$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft File: XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft (raw, json) Hash identifier: uhFI5D6YpM1+MvsDVZ/YM/z6kBCmBShjBuOODaMjAhU= Subject key identifier: 8D:FD:24:92:28:21:AD:77:55:43:1B:9D:C3:25:3B:5F:D3:7B:E3:1A Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Certificate serial: 0661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft Manifest number: 0655 Signing time: Thu 24 Apr 2025 22:16:03 +0000 Manifest this update: Thu 24 Apr 2025 22:16:03 +0000 Manifest next update: Thu 01 May 2025 22:16:03 +0000 Files and hashes: 1: XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl (hash: mEcYrCo8SGqIQLZH91XUZJiWLQBlFcljxCRpHk0rv8c=) 2: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (hash: Ode9C1rjZZ48xy/QuIzg9S8zoYsoG2CKnN/yX25u2gs=) 3: 9BE20420DA6411EF95F32A7FC4F9AE02.roa (hash: p4MgzG+OXWtv9vZOtFXE4K9GjNanwMoHoivstYkkSaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1633 (0x661) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142812, serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0 Validity Not Before: Apr 24 22:16:03 2025 GMT Not After : May 1 22:16:03 2025 GMT Subject: CN=680ab823-be6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:22:89:aa:7e:1a:2c:a0:63:02:35:e3:54:7d: a7:12:e3:5f:21:60:33:10:17:a5:79:90:8e:94:5f: 9f:7c:0b:61:6b:92:cf:17:05:bb:c4:96:14:15:d9: 16:e3:e8:b4:62:47:da:28:62:cc:1c:82:1e:26:f6: ae:55:61:8d:9d:12:a1:ef:c8:63:60:8d:a1:08:15: 17:c9:e0:26:c8:c9:e5:5a:26:67:f3:f1:c2:38:a2: 59:36:d3:ea:12:5d:d3:cb:69:ce:88:7d:ba:cc:77: 9e:a5:c8:83:e5:05:81:5a:01:0b:f8:bc:43:4e:0e: c6:fc:c5:75:a5:89:db:85:5e:89:1b:2a:a0:a5:d7: e4:1c:44:95:4d:18:98:1b:9d:1e:9d:a1:a7:f6:ef: 0b:25:46:c6:61:c7:8f:07:03:35:fd:80:79:89:fb: 62:b4:f4:0d:e7:0f:9c:b9:0b:5c:ed:7b:25:16:db: 42:de:2b:ca:25:1a:16:88:76:5e:df:bd:1b:b7:97: 16:e9:cd:0f:29:6a:d4:54:a2:5c:26:58:3b:b2:52: 8e:46:c4:e7:12:5a:c5:29:13:de:52:cc:f8:ac:fd: 44:ae:b5:73:98:e8:c8:81:c4:be:e1:0d:32:e9:36: 57:19:82:f6:5e:46:f0:30:1b:03:eb:3e:81:57:7a: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FD:24:92:28:21:AD:77:55:43:1B:9D:C3:25:3B:5F:D3:7B:E3:1A X509v3 Authority Key Identifier: keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:9b:f7:21:b1:a4:88:7f:52:c9:68:89:c0:33:8b:1a:8e:f0: 10:7d:9b:2c:43:a2:5d:f4:1b:d2:ee:fd:3f:8f:31:43:ca:32: 3b:30:03:99:88:a2:df:d2:ec:af:eb:68:7b:7b:a9:b0:fd:3d: 5c:7b:dd:b1:41:cc:a6:f0:db:ab:b1:03:95:ef:27:ca:01:f2: c0:68:34:b2:d3:4e:b7:4d:25:8a:9a:7e:50:2c:4e:d2:5c:3e: 2d:b7:cf:bb:a9:fb:b8:07:3e:a7:3f:53:09:16:86:6f:27:08: 31:07:12:63:3f:97:41:05:45:22:ac:dc:ca:c5:d3:54:31:9c: 39:00:f4:3d:bc:f4:ce:99:9c:eb:ef:a0:1c:81:cf:61:96:d7: 46:88:2c:d2:f7:30:e5:96:ee:43:a3:9b:63:f0:29:29:60:76: 26:b7:9d:a8:e0:05:dc:ea:66:32:a7:5c:de:a1:73:01:24:97: bf:7e:d5:41:10:e0:6c:1e:05:eb:71:34:6f:9d:e3:59:57:e9: 65:3f:b0:ca:79:ab:9f:c3:12:7f:44:67:9d:f5:39:e5:d1:35: 52:72:c0:39:4a:cd:a3:4c:39:47:2e:23:b6:98:f5:85:a5:c0: 64:49:ed:6b:32:1b:9a:85:1f:0e:c8:f5:82:5f:9e:3e:46:41: fb:18:62:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4MTIxMTAvBgNVBAUTKDVDNDVBRDAwMEJCRDUwQTcwRjkzQTVDQjcwQjY2Njgw QTUyOEVEQzAwHhcNMjUwNDI0MjIxNjAzWhcNMjUwNTAxMjIxNjAzWjAYMRYwFAYD VQQDEw02ODBhYjgyMy1iZTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyKJqn4aLKBjAjXjVH2nEuNfIWAzEBeleZCOlF+ffAtha5LPFwW7xJYUFdkW 4+i0YkfaKGLMHIIeJvauVWGNnRKh78hjYI2hCBUXyeAmyMnlWiZn8/HCOKJZNtPq El3Ty2nOiH26zHeepciD5QWBWgEL+LxDTg7G/MV1pYnbhV6JGyqgpdfkHESVTRiY G50enaGn9u8LJUbGYcePBwM1/YB5iftitPQN5w+cuQtc7XslFttC3ivKJRoWiHZe 370bt5cW6c0PKWrUVKJcJlg7slKORsTnElrFKRPeUsz4rP1ErrVzmOjIgcS+4Q0y 6TZXGYL2XkbwMBsD6z6BV3rXGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI39JJIo Ia13VUMbncMlO1/Te+MaMB8GA1UdIwQYMBaAFFxFrQALvVCnD5Oly3C2ZoClKO3A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjgxMi9DMUU1REQxRTgw N0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVLY1BrNlhMY0xabWdLVW83 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFV3RBQXU5VUtjUGs2WExjTFptZ0tVbzdjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjgxMi9DMUU1REQxRTgwN0IxMUVCQTgzQUMwMURDNEY5QUUwMi9YRVd0QUF1OVVL Y1BrNlhMY0xabWdLVW83Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRm/chsaSIf1LJaInAM4sajvAQfZssQ6Jd9BvS7v0/jzFDyjI7MAOZ iKLf0uyv62h7e6mw/T1ce92xQcym8NursQOV7yfKAfLAaDSy0063TSWKmn5QLE7S XD4tt8+7qfu4Bz6nP1MJFoZvJwgxBxJjP5dBBUUirNzKxdNUMZw5APQ9vPTOmZzr 76Acgc9hltdGiCzS9zDllu5Do5tj8CkpYHYmt52o4AXc6mYyp1zeoXMBJJe/ftVB EOBsHgXrcTRvneNZV+llP7DKeaufwxJ/RGed9Tnl0TVScsA5Ss2jTDlHLiO2mPWF pcBkSe1rMhuahR8OyPWCX54+RkH7GGLz -----END CERTIFICATE-----Generated at Sat Apr 26 12:32:44 2025 by rpki-client