$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft File: XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft (raw, json) Hash identifier: 7KxwWWpCTyrIXnwUm9snNp8ixJjjFhwHGjhzH6kxBPI= Subject key identifier: B9:B9:22:44:56:34:52:E5:38:32:21:8D:36:66:54:5F:B9:4F:E9:C1 Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 Certificate issuer: /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Certificate serial: 073B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft Manifest number: 0735 Signing time: Thu 24 Apr 2025 21:32:19 +0000 Manifest this update: Thu 24 Apr 2025 21:32:19 +0000 Manifest next update: Thu 01 May 2025 21:32:19 +0000 Files and hashes: 1: XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl (hash: raMRGmcpl+cYwziYz7kj0JkXdKLBco7hP/SqbvozHek=) 2: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (hash: eaeoz8RqOSGEC4peCpxGpY2PbARdRPwT9kf9QvE/Y6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1851 (0x73b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE78, serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Validity Not Before: Apr 24 21:32:19 2025 GMT Not After : May 1 21:32:19 2025 GMT Subject: CN=680aade3-39c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:0a:a3:4b:c1:b2:c8:6a:df:8f:4f:5d:47: 48:ac:c5:c1:41:d7:18:ef:e2:93:96:e5:cd:97:e1: d7:7d:e2:95:7a:1e:34:cc:8a:a3:86:12:41:67:ad: 6c:e2:2f:a6:b7:44:52:5c:1d:68:68:df:4e:6f:4d: 9b:15:ac:97:40:0d:f4:48:5d:6f:59:3a:3a:85:9f: 7b:2e:9a:0d:fe:4f:82:85:48:9b:62:2e:d1:9c:38: 4a:61:ad:e8:67:e9:b5:b0:c3:54:6e:b3:d8:fc:ea: 8e:37:ab:0d:c9:1d:cb:20:d6:63:d2:ab:9a:71:a0: 2c:c3:bf:b7:d3:a2:e9:40:89:56:12:77:4a:be:a5: 6a:3c:2d:df:91:aa:49:60:2d:5f:16:c3:8f:fa:ba: 6d:29:2b:1a:22:fe:c3:cc:19:b9:5d:2d:f2:73:ad: c0:f1:d3:c0:07:f9:89:67:36:cf:76:9e:61:6d:9f: 61:6e:55:80:a6:60:d0:26:ba:ea:f7:62:26:f8:b4: 21:7b:56:9e:7a:e4:1a:71:b8:04:37:81:d6:88:e4: 6d:72:2f:eb:8d:e1:f4:b6:8b:a1:f9:7b:07:23:50: e7:9e:58:f8:75:9f:16:47:9c:ae:e8:0e:57:6d:98: 68:f7:a3:9b:a0:5e:fa:4d:eb:96:fc:0b:ec:d2:8f: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B9:22:44:56:34:52:E5:38:32:21:8D:36:66:54:5F:B9:4F:E9:C1 X509v3 Authority Key Identifier: keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b2:72:1e:b7:94:da:f4:72:8a:51:24:2b:b4:1a:53:69:7c: 14:62:34:21:47:eb:b0:0e:0d:4b:ff:1e:ab:b7:64:ff:7c:f6: 26:15:bf:b8:8d:ba:f5:9e:4f:3f:50:d3:12:21:db:ce:4c:c8: 49:a3:76:8c:c6:5f:30:27:1e:8f:55:b4:4d:e4:2d:a7:a1:7b: 54:d6:f9:04:5e:4a:25:53:44:61:9c:7b:d1:91:d3:42:8c:89: 92:22:c1:38:af:99:da:60:e0:92:5d:56:a4:65:91:58:dd:f2: 3f:6d:02:30:e8:84:dd:d4:f5:f1:43:5d:02:a0:bf:74:97:ad: 80:7f:2e:1b:a4:6e:c8:36:4f:65:36:d6:8e:96:ed:4e:42:ee: d5:46:46:8d:2f:38:8c:3a:43:13:17:2c:7a:65:f2:4c:cd:fb: a7:7b:8a:0e:f7:94:2f:12:23:6c:33:c9:45:eb:99:53:d2:48: 1a:41:e6:1a:e6:e8:3a:6e:fe:ab:b6:0c:38:53:cb:7d:2a:6e: 45:18:7c:cd:9a:46:1e:e8:a1:c5:be:c4:ab:1c:54:98:4b:47: f8:73:5e:ec:63:db:3d:e4:d9:5e:42:3d:fb:8c:5f:ad:5e:72: 4e:2d:cf:13:c3:3d:e6:cf:31:c2:83:3e:66:6e:0c:b3:a4:a4: d9:2d:10:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFNzgxMTAvBgNVBAUTKDVFRTdDRjQzOUE0MjIzMjMyOTgyQTJDQjRERTU0RjM3 QzcyMDVBQTkwHhcNMjUwNDI0MjEzMjE5WhcNMjUwNTAxMjEzMjE5WjAYMRYwFAYD VQQDEw02ODBhYWRlMy0zOWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnMKo0vBsshq349PXUdIrMXBQdcY7+KTluXNl+HXfeKVeh40zIqjhhJBZ61s 4i+mt0RSXB1oaN9Ob02bFayXQA30SF1vWTo6hZ97LpoN/k+ChUibYi7RnDhKYa3o Z+m1sMNUbrPY/OqON6sNyR3LINZj0quacaAsw7+306LpQIlWEndKvqVqPC3fkapJ YC1fFsOP+rptKSsaIv7DzBm5XS3yc63A8dPAB/mJZzbPdp5hbZ9hblWApmDQJrrq 92Im+LQhe1aeeuQacbgEN4HWiORtci/rjeH0touh+XsHI1Dnnlj4dZ8WR5yu6A5X bZho96OboF76TeuW/Avs0o/9MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLm5IkRW NFLlODIhjTZmVF+5T+nBMB8GA1UdIwQYMBaAFF7nz0OaQiMjKYKiy03lTzfHIFqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3OC9GMUY0RDNDRTI5 MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5TXBncUxMVGVWUE44Y2dX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h1ZlBRNXBDSXlNcGdxTExUZVZQTjhjZ1dxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU3OC9GMUY0RDNDRTI5MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5 TXBncUxMVGVWUE44Y2dXcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOsnIet5Ta9HKKUSQrtBpTaXwUYjQhR+uwDg1L/x6rt2T/fPYmFb+4 jbr1nk8/UNMSIdvOTMhJo3aMxl8wJx6PVbRN5C2noXtU1vkEXkolU0RhnHvRkdNC jImSIsE4r5naYOCSXVakZZFY3fI/bQIw6ITd1PXxQ10CoL90l62Afy4bpG7INk9l NtaOlu1OQu7VRkaNLziMOkMTFyx6ZfJMzfune4oO95QvEiNsM8lF65lT0kgaQeYa 5ug6bv6rtgw4U8t9Km5FGHzNmkYe6KHFvsSrHFSYS0f4c17sY9s95NleQj37jF+t XnJOLc8Twz3mzzHCgz5mbgyzpKTZLRCc -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:48 2025 by rpki-client