$ rpki-client -vvf rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft File: xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft (raw, json) Hash identifier: Fpuh59KsrpNtZgghHBAMU0D5Gz+dCUDslV6vuWFOA74= Subject key identifier: 06:01:AE:6F:BA:C8:4E:AE:12:35:A2:26:3B:28:AD:80:4A:EE:EB:B1 Authority key identifier: C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39 Certificate issuer: /CN=A915786A/serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939 Certificate serial: 0BD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft Manifest number: 0BCC Signing time: Thu 24 Apr 2025 18:43:58 +0000 Manifest this update: Thu 24 Apr 2025 18:43:58 +0000 Manifest next update: Thu 01 May 2025 18:43:58 +0000 Files and hashes: 1: xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl (hash: JphUd2Cz5xmiVuqYWIrh4GNv71+Cj5RrkFAP9uyTqDQ=) 2: 7A7B776A1F0E11EA92AA6824C4F9AE02.roa (hash: vuAfqS+oupAqLtbWHhdz3OsiJgWg5sczosdrHd8kXwo=) 3: FBFF89FC3AC611EEB790D485C4F9AE02.roa (hash: DQuIcDvil4xhDWRcyNWiHmLcTyjG0SYLvwiCuCDmI90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3031 (0xbd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915786A, serialNumber=C71531D25F80548F5B651F8649325F3C8FD85939 Validity Not Before: Apr 24 18:43:58 2025 GMT Not After : May 1 18:43:58 2025 GMT Subject: CN=680a866e-d3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4e:5a:28:d6:bb:00:cb:c2:1b:7d:45:28:a3: 17:fe:37:eb:a4:81:0a:29:51:7e:9d:8d:76:d7:eb: ea:67:25:40:33:8f:56:e0:d3:ac:76:a2:8a:c7:54: 18:4a:51:82:29:f3:85:8e:97:7f:a6:ec:8a:04:f4: a5:45:a5:5b:44:c1:66:32:1d:dd:4d:f8:fc:01:f1: 4e:6a:29:65:60:b7:27:a0:52:60:0d:64:e2:cf:14: 95:b9:e8:87:bd:b1:fd:b1:59:9a:85:81:62:11:c7: 92:0f:47:09:22:46:83:42:cd:1b:37:b1:96:c9:e3: ec:c5:a7:5a:3b:2e:23:1d:ec:c1:3c:fd:b0:a7:91: 70:46:41:4a:ee:ac:e7:34:ea:58:6a:7a:65:49:3f: 91:b6:9d:0b:e9:1f:8c:15:bd:35:c3:14:d3:e1:c2: 66:9e:35:e5:40:93:3d:e0:67:71:4a:58:88:4a:ff: 72:4a:56:fa:f3:65:6c:35:27:7e:38:d6:36:5d:26: 89:f1:92:d9:43:98:65:87:9d:37:35:13:29:ae:ba: 41:ea:f3:4b:ad:d2:4b:ff:0b:f7:2d:aa:59:f7:c6: 64:bc:49:48:bb:69:3b:c7:cb:eb:9e:38:78:30:40: d1:f9:a7:61:3f:20:ac:f1:5a:5c:23:a7:a2:70:c9: 48:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:01:AE:6F:BA:C8:4E:AE:12:35:A2:26:3B:28:AD:80:4A:EE:EB:B1 X509v3 Authority Key Identifier: keyid:C7:15:31:D2:5F:80:54:8F:5B:65:1F:86:49:32:5F:3C:8F:D8:59:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xxUx0l-AVI9bZR-GSTJfPI_YWTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915786A/126DFC961A5511EA88042211C4F9AE02/xxUx0l-AVI9bZR-GSTJfPI_YWTk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:9d:fb:b3:88:25:77:c2:5e:da:5c:e8:96:cf:be:87:00:05: 0a:7f:ac:1d:5d:05:2b:ab:4d:f2:f5:2f:8d:4f:57:b0:d7:5e: 6e:91:89:22:2a:f8:ff:39:09:2a:28:b1:6f:61:25:1e:18:64: e4:ad:9e:74:e8:3c:0c:a9:23:be:77:d7:ef:ae:a2:33:58:58: 0c:d4:82:a1:dd:a5:84:fc:f5:32:b0:48:c1:51:de:b2:96:4c: 9e:61:5a:8f:40:4e:02:b9:ed:b1:6b:3e:df:c4:39:41:08:7c: e0:5b:4e:ab:f5:47:d3:3f:02:d5:3e:70:7a:c8:65:ea:99:a9: 0e:a1:52:f7:a1:8f:81:59:73:8d:32:57:34:b2:d4:cb:40:ef: fd:0a:ef:84:0f:3b:a1:90:1f:52:55:0a:69:5e:31:0f:d2:bd: 7b:b0:2d:98:a7:15:11:9a:cf:06:fd:5d:7c:6d:2b:4a:6c:72: 12:4a:d3:77:79:d6:6a:5f:dd:a5:e3:5a:5d:42:4b:5f:2b:e9: c6:58:18:ee:b7:73:e2:5a:cf:2a:18:8e:8a:23:92:8c:9a:6e: be:af:b5:cf:8b:9e:df:6e:4c:5a:be:5a:db:f6:54:5b:35:57: f1:d4:c7:eb:a7:a2:17:8c:46:7e:17:40:f9:ee:3f:2d:da:94: ff:30:a0:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc4NkExMTAvBgNVBAUTKEM3MTUzMUQyNUY4MDU0OEY1QjY1MUY4NjQ5MzI1RjND OEZEODU5MzkwHhcNMjUwNDI0MTg0MzU4WhcNMjUwNTAxMTg0MzU4WjAYMRYwFAYD VQQDEw02ODBhODY2ZS1kM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8U5aKNa7AMvCG31FKKMX/jfrpIEKKVF+nY121+vqZyVAM49W4NOsdqKKx1QY SlGCKfOFjpd/puyKBPSlRaVbRMFmMh3dTfj8AfFOaillYLcnoFJgDWTizxSVueiH vbH9sVmahYFiEceSD0cJIkaDQs0bN7GWyePsxadaOy4jHezBPP2wp5FwRkFK7qzn NOpYanplST+Rtp0L6R+MFb01wxTT4cJmnjXlQJM94GdxSliISv9ySlb682VsNSd+ ONY2XSaJ8ZLZQ5hlh503NRMprrpB6vNLrdJL/wv3LapZ98ZkvElIu2k7x8vrnjh4 MEDR+adhPyCs8VpcI6eicMlIRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYBrm+6 yE6uEjWiJjsorYBK7uuxMB8GA1UdIwQYMBaAFMcVMdJfgFSPW2UfhkkyXzyP2Fk5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2QS8xMjZERkM5NjFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJOWJaUi1HU1RKZlBJX1lX VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h4VXgwbC1BVkk5YlpSLUdTVEpmUElfWVdUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Nzg2QS8xMjZERkM5NjFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi94eFV4MGwtQVZJ OWJaUi1HU1RKZlBJX1lXVGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAnfuziCV3wl7aXOiWz76HAAUKf6wdXQUrq03y9S+NT1ew115ukYki Kvj/OQkqKLFvYSUeGGTkrZ506DwMqSO+d9fvrqIzWFgM1IKh3aWE/PUysEjBUd6y lkyeYVqPQE4Cue2xaz7fxDlBCHzgW06r9UfTPwLVPnB6yGXqmakOoVL3oY+BWXON Mlc0stTLQO/9Cu+EDzuhkB9SVQppXjEP0r17sC2YpxURms8G/V18bStKbHISStN3 edZqX92l41pdQktfK+nGWBjut3PiWs8qGI6KI5KMmm6+r7XPi57fbkxavlrb9lRb NVfx1Mfrp6IXjEZ+F0D57j8t2pT/MKAa -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:24 2025 by rpki-client