$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft File: XwTABfKMKFbHu_R2uRxioC8vxRw.mft (raw, json) Hash identifier: e7Gah+KfkBIBbltl3VdIrKErPaUcgQWS0gZv3z5oY8w= Subject key identifier: 35:26:77:14:32:25:AB:93:4F:8E:AB:60:BF:70:E3:F8:50:AE:D7:1B Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C Certificate issuer: /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft Manifest number: 9A Signing time: Fri 25 Apr 2025 04:54:53 +0000 Manifest this update: Fri 25 Apr 2025 04:54:52 +0000 Manifest next update: Fri 02 May 2025 04:54:52 +0000 Files and hashes: 1: XwTABfKMKFbHu_R2uRxioC8vxRw.crl (hash: +V8UXnKChaZ9bgsDo2UrG0TpVL5Ftkwk82N7N0+wpBo=) 2: 900F4ADA440611EF85166C30C4F9AE02.roa (hash: jYgy4yMQyKQf5VxNbJ2NKQFUgnsZsFyOqLwxVUIrb0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C Validity Not Before: Apr 25 04:54:52 2025 GMT Not After : May 2 04:54:52 2025 GMT Subject: CN=680b159c-223d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e9:ee:f4:81:e7:4d:6d:82:95:20:a5:71:38: 86:a9:e2:d9:37:87:ba:09:41:27:e2:e5:90:a1:f3: 90:9c:90:4e:a4:8d:37:40:62:b4:48:74:06:2c:61: fa:fd:8d:56:a7:42:21:77:4f:a6:5b:ff:b3:23:8a: cc:5c:a1:74:2d:e0:7e:b9:52:54:6a:97:0a:a7:25: ee:db:0d:09:d6:97:4d:9b:5c:1f:3a:fe:29:ed:1e: 8e:0f:f8:d9:29:d2:7c:da:55:c2:ca:e7:90:1e:e5: b5:87:cb:52:62:91:29:90:84:b2:80:6e:48:08:28: 4f:ad:4f:a3:ed:fb:a9:d2:1b:a9:45:4d:f1:3e:2a: a8:ea:62:91:df:4d:c3:c3:bf:24:05:99:ac:a3:41: 8f:ec:e8:4b:fd:99:c5:de:7d:e1:62:d3:1c:04:ed: b7:d1:95:5b:4e:2b:f3:f6:6d:e6:2b:b1:ea:5b:03: ee:ce:39:57:f3:ff:af:70:f3:90:de:56:33:8a:c7: 10:05:91:64:cc:c9:ee:d7:fd:3d:44:61:ce:16:60: 1e:d4:cd:76:ff:3b:c1:05:66:78:8b:ed:63:7e:f1: 58:25:37:bf:86:e6:3a:33:09:5b:15:1b:76:f1:ce: 7f:24:a9:c0:bf:22:1e:e0:4c:92:9a:52:28:6e:f9: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:26:77:14:32:25:AB:93:4F:8E:AB:60:BF:70:E3:F8:50:AE:D7:1B X509v3 Authority Key Identifier: keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:e6:e1:cd:0b:d2:48:10:a5:4a:47:85:12:1d:b4:60:4c:64: 56:53:24:26:d4:98:18:97:c2:c3:3c:69:7f:88:da:e5:b2:4d: 1d:88:86:4a:a9:8e:b9:59:b1:a0:16:22:64:e9:ce:3a:ad:dc: 48:a1:8b:4d:48:24:d4:2b:f6:99:3e:da:ae:c6:86:04:b1:db: 7f:9b:44:f0:e6:43:dc:13:43:89:dd:30:3d:f1:2d:41:b3:b5: 4d:2e:2e:2b:dc:95:a9:2e:c6:3d:2b:e9:f1:5d:52:db:e2:94: 99:9b:45:10:df:16:9d:fd:93:d9:b6:00:33:df:16:b9:24:36: c2:a0:b0:1b:49:00:07:c9:ab:43:2c:8a:e9:49:c3:21:5f:4c: 29:a5:6e:5c:29:a9:99:1e:24:e1:27:c2:07:89:85:c8:45:b3: d6:0e:f1:70:90:94:a6:6d:07:e9:eb:30:b5:64:38:b7:76:14: cb:3f:86:61:33:7f:ab:56:8b:3a:bf:28:1d:92:32:a7:38:be: 75:de:22:30:c7:64:bd:4f:fc:b6:37:81:b7:e4:ae:ba:45:51: 68:5a:e3:9a:c5:bf:1f:e5:52:b4:83:81:79:16:21:62:97:ec: 3a:5e:a8:b3:d8:6d:52:e9:4f:27:6b:12:b9:96:dd:54:73:73: 6c:31:d2:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRkIxMTAvBgNVBAUTKDVGMDRDMDA1RjI4QzI4NTZDN0JCRjQ3NkI5MUM2MkEw MkYyRkM1MUMwHhcNMjUwNDI1MDQ1NDUyWhcNMjUwNTAyMDQ1NDUyWjAYMRYwFAYD VQQDEw02ODBiMTU5Yy0yMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyenu9IHnTW2ClSClcTiGqeLZN4e6CUEn4uWQofOQnJBOpI03QGK0SHQGLGH6 /Y1Wp0Ihd0+mW/+zI4rMXKF0LeB+uVJUapcKpyXu2w0J1pdNm1wfOv4p7R6OD/jZ KdJ82lXCyueQHuW1h8tSYpEpkISygG5ICChPrU+j7fup0hupRU3xPiqo6mKR303D w78kBZmso0GP7OhL/ZnF3n3hYtMcBO230ZVbTivz9m3mK7HqWwPuzjlX8/+vcPOQ 3lYziscQBZFkzMnu1/09RGHOFmAe1M12/zvBBWZ4i+1jfvFYJTe/huY6MwlbFRt2 8c5/JKnAvyIe4EySmlIobvnl+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUmdxQy JauTT46rYL9w4/hQrtcbMB8GA1UdIwQYMBaAFF8EwAXyjChWx7v0drkcYqAvL8Uc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGQi9FMTcxOTM2MjNE OEQxMUVGODcwNTNCMEZDNEY5QUUwMi9Yd1RBQmZLTUtGYkh1X1IydVJ4aW9DOHZ4 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1h3VEFCZktNS0ZiSHVfUjJ1Unhpb0M4dnhSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBGQi9FMTcxOTM2MjNEOEQxMUVGODcwNTNCMEZDNEY5QUUwMi9Yd1RBQmZLTUtG Ykh1X1IydVJ4aW9DOHZ4UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU5uHNC9JIEKVKR4USHbRgTGRWUyQm1JgYl8LDPGl/iNrlsk0diIZK qY65WbGgFiJk6c46rdxIoYtNSCTUK/aZPtquxoYEsdt/m0Tw5kPcE0OJ3TA98S1B s7VNLi4r3JWpLsY9K+nxXVLb4pSZm0UQ3xad/ZPZtgAz3xa5JDbCoLAbSQAHyatD LIrpScMhX0wppW5cKamZHiThJ8IHiYXIRbPWDvFwkJSmbQfp6zC1ZDi3dhTLP4Zh M3+rVos6vygdkjKnOL513iIwx2S9T/y2N4G35K66RVFoWuOaxb8f5VK0g4F5FiFi l+w6Xqiz2G1S6U8naxK5lt1Uc3NsMdJQ -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:20 2025 by rpki-client