$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json) Hash identifier: bAXx9PdwIYDdoXlI1WU5lw8bxawJNpkPbFqzYDmJiUo= Subject key identifier: 9F:74:D8:44:73:96:C4:2D:E5:FA:D1:6F:DC:65:D2:6A:44:5B:23:3A Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft Manifest number: 052D Signing time: Thu 24 Apr 2025 23:16:36 +0000 Manifest this update: Thu 24 Apr 2025 23:16:35 +0000 Manifest next update: Thu 01 May 2025 23:16:35 +0000 Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: 87/xZSohnM+4pwKusaeEZvw4HRBKDqZHdEO4CxP/pLo=) 2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: mmb+6qMWLAl/o5ujhFGq4lHoA5XfllDMtxdPhnJR8HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Validity Not Before: Apr 24 23:16:35 2025 GMT Not After : May 1 23:16:35 2025 GMT Subject: CN=680ac653-1a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:d6:47:7d:fa:52:4f:ae:ae:39:a6:cf:c7: dc:b0:c9:f0:01:e1:28:03:a0:19:a0:99:b0:72:ca: a9:7b:1e:9d:21:28:44:74:d6:b5:e6:28:6e:d9:08: 79:e5:be:f1:23:02:06:0e:38:b9:90:f0:fd:8c:fa: a9:21:71:ad:ca:86:85:1b:91:45:48:8a:b7:a2:b1: f5:f4:b0:73:15:08:b9:fb:8e:c9:a2:6b:a2:fb:60: 04:73:b1:bc:81:9e:63:cd:b6:5c:fd:b0:1a:8e:69: 32:e2:45:5e:b2:a9:d9:5f:91:f6:2e:89:48:31:29: 17:cc:6d:1a:61:2a:ba:89:1e:8f:34:fb:1c:da:3d: bd:fa:f9:02:e1:32:7a:05:95:a6:f5:e0:ba:43:fc: 09:9f:ad:09:88:54:d4:3f:9e:99:e1:5a:f2:89:18: 7d:a3:03:a8:81:4f:b2:a5:cf:00:b5:03:2b:e1:24: 7a:fb:f9:14:77:25:9b:a4:14:ad:f0:ab:57:e8:24: 06:1c:05:35:07:15:70:6f:dc:11:67:e1:5e:d8:34: 03:49:11:bf:d8:23:f7:20:2c:f2:79:cf:e4:c0:9c: ba:f4:cb:4c:21:34:e5:f6:c8:29:42:c3:aa:ea:5a: 6b:08:4b:aa:79:23:be:96:c9:26:be:83:5c:6d:18: 19:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:74:D8:44:73:96:C4:2D:E5:FA:D1:6F:DC:65:D2:6A:44:5B:23:3A X509v3 Authority Key Identifier: keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:ab:15:c4:f3:ec:ed:ab:1e:99:c7:58:07:9d:38:03:21:0b: ac:fb:f8:f3:2a:6f:38:d3:bd:b6:4e:79:22:a0:d7:7d:44:2d: dd:db:43:19:b9:5b:d9:63:ff:cb:4e:9f:34:b1:a6:9f:7b:21: 63:10:07:50:a7:5c:66:f0:5b:f9:84:fe:63:84:73:2d:87:49: 72:e0:df:b2:a2:43:9f:6e:f1:ff:05:79:a7:9c:63:89:e6:18: 61:e0:e7:d7:68:7e:69:83:fd:b2:af:d2:c1:00:3f:2c:c8:bf: ed:8f:c3:5a:96:c1:69:13:41:2f:fe:df:6c:24:5e:5a:04:00: d3:2f:ac:1d:34:04:48:78:48:42:35:bb:3b:8a:9e:3a:00:ee: ad:81:22:eb:45:16:6e:c2:b5:80:76:49:fe:0a:38:d6:75:80: bc:4c:1a:14:9e:e0:ed:f8:5e:0f:73:b6:60:51:e1:39:76:98: 29:1a:f8:4b:21:26:7a:19:56:c4:57:2c:84:88:8a:67:af:b0: d0:da:37:8e:b4:09:d6:cd:19:54:75:1c:eb:0f:bd:c0:da:f6: 28:3b:00:9f:70:36:5b:04:12:f3:e5:aa:ba:bb:dc:74:6b:f6: 8b:cc:59:10:c3:15:99:77:c6:94:3c:f1:6e:25:3e:ca:43:d9: cf:15:7b:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZENDAxMTAvBgNVBAUTKEE3MTAzRkQzM0Y2QzhBNjQ0OEZDNjM5NDBBQTk3RDkz RjgxRjgxMDUwHhcNMjUwNDI0MjMxNjM1WhcNMjUwNTAxMjMxNjM1WjAYMRYwFAYD VQQDEw02ODBhYzY1My0xYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/fWR336Uk+urjmmz8fcsMnwAeEoA6AZoJmwcsqpex6dIShEdNa15ihu2Qh5 5b7xIwIGDji5kPD9jPqpIXGtyoaFG5FFSIq3orH19LBzFQi5+47Jomui+2AEc7G8 gZ5jzbZc/bAajmky4kVesqnZX5H2LolIMSkXzG0aYSq6iR6PNPsc2j29+vkC4TJ6 BZWm9eC6Q/wJn60JiFTUP56Z4VryiRh9owOogU+ypc8AtQMr4SR6+/kUdyWbpBSt 8KtX6CQGHAU1BxVwb9wRZ+Fe2DQDSRG/2CP3ICzyec/kwJy69MtMITTl9sgpQsOq 6lprCEuqeSO+lskmvoNcbRgZyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ902ERz lsQt5frRb9xl0mpEWyM6MB8GA1UdIwQYMBaAFKcQP9M/bIpkSPxjlAqpfZP4H4EF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkQ0MC8zQzYzMzNDNkYz RjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2ltUklfR09VQ3FsOWtfZ2Zn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B4QV8wejlzaW1SSV9HT1VDcWw5a19nZmdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkQ0MC8zQzYzMzNDNkYzRjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2lt UklfR09VQ3FsOWtfZ2ZnUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4qxXE8+ztqx6Zx1gHnTgDIQus+/jzKm840722TnkioNd9RC3d20MZ uVvZY//LTp80saafeyFjEAdQp1xm8Fv5hP5jhHMth0ly4N+yokOfbvH/BXmnnGOJ 5hhh4OfXaH5pg/2yr9LBAD8syL/tj8NalsFpE0Ev/t9sJF5aBADTL6wdNARIeEhC Nbs7ip46AO6tgSLrRRZuwrWAdkn+CjjWdYC8TBoUnuDt+F4Pc7ZgUeE5dpgpGvhL ISZ6GVbEVyyEiIpnr7DQ2jeOtAnWzRlUdRzrD73A2vYoOwCfcDZbBBLz5aq6u9x0 a/aLzFkQwxWZd8aUPPFuJT7KQ9nPFXsY -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:11 2025 by rpki-client