$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: EtZgCy0BWX9zGzXNL+kMf0isjaJgReJWR6Kjz6CUvjA= Subject key identifier: F5:BA:36:BF:CF:8E:39:1E:3D:93:2C:11:80:DF:C0:F8:67:C2:14:6F Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 3485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 347C Signing time: Thu 24 Apr 2025 14:38:36 +0000 Manifest this update: Thu 24 Apr 2025 14:38:36 +0000 Manifest next update: Thu 01 May 2025 14:38:36 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: b9dmAlmtjRhF0jyCvLumMDmXwwkD0yqq6te1fRV0CLc=) 2: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: m1Ja+K+BQF88h58Y18w9A7vu3WiRuOsB65pKsql8BvI=) 3: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: Zl4gUZhHt66LNUFLaLmernm+th1hHU0/5O3LszjxBds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13445 (0x3485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: Apr 24 14:38:36 2025 GMT Not After : May 1 14:38:36 2025 GMT Subject: CN=680a4cec-8574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:bb:93:93:4e:09:b5:e9:ce:aa:29:32:06: 52:0d:0e:27:5d:24:09:14:68:9a:30:99:4f:31:55: 07:6f:93:c2:66:68:3f:bf:da:87:b3:22:6a:08:91: 18:54:f8:25:69:5a:79:ea:a6:2e:04:c6:77:fa:af: 71:a2:f2:d7:cd:65:c2:a6:4b:32:80:df:7d:54:87: a6:48:cc:c0:28:62:11:80:6a:02:98:6f:5a:91:69: 08:65:d3:9f:92:16:69:5d:40:5a:d1:45:3e:89:c4: 62:65:cb:a4:2e:96:0c:b6:84:fa:e4:7d:bb:8f:05: ec:b9:e7:23:4e:3d:6d:16:d5:fe:6b:7e:04:03:b9: 25:cb:fa:96:d8:6f:46:66:b8:43:6b:f4:0a:36:06: 13:b7:be:64:e3:93:6e:5f:41:b0:89:02:0f:92:fd: b8:03:c4:f8:c9:ab:c4:f9:88:95:f5:7d:15:a9:71: d3:1d:28:bd:9a:bf:3e:a9:3e:19:16:9c:e6:4a:e1: 3c:42:33:c0:64:b3:bf:38:51:a6:e4:8c:3b:fe:bb: 7a:62:27:86:bb:0c:ea:04:60:3e:15:02:a2:fa:3f: 3f:a9:03:2f:5c:bf:fc:42:40:f4:56:b7:58:bf:e1: 72:ae:8e:02:a8:66:29:9e:36:64:39:7a:ca:95:85: 3f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BA:36:BF:CF:8E:39:1E:3D:93:2C:11:80:DF:C0:F8:67:C2:14:6F X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:5b:9e:ce:4e:46:74:ad:b2:01:e1:55:c3:24:d1:a6:a7:95: 57:ef:95:49:27:1d:c5:06:af:73:71:f8:18:ff:8c:36:3c:d1: 9d:86:f4:1f:ee:68:c6:d7:f5:8b:41:b5:45:5d:49:af:e6:af: 91:42:d6:fb:1b:16:c2:30:49:04:c3:17:27:03:d5:55:72:83: b6:e6:e7:59:16:20:08:b5:5a:48:b1:57:6b:9f:7b:ca:02:9b: 23:e6:db:c3:34:27:24:7b:31:e3:a3:de:94:00:4b:4b:63:e7: f8:15:bf:d8:b9:2f:d1:a5:e4:ca:cf:4d:59:40:1a:f4:e5:39: e7:b1:e5:fe:c8:ac:46:b0:b1:f9:13:55:16:1e:3f:69:ac:9e: ec:ef:6f:52:d0:bc:a1:40:39:f5:e4:ca:de:56:79:e9:5d:fc: c7:76:e3:86:65:a7:5c:34:56:60:17:ff:38:76:e9:82:b0:61: ee:17:9d:d4:60:ab:bd:eb:ff:fa:91:20:a1:53:8b:a4:c6:49: bf:a9:f6:64:a7:2c:6c:5e:07:cd:ec:11:36:fd:98:6f:21:08: 6c:75:63:54:01:b6:f2:2d:a6:39:ca:96:89:1d:8e:01:f2:8c: e8:0d:93:a6:e8:25:82:3a:e4:94:9c:46:ab:d2:c1:96:44:f4: 53:00:87:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjUwNDI0MTQzODM2WhcNMjUwNTAxMTQzODM2WjAYMRYwFAYD VQQDEw02ODBhNGNlYy04NTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxn+7k5NOCbXpzqopMgZSDQ4nXSQJFGiaMJlPMVUHb5PCZmg/v9qHsyJqCJEY VPglaVp56qYuBMZ3+q9xovLXzWXCpksygN99VIemSMzAKGIRgGoCmG9akWkIZdOf khZpXUBa0UU+icRiZcukLpYMtoT65H27jwXsuecjTj1tFtX+a34EA7kly/qW2G9G ZrhDa/QKNgYTt75k45NuX0GwiQIPkv24A8T4yavE+YiV9X0VqXHTHSi9mr8+qT4Z FpzmSuE8QjPAZLO/OFGm5Iw7/rt6YieGuwzqBGA+FQKi+j8/qQMvXL/8QkD0VrdY v+Fyro4CqGYpnjZkOXrKlYU/JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPW6Nr/P jjkePZMsEYDfwPhnwhRvMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVW57OTkZ0rbIB4VXDJNGmp5VX75VJJx3FBq9zcfgY/4w2PNGdhvQf 7mjG1/WLQbVFXUmv5q+RQtb7GxbCMEkEwxcnA9VVcoO25udZFiAItVpIsVdrn3vK Apsj5tvDNCckezHjo96UAEtLY+f4Fb/YuS/RpeTKz01ZQBr05TnnseX+yKxGsLH5 E1UWHj9prJ7s729S0LyhQDn15MreVnnpXfzHduOGZadcNFZgF/84dumCsGHuF53U YKu96//6kSChU4ukxkm/qfZkpyxsXgfN7BE2/ZhvIQhsdWNUAbbyLaY5ypaJHY4B 8ozoDZOm6CWCOuSUnEar0sGWRPRTAIdp -----END CERTIFICATE-----Generated at Sat Apr 26 15:24:29 2025 by rpki-client