$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: tUzLu7b4xKSI26GzHopHyfiUYS5h5PPmIkINOhQu4zc= Subject key identifier: C9:5D:08:D9:AE:6D:4B:49:8D:B0:B9:A9:3F:12:A4:6C:7B:70:47:D3 Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: 01AF Signing time: Fri 25 Apr 2025 02:26:43 +0000 Manifest this update: Fri 25 Apr 2025 02:26:43 +0000 Manifest next update: Fri 02 May 2025 02:26:43 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: ZVM+iwpuzzM4aJQX2PhOushyeePwL8wVWuKwArfzSGw=) 2: 14BB63805EC111EEBE63A109C4F9AE02.roa (hash: vfgDitt8z6YsOCohkFT3kCqMVHgclidLgQvrwy0bqVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: Apr 25 02:26:43 2025 GMT Not After : May 2 02:26:43 2025 GMT Subject: CN=680af2e3-198e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:54:e4:26:ba:2a:84:9d:87:bc:8d:43:6d:ca: 32:26:cf:d2:66:1b:48:0a:fc:3e:3e:2e:8d:d9:4c: 4a:5c:01:e0:af:cc:46:4f:8f:e7:51:5d:9b:a8:85: 24:de:d2:c3:fb:6a:85:24:8b:5b:44:04:88:dc:3d: f9:19:99:34:9b:c4:a7:fb:48:3e:36:ec:67:03:4b: c6:b2:5f:95:20:33:88:bc:d9:b7:7b:03:c6:d8:fa: 0f:48:ab:90:78:69:0b:65:76:6c:87:a1:b3:a2:cc: 3e:6f:d9:9f:aa:02:16:a2:84:78:1e:7d:23:8f:18: 72:71:13:80:21:88:a0:a2:d2:51:a3:67:23:37:06: 48:49:b8:40:9b:50:bf:23:a0:53:85:4d:c9:31:53: e2:e5:3c:d1:6c:8a:98:78:81:6d:d7:f2:05:fa:95: fa:71:f9:ad:bb:6c:ed:e8:79:84:c4:4e:ce:16:1f: ee:c5:f3:99:84:d4:62:b9:04:d0:0a:38:a7:bb:b0: 7c:5a:9d:f3:79:e1:6e:d3:be:2c:7f:9d:4f:66:20: ef:fe:d5:3a:ab:98:b9:fc:97:43:37:04:b2:b2:92: 7b:91:17:d9:dd:24:c0:2c:6b:f3:4e:c9:87:7b:73: 30:fb:76:35:68:10:c0:a1:e6:bd:a2:00:ca:a4:40: bb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5D:08:D9:AE:6D:4B:49:8D:B0:B9:A9:3F:12:A4:6C:7B:70:47:D3 X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:02:75:d8:8c:fd:35:f0:d8:7e:d2:32:6c:48:e2:c0:19:e7: 21:a4:c8:a3:40:44:22:f3:34:ac:07:75:3c:67:7a:64:55:e7: 43:ed:39:ec:74:5d:6a:8e:92:69:d1:25:05:7d:97:e3:85:bf: 58:8e:74:67:a6:91:07:b6:57:71:e2:b7:47:5e:e2:92:cf:61: 79:79:b7:e8:91:4f:35:d9:98:85:20:1c:57:bc:d4:85:94:97: 42:ed:64:1e:d2:cb:08:dd:d7:e7:c2:6a:11:2e:78:05:81:97: d8:2f:36:16:a9:f6:25:4d:db:1a:d1:ae:a2:59:82:83:30:fc: 9a:1a:07:d3:33:6b:c8:76:55:d0:9d:90:95:47:fe:83:7f:c3: 44:cc:da:17:ea:14:90:81:f9:cd:5d:e3:0b:3e:f8:88:df:a6: 46:d5:53:74:19:66:d8:9f:5c:f7:75:c4:66:84:67:40:75:df: 19:71:80:7d:92:12:a8:e9:e4:7d:25:16:ff:68:9d:67:64:9e: de:ff:83:91:a7:ae:92:68:93:35:9f:07:a6:be:cd:34:d9:9a: d4:3d:51:23:14:87:48:0a:20:e6:99:74:73:15:06:13:e4:7a: 79:d8:84:8b:e8:de:36:40:cb:e4:a9:46:c7:33:21:af:ec:58: 2c:16:8e:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjUwNDI1MDIyNjQzWhcNMjUwNTAyMDIyNjQzWjAYMRYwFAYD VQQDEw02ODBhZjJlMy0xOThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31TkJroqhJ2HvI1DbcoyJs/SZhtICvw+Pi6N2UxKXAHgr8xGT4/nUV2bqIUk 3tLD+2qFJItbRASI3D35GZk0m8Sn+0g+NuxnA0vGsl+VIDOIvNm3ewPG2PoPSKuQ eGkLZXZsh6Gzosw+b9mfqgIWooR4Hn0jjxhycROAIYigotJRo2cjNwZISbhAm1C/ I6BThU3JMVPi5TzRbIqYeIFt1/IF+pX6cfmtu2zt6HmExE7OFh/uxfOZhNRiuQTQ Cjinu7B8Wp3zeeFu074sf51PZiDv/tU6q5i5/JdDNwSyspJ7kRfZ3STALGvzTsmH e3Mw+3Y1aBDAoea9ogDKpEC7awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMldCNmu bUtJjbC5qT8SpGx7cEfTMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjAnXYjP018Nh+0jJsSOLAGechpMijQEQi8zSsB3U8Z3pkVedD7Tns dF1qjpJp0SUFfZfjhb9YjnRnppEHtldx4rdHXuKSz2F5ebfokU812ZiFIBxXvNSF lJdC7WQe0ssI3dfnwmoRLngFgZfYLzYWqfYlTdsa0a6iWYKDMPyaGgfTM2vIdlXQ nZCVR/6Df8NEzNoX6hSQgfnNXeMLPviI36ZG1VN0GWbYn1z3dcRmhGdAdd8ZcYB9 khKo6eR9JRb/aJ1nZJ7e/4ORp66SaJM1nwemvs002ZrUPVEjFIdICiDmmXRzFQYT 5Hp52ISL6N42QMvkqUbHMyGv7FgsFo7h -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:08 2025 by rpki-client