$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft File: xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json) Hash identifier: OJoaXz2nbuP33ejLxiSEKtSoGDGvNSvxM2rjTq+frYk= Subject key identifier: 48:BF:18:65:89:8F:59:86:51:A2:97:F5:66:35:20:8D:97:04:A3:35 Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D Certificate issuer: /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft Manifest number: 5D Signing time: Fri 25 Apr 2025 06:05:41 +0000 Manifest this update: Fri 25 Apr 2025 06:05:40 +0000 Manifest next update: Fri 02 May 2025 06:05:40 +0000 Files and hashes: 1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: 8CkgWJRwSEwjK46P48h6LqK6dgDJ+7LlxsIP/c0+Iec=) 2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: uh0RsXXXDr4A3r/l+n4K/1lemqOiMBSx6tfsdjRL1A4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D Validity Not Before: Apr 25 06:05:40 2025 GMT Not After : May 2 06:05:40 2025 GMT Subject: CN=680b2635-8020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d6:d8:bb:d9:e9:26:14:eb:8a:5c:7a:ba:b9: 7f:44:70:65:2a:86:8c:77:14:3a:84:89:90:6b:b4: 9c:9e:45:02:64:96:8c:58:f2:4a:1e:4f:6b:62:04: d4:5c:ef:e3:2b:bf:76:c1:dd:fa:67:68:87:34:3e: 16:b8:bc:17:8a:0e:f7:68:9e:9d:39:f1:7d:91:9c: 1b:55:e8:61:1a:a4:15:e5:72:f8:3e:6f:4b:db:36: f6:19:e1:f9:b1:02:d8:9f:e2:20:b1:53:20:c9:f0: 1c:10:34:1d:14:60:24:49:a2:c9:df:37:41:ad:49: 1d:a3:6d:18:e5:86:e1:25:61:14:e2:c4:f1:3e:68: 3b:0e:bf:c6:2c:20:56:63:c2:ce:3b:80:b1:08:e5: 11:ac:8a:75:c5:f3:f0:f0:2c:73:19:07:6d:90:d9: 5d:0c:0f:9c:f7:d8:dc:70:91:c4:3f:16:ae:37:f2: 18:d0:7f:8e:e2:89:aa:ba:b4:02:70:48:cb:fb:db: 41:09:b4:72:73:bc:1b:5a:db:41:fe:2b:04:de:87: 2f:97:2f:28:f3:57:1b:42:77:37:b6:9d:36:58:b7: 19:1b:76:e0:7d:1e:5e:3a:5e:76:b3:ac:f4:2b:96: 2e:2a:6a:3d:18:9a:93:8d:88:81:fd:60:7e:52:8c: 66:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BF:18:65:89:8F:59:86:51:A2:97:F5:66:35:20:8D:97:04:A3:35 X509v3 Authority Key Identifier: keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:4f:90:c8:fc:47:3d:5d:e2:20:cb:44:04:e9:b4:17:e6:14: 36:d4:1f:80:83:36:bf:2b:0a:37:28:88:0e:72:33:95:5b:84: 0e:ab:7a:f6:24:2c:9f:11:8c:a7:07:63:4b:c1:21:79:60:30: ce:28:51:b9:ab:cd:1e:40:09:c8:57:c3:79:78:24:6d:7f:f3: b5:d0:f5:e4:46:2a:cc:04:e4:48:87:62:4b:48:a6:66:e6:0c: e7:e7:3f:fa:49:15:25:68:06:9b:5a:7f:7c:2a:86:0b:24:fb: 07:4a:6b:6e:57:66:35:33:2a:5d:9a:f3:12:46:36:d0:29:60: 92:06:b9:3c:d4:dc:da:1a:b6:36:e5:58:9c:3d:22:4f:7d:0a: e4:28:c6:a7:5c:40:ba:9a:d0:96:ed:0b:2f:75:fe:7d:f6:80: 34:a6:05:e2:15:20:ac:19:a0:2c:22:9e:0a:14:67:b9:7c:f1: 0d:55:9e:e8:90:1d:28:07:5c:a0:f7:d8:ff:75:2a:08:d0:84: 9d:3a:39:6a:83:56:9d:1d:98:f5:87:5d:6a:7d:46:89:ef:50: 80:e5:33:4a:a9:f6:11:b4:2a:1a:82:06:59:d4:60:a1:9a:98: fa:8a:2d:61:58:9d:fb:39:d9:42:1c:8b:ce:1f:d4:2b:fd:05: ab:7a:ff:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjM4QTExMC8GA1UEBRMoQzQ2QzQzQkEyNzdEMkMxMEVFN0QxRUZGM0RGMEUyRUZD ODg1MUExRDAeFw0yNTA0MjUwNjA1NDBaFw0yNTA1MDIwNjA1NDBaMBgxFjAUBgNV BAMTDTY4MGIyNjM1LTgwMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT1ti72ekmFOuKXHq6uX9EcGUqhox3FDqEiZBrtJyeRQJkloxY8koeT2tiBNRc 7+Mrv3bB3fpnaIc0Pha4vBeKDvdonp058X2RnBtV6GEapBXlcvg+b0vbNvYZ4fmx Atif4iCxUyDJ8BwQNB0UYCRJosnfN0GtSR2jbRjlhuElYRTixPE+aDsOv8YsIFZj ws47gLEI5RGsinXF8/DwLHMZB22Q2V0MD5z32NxwkcQ/Fq438hjQf47iiaq6tAJw SMv720EJtHJzvBta20H+KwTehy+XLyjzVxtCdze2nTZYtxkbduB9Hl46XnazrPQr li4qaj0YmpONiIH9YH5SjGZLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSL8YZYmP WYZRopf1ZjUgjZcEozUwHwYDVR0jBBgwFoAUxGxDuid9LBDufR7/PfDi78iFGh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MzhBLzVCREQyQ0FFOTU0 NzExRUY5NjgwOEYyQ0M0RjlBRTAyL3hHeER1aWQ5TEJEdWZSN19QZkRpNzhpRkdo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEd4RHVpZDlMQkR1ZlI3X1BmRGk3OGlGR2gwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 MzhBLzVCREQyQ0FFOTU0NzExRUY5NjgwOEYyQ0M0RjlBRTAyL3hHeER1aWQ5TEJE dWZSN19QZkRpNzhpRkdoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKBPkMj8Rz1d4iDLRATptBfmFDbUH4CDNr8rCjcoiA5yM5VbhA6revYk LJ8RjKcHY0vBIXlgMM4oUbmrzR5ACchXw3l4JG1/87XQ9eRGKswE5EiHYktIpmbm DOfnP/pJFSVoBptaf3wqhgsk+wdKa25XZjUzKl2a8xJGNtApYJIGuTzU3Noatjbl WJw9Ik99CuQoxqdcQLqa0JbtCy91/n32gDSmBeIVIKwZoCwingoUZ7l88Q1VnuiQ HSgHXKD32P91KgjQhJ06OWqDVp0dmPWHXWp9RonvUIDlM0qp9hG0KhqCBlnUYKGa mPqKLWFYnfs52UIci84f1Cv9Bat6/68= -----END CERTIFICATE-----Generated at Sat Apr 26 17:03:01 2025 by rpki-client