$ rpki-client -vvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft File: X2mHOU7ukmatexkjRBv29RNP-VA.mft (raw, json) Hash identifier: RD1cmu3FIiSHvVzUAXXV70qXMv2kS4YDiYEpIKwfKW0= Subject key identifier: 5E:52:EE:3F:7E:91:05:CC:6F:56:41:FE:8B:EF:3E:D7:A3:F6:16:5B Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 Certificate issuer: /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Certificate serial: 07D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft Manifest number: 07D1 Signing time: Thu 24 Apr 2025 20:53:18 +0000 Manifest this update: Thu 24 Apr 2025 20:53:17 +0000 Manifest next update: Thu 01 May 2025 20:53:17 +0000 Files and hashes: 1: X2mHOU7ukmatexkjRBv29RNP-VA.crl (hash: GWwCb0oR589p4jSKnmHrK2WRNa2Eh4hnayUBm80vSpA=) 2: F69648C2ECF211EABBFDDD24C4F9AE02.roa (hash: 90ekW1pDIqXWRjwU9tVaYqCrzXTRiG8h8pa7XJ3ojS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2008 (0x7d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Validity Not Before: Apr 24 20:53:17 2025 GMT Not After : May 1 20:53:17 2025 GMT Subject: CN=680aa4bd-1a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:42:7d:ea:79:53:cb:0f:d3:a4:50:08:ee: 35:ce:a2:8b:38:a4:46:b4:41:42:da:06:f4:b1:17: 3c:b7:49:39:e2:4c:16:8d:fa:b3:6f:88:50:a2:92: e2:b3:47:78:45:92:38:b2:fc:c5:46:5d:74:d2:e7: 1e:93:70:43:61:d7:5d:cf:b4:8b:17:ff:ec:f1:25: 80:97:37:1f:07:7b:94:cc:b4:5d:80:64:15:37:d3: 39:77:fa:1a:ee:70:79:2b:f5:4e:df:e7:a2:1a:f2: 05:9c:2a:1f:bc:03:1f:90:e9:4d:ed:d2:f2:63:c2: d1:bf:61:0f:04:73:82:28:b6:e5:07:e3:f1:b6:d8: ba:34:a0:24:89:a2:3f:db:b7:4b:3a:08:bc:8d:b6: 38:76:42:11:04:9d:e5:df:c0:2d:88:4f:1c:4d:b3: c8:93:08:ba:c6:68:82:ab:15:65:cb:28:ce:2e:55: 34:1e:bd:fa:6f:79:11:e4:a2:6f:9b:89:cf:b8:f3: c7:a8:7d:10:b4:dd:5a:54:77:cb:41:7a:f0:81:95: 9a:30:0e:d0:08:cc:92:68:4f:c5:59:8a:5b:e3:ef: d8:cd:ee:4f:5c:1c:cf:4c:67:fd:63:53:a4:36:52: f7:14:74:eb:8c:4e:83:77:a4:4d:92:13:6f:55:e8: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:52:EE:3F:7E:91:05:CC:6F:56:41:FE:8B:EF:3E:D7:A3:F6:16:5B X509v3 Authority Key Identifier: keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:ec:25:78:c4:ec:c2:57:f2:28:a0:ff:39:2b:c8:b8:d6:da: 96:b4:5d:e1:ce:6c:89:49:a9:a5:1e:d2:60:28:ba:bf:fa:1d: 35:78:c3:ec:b2:93:97:42:f3:8f:9a:84:98:38:52:9a:93:15: f1:6e:cb:e7:62:34:cd:57:28:ab:24:45:70:43:0d:54:ff:c4: b8:9d:1b:00:ee:b9:dc:a3:44:0d:d2:59:82:e2:bd:a6:d2:81: ce:e6:72:8e:05:58:7f:50:95:30:81:e4:ad:21:14:ff:51:84: 0e:89:8a:b3:23:91:fb:cb:05:b5:d9:d0:b9:e3:f6:66:cd:57: 4e:ce:c2:61:69:48:a6:99:7b:5b:4a:95:01:19:27:89:52:53: b0:e5:95:bd:84:fa:0d:ce:46:21:34:81:4d:28:72:70:da:42: e9:d8:21:a7:b7:96:a8:fc:08:c9:4c:00:9d:43:39:9e:28:b7: cc:2d:b0:74:2c:04:4a:4e:4f:f5:3a:99:e9:04:cf:e5:e4:ff: 96:f2:cc:20:e9:91:20:0b:4d:16:40:8c:a0:27:51:63:27:67: 68:fa:41:46:3e:75:c1:28:69:6c:b1:9f:2d:19:37:90:5c:0d: 28:21:d2:ba:5b:ee:f7:ff:00:00:85:da:4a:e2:37:3e:e8:02: bd:51:46:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNDExMTAvBgNVBAUTKDVGNjk4NzM5NEVFRTkyNjZBRDdCMTkyMzQ0MUJGNkY1 MTM0RkY5NTAwHhcNMjUwNDI0MjA1MzE3WhcNMjUwNTAxMjA1MzE3WjAYMRYwFAYD VQQDEw02ODBhYTRiZC0xYTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJhCfep5U8sP06RQCO41zqKLOKRGtEFC2gb0sRc8t0k54kwWjfqzb4hQopLi s0d4RZI4svzFRl100ucek3BDYdddz7SLF//s8SWAlzcfB3uUzLRdgGQVN9M5d/oa 7nB5K/VO3+eiGvIFnCofvAMfkOlN7dLyY8LRv2EPBHOCKLblB+Pxtti6NKAkiaI/ 27dLOgi8jbY4dkIRBJ3l38AtiE8cTbPIkwi6xmiCqxVlyyjOLlU0Hr36b3kR5KJv m4nPuPPHqH0QtN1aVHfLQXrwgZWaMA7QCMySaE/FWYpb4+/Yze5PXBzPTGf9Y1Ok NlL3FHTrjE6Dd6RNkhNvVehwOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5S7j9+ kQXMb1ZB/ovvPtej9hZbMB8GA1UdIwQYMBaAFF9phzlO7pJmrXsZI0Qb9vUTT/lQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI0MS82MkJCNUM3NEVD RjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWttYXRleGtqUkJ2MjlSTlAt VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybUhPVTd1a21hdGV4a2pSQnYyOVJOUC1WQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI0MS82MkJCNUM3NEVDRjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWtt YXRleGtqUkJ2MjlSTlAtVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz7CV4xOzCV/IooP85K8i41tqWtF3hzmyJSamlHtJgKLq/+h01eMPs spOXQvOPmoSYOFKakxXxbsvnYjTNVyirJEVwQw1U/8S4nRsA7rnco0QN0lmC4r2m 0oHO5nKOBVh/UJUwgeStIRT/UYQOiYqzI5H7ywW12dC54/ZmzVdOzsJhaUimmXtb SpUBGSeJUlOw5ZW9hPoNzkYhNIFNKHJw2kLp2CGnt5ao/AjJTACdQzmeKLfMLbB0 LARKTk/1OpnpBM/l5P+W8swg6ZEgC00WQIygJ1FjJ2do+kFGPnXBKGlssZ8tGTeQ XA0oIdK6W+73/wAAhdpK4jc+6AK9UUaD -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:12 2025 by rpki-client