$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json) Hash identifier: RXsgqiempD25Z4Wm+tRj/ygZJk/WxBoAHdiyxVds8MI= Subject key identifier: 5E:B6:66:83:78:A8:BE:58:B6:5E:68:6A:A9:88:22:98:9C:00:43:9D Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0E3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft Manifest number: 0E1D Signing time: Thu 24 Apr 2025 17:47:08 +0000 Manifest this update: Thu 24 Apr 2025 17:47:08 +0000 Manifest next update: Thu 01 May 2025 17:47:08 +0000 Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: SwxAJ2rrYd3AbARJLRC5ALaATtYK98Oi51/ZsS9511k=) 2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: K0BpqfADIAgpRrVb5VAxiR5k6a1N4eJk58+OYvAmefI=) 3: AF573166309511EABE9B5934C4F9AE02.roa (hash: wBVLudr4r1jyDPH+Ghnt4yYJmAXvAyl8ooTj+H1Y8oI=) 4: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: JffyrCPpCuKQ4JV9hKAHpBOYaMhGWQal4zN+8n2snKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3643 (0xe3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: Apr 24 17:47:08 2025 GMT Not After : May 1 17:47:08 2025 GMT Subject: CN=680a791c-fc56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:62:50:06:cb:f6:38:84:bd:78:42:4a:f7:69: 9f:69:9e:fc:7c:c8:f6:ce:a3:a2:87:e2:2e:e6:8a: 6f:fc:a2:d3:54:17:a6:21:60:56:dd:ef:89:f2:4b: 87:09:07:56:58:43:a8:07:6e:b1:26:5c:ec:c1:15: eb:0e:9f:3e:4a:f1:93:16:fb:26:1f:53:2a:44:34: 80:18:68:4c:94:87:0b:81:a7:98:47:59:43:20:1e: 30:3c:03:f3:3e:a2:2e:43:63:2b:e8:42:cb:fa:58: 3a:18:f8:e0:98:22:33:b7:98:d6:59:cd:14:e9:14: cb:50:f6:04:fa:eb:87:40:79:fa:6d:f0:ad:65:86: 1b:4d:05:12:8d:01:05:0b:1b:e1:5c:4a:10:97:9c: 0f:2d:53:bd:99:7f:c4:bd:8f:7f:1b:d4:74:9e:30: 3d:2c:e0:96:16:db:26:e2:a8:8c:5b:bb:cc:e7:2c: d4:31:db:6e:5b:eb:64:05:e0:b2:eb:17:f0:57:bb: 1f:d7:65:5e:78:bf:c7:45:a9:47:f2:02:ce:c5:23: fd:32:e3:a1:4a:1d:6e:96:04:c1:53:ca:94:7a:2c: db:8e:08:f6:34:74:2d:e8:c7:ce:46:61:40:13:78: b0:cf:c9:18:d1:9a:37:65:6d:5a:f0:7d:47:71:6e: 1c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B6:66:83:78:A8:BE:58:B6:5E:68:6A:A9:88:22:98:9C:00:43:9D X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:93:04:27:35:6f:e4:ce:8c:2b:a0:d3:81:de:22:c6:d4:91: 72:25:05:d7:a2:39:62:b8:33:cb:cb:a7:15:d7:3e:7f:42:cb: 7f:b9:82:46:d3:60:da:34:cb:9d:7b:ee:06:c8:2d:6b:65:a8: b3:62:53:88:b0:64:d0:95:25:c3:1b:96:8c:34:cd:c8:51:59: e8:99:ff:65:d1:f1:83:89:8d:4c:fe:22:33:1c:bc:56:0e:e7: 55:87:dc:c1:5e:16:1f:ac:36:19:89:47:af:e8:5d:3d:cf:c2: 52:a3:3d:14:20:56:d1:dd:a6:88:f0:80:57:a9:c1:06:0c:f3: ab:7b:46:b8:06:fe:1c:2a:59:e3:6d:94:3c:58:d2:b1:d8:b7: 28:15:ee:80:28:74:a5:dc:76:f7:9e:1f:d3:dc:2f:74:33:21: 93:b6:6c:ed:66:77:33:ac:d7:4e:60:7f:40:76:9f:21:cb:57: 3e:ae:75:ea:a0:09:72:66:32:ce:ad:57:32:0b:31:b6:58:35: 8c:3f:7d:36:ad:19:68:b1:55:59:67:fc:da:fe:1a:e2:db:38: c0:91:a4:60:a3:ca:88:f1:ba:f1:0c:17:65:c4:aa:07:ee:d9: 83:73:9b:4b:96:f0:98:89:a3:cf:d1:8c:f3:0a:0d:4e:ae:a1: fd:cb:28:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjUwNDI0MTc0NzA4WhcNMjUwNTAxMTc0NzA4WjAYMRYwFAYD VQQDEw02ODBhNzkxYy1mYzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWJQBsv2OIS9eEJK92mfaZ78fMj2zqOih+Iu5opv/KLTVBemIWBW3e+J8kuH CQdWWEOoB26xJlzswRXrDp8+SvGTFvsmH1MqRDSAGGhMlIcLgaeYR1lDIB4wPAPz PqIuQ2Mr6ELL+lg6GPjgmCIzt5jWWc0U6RTLUPYE+uuHQHn6bfCtZYYbTQUSjQEF CxvhXEoQl5wPLVO9mX/EvY9/G9R0njA9LOCWFtsm4qiMW7vM5yzUMdtuW+tkBeCy 6xfwV7sf12VeeL/HRalH8gLOxSP9MuOhSh1ulgTBU8qUeizbjgj2NHQt6MfORmFA E3iwz8kY0Zo3ZW1a8H1HcW4cCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF62ZoN4 qL5Ytl5oaqmIIpicAEOdMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6 MlJJeVVQdTJVeDZJcEttZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCckwQnNW/kzowroNOB3iLG1JFyJQXXojliuDPLy6cV1z5/Qst/uYJG 02DaNMude+4GyC1rZaizYlOIsGTQlSXDG5aMNM3IUVnomf9l0fGDiY1M/iIzHLxW DudVh9zBXhYfrDYZiUev6F09z8JSoz0UIFbR3aaI8IBXqcEGDPOre0a4Bv4cKlnj bZQ8WNKx2LcoFe6AKHSl3Hb3nh/T3C90MyGTtmztZnczrNdOYH9Adp8hy1c+rnXq oAlyZjLOrVcyCzG2WDWMP302rRlosVVZZ/za/hri2zjAkaRgo8qI8brxDBdlxKoH 7tmDc5tLlvCYiaPP0YzzCg1OrqH9yyh0 -----END CERTIFICATE-----Generated at Sat Apr 26 14:16:03 2025 by rpki-client