$ rpki-client -vvf rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft File: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft (raw, json) Hash identifier: nFsSTOgXkNfg/QHr2mS0YoJvo2gAvZM29Qsy5vdFUv0= Subject key identifier: C3:36:08:E4:13:F8:B5:6F:F2:25:D1:B9:19:31:D4:C7:B8:13:BE:E5 Authority key identifier: 5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D Certificate issuer: /CN=A9150EF7/serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Certificate serial: 0C39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft Manifest number: 0C31 Signing time: Thu 24 Apr 2025 18:25:34 +0000 Manifest this update: Thu 24 Apr 2025 18:25:34 +0000 Manifest next update: Thu 01 May 2025 18:25:34 +0000 Files and hashes: 1: XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl (hash: rHftefX6C0rVZ9jIUZnqSMWa9EyEdnAFsI6VzEw8paY=) 2: 999F4BE8259611EE944D733CC4F9AE02.roa (hash: FqEN/utj0qRJF2RShIO0hvD2R+VumfpS5SKeV7adKGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3129 (0xc39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150EF7, serialNumber=5C9F6C1DBC4ECF091962F60EBE5ABFCB6B031A2D Validity Not Before: Apr 24 18:25:34 2025 GMT Not After : May 1 18:25:34 2025 GMT Subject: CN=680a821e-4595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fe:2a:b3:5d:cd:f9:27:68:41:eb:0a:17:3f: 3b:14:92:92:eb:28:ca:20:8c:04:88:b6:4f:65:16: 05:6e:46:e5:88:8b:bd:b0:4a:da:f4:aa:ba:5e:07: bc:7b:87:21:a3:8b:f9:1c:73:3d:80:4d:34:be:d6: ac:00:ed:31:0b:c6:16:b0:5f:e9:c2:ad:57:2e:e9: d2:b6:1b:c4:cd:83:c4:16:8b:0f:3b:fc:a1:c3:6a: 43:1d:81:00:f5:c4:a8:5f:a6:08:1e:7b:48:51:ec: 5d:e8:f3:f5:99:63:ad:12:59:8b:5f:1f:27:e4:8f: 66:9f:ec:64:db:8c:e1:8a:d2:4e:e5:3b:bf:6a:cc: 6a:48:d3:a2:d4:7f:b4:29:c1:df:c3:a8:3d:21:e4: 17:21:8b:71:b7:49:30:69:ca:0a:85:b4:4e:b4:93: aa:16:6b:98:a7:53:fd:68:6c:94:46:5c:29:57:d3: ca:ac:10:05:bf:32:0f:35:74:cb:5e:ea:71:04:13: b8:38:62:d9:7a:a0:82:41:45:68:78:ca:7f:9e:3d: 9f:35:e4:6f:b6:c0:6a:f3:ef:40:0c:47:9d:6d:ad: e4:c0:5e:d4:0b:6a:2e:1d:af:36:eb:37:e5:7b:c4: a3:a9:b4:59:90:f1:ab:b8:ef:23:99:72:03:a3:21: ed:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:36:08:E4:13:F8:B5:6F:F2:25:D1:B9:19:31:D4:C7:B8:13:BE:E5 X509v3 Authority Key Identifier: keyid:5C:9F:6C:1D:BC:4E:CF:09:19:62:F6:0E:BE:5A:BF:CB:6B:03:1A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150EF7/B071397C05E611EA80BCD67CC4F9AE02/XJ9sHbxOzwkZYvYOvlq_y2sDGi0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:4d:1e:28:4a:b1:f3:b1:da:16:45:75:c8:f5:78:c9:ba:8d: e0:e0:ce:5f:a6:5b:d0:2f:50:09:60:14:6e:4c:0a:31:9c:66: ff:84:ff:36:b0:7f:0a:39:70:d6:f6:ff:b8:ef:05:5c:d1:63: 35:da:ee:25:75:99:ff:28:ad:f5:01:e2:c9:84:2f:2d:00:74: cb:b6:7b:2e:b4:44:a7:a3:b7:5f:36:8c:4c:ab:ef:50:2e:1b: a3:12:df:78:5e:e5:56:c0:39:22:3a:40:bc:7a:93:01:56:5a: 81:fc:d4:8d:68:42:98:a0:62:9d:be:ff:21:09:63:62:b6:7f: 41:95:02:45:79:87:24:ac:43:ba:a7:b0:be:48:bf:4b:d5:27: 8c:19:f4:0a:95:59:3f:fb:69:d9:90:f5:12:62:17:f7:1b:59: 3f:1e:85:ba:da:47:98:68:fe:21:bb:c5:22:d8:ee:82:48:20: b2:dd:2b:e5:d6:ea:ba:8e:a0:bc:ec:f9:cf:37:59:f1:26:56: 6f:6a:dc:27:18:ca:ac:27:e3:60:e4:d8:b3:25:ad:3f:1b:87: 5c:ae:9d:34:32:28:ae:be:0e:4a:4e:fa:50:cf:03:1d:79:1f: d0:04:1a:d6:68:d7:42:b7:42:bd:b9:0b:dc:33:ba:f3:76:b8: 29:51:ce:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFRjcxMTAvBgNVBAUTKDVDOUY2QzFEQkM0RUNGMDkxOTYyRjYwRUJFNUFCRkNC NkIwMzFBMkQwHhcNMjUwNDI0MTgyNTM0WhcNMjUwNTAxMTgyNTM0WjAYMRYwFAYD VQQDEw02ODBhODIxZS00NTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/4qs13N+SdoQesKFz87FJKS6yjKIIwEiLZPZRYFbkbliIu9sEra9Kq6Xge8 e4cho4v5HHM9gE00vtasAO0xC8YWsF/pwq1XLunSthvEzYPEFosPO/yhw2pDHYEA 9cSoX6YIHntIUexd6PP1mWOtElmLXx8n5I9mn+xk24zhitJO5Tu/asxqSNOi1H+0 KcHfw6g9IeQXIYtxt0kwacoKhbROtJOqFmuYp1P9aGyURlwpV9PKrBAFvzIPNXTL XupxBBO4OGLZeqCCQUVoeMp/nj2fNeRvtsBq8+9ADEedba3kwF7UC2ouHa826zfl e8SjqbRZkPGruO8jmXIDoyHtywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMM2COQT +LVv8iXRuRkx1Me4E77lMB8GA1UdIwQYMBaAFFyfbB28Ts8JGWL2Dr5av8trAxot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEVGNy9CMDcxMzk3QzA1 RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3a1pZdllPdmxxX3kyc0RH aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hKOXNIYnhPendrWll2WU92bHFfeTJzREdpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEVGNy9CMDcxMzk3QzA1RTYxMUVBODBCQ0Q2N0NDNEY5QUUwMi9YSjlzSGJ4T3p3 a1pZdllPdmxxX3kyc0RHaTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAITR4oSrHzsdoWRXXI9XjJuo3g4M5fplvQL1AJYBRuTAoxnGb/hP82 sH8KOXDW9v+47wVc0WM12u4ldZn/KK31AeLJhC8tAHTLtnsutESno7dfNoxMq+9Q LhujEt94XuVWwDkiOkC8epMBVlqB/NSNaEKYoGKdvv8hCWNitn9BlQJFeYckrEO6 p7C+SL9L1SeMGfQKlVk/+2nZkPUSYhf3G1k/HoW62keYaP4hu8Ui2O6CSCCy3Svl 1uq6jqC87PnPN1nxJlZvatwnGMqsJ+Ng5NizJa0/G4dcrp00Miiuvg5KTvpQzwMd eR/QBBrWaNdCt0K9uQvcM7rzdrgpUc7z -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:52 2025 by rpki-client