$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json) Hash identifier: 8mKF6loA/Z9DR+LhD8TUxszKVkp5tKcIpVGivn6C1oU= Subject key identifier: 6A:65:F9:D1:C2:C2:53:52:84:4F:76:35:74:B7:86:04:0E:AE:2D:EA Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Certificate serial: 012F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft Manifest number: 012D Signing time: Fri 25 Apr 2025 03:38:50 +0000 Manifest this update: Fri 25 Apr 2025 03:38:49 +0000 Manifest next update: Fri 02 May 2025 03:38:49 +0000 Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: EyAmhrKJPERIdUUnV+7IJbHrnwgl8UqLRlzRmGQVbpU=) 2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: fQ0Wv2YD60Yo4ln05PtaRg2v4/R5zwKrC/7wYHWQM3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 303 (0x12f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Validity Not Before: Apr 25 03:38:49 2025 GMT Not After : May 2 03:38:49 2025 GMT Subject: CN=680b03c9-bec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:93:28:4d:16:9f:14:06:53:03:0a:11:80:5f: e8:16:c6:b1:62:4c:c1:51:0a:4c:56:6b:72:8b:df: 5c:81:21:a2:12:f4:c8:da:df:c4:9d:ca:05:99:52: 44:6a:a8:d9:e9:fa:2e:0b:0e:4b:a5:43:1c:d4:88: 2c:15:da:95:fd:03:45:8f:2e:e9:f9:e2:eb:94:ea: fa:52:92:b2:2c:52:5a:e3:16:b9:3b:c8:2a:20:1b: 23:67:c9:90:31:b7:27:4b:01:ec:49:76:6e:4b:51: be:6a:53:2d:4a:41:a5:b3:98:8d:d0:58:af:ce:d0: a1:ce:0b:cf:ee:e7:0f:81:f5:11:7a:82:d0:8a:ff: 43:5b:6a:d3:d2:e6:8e:fa:51:79:68:de:81:e3:fc: fa:f3:fa:65:03:97:b7:7c:f9:f2:23:26:18:4b:51: 94:83:21:32:fe:dc:83:48:62:36:34:ae:84:4f:24: 33:95:a4:f8:e0:9f:ae:ae:57:64:96:d0:32:44:8c: 6f:0a:75:7e:26:b4:9b:75:81:49:f1:54:8e:40:ba: b1:04:ac:bf:49:bf:70:82:49:42:af:71:6d:bf:c8: 41:3e:ac:0f:62:f0:ab:10:4f:08:f3:99:f0:15:fb: 10:63:89:ad:4d:21:74:48:96:96:7b:ee:08:23:a6: bb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:65:F9:D1:C2:C2:53:52:84:4F:76:35:74:B7:86:04:0E:AE:2D:EA X509v3 Authority Key Identifier: keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a2:2b:f2:ec:6b:89:2e:b3:34:e9:c9:43:ac:25:3f:e1:13: 25:f7:c1:06:2e:df:63:8e:96:83:fd:94:be:bd:73:92:d0:de: cd:8a:6d:65:f6:ec:e1:7b:60:1f:7d:6a:cf:1b:25:63:e7:18: 18:23:71:e9:1b:91:08:34:81:38:70:e3:29:da:33:ec:a3:56: 52:f8:ce:27:47:53:51:ee:c8:d2:d2:ce:56:dc:c2:26:d0:84: ab:61:3d:f3:b4:3a:7e:c5:bb:df:74:b0:7e:94:28:0a:f8:4c: 5e:8e:87:93:ba:ae:c6:78:ec:02:4d:80:5e:dd:dc:57:e2:04: 0c:2c:41:e9:9b:58:4f:08:7d:53:8f:bf:9b:62:45:3a:3a:88: e5:bd:1f:2f:2a:52:3a:97:ca:80:1f:1d:f4:df:9e:f8:79:f5: c0:20:9e:64:4d:c7:17:f7:a3:c0:39:17:24:ba:53:ff:a3:84: c3:d3:bd:70:4e:d1:97:4c:81:fb:08:b5:d8:00:b5:70:bc:fc: 44:88:ba:63:af:da:b7:54:1c:3d:11:9a:94:43:04:58:39:d7: b6:cb:a7:b9:f1:98:33:49:55:b7:39:17:bd:1a:4a:75:a7:55: 71:1c:98:b6:b6:94:a0:02:7f:48:f7:c6:f5:18:05:b1:f9:ad: d8:e4:ba:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFNjkxMTAvBgNVBAUTKDVEMUU2ODFGMTQ0Qzg1RTcyNjc1MjQzQTgwNDdGODA5 QzYzNEM3QzEwHhcNMjUwNDI1MDMzODQ5WhcNMjUwNTAyMDMzODQ5WjAYMRYwFAYD VQQDEw02ODBiMDNjOS1iZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZMoTRafFAZTAwoRgF/oFsaxYkzBUQpMVmtyi99cgSGiEvTI2t/EncoFmVJE aqjZ6fouCw5LpUMc1IgsFdqV/QNFjy7p+eLrlOr6UpKyLFJa4xa5O8gqIBsjZ8mQ MbcnSwHsSXZuS1G+alMtSkGls5iN0FivztChzgvP7ucPgfUReoLQiv9DW2rT0uaO +lF5aN6B4/z68/plA5e3fPnyIyYYS1GUgyEy/tyDSGI2NK6ETyQzlaT44J+urldk ltAyRIxvCnV+JrSbdYFJ8VSOQLqxBKy/Sb9wgklCr3Ftv8hBPqwPYvCrEE8I85nw FfsQY4mtTSF0SJaWe+4II6a7PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpl+dHC wlNShE92NXS3hgQOri3qMB8GA1UdIwQYMBaAFF0eaB8UTIXnJnUkOoBH+AnGNMfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkU2OS9EQ0ZDQjFDMDUz N0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhlY21kU1E2Z0VmNENjWTB4 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSNW9IeFJNaGVjbWRTUTZnRWY0Q2NZMHg4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkU2OS9EQ0ZDQjFDMDUzN0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhl Y21kU1E2Z0VmNENjWTB4OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcoivy7GuJLrM06clDrCU/4RMl98EGLt9jjpaD/ZS+vXOS0N7Nim1l 9uzhe2AffWrPGyVj5xgYI3HpG5EINIE4cOMp2jPso1ZS+M4nR1NR7sjS0s5W3MIm 0ISrYT3ztDp+xbvfdLB+lCgK+ExejoeTuq7GeOwCTYBe3dxX4gQMLEHpm1hPCH1T j7+bYkU6OojlvR8vKlI6l8qAHx303574efXAIJ5kTccX96PAORckulP/o4TD071w TtGXTIH7CLXYALVwvPxEiLpjr9q3VBw9EZqUQwRYOde2y6e58ZgzSVW3ORe9Gkp1 p1VxHJi2tpSgAn9I98b1GAWx+a3Y5LrN -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:37 2025 by rpki-client