$ rpki-client -vvf rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft File: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft (raw, json) Hash identifier: jevCsd6YpHH0glCYcjETj6uT3Jc15nuEcdUSMeyLWIM= Subject key identifier: EE:78:60:EE:6F:2E:C9:B3:E8:25:E6:92:83:19:C9:A3:0E:B9:8A:7F Authority key identifier: C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 Certificate issuer: /CN=A914D05C/serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Certificate serial: 0664 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft Manifest number: 065F Signing time: Thu 24 Apr 2025 22:11:16 +0000 Manifest this update: Thu 24 Apr 2025 22:11:15 +0000 Manifest next update: Thu 01 May 2025 22:11:15 +0000 Files and hashes: 1: xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl (hash: ctaKiofDjz947fsQNYA44T09gpsSJeKXRKUn4yoEEH4=) 2: 546C2E447BD711EB8DB97853C4F9AE02.roa (hash: LymCYpP9ODjDnMZgIvd8/QCM8E6rGc1JYF+pBCdV8o4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D05C, serialNumber=C69399B132E1AE6B2EA3116E14B1001C0819DDA9 Validity Not Before: Apr 24 22:11:15 2025 GMT Not After : May 1 22:11:15 2025 GMT Subject: CN=680ab703-5547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:44:3d:2d:75:05:62:58:34:a4:0c:07:16: cb:76:d3:57:94:63:17:3b:b5:ae:3f:5e:6c:36:25: 6b:73:64:50:c5:6b:13:cb:d4:4e:33:0d:ea:14:9a: 62:90:36:60:a8:b4:da:17:fb:be:72:e0:6b:a3:36: 99:05:5c:c8:6a:3c:2e:49:1d:77:8c:0b:de:52:df: 4b:e2:a7:d2:3e:a5:e9:78:23:77:9d:57:45:43:60: 77:02:a0:c2:98:50:89:0f:3e:da:61:f7:10:60:85: 2c:9d:22:d4:71:0e:3f:2c:35:7b:b8:18:91:a8:5f: a0:29:63:10:85:fe:26:51:3d:d6:29:cd:e5:fb:64: ad:78:8f:6e:3c:e4:1a:f0:25:2c:9a:3e:28:f7:f9: 82:cb:e4:74:ff:36:ed:59:18:35:95:a5:7e:10:20: 36:b6:13:72:60:33:b8:fe:59:85:32:09:f3:c7:cc: e0:df:e3:e1:e1:09:b6:84:bd:13:5f:90:c2:0e:c3: bc:ef:56:21:9f:47:9c:77:9f:74:a1:e1:4e:7c:f3: af:c5:76:3f:17:68:18:01:ef:07:ee:79:2c:0f:d3: 2c:8a:e2:0c:bd:a0:f7:34:87:3b:2b:36:d7:79:b8: 4b:ad:aa:de:9d:e5:bf:77:03:74:fc:01:c6:b5:80: 90:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:78:60:EE:6F:2E:C9:B3:E8:25:E6:92:83:19:C9:A3:0E:B9:8A:7F X509v3 Authority Key Identifier: keyid:C6:93:99:B1:32:E1:AE:6B:2E:A3:11:6E:14:B1:00:1C:08:19:DD:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D05C/DECE0F0A7BD511EBB9123D52C4F9AE02/xpOZsTLhrmsuoxFuFLEAHAgZ3ak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:27:30:df:be:30:33:25:a4:99:d6:dc:75:90:15:a1:c2:5b: 21:ef:f6:3b:22:82:ac:ff:87:7b:a7:e7:f4:3f:35:10:94:d3: f2:45:6a:a3:16:2f:b8:82:d2:79:af:f1:71:92:89:ac:bf:4d: d3:ed:17:22:43:29:3e:ed:c3:53:93:e8:cc:b9:90:55:d0:8f: 88:6a:81:3f:fe:f9:fd:d0:e2:85:88:33:1f:0a:c6:d2:04:93: ae:02:52:c0:4b:f1:c6:16:c0:9e:aa:b6:a9:91:d8:4b:15:37: 3f:62:f8:a9:64:67:7e:e1:7b:6d:0d:50:16:e8:cb:fc:a7:2f: 45:95:a2:f8:94:91:66:b1:53:1f:c3:db:f0:86:93:f9:fc:09: d7:c8:ee:34:e7:6a:89:f7:11:08:cb:68:11:38:23:07:2c:54: f6:13:2d:25:63:2d:72:69:0e:ac:8c:77:e2:bd:81:ed:f5:79: 13:fb:56:70:c7:0d:0b:7d:0a:43:60:99:ba:c4:fb:dc:4e:f0: 47:5f:6e:32:a0:f8:2b:93:11:7f:c6:5e:8c:eb:da:3c:55:96: 8e:e3:ee:9d:7e:49:08:a0:2c:98:1b:ca:92:a8:b3:2e:5b:f7: d1:cb:d6:63:c6:83:a7:0b:60:01:9a:45:7e:56:1f:0d:15:f8: be:07:11:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwNUMxMTAvBgNVBAUTKEM2OTM5OUIxMzJFMUFFNkIyRUEzMTE2RTE0QjEwMDFD MDgxOUREQTkwHhcNMjUwNDI0MjIxMTE1WhcNMjUwNTAxMjIxMTE1WjAYMRYwFAYD VQQDEw02ODBhYjcwMy01NTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuONEPS11BWJYNKQMBxbLdtNXlGMXO7WuP15sNiVrc2RQxWsTy9ROMw3qFJpi kDZgqLTaF/u+cuBrozaZBVzIajwuSR13jAveUt9L4qfSPqXpeCN3nVdFQ2B3AqDC mFCJDz7aYfcQYIUsnSLUcQ4/LDV7uBiRqF+gKWMQhf4mUT3WKc3l+2SteI9uPOQa 8CUsmj4o9/mCy+R0/zbtWRg1laV+ECA2thNyYDO4/lmFMgnzx8zg3+Ph4Qm2hL0T X5DCDsO871Yhn0ecd590oeFOfPOvxXY/F2gYAe8H7nksD9MsiuIMvaD3NIc7KzbX ebhLrareneW/dwN0/AHGtYCQiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO54YO5v Lsmz6CXmkoMZyaMOuYp/MB8GA1UdIwQYMBaAFMaTmbEy4a5rLqMRbhSxABwIGd2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDA1Qy9ERUNFMEYwQTdC RDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJtc3VveEZ1RkxFQUhBZ1oz YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hwT1pzVExocm1zdW94RnVGTEVBSEFnWjNhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDA1Qy9ERUNFMEYwQTdCRDUxMUVCQjkxMjNENTJDNEY5QUUwMi94cE9ac1RMaHJt c3VveEZ1RkxFQUhBZ1ozYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEJzDfvjAzJaSZ1tx1kBWhwlsh7/Y7IoKs/4d7p+f0PzUQlNPyRWqj Fi+4gtJ5r/Fxkomsv03T7RciQyk+7cNTk+jMuZBV0I+IaoE//vn90OKFiDMfCsbS BJOuAlLAS/HGFsCeqrapkdhLFTc/YvipZGd+4XttDVAW6Mv8py9FlaL4lJFmsVMf w9vwhpP5/AnXyO4052qJ9xEIy2gROCMHLFT2Ey0lYy1yaQ6sjHfivYHt9XkT+1Zw xw0LfQpDYJm6xPvcTvBHX24yoPgrkxF/xl6M69o8VZaO4+6dfkkIoCyYG8qSqLMu W/fRy9ZjxoOnC2ABmkV+Vh8NFfi+BxF+ -----END CERTIFICATE-----Generated at Sat Apr 26 05:22:21 2025 by rpki-client