$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft File: XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json) Hash identifier: WQ8oOJ4p+4zW6oLZhQA3veeC9yKTsjiBQGfmgI0fVas= Subject key identifier: 5E:25:55:45:FF:A8:13:A0:37:03:24:75:DD:87:79:4C:5C:13:11:2E Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC Certificate issuer: /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Certificate serial: 026D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft Manifest number: 0269 Signing time: Fri 25 Apr 2025 01:30:38 +0000 Manifest this update: Fri 25 Apr 2025 01:30:37 +0000 Manifest next update: Fri 02 May 2025 01:30:37 +0000 Files and hashes: 1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: dgB7UD5TK9AVlemAT0eP+UF6/k5xno0fKaLieCNndkM=) 2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: 7VxNMjQG1zgfT4tsEQfcFuOpbFyf2w1++cKzRTPQB1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Validity Not Before: Apr 25 01:30:37 2025 GMT Not After : May 2 01:30:37 2025 GMT Subject: CN=680ae5bd-4054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:5b:08:29:a1:4e:1f:1c:1a:ba:c8:63:c7: 93:f0:98:26:da:03:82:32:80:fb:e0:e9:de:15:2c: d0:30:5b:a5:b8:85:0c:2c:9c:f5:45:31:b2:6c:d2: f9:eb:21:1a:63:94:8e:ab:69:e7:ff:13:ca:db:d1: a1:ba:d4:a1:5f:42:25:63:7b:ec:c3:50:8d:ce:2c: 15:ab:33:7c:f6:37:d9:b8:7f:13:b8:ad:7d:ad:d4: a0:a6:b1:bf:ff:e0:b1:ba:3b:d8:1d:9e:ae:2c:fe: e6:69:4e:b9:24:d1:0e:67:7a:15:17:2a:65:e5:1f: d0:26:dd:44:5f:7f:aa:98:5f:67:81:7d:2d:55:99: 85:76:6d:1e:b5:34:50:35:68:1b:9e:94:5d:0f:c8: 14:0d:a0:20:80:be:79:98:e7:cc:9e:33:43:72:4a: 67:80:a0:ca:7e:e1:d4:bb:cb:22:c1:cf:05:5a:a8: 82:27:bd:7a:7c:54:72:1f:a6:38:3b:4c:bc:58:7d: d5:9c:c9:5c:4a:d7:0d:09:fb:4d:67:13:7e:e1:0e: 23:df:2e:60:ef:62:52:a3:ef:10:ba:f3:f7:68:65: a9:e8:b3:af:b9:1d:c4:b2:8c:b5:62:a9:66:6f:12: 2f:b3:22:33:85:ef:df:9c:e9:58:3a:35:f4:c5:11: 38:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:25:55:45:FF:A8:13:A0:37:03:24:75:DD:87:79:4C:5C:13:11:2E X509v3 Authority Key Identifier: keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:34:92:19:24:54:47:9b:18:ce:dd:ad:99:de:f9:56:41:b8: 1e:97:f8:3d:20:6f:6a:28:f8:ce:71:93:c7:c2:3b:9d:5c:9f: 56:44:e4:64:8f:30:98:0b:7b:53:4c:ed:80:49:f6:7d:d5:f2: 90:e3:8a:59:ce:ad:88:82:5d:62:70:30:5a:f0:ed:04:a5:19: 8f:4d:15:df:81:53:23:f6:fc:95:67:6c:02:46:3d:2b:8c:ac: 02:da:c2:52:05:32:73:36:d0:df:37:26:12:7e:7d:91:e2:69: 6c:cc:48:06:57:3c:7b:ab:df:e9:29:58:0b:a1:f6:03:34:0e: 4c:2d:a8:c4:d3:d5:16:d6:f2:92:5a:fe:16:52:6e:50:3a:f4: 7f:0e:30:c6:5b:55:3b:2f:e8:f2:e9:3f:4b:06:12:1b:66:29: f8:51:3f:55:3d:64:e6:02:26:6a:d2:50:f4:6f:2e:47:41:60: c0:d8:c4:f5:ca:0d:47:0c:25:80:7a:e0:1e:88:26:1d:bc:5c: a0:d6:2d:14:7b:3f:b9:7c:a7:b2:a5:34:fb:4e:81:c4:19:92: 05:5e:66:db:31:f8:fd:66:29:48:4c:80:7c:14:b7:58:3e:a7: 39:97:af:53:9a:92:f1:20:03:81:40:c0:17:b6:37:c4:4a:a6: 6e:4e:8a:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1OUUxMTAvBgNVBAUTKDVFNzNFREQ5NkZGMjdBODg1RjYxMzU2RUE3N0IxRjU0 MzVDODRGQ0MwHhcNMjUwNDI1MDEzMDM3WhcNMjUwNTAyMDEzMDM3WjAYMRYwFAYD VQQDEw02ODBhZTViZC00MDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLhbCCmhTh8cGrrIY8eT8Jgm2gOCMoD74OneFSzQMFuluIUMLJz1RTGybNL5 6yEaY5SOq2nn/xPK29GhutShX0IlY3vsw1CNziwVqzN89jfZuH8TuK19rdSgprG/ /+CxujvYHZ6uLP7maU65JNEOZ3oVFypl5R/QJt1EX3+qmF9ngX0tVZmFdm0etTRQ NWgbnpRdD8gUDaAggL55mOfMnjNDckpngKDKfuHUu8siwc8FWqiCJ716fFRyH6Y4 O0y8WH3VnMlcStcNCftNZxN+4Q4j3y5g72JSo+8QuvP3aGWp6LOvuR3Esoy1Yqlm bxIvsyIzhe/fnOlYOjX0xRE4zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4lVUX/ qBOgNwMkdd2HeUxcExEuMB8GA1UdIwQYMBaAFF5z7dlv8nqIX2E1bqd7H1Q1yE/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU5RS9DQjBFQTc3NjBD Q0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVvaGZZVFZ1cDNzZlZEWElU OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huUHQyV195ZW9oZllUVnVwM3NmVkRYSVQ4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU5RS9DQjBFQTc3NjBDQ0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVv aGZZVFZ1cDNzZlZEWElUOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoNJIZJFRHmxjO3a2Z3vlWQbgel/g9IG9qKPjOcZPHwjudXJ9WRORk jzCYC3tTTO2ASfZ91fKQ44pZzq2Igl1icDBa8O0EpRmPTRXfgVMj9vyVZ2wCRj0r jKwC2sJSBTJzNtDfNyYSfn2R4mlszEgGVzx7q9/pKVgLofYDNA5MLajE09UW1vKS Wv4WUm5QOvR/DjDGW1U7L+jy6T9LBhIbZin4UT9VPWTmAiZq0lD0by5HQWDA2MT1 yg1HDCWAeuAeiCYdvFyg1i0Uez+5fKeypTT7ToHEGZIFXmbbMfj9ZilITIB8FLdY Pqc5l69TmpLxIAOBQMAXtjfESqZuTopQ -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:39 2025 by rpki-client