$ rpki-client -vvf rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft File: 75-XzrKSdlHWT6oC452-DaO3H5U.mft (raw, json) Hash identifier: lhd3Z9Tx6pj0r800thKHISq6ZPYEu/Yi/p8tLNcM9Wg= Subject key identifier: C7:B0:7F:97:3E:1C:65:A6:5B:E6:9D:A8:3F:B9:87:B3:6D:F3:2A:2E Authority key identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95 Certificate issuer: /CN=A9165588/serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft Manifest number: 23 Signing time: Fri 25 Apr 2025 06:53:51 +0000 Manifest this update: Fri 25 Apr 2025 06:53:51 +0000 Manifest next update: Fri 02 May 2025 06:53:51 +0000 Files and hashes: 1: 75-XzrKSdlHWT6oC452-DaO3H5U.crl (hash: 3fvPnD/LGgBju6JDdW61x+g392FRvqlYFPUFpoMLIe0=) 2: C405E494FCBF11EF8E586B7AC4F9AE02.roa (hash: 8p+dYc7w4P5cdTWL4po8oK48UBPSJ7b6JBGkywZrPZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165588, serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95 Validity Not Before: Apr 25 06:53:51 2025 GMT Not After : May 2 06:53:51 2025 GMT Subject: CN=680b317f-cfbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4d:cf:3f:13:d6:98:00:c5:bc:ed:b2:89:96: 53:59:1b:83:80:84:43:74:2f:53:44:58:38:bd:ac: e8:76:63:52:24:2b:35:04:5d:15:c1:c1:40:9c:3d: 71:c4:f1:9c:ba:9f:3b:0f:7c:c8:ab:9f:d0:03:31: 4e:68:ea:55:db:cf:9c:fa:25:f5:f0:99:cb:1d:04: 04:4f:15:8d:53:13:94:e8:46:a1:17:68:b2:f4:47: 06:69:9f:22:21:e4:08:d2:33:67:96:5b:8a:cf:8b: ab:1c:9f:db:29:d0:f7:7f:91:dd:61:49:fb:8a:3f: 0e:2f:d9:7c:75:27:e4:ec:7f:96:50:c1:fe:ca:34: fc:46:be:b0:43:b3:99:8d:40:91:c1:18:78:83:9b: ac:48:df:18:46:fc:7d:8e:57:d7:70:84:c1:3e:1a: 39:be:da:95:9c:26:2d:06:65:36:2d:34:e1:1f:a9: f2:7d:2f:3c:e3:31:1a:9d:6f:ce:8d:21:dc:7f:20: 9a:c0:c5:6d:72:28:27:16:25:40:95:fc:c1:0d:e0: c6:22:8b:80:84:bf:91:05:d2:a9:88:71:c1:a5:17: 5e:ee:d6:5e:f3:68:32:13:f7:fa:9a:98:56:a0:6d: 5c:52:9c:a8:d4:4f:4d:d5:04:6d:b0:b7:a1:5d:59: 4f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B0:7F:97:3E:1C:65:A6:5B:E6:9D:A8:3F:B9:87:B3:6D:F3:2A:2E X509v3 Authority Key Identifier: keyid:EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:c9:0a:15:bb:fd:6b:9b:e5:6a:9a:b1:c3:a9:08:30:33:f7: f4:f8:a6:0b:77:ef:84:5a:bb:fe:c3:b7:c1:d7:ad:fc:04:f2: bd:81:ee:8a:eb:bc:77:4a:42:21:58:0e:26:cc:8a:d3:86:6c: 11:2d:85:64:59:b0:6f:79:05:df:5f:42:fb:70:a5:a6:71:f7: 02:4a:07:5d:c9:5e:fa:d0:a3:80:fb:f0:cb:ac:bb:ff:b9:78: f5:76:ea:c0:78:76:3a:d7:99:05:b7:63:12:a2:8d:7e:a9:ef: 8e:c8:44:3e:08:89:35:d2:83:c4:d9:dc:0f:13:f0:5f:f8:0b: 37:26:4e:03:9a:02:83:d1:3e:9c:f7:4d:28:07:08:2a:cf:47: b9:d2:20:d6:98:a1:e4:1f:32:4e:1b:7e:dc:cd:8a:78:b9:de: 2b:ff:a0:26:b3:2c:ca:45:8a:79:68:de:1b:ac:93:d7:41:16: d8:8d:95:9c:69:45:2f:a3:7c:46:6d:da:3e:41:b6:bc:e5:2a: 59:cf:96:93:3f:fc:e6:88:66:8d:1d:8c:da:ff:25:b3:51:6c: 95:b3:a7:95:e3:d0:8e:f3:56:d3:b3:93:58:e0:8b:14:87:9f: d1:6d:9c:cf:77:1a:11:b8:d0:f2:ab:95:ab:d9:f7:80:d6:26: f0:b3:3d:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTU4ODExMC8GA1UEBRMoRUY5Rjk3Q0VCMjkyNzY1MUQ2NEZBQTAyRTM5REJFMERB M0I3MUY5NTAeFw0yNTA0MjUwNjUzNTFaFw0yNTA1MDIwNjUzNTFaMBgxFjAUBgNV BAMTDTY4MGIzMTdmLWNmYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfTc8/E9aYAMW87bKJllNZG4OAhEN0L1NEWDi9rOh2Y1IkKzUEXRXBwUCcPXHE 8Zy6nzsPfMirn9ADMU5o6lXbz5z6JfXwmcsdBARPFY1TE5ToRqEXaLL0RwZpnyIh 5AjSM2eWW4rPi6scn9sp0Pd/kd1hSfuKPw4v2Xx1J+Tsf5ZQwf7KNPxGvrBDs5mN QJHBGHiDm6xI3xhG/H2OV9dwhME+Gjm+2pWcJi0GZTYtNOEfqfJ9LzzjMRqdb86N Idx/IJrAxW1yKCcWJUCV/MEN4MYii4CEv5EF0qmIccGlF17u1l7zaDIT9/qamFag bVxSnKjUT03VBG2wt6FdWU+JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUx7B/lz4c ZaZb5p2oP7mHs23zKi4wHwYDVR0jBBgwFoAU75+XzrKSdlHWT6oC452+DaO3H5Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NTg4LzY5NDUzMUYyRkE4 NzExRUY4M0VERUMyREM0RjlBRTAyLzc1LVh6cktTZGxIV1Q2b0M0NTItRGFPM0g1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzUtWHpyS1NkbEhXVDZvQzQ1Mi1EYU8zSDVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NTg4LzY5NDUzMUYyRkE4NzExRUY4M0VERUMyREM0RjlBRTAyLzc1LVh6cktTZGxI V1Q2b0M0NTItRGFPM0g1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKXJChW7/Wub5WqascOpCDAz9/T4pgt374Rau/7Dt8HXrfwE8r2B7orr vHdKQiFYDibMitOGbBEthWRZsG95Bd9fQvtwpaZx9wJKB13JXvrQo4D78Musu/+5 ePV26sB4djrXmQW3YxKijX6p747IRD4IiTXSg8TZ3A8T8F/4CzcmTgOaAoPRPpz3 TSgHCCrPR7nSINaYoeQfMk4bftzNini53iv/oCazLMpFinlo3husk9dBFtiNlZxp RS+jfEZt2j5BtrzlKlnPlpM//OaIZo0djNr/JbNRbJWzp5Xj0I7zVtOzk1jgixSH n9FtnM93GhG40PKrlavZ94DWJvCzPUQ= -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:06 2025 by rpki-client