$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft File: -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json) Hash identifier: XppN0usE6RlaRbWXaaFj+XsRdKKSpqVG7XFJn05MDgE= Subject key identifier: 69:3F:D9:88:7C:F6:77:29:71:B9:5B:C2:1F:D3:CA:B7:4D:A5:93:AB Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38 Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft Manifest number: 0120 Signing time: Fri 25 Apr 2025 03:51:16 +0000 Manifest this update: Fri 25 Apr 2025 03:51:15 +0000 Manifest next update: Fri 02 May 2025 03:51:15 +0000 Files and hashes: 1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: WvjIQAxdhgOyzW6JSllQEuNjd4lnSuS+Fz86PF94pjc=) 2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: B+UIB58IevJFHi1QUj4sqmfL/RMK0LGyhhucuugtqng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38 Validity Not Before: Apr 25 03:51:15 2025 GMT Not After : May 2 03:51:15 2025 GMT Subject: CN=680b06b4-19e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:0b:bc:d5:2e:36:8f:d6:85:6e:41:5a:78: f0:ca:39:eb:bf:f6:c7:4f:a6:bd:4c:17:4a:8c:de: 0d:6e:df:de:fb:c6:b9:97:1f:fd:91:85:de:dc:31: a8:9e:0d:3d:68:02:10:40:b8:51:d3:fa:65:bc:dd: 68:ab:4e:ea:26:12:f7:01:c2:32:e7:6a:0c:c0:69: c8:4c:0f:dd:7c:a3:24:9b:44:0b:92:83:6f:60:99: ae:1c:c4:82:cd:d1:6f:d7:96:b1:47:f9:03:0b:3f: 63:f0:0f:d0:12:28:76:ce:1f:a1:1f:98:1d:d0:24: 7b:aa:26:97:e2:b2:a5:21:56:04:23:92:77:6e:51: d8:8a:ec:e4:8d:d2:fb:c1:1f:c4:bb:7b:e2:d9:4a: 99:38:5b:5a:1d:ff:08:a1:5b:df:73:d2:1a:4e:2a: 24:05:6f:34:94:04:46:0d:05:0a:9c:35:12:32:b2: 8d:ab:dd:86:3b:35:45:92:0e:6a:6c:d1:9d:ff:f9: 00:9b:02:4a:83:68:f4:7a:31:46:da:46:05:ff:c5: d8:8a:1b:6a:06:2e:75:58:b1:a9:60:fb:1c:9e:ce: ce:d6:9d:1e:62:d0:a3:80:5e:44:c5:1c:c3:be:6c: ac:33:63:04:5a:e0:b6:19:bd:d1:7b:0e:79:0a:89: 7a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3F:D9:88:7C:F6:77:29:71:B9:5B:C2:1F:D3:CA:B7:4D:A5:93:AB X509v3 Authority Key Identifier: keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:47:1a:ca:21:be:b3:84:09:de:30:65:a3:12:0a:6b:75:30: f6:45:d6:68:97:a9:14:48:8b:1d:ed:f7:da:20:dd:1f:61:2c: ba:6e:41:26:aa:41:a6:3b:e4:20:ff:65:a4:02:6d:f9:bc:c5: 8d:de:48:e5:54:c9:ad:e3:51:10:47:b3:8c:e4:bf:e1:c6:76: 36:e5:68:8c:2d:43:48:d0:28:47:23:dd:34:f1:d6:a3:23:50: 2e:12:b1:a5:10:65:a9:c2:a0:80:f5:82:ad:c2:1e:83:30:3a: c1:d3:e4:9d:fc:e2:3e:5b:55:a9:08:d9:2f:1f:34:d3:52:4a: b4:55:3c:4e:a9:89:72:eb:46:2b:32:64:8a:18:8c:69:f0:60: eb:f2:6d:c6:5e:25:dd:2b:ec:61:16:d9:e2:22:2c:8b:b9:de: 5d:bf:d6:fc:5b:86:eb:af:17:b1:d5:1a:f1:0e:9e:94:a8:05: ec:ad:c0:ef:ad:e8:9d:0b:79:fa:c7:e9:b9:c2:1f:c9:05:51: 25:60:c1:f2:89:7b:03:88:ca:5f:04:43:13:24:a2:96:8f:a9: 74:f0:dd:c6:8f:f7:8c:31:e9:6d:4c:be:44:2a:5e:95:f2:f1: e0:40:46:e2:ad:b2:57:be:b5:25:4b:db:d8:83:77:b5:3a:10: fc:d4:a8:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERCNjkxMTAvBgNVBAUTKEY5N0M2QjlGMDY5QjZDMDJDQjNEOEVBRDVBRjczRTUw NkMwOENBMzgwHhcNMjUwNDI1MDM1MTE1WhcNMjUwNTAyMDM1MTE1WjAYMRYwFAYD VQQDEw02ODBiMDZiNC0xOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzoLvNUuNo/WhW5BWnjwyjnrv/bHT6a9TBdKjN4Nbt/e+8a5lx/9kYXe3DGo ng09aAIQQLhR0/plvN1oq07qJhL3AcIy52oMwGnITA/dfKMkm0QLkoNvYJmuHMSC zdFv15axR/kDCz9j8A/QEih2zh+hH5gd0CR7qiaX4rKlIVYEI5J3blHYiuzkjdL7 wR/Eu3vi2UqZOFtaHf8IoVvfc9IaTiokBW80lARGDQUKnDUSMrKNq92GOzVFkg5q bNGd//kAmwJKg2j0ejFG2kYF/8XYihtqBi51WLGpYPscns7O1p0eYtCjgF5ExRzD vmysM2MEWuC2Gb3Rew55Col6MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGk/2Yh8 9ncpcblbwh/TyrdNpZOrMB8GA1UdIwQYMBaAFPl8a58Gm2wCyz2OrVr3PlBsCMo4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REI2OS9EQTg2MENDODZF NUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJBTExQWTZ0V3ZjLVVHd0l5 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YeHJud2FiYkFMTFBZNnRXdmMtVUd3SXlqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REI2OS9EQTg2MENDODZFNUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJB TExQWTZ0V3ZjLVVHd0l5amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7RxrKIb6zhAneMGWjEgprdTD2RdZol6kUSIsd7ffaIN0fYSy6bkEm qkGmO+Qg/2WkAm35vMWN3kjlVMmt41EQR7OM5L/hxnY25WiMLUNI0ChHI9008daj I1AuErGlEGWpwqCA9YKtwh6DMDrB0+Sd/OI+W1WpCNkvHzTTUkq0VTxOqYly60Yr MmSKGIxp8GDr8m3GXiXdK+xhFtniIiyLud5dv9b8W4brrxex1RrxDp6UqAXsrcDv reidC3n6x+m5wh/JBVElYMHyiXsDiMpfBEMTJKKWj6l08N3Gj/eMMeltTL5EKl6V 8vHgQEbirbJXvrUlS9vYg3e1OhD81Kgj -----END CERTIFICATE-----Generated at Sat Apr 26 12:20:12 2025 by rpki-client