$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft File: -xaxnfv3ymrECmtqNT94V4kX4P0.mft (raw, json) Hash identifier: Nmuiua9B+q5zkY2LAqdCzkkMWNSJ9YRRULxwFhva+jk= Subject key identifier: 7A:B4:B2:F4:2D:11:3D:FF:07:97:38:F7:79:57:58:88:29:1F:3D:96 Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD Certificate issuer: /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Certificate serial: 016C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft Manifest number: 0168 Signing time: Fri 25 Apr 2025 03:03:17 +0000 Manifest this update: Fri 25 Apr 2025 03:03:16 +0000 Manifest next update: Fri 02 May 2025 03:03:16 +0000 Files and hashes: 1: -xaxnfv3ymrECmtqNT94V4kX4P0.crl (hash: iC76lzCBI9Ql7ntk+7vXhwhxqkceLbXtXcmQyetmw4U=) 2: DFC662EC415B11EE9E83852AC4F9AE02.roa (hash: JQglPoDIL3Eq1y2JiUK8F3q2nUek/I2P1c153lPMYTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 364 (0x16c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146CB4, serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD Validity Not Before: Apr 25 03:03:16 2025 GMT Not After : May 2 03:03:16 2025 GMT Subject: CN=680afb75-9a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:01:84:2d:fa:39:f8:78:7e:57:b7:09:8d:f2: d9:d4:42:1f:bc:9e:8e:b0:06:4d:f2:21:09:f4:73: ae:0b:1d:06:41:da:c1:8b:91:a3:9b:81:53:ee:47: 51:4d:d9:ac:83:53:9a:78:f8:85:3d:a9:49:c5:4d: d2:00:45:a4:fc:dd:d6:0d:95:83:5d:68:11:77:41: 0f:f5:9e:6c:9a:3b:7f:e2:97:74:3a:5e:9d:88:1c: f4:fc:1f:de:67:b9:e4:b7:cd:01:d2:2c:de:c0:b3: 55:71:a8:08:8b:60:87:69:98:1f:3d:7a:4c:20:e6: 0c:be:16:fa:31:7c:de:c5:f1:46:4e:de:07:b8:47: c0:ae:5f:1e:8a:bc:15:c6:f7:82:f5:d6:4a:77:5a: f2:fa:92:cd:9c:f4:d8:7e:dd:dc:ee:0b:fc:7f:75: 39:a0:06:b4:1d:65:ee:ca:f2:1d:20:80:14:a7:48: af:98:36:78:0f:b8:de:06:73:69:2b:e5:1c:0a:90: 85:5a:38:c8:04:33:11:2d:c9:27:16:6e:f1:b6:5b: 4d:b8:0c:cd:1e:cc:ce:d3:dd:b2:d7:67:8c:53:1c: 0b:97:07:50:4b:8a:ab:48:65:27:63:f1:53:e8:ab: 0f:56:97:3b:96:ec:de:0f:6c:28:f9:4f:2c:06:d2: 5a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B4:B2:F4:2D:11:3D:FF:07:97:38:F7:79:57:58:88:29:1F:3D:96 X509v3 Authority Key Identifier: keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:19:82:75:33:2a:4c:7e:a0:55:ec:59:fa:e2:b4:27:9a:fa: a8:79:9b:65:bb:48:db:0a:2a:7a:25:ac:a0:93:0c:40:67:a5: 4f:3e:3d:ab:a6:16:a6:6a:ec:05:b4:46:d3:f4:85:90:a7:ea: 41:e9:33:c1:54:67:6b:31:f6:d2:23:e4:23:c8:09:01:cf:b8: 89:ed:b2:93:30:80:99:a5:be:f1:3e:25:8c:9b:9e:ab:07:f9: 48:67:5c:89:5d:63:88:2a:ad:4a:43:96:6a:61:5e:f3:5b:6b: a6:72:b8:09:e6:41:3d:fc:45:a3:9a:b4:bb:6f:33:e0:2d:f3: de:95:b0:5b:97:87:37:ea:7b:52:b4:64:97:99:2e:cd:68:7c: 27:fc:87:26:95:64:0b:a0:1f:b8:42:03:49:9a:89:bd:ee:3e: 08:12:e9:56:d5:03:10:22:d5:e2:4f:02:24:36:df:2c:25:4d: bc:20:27:4c:19:82:07:28:a4:e3:93:68:78:0a:a8:3d:3a:d2: eb:07:a2:9c:ce:eb:34:5f:05:6e:fe:e8:ac:00:fa:a2:00:21: 10:7d:0e:cd:58:f6:a6:92:6c:3f:7b:e3:47:ae:e9:64:dd:52: cf:a8:92:68:0d:20:a8:c4:90:50:3e:38:88:81:ea:a4:3b:cd: 4f:a0:b2:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZDQjQxMTAvBgNVBAUTKEZCMTZCMTlERkJGN0NBNkFDNDBBNkI2QTM1M0Y3ODU3 ODkxN0UwRkQwHhcNMjUwNDI1MDMwMzE2WhcNMjUwNTAyMDMwMzE2WjAYMRYwFAYD VQQDEw02ODBhZmI3NS05YTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QGELfo5+Hh+V7cJjfLZ1EIfvJ6OsAZN8iEJ9HOuCx0GQdrBi5Gjm4FT7kdR Tdmsg1OaePiFPalJxU3SAEWk/N3WDZWDXWgRd0EP9Z5smjt/4pd0Ol6diBz0/B/e Z7nkt80B0izewLNVcagIi2CHaZgfPXpMIOYMvhb6MXzexfFGTt4HuEfArl8eirwV xveC9dZKd1ry+pLNnPTYft3c7gv8f3U5oAa0HWXuyvIdIIAUp0ivmDZ4D7jeBnNp K+UcCpCFWjjIBDMRLcknFm7xtltNuAzNHszO092y12eMUxwLlwdQS4qrSGUnY/FT 6KsPVpc7luzeD2wo+U8sBtJaWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHq0svQt ET3/B5c493lXWIgpHz2WMB8GA1UdIwQYMBaAFPsWsZ3798pqxAprajU/eFeJF+D9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkNCNC8yQTg0RDFEOEZE QzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3ltckVDbXRxTlQ5NFY0a1g0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14YXhuZnYzeW1yRUNtdHFOVDk0VjRrWDRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkNCNC8yQTg0RDFEOEZEQzgxMUVEOTcyRURCMUVDNEY5QUUwMi8teGF4bmZ2M3lt ckVDbXRxTlQ5NFY0a1g0UDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSGYJ1MypMfqBV7Fn64rQnmvqoeZtlu0jbCip6JaygkwxAZ6VPPj2r phamauwFtEbT9IWQp+pB6TPBVGdrMfbSI+QjyAkBz7iJ7bKTMICZpb7xPiWMm56r B/lIZ1yJXWOIKq1KQ5ZqYV7zW2umcrgJ5kE9/EWjmrS7bzPgLfPelbBbl4c36ntS tGSXmS7NaHwn/IcmlWQLoB+4QgNJmom97j4IEulW1QMQItXiTwIkNt8sJU28ICdM GYIHKKTjk2h4Cqg9OtLrB6Kczus0XwVu/uisAPqiACEQfQ7NWPamkmw/e+NHrulk 3VLPqJJoDSCoxJBQPjiIgeqkO81PoLLi -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:39 2025 by rpki-client