$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json) Hash identifier: 0CjMtutrlyLAvTNSRCqbUm6gCKlLTCR+iDz7HazNHNE= Subject key identifier: B3:E0:B0:38:1E:4A:25:5E:9D:63:11:FC:C7:50:95:39:9C:96:21:2A Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft Manifest number: 01C3 Signing time: Fri 25 Apr 2025 02:15:19 +0000 Manifest this update: Fri 25 Apr 2025 02:15:19 +0000 Manifest next update: Fri 02 May 2025 02:15:18 +0000 Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: em5iJ4PfmJUL5/6nbFXN57/1RFRgLoNBWXriVjeHDRQ=) 2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: ziWoAY2hbvtxePvnZWAtSB5jp5zkw3S8bF9M6H2eX84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EC0, serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Validity Not Before: Apr 25 02:15:19 2025 GMT Not After : May 2 02:15:18 2025 GMT Subject: CN=680af037-d4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:71:1f:fa:0d:35:e5:fc:da:81:27:93:9f:6e: 5f:af:93:e1:3d:28:41:54:58:5d:a8:9f:6d:d3:87: 35:05:7d:a2:55:33:e5:77:96:bb:6f:a8:09:fd:d8: 5d:25:08:40:64:a3:52:c6:3c:4c:dd:d6:e8:12:1d: 09:ad:22:65:b5:c0:d7:aa:ff:ba:85:6e:82:06:05: f2:0c:ee:99:32:75:e9:05:c7:38:1c:7e:c9:20:ea: 23:20:08:77:a7:05:ce:20:10:18:0b:3d:8a:9f:2b: 84:a8:c0:81:21:ab:ea:da:1b:e8:03:36:b7:62:9d: f4:03:6c:9c:17:19:3d:76:4d:c8:09:e3:18:d4:f6: e5:9d:09:dc:c1:0c:51:23:1a:9a:e5:14:a8:14:7e: 56:ae:0c:16:52:2d:dc:5d:31:5b:6f:d9:1f:6e:18: ed:79:87:31:63:35:68:6c:f1:7b:d9:7e:45:d7:2a: be:fd:1e:63:d1:7d:4e:79:a8:bf:65:6c:93:a9:13: 10:bb:b4:e2:c2:b8:5e:d2:ac:26:36:39:02:ba:89: af:fa:8b:c4:e4:5d:4b:d3:b3:e2:16:73:a2:1b:f9: 7f:8f:ef:1d:32:df:ca:70:67:51:ba:e4:a9:ac:24: 3b:01:a0:af:f8:02:5c:ed:de:9f:89:1b:73:54:72: 23:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E0:B0:38:1E:4A:25:5E:9D:63:11:FC:C7:50:95:39:9C:96:21:2A X509v3 Authority Key Identifier: keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:fc:9e:e3:f7:a7:95:a4:4b:89:0f:32:c0:55:0f:c5:b9:2c: 93:0e:e5:3c:fd:e4:b3:5a:3d:ae:12:6d:7d:7c:06:33:22:85: 41:e8:bd:67:fa:ec:9e:ed:f2:97:0c:d5:4c:57:38:8d:18:29: f8:2c:e6:5f:78:1b:40:1e:26:4c:c0:34:b3:2a:36:7f:73:95: a4:5a:c1:90:ab:67:14:c7:40:40:d1:0a:0b:06:fc:f1:8a:1c: 5d:b6:f0:de:0e:5d:c8:e0:16:21:af:1b:a4:00:a2:bf:9f:f4: c9:56:0f:1b:6e:cf:63:8c:46:90:d1:da:1d:0e:1d:b1:fc:cd: 37:f7:a0:b8:f3:3c:ff:e2:fd:57:0d:a5:67:ae:a0:6b:84:a6: 30:90:0e:f4:84:c3:56:bb:b0:18:77:46:df:a1:f6:98:09:3a: f8:a3:93:d2:f5:38:60:a3:0d:90:da:81:df:e1:07:5c:82:4e: 8e:38:70:d4:55:d5:98:dd:04:12:e1:41:d3:29:6e:cd:e6:cf: 64:8d:99:2c:38:15:c4:82:06:89:52:6d:7f:c3:49:51:42:dc: 4f:66:ba:8d:bc:4b:aa:19:68:20:7f:a5:5e:15:ff:52:23:a3: 79:ac:54:df:b2:98:d6:a4:92:7d:fa:4c:db:1b:4a:14:85:2d: 66:38:95:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0 N0E1Qzc0NzEwHhcNMjUwNDI1MDIxNTE5WhcNMjUwNTAyMDIxNTE4WjAYMRYwFAYD VQQDEw02ODBhZjAzNy1kNGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3Ef+g015fzagSeTn25fr5PhPShBVFhdqJ9t04c1BX2iVTPld5a7b6gJ/dhd JQhAZKNSxjxM3dboEh0JrSJltcDXqv+6hW6CBgXyDO6ZMnXpBcc4HH7JIOojIAh3 pwXOIBAYCz2KnyuEqMCBIavq2hvoAza3Yp30A2ycFxk9dk3ICeMY1PblnQncwQxR Ixqa5RSoFH5WrgwWUi3cXTFbb9kfbhjteYcxYzVobPF72X5F1yq+/R5j0X1Oeai/ ZWyTqRMQu7Tiwrhe0qwmNjkCuomv+ovE5F1L07PiFnOiG/l/j+8dMt/KcGdRuuSp rCQ7AaCv+AJc7d6fiRtzVHIj5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPgsDge SiVenWMR/MdQlTmcliEqMB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEVDMC9EQUU2NzQwQzdGM0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBS aWNlZURuU294N2hIcGNkSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc/J7j96eVpEuJDzLAVQ/FuSyTDuU8/eSzWj2uEm19fAYzIoVB6L1n +uye7fKXDNVMVziNGCn4LOZfeBtAHiZMwDSzKjZ/c5WkWsGQq2cUx0BA0QoLBvzx ihxdtvDeDl3I4BYhrxukAKK/n/TJVg8bbs9jjEaQ0dodDh2x/M0396C48zz/4v1X DaVnrqBrhKYwkA70hMNWu7AYd0bfofaYCTr4o5PS9Thgow2Q2oHf4Qdcgk6OOHDU VdWY3QQS4UHTKW7N5s9kjZksOBXEggaJUm1/w0lRQtxPZrqNvEuqGWggf6VeFf9S I6N5rFTfspjWpJJ9+kzbG0oUhS1mOJXS -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:01 2025 by rpki-client