$ rpki-client -vvf rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft File: xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft (raw, json) Hash identifier: q1gl28dy3jXqc5yYaYcvzHXUVt/4WivczdUlgw216bQ= Subject key identifier: 5C:4B:B4:B9:6F:83:39:34:D7:D9:9B:E4:E2:41:70:2D:00:8D:25:A6 Authority key identifier: C4:D2:6A:C0:6C:8A:65:25:8A:D4:49:1B:69:DF:83:29:0B:E1:83:7B Certificate issuer: /CN=A9132DC8/serialNumber=C4D26AC06C8A65258AD4491B69DF83290BE1837B Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNJqwGyKZSWK1Ekbad-DKQvhg3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft Manifest number: 0172 Signing time: Fri 25 Apr 2025 02:56:08 +0000 Manifest this update: Fri 25 Apr 2025 02:56:08 +0000 Manifest next update: Fri 02 May 2025 02:56:08 +0000 Files and hashes: 1: xNJqwGyKZSWK1Ekbad-DKQvhg3s.crl (hash: kQ0vyhHKXLSEQwCX8WS8aqN0rxq8Y5kOzUF1IiQc+3k=) 2: 59AFB718ECB911ED99732649C4F9AE02.roa (hash: +N1Z+YRZBmqUzAg48fb4th5gmmSesIwu/VfApSVKW6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.crl rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNJqwGyKZSWK1Ekbad-DKQvhg3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132DC8, serialNumber=C4D26AC06C8A65258AD4491B69DF83290BE1837B Validity Not Before: Apr 25 02:56:08 2025 GMT Not After : May 2 02:56:08 2025 GMT Subject: CN=680af9c8-76f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:63:be:b9:46:5c:23:fb:81:99:7c:fa:3c:71: 54:88:6a:b8:4b:a1:06:0f:27:c5:d6:47:f7:60:12: b3:4d:bc:2d:98:40:fe:2a:b8:20:ef:64:aa:6e:a2: 76:ba:85:d6:f5:3d:07:33:b9:49:ba:fb:be:e5:50: 97:57:78:5e:79:b1:15:c5:cc:fa:16:6e:68:d2:f3: d1:76:c2:5b:f8:d6:58:19:64:e0:4f:56:5d:b3:c3: 93:26:01:f2:91:30:a2:95:15:f5:fd:60:fb:ef:00: da:f7:d0:9c:0d:35:14:9f:bd:d1:31:08:9a:b9:f4: c4:83:90:70:94:c9:52:8a:4a:6b:3c:0c:8e:a8:63: 77:b6:f2:1a:38:80:5f:a1:df:80:96:fb:ab:fa:4c: 3a:38:45:ea:85:47:25:b5:ef:6d:29:74:db:c8:49: 7f:1b:50:93:4d:68:3a:3b:ac:52:1e:64:39:e1:68: 86:f3:b9:95:12:b1:1d:2b:8a:96:38:8a:f1:73:c6: 66:b9:19:06:73:a1:d5:bb:e0:0c:e3:63:fe:2c:17: 51:c8:a5:17:5a:0d:19:ab:17:5e:d4:e5:4c:d2:6b: eb:f1:a8:05:8a:5a:68:64:6a:b5:08:c8:a5:c5:7d: b0:59:32:ac:d1:4d:f1:2f:f5:74:72:b0:db:c6:da: 72:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4B:B4:B9:6F:83:39:34:D7:D9:9B:E4:E2:41:70:2D:00:8D:25:A6 X509v3 Authority Key Identifier: keyid:C4:D2:6A:C0:6C:8A:65:25:8A:D4:49:1B:69:DF:83:29:0B:E1:83:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNJqwGyKZSWK1Ekbad-DKQvhg3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132DC8/444C6F14ECB511ED9D68C450C4F9AE02/xNJqwGyKZSWK1Ekbad-DKQvhg3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:e5:4c:1f:62:3f:0f:de:15:00:7d:2a:04:ab:05:24:12:5a: ab:28:fe:dd:16:a6:02:90:a4:7d:25:11:31:df:3d:8d:31:27: 47:1e:82:db:5d:85:19:5a:4d:32:1c:fe:01:90:fc:6f:a2:90: 63:5b:02:75:76:ba:e5:6f:91:e0:87:92:c5:b8:07:d1:47:ab: 6f:21:86:b5:9b:5f:6a:e2:ce:d4:12:aa:75:cc:17:7e:3c:fe: ac:c7:79:1f:83:3e:96:f9:be:25:f5:7c:5e:06:10:bb:ce:2d: 44:46:24:93:97:6b:c3:ab:21:a8:47:66:3a:6c:10:09:cd:3c: 5c:69:22:7a:4a:11:4f:45:9c:3c:f8:6b:e9:8f:30:6c:c7:f2: c7:5f:fc:9e:ed:d5:83:74:e9:05:9e:17:df:c5:0b:cf:34:f1: 2e:24:a5:77:a0:ef:38:a4:68:31:18:d0:c1:7a:c5:27:b9:b2: 8b:e3:55:3c:48:e6:60:b9:4f:0e:a0:37:ae:96:77:90:46:17: 6d:33:44:cc:f6:24:a0:a7:2f:2d:ec:f1:aa:50:63:a6:b5:d4: 73:76:38:6c:fe:40:36:51:46:82:6c:4a:86:a7:7f:dc:15:a7: cd:dd:7a:c8:02:fb:5d:12:e7:77:0e:45:8a:1e:c3:99:2e:af: 2e:ee:4c:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJEQzgxMTAvBgNVBAUTKEM0RDI2QUMwNkM4QTY1MjU4QUQ0NDkxQjY5REY4MzI5 MEJFMTgzN0IwHhcNMjUwNDI1MDI1NjA4WhcNMjUwNTAyMDI1NjA4WjAYMRYwFAYD VQQDEw02ODBhZjljOC03NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2O+uUZcI/uBmXz6PHFUiGq4S6EGDyfF1kf3YBKzTbwtmED+Krgg72SqbqJ2 uoXW9T0HM7lJuvu+5VCXV3heebEVxcz6Fm5o0vPRdsJb+NZYGWTgT1Zds8OTJgHy kTCilRX1/WD77wDa99CcDTUUn73RMQiaufTEg5BwlMlSikprPAyOqGN3tvIaOIBf od+Alvur+kw6OEXqhUclte9tKXTbyEl/G1CTTWg6O6xSHmQ54WiG87mVErEdK4qW OIrxc8ZmuRkGc6HVu+AM42P+LBdRyKUXWg0Zqxde1OVM0mvr8agFilpoZGq1CMil xX2wWTKs0U3xL/V0crDbxtpy7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxLtLlv gzk019mb5OJBcC0AjSWmMB8GA1UdIwQYMBaAFMTSasBsimUlitRJG2nfgykL4YN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkRDOC80NDRDNkYxNEVD QjUxMUVEOUQ2OEM0NTBDNEY5QUUwMi94Tkpxd0d5S1pTV0sxRWtiYWQtREtRdmhn M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hOSnF3R3lLWlNXSzFFa2JhZC1ES1F2aGczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkRDOC80NDRDNkYxNEVDQjUxMUVEOUQ2OEM0NTBDNEY5QUUwMi94Tkpxd0d5S1pT V0sxRWtiYWQtREtRdmhnM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT5UwfYj8P3hUAfSoEqwUkElqrKP7dFqYCkKR9JREx3z2NMSdHHoLb XYUZWk0yHP4BkPxvopBjWwJ1drrlb5Hgh5LFuAfRR6tvIYa1m19q4s7UEqp1zBd+ PP6sx3kfgz6W+b4l9XxeBhC7zi1ERiSTl2vDqyGoR2Y6bBAJzTxcaSJ6ShFPRZw8 +GvpjzBsx/LHX/ye7dWDdOkFnhffxQvPNPEuJKV3oO84pGgxGNDBesUnubKL41U8 SOZguU8OoDeulneQRhdtM0TM9iSgpy8t7PGqUGOmtdRzdjhs/kA2UUaCbEqGp3/c FafN3XrIAvtdEud3DkWKHsOZLq8u7kwt -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:52 2025 by rpki-client