$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft File: XTwWiWSSv8hwyKALZou_6VlF-No.mft (raw, json) Hash identifier: 0LZH9C5ZU2OJENORl3QylAtfvTgQlOP0e1GpYypEq/0= Subject key identifier: 55:31:57:74:95:D8:F7:F2:31:D5:BF:5F:88:AC:A3:33:18:F7:38:7A Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft Manifest number: 0125 Signing time: Fri 25 Apr 2025 03:48:42 +0000 Manifest this update: Fri 25 Apr 2025 03:48:41 +0000 Manifest next update: Fri 02 May 2025 03:48:41 +0000 Files and hashes: 1: XTwWiWSSv8hwyKALZou_6VlF-No.crl (hash: kmSoainUwesbOi7c8Uhi/jiqicdcPkrwMNJScwyD78A=) 2: DFE29CB669E511EE92E9E35AC4F9AE02.roa (hash: 1ZszVXnu+oof2agkcsw2N+1e9S9zcssyc5TigB7H1/w=) 3: DF0BED1069E511EE92E9E35AC4F9AE02.roa (hash: e26WrvOpcLVtFLCEGQEyLqc/kWvK3maBfU7Yb9x41Mg=) 4: 065143FAB71C11EF9C368D66C4F9AE02.roa (hash: ejDPctxuPr+08V8pahIdV3zpYnFneVGtkqcwrd8I5VM=) 5: DF7C0A6E69E511EE92E9E35AC4F9AE02.roa (hash: NbEb3oWP2ceJtb7zrqoj41m3/pXeHDptDVhijrcSdOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA Validity Not Before: Apr 25 03:48:41 2025 GMT Not After : May 2 03:48:41 2025 GMT Subject: CN=680b0619-fba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:87:71:33:9a:06:f9:52:33:f4:f8:bb:5e: 49:53:5d:12:0c:d5:97:91:54:30:20:08:c8:b8:f6: 03:81:e5:64:1a:3e:02:79:2b:f1:49:9d:ca:13:d0: 5c:c6:25:af:b4:98:58:d4:60:0e:83:69:c2:cb:8b: 98:dd:2e:83:46:d4:3d:1b:28:fa:fe:c9:ba:1f:24: 47:0a:20:e7:75:66:00:f8:81:89:3d:4b:70:cd:67: 2d:6e:dc:06:4c:13:a1:6f:df:8f:e6:3e:d4:6b:83: d4:29:1e:e9:5c:9d:34:cc:c0:f9:7e:87:45:99:f3: e1:2b:e7:d0:2f:da:43:74:3d:f6:38:be:c1:8b:80: 5b:a9:fc:df:d3:ad:7a:d4:b0:08:d0:17:c7:ac:21: 29:1f:44:9c:07:28:5d:c4:2c:2d:be:2f:8c:cf:bc: b6:1f:4f:b3:58:4a:9e:83:b7:e9:32:68:fb:45:1d: 30:f4:1f:c5:03:96:b6:4e:73:37:36:38:e8:be:10: 2d:07:39:0a:59:01:2e:c6:5e:62:4a:57:63:5a:15: 68:07:46:ae:4e:3b:5e:c9:69:0f:68:d6:cd:cb:c6: 9b:7c:4a:21:16:16:6c:4e:4e:d3:69:a2:62:9b:94: 64:50:54:df:a0:b1:e5:83:3f:64:95:de:3d:a0:7b: 81:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:31:57:74:95:D8:F7:F2:31:D5:BF:5F:88:AC:A3:33:18:F7:38:7A X509v3 Authority Key Identifier: keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:1c:eb:41:b1:e5:ce:d5:dd:1e:9f:84:07:e4:e2:91:7a:9b: 98:ea:a4:b0:f0:86:29:04:4d:00:de:54:98:00:38:f9:91:30: e8:96:e7:63:e4:a6:f8:d7:d7:1f:15:5c:92:25:e2:1a:d9:fe: 27:8a:41:15:aa:ef:31:1f:35:42:c5:24:e2:2a:e0:10:e3:23: c3:89:6f:9c:5c:52:be:f3:9e:d8:e4:3d:7d:3f:f0:ff:3e:a7: 9f:6c:55:f9:b2:30:89:a8:34:c8:4b:44:0c:d1:16:5a:8f:0d: e9:8b:f8:06:55:8b:21:30:17:04:c4:8d:24:b5:c9:85:2a:ba: 7c:8f:99:d4:ce:12:4f:0c:19:e4:e9:2c:60:9f:a8:94:60:f2: 2d:b7:a5:5c:87:e2:1e:07:ac:ce:bf:be:c8:0a:ea:43:5a:67: 69:b5:3d:8d:72:b7:59:e7:0e:0a:91:7d:a1:c9:e9:b1:94:85: 06:aa:80:e9:97:ad:ac:54:4d:b6:4a:ce:cd:e3:31:98:c1:b7: 09:e8:52:db:42:03:d7:1f:aa:83:b1:70:db:ed:91:55:07:1c: 11:02:9a:45:ea:5b:9f:d9:51:66:a3:b2:2b:ae:0c:ba:7c:62: 83:e1:a8:69:e2:68:bc:f8:97:2b:5b:37:52:99:92:d9:c1:7a: 57:09:8b:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDN0MxMTAvBgNVBAUTKDVEM0MxNjg5NjQ5MkJGQzg3MEM4QTAwQjY2OEJCRkU5 NTk0NUY4REEwHhcNMjUwNDI1MDM0ODQxWhcNMjUwNTAyMDM0ODQxWjAYMRYwFAYD VQQDEw02ODBiMDYxOS1mYmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpqHcTOaBvlSM/T4u15JU10SDNWXkVQwIAjIuPYDgeVkGj4CeSvxSZ3KE9Bc xiWvtJhY1GAOg2nCy4uY3S6DRtQ9Gyj6/sm6HyRHCiDndWYA+IGJPUtwzWctbtwG TBOhb9+P5j7Ua4PUKR7pXJ00zMD5fodFmfPhK+fQL9pDdD32OL7Bi4Bbqfzf0616 1LAI0BfHrCEpH0ScByhdxCwtvi+Mz7y2H0+zWEqeg7fpMmj7RR0w9B/FA5a2TnM3 NjjovhAtBzkKWQEuxl5iSldjWhVoB0auTjteyWkPaNbNy8abfEohFhZsTk7TaaJi m5RkUFTfoLHlgz9kld49oHuBuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUxV3SV 2PfyMdW/X4isozMY9zh6MB8GA1UdIwQYMBaAFF08Folkkr/IcMigC2aLv+lZRfja MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM3Qy8yQjVDQUFFODY5 RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4aHd5S0FMWm91XzZWbEYt Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hUd1dpV1NTdjhod3lLQUxab3VfNlZsRi1Oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM3Qy8yQjVDQUFFODY5RTUxMUVFQkI2NjgyNDZDNEY5QUUwMi9YVHdXaVdTU3Y4 aHd5S0FMWm91XzZWbEYtTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCHOtBseXO1d0en4QH5OKRepuY6qSw8IYpBE0A3lSYADj5kTDoludj 5Kb419cfFVySJeIa2f4nikEVqu8xHzVCxSTiKuAQ4yPDiW+cXFK+857Y5D19P/D/ PqefbFX5sjCJqDTIS0QM0RZajw3pi/gGVYshMBcExI0ktcmFKrp8j5nUzhJPDBnk 6Sxgn6iUYPItt6Vch+IeB6zOv77ICupDWmdptT2NcrdZ5w4KkX2hyemxlIUGqoDp l62sVE22Ss7N4zGYwbcJ6FLbQgPXH6qDsXDb7ZFVBxwRAppF6luf2VFmo7Irrgy6 fGKD4ahp4mi8+JcrWzdSmZLZwXpXCYtH -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:10 2025 by rpki-client