$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json) Hash identifier: rkYUHq1KcKE1aYRVEBlFBAJJMdwDrr4ESuGffDNB+vk= Subject key identifier: 9E:47:77:59:B3:69:6B:51:67:7C:2E:04:5D:76:F5:66:53:68:FD:E7 Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Certificate serial: 12A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft Manifest number: 129E Signing time: Thu 24 Apr 2025 17:05:21 +0000 Manifest this update: Thu 24 Apr 2025 17:05:20 +0000 Manifest next update: Thu 01 May 2025 17:05:20 +0000 Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: 6Dlv7/y3ffyQp+wLK/T/dYilc8HlV5DgBORA8KEXPEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4768 (0x12a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Validity Not Before: Apr 24 17:05:20 2025 GMT Not After : May 1 17:05:20 2025 GMT Subject: CN=680a6f50-e0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:33:ea:01:9f:d2:0b:57:1a:39:00:e6:3d: 8d:95:2c:79:a1:c7:83:aa:c6:47:d6:79:a2:81:df: c5:e8:1c:61:7e:6f:ae:c7:70:4f:78:e4:35:1c:02: bf:54:d8:03:89:bb:be:b7:d9:e8:75:e3:26:50:6d: 48:6d:77:9b:d9:17:37:10:bb:61:69:2a:bc:fb:3b: b5:15:8b:6a:86:ef:91:8a:fb:b7:6a:5b:bb:2b:79: 9a:8d:c2:02:1d:46:04:77:95:f3:d2:ef:0f:68:09: 36:20:86:ad:df:75:ca:1f:eb:6b:16:b3:0a:8e:71: 8b:84:2f:c7:0b:7f:ab:16:f6:9a:9e:87:60:ed:10: 58:2c:5d:05:0e:99:1c:d6:8c:68:f2:db:97:b2:57: 9c:40:14:3f:83:bf:03:b2:e3:71:54:f6:cd:4e:c2: 5c:d1:0c:17:83:fd:da:6e:e8:2a:02:c6:33:fb:e9: 50:ba:37:da:41:48:df:10:2b:80:9c:fb:a5:e2:0e: 9f:76:e2:67:7f:d2:d4:94:a0:fc:53:7a:eb:72:22: 26:6e:9c:ef:bd:5c:af:34:f1:08:71:69:a7:6b:69: ad:89:44:0f:52:d7:60:a0:b2:1c:5e:64:3a:33:95: a5:0f:06:fd:56:6d:f2:64:4c:c3:a1:f6:c8:1d:bb: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:47:77:59:B3:69:6B:51:67:7C:2E:04:5D:76:F5:66:53:68:FD:E7 X509v3 Authority Key Identifier: keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:f8:e0:ed:c3:1c:79:69:c0:f7:f1:8a:5e:8e:d7:7d:f2:78: 1c:fd:f6:44:47:34:87:8e:77:ba:a0:c3:dc:b8:02:89:66:28: 19:09:b6:d5:b0:ad:2f:ee:17:47:5a:ae:86:fd:25:90:82:98: 59:c8:86:f3:13:9d:fb:90:ac:70:8f:f7:d7:67:ce:03:26:35: 9a:4e:79:16:28:9e:94:56:01:eb:e8:41:df:80:09:a8:3c:e4: 98:4d:9e:d9:d0:84:d6:8f:a8:f8:1c:66:f2:aa:b1:3b:f8:58: ad:21:6f:2c:bc:3d:8e:52:dc:77:24:60:27:6d:cd:21:6a:27: 38:df:1f:c3:46:4a:a4:b7:19:c0:71:24:3a:63:20:70:5c:5b: eb:d6:ff:7c:9c:f6:03:14:71:63:74:6a:29:33:9f:3a:51:84: 8f:89:c7:ce:52:bc:65:36:0e:7c:42:cf:fa:f7:55:f1:de:64: c1:a9:1f:5f:3d:4a:a8:d4:be:3c:69:1c:fa:b4:e1:1f:39:fd: a1:eb:41:64:b0:5e:a9:4e:5e:e9:85:9f:19:55:fc:a5:56:e0: f4:a6:ab:ac:4f:83:f6:8a:0a:a7:5f:b0:86:ac:d8:c3:e2:a0: 2e:90:61:b5:d6:5d:f1:92:ca:46:c9:c6:c0:c1:53:bd:23:a1: cb:2e:33:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMzAxMTAvBgNVBAUTKDVDMjI1MDE3Q0NDOTYyQjBFNzM5MEIzMENGMEE1NjIy RjdDREZBRUQwHhcNMjUwNDI0MTcwNTIwWhcNMjUwNTAxMTcwNTIwWjAYMRYwFAYD VQQDEw02ODBhNmY1MC1lMGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyEz6gGf0gtXGjkA5j2NlSx5oceDqsZH1nmigd/F6Bxhfm+ux3BPeOQ1HAK/ VNgDibu+t9nodeMmUG1IbXeb2Rc3ELthaSq8+zu1FYtqhu+Rivu3alu7K3majcIC HUYEd5Xz0u8PaAk2IIat33XKH+trFrMKjnGLhC/HC3+rFvaanodg7RBYLF0FDpkc 1oxo8tuXslecQBQ/g78DsuNxVPbNTsJc0QwXg/3abugqAsYz++lQujfaQUjfECuA nPul4g6fduJnf9LUlKD8U3rrciImbpzvvVyvNPEIcWmna2mtiUQPUtdgoLIcXmQ6 M5WlDwb9Vm3yZEzDofbIHbvnFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ5Hd1mz aWtRZ3wuBF129WZTaP3nMB8GA1UdIwQYMBaAFFwiUBfMyWKw5zkLMM8KViL3zfrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMzMC9FQUQ4NzYzQ0Mw OTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6SllyRG5PUXN3endwV0l2Zk4t dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDSlFGOHpKWXJEbk9Rc3d6d3BXSXZmTi11MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMzMC9FQUQ4NzYzQ0MwOTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6Slly RG5PUXN3endwV0l2Zk4tdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy+ODtwxx5acD38Ypejtd98ngc/fZERzSHjne6oMPcuAKJZigZCbbV sK0v7hdHWq6G/SWQgphZyIbzE537kKxwj/fXZ84DJjWaTnkWKJ6UVgHr6EHfgAmo POSYTZ7Z0ITWj6j4HGbyqrE7+FitIW8svD2OUtx3JGAnbc0haic43x/DRkqktxnA cSQ6YyBwXFvr1v98nPYDFHFjdGopM586UYSPicfOUrxlNg58Qs/691Xx3mTBqR9f PUqo1L48aRz6tOEfOf2h60FksF6pTl7phZ8ZVfylVuD0pqusT4P2igqnX7CGrNjD 4qAukGG11l3xkspGycbAwVO9I6HLLjNG -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:42 2025 by rpki-client