XGHzSI5QNtrDHhSKSB6 qcYtqMiXdGcFbZsiayObNitKU89QyDWfUXYxDU80IcDeOKBYz8guyo8LaPjy2Jh4 um5UwCDNSNyJhi2ZK9MU52Ck9JVSfbAHBJzx6/IJGei9AoNkYY9zzlPboSJpRXK/ 0YhvMihMj0aB5tvbbXUcy1dNTrWU9CC7p0siZpEnv/rbPQVB4lrDzMJ4DyQ+nRM1 cYjCaJIRnPepzI3dZ7+/l8c0wRUct+k= -----END CERTIFICATE-----Generated at Sat Apr 26 12:25:53 2025 by rpki-client