$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft File: rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json) Hash identifier: d8OO65cMwvY3a/wl81a2Tqj/TOEezGblbCVJWjMQJg4= Subject key identifier: BA:E3:E4:91:66:E9:ED:C7:ED:41:9C:B1:49:DA:A2:81:D6:70:B7:55 Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D Certificate issuer: /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft Manifest number: 0112 Signing time: Fri 25 Apr 2025 03:59:21 +0000 Manifest this update: Fri 25 Apr 2025 03:59:21 +0000 Manifest next update: Fri 02 May 2025 03:59:21 +0000 Files and hashes: 1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: GGGXC8j9ikob5eafJ44U/wtpi3uFvVGZ0EJqX9ow20o=) 2: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: x3typY+Rz1v7YQKoz8/eFq0vzVSoB9fMyJducWo5h8o=) 3: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: Zs0S8blgDDMs3jrlGY37AkPWRyP83xeb73R0yUfKf24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Validity Not Before: Apr 25 03:59:21 2025 GMT Not After : May 2 03:59:21 2025 GMT Subject: CN=680b0899-fbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8c:47:d3:b9:a6:34:3e:91:7c:cb:e6:3d:21: 85:4e:8e:9c:9c:09:48:16:e1:53:bc:4b:30:8e:e6: f0:ec:08:77:cb:4a:9f:1c:df:76:ce:0b:bf:a5:32: 56:d7:e6:87:98:b7:c7:c8:38:fc:6a:06:01:e5:78: e5:ca:7c:46:78:71:13:ea:65:20:ca:3d:e6:9d:01: 24:d2:eb:1e:cc:90:ce:8a:99:d1:a2:ed:35:4c:7f: e1:d5:57:5c:b7:01:5b:9f:a5:85:21:3b:eb:fd:45: 70:02:9f:8f:e4:2b:25:b8:0a:2c:95:c1:c0:28:94: 22:cf:40:16:3d:64:44:cb:b0:ab:c7:10:b7:0b:ac: e1:14:a6:f9:74:2c:2e:01:4d:e5:9f:78:c0:73:6b: e2:fb:52:03:41:e1:39:6e:f7:2a:cf:22:09:0b:9f: 18:64:d9:53:1f:4d:b7:9c:df:a7:46:a4:b0:9f:4c: f8:d4:0d:95:4e:cf:ec:d7:9a:02:31:d3:83:6a:4c: af:5e:a6:a0:b6:a3:79:32:97:d6:ba:2f:ac:cd:c6: fe:61:fc:0b:87:f5:9e:ae:de:f9:2c:74:34:ae:ec: 86:5e:88:f9:6f:32:98:4c:62:fe:16:14:52:38:bf: 52:8d:89:a3:c0:02:61:8b:2f:8b:0a:2e:61:20:32: 60:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E3:E4:91:66:E9:ED:C7:ED:41:9C:B1:49:DA:A2:81:D6:70:B7:55 X509v3 Authority Key Identifier: keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2b:7f:9f:ea:d4:d6:4f:52:67:9c:cc:0e:6f:22:31:c4:13: 1b:5a:c7:b5:a9:a6:12:3f:82:24:9c:8c:e5:bf:1c:57:f5:b6: c3:96:dd:04:e6:ad:f5:c8:de:4a:77:6f:64:d2:c8:03:40:7f: de:47:d3:71:89:6d:49:02:01:73:75:60:0e:fe:d6:92:1d:4e: b6:49:ee:88:f6:66:3e:de:06:f5:b7:9a:ba:ac:48:fa:63:bd: 59:4b:ea:a1:06:39:37:15:8b:1f:70:d8:8d:9a:6c:3b:7f:12: 68:88:b0:fe:0e:f7:d0:14:cf:26:bc:9a:d3:20:0a:25:58:3e: 15:7b:f1:69:ac:0e:8f:ac:82:c4:5b:21:0d:d4:24:d3:66:2e: a1:12:fa:c2:64:89:a1:56:7c:a0:03:72:d8:2a:21:27:0c:00: 62:0a:14:3a:aa:ab:63:72:c9:d3:37:42:5b:74:b8:4c:bf:28: b4:f3:4d:bb:fd:87:55:68:b8:58:88:fb:fb:63:da:7c:8d:fb: 3f:f0:97:dd:0c:34:e9:26:87:14:34:26:40:b9:24:ef:ef:d9: a5:e4:c9:9c:39:bf:ca:e0:ba:f9:a8:fe:17:78:ce:71:49:5d: 62:12:fd:db:31:c9:f0:d9:39:e5:df:33:54:75:3d:b7:00:88: 06:50:ad:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC RUFDQkNDMkQwHhcNMjUwNDI1MDM1OTIxWhcNMjUwNTAyMDM1OTIxWjAYMRYwFAYD VQQDEw02ODBiMDg5OS1mYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IxH07mmND6RfMvmPSGFTo6cnAlIFuFTvEswjubw7Ah3y0qfHN92zgu/pTJW 1+aHmLfHyDj8agYB5XjlynxGeHET6mUgyj3mnQEk0usezJDOipnRou01TH/h1Vdc twFbn6WFITvr/UVwAp+P5CsluAoslcHAKJQiz0AWPWREy7CrxxC3C6zhFKb5dCwu AU3ln3jAc2vi+1IDQeE5bvcqzyIJC58YZNlTH023nN+nRqSwn0z41A2VTs/s15oC MdODakyvXqagtqN5MpfWui+szcb+YfwLh/Wert75LHQ0ruyGXoj5bzKYTGL+FhRS OL9SjYmjwAJhiy+LCi5hIDJgkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrj5JFm 6e3H7UGcsUnaooHWcLdVMB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6 QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6 NzBoQjAtTklRb0Mtckx6QzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFK3+f6tTWT1JnnMwObyIxxBMbWse1qaYSP4IknIzlvxxX9bbDlt0E 5q31yN5Kd29k0sgDQH/eR9NxiW1JAgFzdWAO/taSHU62Se6I9mY+3gb1t5q6rEj6 Y71ZS+qhBjk3FYsfcNiNmmw7fxJoiLD+DvfQFM8mvJrTIAolWD4Ve/FprA6PrILE WyEN1CTTZi6hEvrCZImhVnygA3LYKiEnDABiChQ6qqtjcsnTN0JbdLhMvyi08027 /YdVaLhYiPv7Y9p8jfs/8JfdDDTpJocUNCZAuSTv79ml5MmcOb/K4Lr5qP4XeM5x SV1iEv3bMcnw2Tnl3zNUdT23AIgGUK2c -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:35 2025 by rpki-client