$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json) Hash identifier: eYUFUbSpHZmk2Rhm/hJ4OIu7xUiWFm2+IZcAO6I8Wa8= Subject key identifier: 7C:40:B9:3A:DE:17:71:A7:0A:05:61:61:DF:8A:45:79:70:F1:6B:97 Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 2300 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft Manifest number: 22E7 Signing time: Thu 24 Apr 2025 15:52:17 +0000 Manifest this update: Thu 24 Apr 2025 15:52:16 +0000 Manifest next update: Thu 01 May 2025 15:52:16 +0000 Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: xYKgmn3PGMMnOk7dxu6QrXST6b4cvlKholr1HGERHRs=) 2: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: 6e21k1t3PwcFuMYhxFKByN0N0S9Vi6EW4w95vWK0udo=) 3: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: w2d5iGO1DzNwRW9XaGG0C+Ss9EnEjj1pHZpwfJJ5U1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8960 (0x2300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: Apr 24 15:52:16 2025 GMT Not After : May 1 15:52:16 2025 GMT Subject: CN=680a5e30-43ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:59:02:2d:84:68:6c:f8:c2:57:34:0a:6a: 63:05:1a:25:28:5e:c9:ec:31:dc:0d:56:a3:9a:54: b4:45:8a:cf:21:1a:5e:4c:d8:3d:5c:da:c7:6c:df: 13:1b:b5:83:03:bf:3f:ee:4c:2d:c0:47:11:07:0a: 8a:18:e4:e8:5e:ac:88:35:9e:38:3a:a9:4c:ff:47: e4:41:b3:c1:c0:8e:8c:2a:4a:c3:80:e1:e4:01:f0: ed:9a:23:07:8a:33:61:77:07:11:b8:a2:b2:4d:44: 8b:21:52:06:f6:04:c9:fa:5e:88:bf:55:58:19:cd: 71:24:1b:82:40:bd:6c:46:36:2f:7c:d6:d8:cb:3c: e4:b5:f2:be:7c:52:3a:e7:39:e7:db:d0:d4:07:80: dc:88:7b:18:2b:1c:01:8f:de:3f:ff:86:c6:fb:55: 0c:8c:a8:f4:59:b9:c6:d3:22:a3:91:ff:b4:fb:c6: 13:3d:7a:0f:73:ec:dc:b6:3d:24:ad:f3:c8:45:d2: 93:60:ae:f2:78:08:b0:ce:cd:82:81:f6:56:84:95: 00:af:22:89:4e:5f:1d:c1:61:f3:bd:d3:e2:1b:1e: d2:fe:35:cf:26:97:c8:60:f7:19:7a:0c:18:76:d1: 2e:c0:1a:59:2f:03:05:82:22:62:62:a8:0b:27:92: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:40:B9:3A:DE:17:71:A7:0A:05:61:61:DF:8A:45:79:70:F1:6B:97 X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:43:0b:f1:00:dd:66:9b:0c:ef:59:17:bc:ea:ec:a5:37:5a: fc:7a:ba:b4:1d:1c:2d:90:5c:a1:01:40:c9:0d:df:a9:dd:66: 01:c5:26:d3:e8:11:ca:af:a0:6f:1e:f9:4a:33:e5:f7:d7:2a: f9:c1:21:27:3f:c0:55:f1:b0:4e:a8:48:ee:32:b5:6a:37:fb: fb:5a:25:9d:ed:5a:af:4d:9c:32:3b:97:60:df:ca:01:6a:99: bd:f5:04:49:e4:13:7d:08:6a:62:b6:10:33:a4:84:dc:ea:66: 22:28:71:b3:12:1e:2b:8e:40:92:92:ef:d9:77:9c:40:d0:a7: a6:69:37:bf:5a:b7:8b:eb:aa:9f:13:d5:93:cc:86:62:bf:a1: 44:98:93:c9:dd:06:be:d2:1c:50:dc:87:c8:89:f5:d5:97:2a: e8:1c:e8:8b:02:63:cd:16:fd:f1:dc:31:74:73:0f:97:ec:07: f4:69:20:f3:17:f9:1b:f9:a7:56:0f:9e:60:5e:a3:c0:8f:08: 93:35:f4:ad:1b:10:81:dd:d4:0e:e0:a9:bf:b7:2e:14:a3:0e: 3c:76:19:89:f6:ed:af:38:dd:6b:fc:9f:30:46:95:12:9e:c7: 4c:1e:70:94:1a:d3:74:c3:1b:20:bf:5e:c0:6e:46:50:f0:95: 52:fc:6c:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjUwNDI0MTU1MjE2WhcNMjUwNTAxMTU1MjE2WjAYMRYwFAYD VQQDEw02ODBhNWUzMC00M2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMFZAi2EaGz4wlc0CmpjBRolKF7J7DHcDVajmlS0RYrPIRpeTNg9XNrHbN8T G7WDA78/7kwtwEcRBwqKGOToXqyINZ44OqlM/0fkQbPBwI6MKkrDgOHkAfDtmiMH ijNhdwcRuKKyTUSLIVIG9gTJ+l6Iv1VYGc1xJBuCQL1sRjYvfNbYyzzktfK+fFI6 5znn29DUB4DciHsYKxwBj94//4bG+1UMjKj0WbnG0yKjkf+0+8YTPXoPc+zctj0k rfPIRdKTYK7yeAiwzs2CgfZWhJUAryKJTl8dwWHzvdPiGx7S/jXPJpfIYPcZegwY dtEuwBpZLwMFgiJiYqgLJ5KEdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxAuTre F3GnCgVhYd+KRXlw8WuXMB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzM0Mi82RERCQzdGQzkzMjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10 ZERoQXZHZjloNy1PQVZSbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1QwvxAN1mmwzvWRe86uylN1r8erq0HRwtkFyhAUDJDd+p3WYBxSbT 6BHKr6BvHvlKM+X31yr5wSEnP8BV8bBOqEjuMrVqN/v7WiWd7VqvTZwyO5dg38oB apm99QRJ5BN9CGpithAzpITc6mYiKHGzEh4rjkCSku/Zd5xA0KemaTe/WreL66qf E9WTzIZiv6FEmJPJ3Qa+0hxQ3IfIifXVlyroHOiLAmPNFv3x3DF0cw+X7Af0aSDz F/kb+adWD55gXqPAjwiTNfStGxCB3dQO4Km/ty4Uow48dhmJ9u2vON1r/J8wRpUS nsdMHnCUGtN0wxsgv17AbkZQ8JVS/Gzp -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:11 2025 by rpki-client