$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft File: XoJBeVOzWp-LWaQuyUb00CTYd2s.mft (raw, json) Hash identifier: SuFcHAJj8Do+7EXt5opzbwF6c5QZiD6ejWUZ3pa+5CA= Subject key identifier: A7:89:57:43:64:B9:66:D2:BF:30:56:82:0E:B7:E7:22:92:AE:83:00 Authority key identifier: 5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B Certificate issuer: /CN=A915B2F1/serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B Certificate serial: 0637 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft Manifest number: 0632 Signing time: Thu 24 Apr 2025 22:26:51 +0000 Manifest this update: Thu 24 Apr 2025 22:26:50 +0000 Manifest next update: Thu 01 May 2025 22:26:50 +0000 Files and hashes: 1: XoJBeVOzWp-LWaQuyUb00CTYd2s.crl (hash: +Tgl8Dpbr2UfRn+Nma6FyhmZhRQbfa3NIVQ/ChZD3b0=) 2: 9378220A8DF211EBADEDD212C4F9AE02.roa (hash: VBf2KoYNobofH3/9baJ/IEUrVzYCh2sv0jk4TufySgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1591 (0x637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B2F1, serialNumber=5E82417953B35A9F8B59A42EC946F4D024D8776B Validity Not Before: Apr 24 22:26:50 2025 GMT Not After : May 1 22:26:50 2025 GMT Subject: CN=680abaab-e16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:60:8f:e9:8f:8b:d4:b6:b5:47:d4:81:fb:41: 71:53:fe:9d:5d:71:9f:f4:78:5b:71:65:5a:94:d2: 46:fc:b1:66:62:5a:4b:f7:a3:b2:2c:44:16:c3:e0: 04:6f:4e:c4:ad:66:cc:b2:fd:74:d3:40:a4:f8:14: 8b:c4:10:4b:05:86:0c:99:ab:95:76:f0:b6:94:c7: 9f:24:e9:e8:54:47:ab:00:4f:ef:cf:68:ad:42:9c: 56:6b:03:4c:4b:76:2c:ac:7d:88:4f:2d:69:0b:3b: cb:b0:16:c7:cf:ca:44:27:79:03:a9:37:4a:3c:d4: e2:be:cd:69:5c:8f:ca:82:11:32:90:89:b4:6a:4e: 0f:23:54:bf:0a:fb:52:79:28:03:23:2e:78:a8:e9: 26:40:79:c5:48:dd:ab:68:a2:7f:7d:5d:57:d9:7b: 1d:c2:e6:a9:5d:5b:e0:35:01:41:db:fc:31:c2:62: b2:a7:19:90:d2:98:18:3a:6c:d1:6d:d3:3b:dd:02: dc:68:80:7c:05:2e:42:c3:ae:0f:08:53:10:b5:b0: 52:0b:2b:5c:df:d4:d9:75:66:16:a7:1b:67:ea:26: 1d:52:ba:1d:d6:2b:7e:87:88:3a:a7:45:c4:06:8c: 17:56:31:b3:46:17:21:d1:ce:67:c9:1c:6f:8d:46: aa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:89:57:43:64:B9:66:D2:BF:30:56:82:0E:B7:E7:22:92:AE:83:00 X509v3 Authority Key Identifier: keyid:5E:82:41:79:53:B3:5A:9F:8B:59:A4:2E:C9:46:F4:D0:24:D8:77:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XoJBeVOzWp-LWaQuyUb00CTYd2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2F1/26007FB68DF111EB8D0EA511C4F9AE02/XoJBeVOzWp-LWaQuyUb00CTYd2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:82:d3:a7:f4:e9:bc:a6:c1:eb:2f:37:2c:12:b8:1a:99:62: 4d:49:6b:7d:88:cd:36:84:09:d0:95:74:5b:52:0c:47:6f:2f: cd:4a:84:1e:b3:65:a0:38:83:10:7e:bf:77:e2:0f:d8:e2:a2: 65:64:d4:91:48:bd:2d:37:c0:e0:ab:9b:bf:83:f0:46:6f:89: 6d:f2:5e:c6:b7:8f:fd:3a:80:5f:85:20:70:d7:91:0b:95:3e: 0d:4b:dc:05:2f:7b:77:8c:0f:8a:85:32:b8:65:ac:a3:d2:a1: 9c:37:bf:95:a7:9b:36:b8:b9:1a:69:16:2d:d7:d8:9f:c7:0e: 7e:c6:6d:3f:aa:7b:18:7e:fc:0b:52:c4:bf:ed:80:84:6b:1a: d3:52:55:7b:b0:bc:17:5f:bf:40:5a:96:ac:a8:c3:32:6c:5a: fe:a3:35:4b:77:93:9d:f8:4e:38:13:37:d7:1e:3a:49:9c:a4: 75:ee:66:60:6e:f4:a6:b1:43:ed:18:0f:f3:11:3f:35:74:5e: d5:ce:bc:e7:24:7f:03:84:f1:5c:56:d0:d3:cf:fa:17:a3:36: 22:b2:b3:b6:c1:6f:59:30:00:26:9e:77:5f:b7:be:7f:a6:bf: 0b:51:af:fd:b6:1d:d0:3a:29:dc:c7:69:8b:ec:ac:9d:59:e4: b9:28:37:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIyRjExMTAvBgNVBAUTKDVFODI0MTc5NTNCMzVBOUY4QjU5QTQyRUM5NDZGNEQw MjREODc3NkIwHhcNMjUwNDI0MjIyNjUwWhcNMjUwNTAxMjIyNjUwWjAYMRYwFAYD VQQDEw02ODBhYmFhYi1lMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2CP6Y+L1La1R9SB+0FxU/6dXXGf9HhbcWValNJG/LFmYlpL96OyLEQWw+AE b07ErWbMsv1000Ck+BSLxBBLBYYMmauVdvC2lMefJOnoVEerAE/vz2itQpxWawNM S3YsrH2ITy1pCzvLsBbHz8pEJ3kDqTdKPNTivs1pXI/KghEykIm0ak4PI1S/CvtS eSgDIy54qOkmQHnFSN2raKJ/fV1X2XsdwuapXVvgNQFB2/wxwmKypxmQ0pgYOmzR bdM73QLcaIB8BS5Cw64PCFMQtbBSCytc39TZdWYWpxtn6iYdUrod1it+h4g6p0XE BowXVjGzRhch0c5nyRxvjUaqLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKeJV0Nk uWbSvzBWgg635yKSroMAMB8GA1UdIwQYMBaAFF6CQXlTs1qfi1mkLslG9NAk2Hdr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJGMS8yNjAwN0ZCNjhE RjExMUVCOEQwRUE1MTFDNEY5QUUwMi9Yb0pCZVZPeldwLUxXYVF1eVViMDBDVFlk MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvSkJlVk96V3AtTFdhUXV5VWIwMENUWWQycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjJGMS8yNjAwN0ZCNjhERjExMUVCOEQwRUE1MTFDNEY5QUUwMi9Yb0pCZVZPeldw LUxXYVF1eVViMDBDVFlkMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDgtOn9Om8psHrLzcsErgamWJNSWt9iM02hAnQlXRbUgxHby/NSoQe s2WgOIMQfr934g/Y4qJlZNSRSL0tN8Dgq5u/g/BGb4lt8l7Gt4/9OoBfhSBw15EL lT4NS9wFL3t3jA+KhTK4Zayj0qGcN7+Vp5s2uLkaaRYt19ifxw5+xm0/qnsYfvwL UsS/7YCEaxrTUlV7sLwXX79AWpasqMMybFr+ozVLd5Od+E44EzfXHjpJnKR17mZg bvSmsUPtGA/zET81dF7VzrznJH8DhPFcVtDTz/oXozYisrO2wW9ZMAAmnndft75/ pr8LUa/9th3QOincx2mL7KydWeS5KDey -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:55 2025 by rpki-client