$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: q7Mg8vtdExAXEF2LD7Qwoy+Zcb5ia4A0tx7ovb0V3mw= Subject key identifier: F7:6D:2C:75:36:46:B7:81:B2:72:7F:2D:F9:AE:0B:E1:B7:ED:32:8F Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0C2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0C28 Signing time: Thu 24 Apr 2025 18:27:19 +0000 Manifest this update: Thu 24 Apr 2025 18:27:19 +0000 Manifest next update: Thu 01 May 2025 18:27:19 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: cIpC+bYFYwJ/s7FDfi4vsIg4k7Am28WNalsoE96Hhek=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: jepyyGmhyczAJbapeZ5nuaRxeukad7rFEbIHfvNySKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3119 (0xc2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: Apr 24 18:27:19 2025 GMT Not After : May 1 18:27:19 2025 GMT Subject: CN=680a8287-9c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0e:c1:62:08:aa:4e:7c:3b:e3:ee:13:5b:46: a6:52:29:1f:9a:ce:e2:0a:ba:0e:5c:76:b1:99:ae: c5:22:b4:d6:41:9d:ec:14:53:dd:b8:f9:c0:a0:18: db:55:62:92:b6:9a:d5:4b:fe:2f:03:68:92:83:2b: 82:0d:ef:17:fb:0c:4d:c5:20:63:34:60:85:e6:af: 64:ab:ff:3b:d1:27:e3:07:7f:86:5c:9b:8d:6d:79: 9d:22:ca:a8:42:0b:80:0a:26:08:76:29:39:f1:70: 73:7a:c6:99:97:bb:50:c4:75:fd:34:a3:40:0a:90: 95:b4:f3:60:fa:f2:90:19:26:9f:21:aa:bd:56:2d: 1d:bb:be:94:90:e7:22:8f:00:bb:6b:ee:39:3a:9b: 38:15:a1:fd:8c:80:6e:32:49:dc:70:0f:d1:90:57: 47:1f:29:94:02:53:9a:b6:c7:b8:dd:3e:61:e3:a0: f4:16:4d:5a:f8:43:56:f8:d3:4e:2d:81:2d:fb:47: bf:c9:57:b6:1f:a0:ba:0d:a3:8c:b6:54:c1:47:a0: 97:f2:96:da:8a:0f:56:8c:37:a1:d3:e4:1a:a6:2f: 11:e5:24:d2:3a:5f:0a:79:7c:e3:be:cd:b1:c4:76: 8c:b4:e8:54:e3:ce:46:71:bc:d6:29:0b:54:56:10: ff:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6D:2C:75:36:46:B7:81:B2:72:7F:2D:F9:AE:0B:E1:B7:ED:32:8F X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:1e:e4:18:81:a8:b4:b6:fa:af:cb:7d:7e:8b:58:f0:31:2b: ae:5c:ac:a6:34:48:46:1c:13:81:ba:34:6c:4f:c2:f9:a9:be: 5c:4d:b5:4b:57:54:fe:0d:b0:67:c9:9e:f6:77:2c:70:70:f9: 3c:78:51:e2:80:9d:f5:32:90:95:6a:c4:d2:8e:94:be:6d:5c: 55:1d:51:de:97:a6:3f:62:e4:49:8e:a5:a0:ad:fb:db:12:3c: 3a:9e:5d:93:25:ef:94:5a:f9:82:2d:b9:ec:1e:c9:68:ea:c5: 42:dd:83:96:87:a8:66:f4:74:76:ea:49:2b:30:d3:27:8a:6e: 5b:cc:2b:41:6b:0c:a6:b8:6e:12:05:89:40:90:6d:4c:18:90: be:b7:66:52:f8:8b:df:47:fb:67:ce:05:37:26:5d:e7:2c:54: 09:55:87:95:cb:de:bf:86:61:8e:8b:14:42:08:46:bf:a0:26: 51:b2:f7:2a:99:68:55:12:b2:75:1d:85:ca:78:e9:02:4d:4d: e8:e8:6e:f1:58:f7:56:57:58:19:72:25:4a:c6:c2:99:42:84: 10:8d:6b:38:93:75:8d:83:75:07:8a:a5:56:10:04:a7:93:6c: 2f:8c:70:1d:f1:82:5e:f5:21:fb:a1:6e:dc:c7:71:5e:91:8b: b6:56:8e:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjUwNDI0MTgyNzE5WhcNMjUwNTAxMTgyNzE5WjAYMRYwFAYD VQQDEw02ODBhODI4Ny05YzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmw7BYgiqTnw74+4TW0amUikfms7iCroOXHaxma7FIrTWQZ3sFFPduPnAoBjb VWKStprVS/4vA2iSgyuCDe8X+wxNxSBjNGCF5q9kq/870SfjB3+GXJuNbXmdIsqo QguACiYIdik58XBzesaZl7tQxHX9NKNACpCVtPNg+vKQGSafIaq9Vi0du76UkOci jwC7a+45Ops4FaH9jIBuMknccA/RkFdHHymUAlOatse43T5h46D0Fk1a+ENW+NNO LYEt+0e/yVe2H6C6DaOMtlTBR6CX8pbaig9WjDeh0+Qapi8R5STSOl8KeXzjvs2x xHaMtOhU485GcbzWKQtUVhD/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdtLHU2 RreBsnJ/LfmuC+G37TKPMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmHuQYgai0tvqvy31+i1jwMSuuXKymNEhGHBOBujRsT8L5qb5cTbVL V1T+DbBnyZ72dyxwcPk8eFHigJ31MpCVasTSjpS+bVxVHVHel6Y/YuRJjqWgrfvb Ejw6nl2TJe+UWvmCLbnsHslo6sVC3YOWh6hm9HR26kkrMNMnim5bzCtBawymuG4S BYlAkG1MGJC+t2ZS+IvfR/tnzgU3Jl3nLFQJVYeVy96/hmGOixRCCEa/oCZRsvcq mWhVErJ1HYXKeOkCTU3o6G7xWPdWV1gZciVKxsKZQoQQjWs4k3WNg3UHiqVWEASn k2wvjHAd8YJe9SH7oW7cx3FekYu2Vo4g -----END CERTIFICATE-----Generated at Sat Apr 26 05:26:17 2025 by rpki-client