$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft File: c0XTOFGViQaITYcWQKS-0shG0U4.mft (raw, json) Hash identifier: KakL2ZeJwwsWVC901jh9Fgkc0W+T1+U7ajyzCmEnvi0= Subject key identifier: 20:E4:52:B4:99:CF:A7:79:CA:C2:7F:4E:86:2E:77:60:8F:08:4D:00 Authority key identifier: 73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E Certificate issuer: /CN=A912F3B6/serialNumber=7345D33851958906884D871640A4BED2C846D14E Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft Manifest number: 8F Signing time: Fri 25 Apr 2025 05:27:34 +0000 Manifest this update: Fri 25 Apr 2025 05:27:33 +0000 Manifest next update: Fri 02 May 2025 05:27:33 +0000 Files and hashes: 1: c0XTOFGViQaITYcWQKS-0shG0U4.crl (hash: vzyU5XG0LQnVflP6gvy2K132YZ2tOEucSG1UmemJNsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=7345D33851958906884D871640A4BED2C846D14E Validity Not Before: Apr 25 05:27:33 2025 GMT Not After : May 2 05:27:33 2025 GMT Subject: CN=680b1d46-a76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e1:eb:76:aa:5d:93:5e:59:48:b0:73:8e:6b: ff:20:58:93:6c:a0:93:46:b3:33:f5:d5:e6:59:fb: 99:ff:59:11:82:f6:f9:05:a7:9c:00:1f:76:c0:1e: 19:e9:f9:fe:98:88:a4:0f:da:6f:fd:53:75:6c:92: e1:1b:6e:4d:b6:05:2c:3d:54:24:b8:3f:5e:ce:f2: 3f:19:35:54:29:f0:92:09:92:e3:a1:ab:73:3a:81: 30:24:97:c3:28:27:8f:b2:04:10:5a:29:ef:59:3e: e2:4c:4d:30:ff:82:12:bf:03:72:a9:86:b4:29:30: ad:89:30:27:a0:60:90:e1:76:98:9b:6a:c8:54:57: 86:08:a9:e6:a6:29:08:f3:6b:f1:66:b1:5a:aa:02: b6:63:84:ce:6c:44:55:5e:d2:fb:6e:e1:83:2d:be: 3d:be:55:00:f9:d8:1a:a2:e4:6c:87:4c:32:db:f7: c6:83:82:6e:32:6d:13:42:ef:43:7a:aa:be:b4:ff: 5f:f4:27:da:20:16:d8:9d:ab:c8:2e:7e:9c:52:c7: 15:cf:56:59:cb:5d:22:2d:49:a6:b4:0e:17:cc:58: 56:2c:e9:96:d4:43:cf:c3:6a:1c:af:c6:be:93:86: c4:61:a5:8f:be:b3:06:ce:fb:e2:34:3d:52:69:e3: 6f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E4:52:B4:99:CF:A7:79:CA:C2:7F:4E:86:2E:77:60:8F:08:4D:00 X509v3 Authority Key Identifier: keyid:73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:91:f0:e7:4e:80:56:51:b4:5e:38:70:d1:57:a9:8e:89:56: b3:05:93:80:5a:ef:75:79:ea:e0:46:30:8c:dc:ac:15:95:85: c9:88:e7:6d:2a:d0:ed:dc:b5:1c:43:bc:51:ef:39:d5:a9:04: d4:be:34:8a:81:e2:dd:2f:ca:75:ca:b4:eb:9d:f5:76:16:e2: 65:9f:8c:0a:ce:da:22:21:13:f9:b2:45:ee:40:f8:3b:43:f8: 39:0c:56:04:84:01:25:12:3a:84:37:cc:4c:37:6e:ef:08:63: f3:b6:8b:30:79:4f:5b:86:36:c7:95:0b:1f:10:2e:40:df:48: b5:e7:83:84:30:1a:e3:a5:a1:b4:c4:b0:a1:3c:1f:31:e8:18: d4:04:38:04:fd:b2:65:25:4e:6b:20:93:e7:d7:15:b2:23:06: 97:d0:77:93:26:96:27:ef:3e:73:68:af:27:ac:6b:67:a4:cc: 22:e5:ce:bf:0c:f5:55:2d:cc:cd:d3:6d:f3:5c:7d:36:05:a6: 7c:55:b4:46:76:0d:e1:7f:18:46:d7:11:83:2d:b9:8a:4e:2b: a8:04:b3:c9:d2:89:c6:03:3d:22:74:77:07:a0:f7:2b:70:17: 2a:ef:15:ce:09:c1:e2:eb:40:62:80:ad:fb:54:d4:86:61:bb: 6f:b4:70:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDczNDVEMzM4NTE5NTg5MDY4ODREODcxNjQwQTRCRUQy Qzg0NkQxNEUwHhcNMjUwNDI1MDUyNzMzWhcNMjUwNTAyMDUyNzMzWjAYMRYwFAYD VQQDEw02ODBiMWQ0Ni1hNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+Hrdqpdk15ZSLBzjmv/IFiTbKCTRrMz9dXmWfuZ/1kRgvb5BaecAB92wB4Z 6fn+mIikD9pv/VN1bJLhG25NtgUsPVQkuD9ezvI/GTVUKfCSCZLjoatzOoEwJJfD KCePsgQQWinvWT7iTE0w/4ISvwNyqYa0KTCtiTAnoGCQ4XaYm2rIVFeGCKnmpikI 82vxZrFaqgK2Y4TObERVXtL7buGDLb49vlUA+dgaouRsh0wy2/fGg4JuMm0TQu9D eqq+tP9f9CfaIBbYnavILn6cUscVz1ZZy10iLUmmtA4XzFhWLOmW1EPPw2ocr8a+ k4bEYaWPvrMGzvviND1SaeNvLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDkUrSZ z6d5ysJ/ToYud2CPCE0AMB8GA1UdIwQYMBaAFHNF0zhRlYkGiE2HFkCkvtLIRtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81OUM0QUQ0QTQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlRYUlUWWNXUUtTLTBzaEcw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwWFRPRkdWaVFhSVRZY1dRS1MtMHNoRzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81OUM0QUQ0QTQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlR YUlUWWNXUUtTLTBzaEcwVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGkfDnToBWUbReOHDRV6mOiVazBZOAWu91eergRjCM3KwVlYXJiOdt KtDt3LUcQ7xR7znVqQTUvjSKgeLdL8p1yrTrnfV2FuJln4wKztoiIRP5skXuQPg7 Q/g5DFYEhAElEjqEN8xMN27vCGPztosweU9bhjbHlQsfEC5A30i154OEMBrjpaG0 xLChPB8x6BjUBDgE/bJlJU5rIJPn1xWyIwaX0HeTJpYn7z5zaK8nrGtnpMwi5c6/ DPVVLczN023zXH02BaZ8VbRGdg3hfxhG1xGDLbmKTiuoBLPJ0onGAz0idHcHoPcr cBcq7xXOCcHi60BigK37VNSGYbtvtHBP -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:05 2025 by rpki-client