$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft File: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft (raw, json) Hash identifier: Rthl7aJnX6RGAWuFhxudYo+PIfbzb4yltvwNH/GLX6k= Subject key identifier: 4A:D1:DC:91:0A:41:91:46:9E:9F:81:C0:13:26:F8:F6:08:6C:0B:F0 Authority key identifier: D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 Certificate issuer: /CN=A9172D65/serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22 Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft Manifest number: 0482 Signing time: Thu 24 Apr 2025 23:50:25 +0000 Manifest this update: Thu 24 Apr 2025 23:50:25 +0000 Manifest next update: Thu 01 May 2025 23:50:25 +0000 Files and hashes: 1: 1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl (hash: yYlfTXu1kxInJ6t7L9aHHu0te/8CJTf/gunGei2JvKY=) 2: 56530120D47E11EFB2639C53C4F9AE02.roa (hash: 1whcSR6JX/pYt55ZCs0pw4Y1DC7NV0axD3riMwYblGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172D65, serialNumber=D71518FC6E56C7C4ECA9EA18B1B541D8B0C2CA22 Validity Not Before: Apr 24 23:50:25 2025 GMT Not After : May 1 23:50:25 2025 GMT Subject: CN=680ace41-a76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:09:9e:b1:82:98:91:fd:34:36:9d:f6:c5: 48:02:99:e7:2e:b7:e1:79:b2:b1:67:80:6b:6d:21: d2:99:8b:c6:fb:3b:1b:20:c3:c9:cf:98:2e:04:e4: 2f:ff:9e:ca:c2:7d:7d:89:9f:e5:e0:15:c7:8d:41: 8a:f5:e0:66:17:67:87:e7:e1:eb:ab:77:a2:89:ce: 8a:6f:3f:0e:ab:9d:c7:0f:19:aa:39:e0:86:47:df: a6:f8:bb:b9:2e:b3:70:c0:fa:3f:3e:1e:0b:e5:ea: 96:ff:e5:fe:d8:bc:06:ac:5c:25:32:9d:09:cf:ac: bc:af:f0:44:d3:fb:7e:77:36:6f:a3:d9:3f:61:2f: 3b:f7:2c:82:bb:6d:d4:bc:38:c1:0c:27:a6:3c:79: b8:f7:65:15:2c:9c:c5:83:46:31:d3:f8:48:3d:76: 34:32:a7:ee:90:9b:02:58:32:d7:83:9d:87:55:aa: 29:21:d6:89:ee:a9:e3:41:39:38:d3:c0:32:17:9e: b7:e5:66:75:bd:a2:e9:99:e6:ba:be:b0:30:fc:c2: 11:8a:31:fa:67:a3:90:77:a7:5d:85:10:0d:78:d4: bf:74:c3:b8:d8:78:8d:e5:91:76:8f:cc:9a:cb:a8: 9d:b8:ed:82:95:89:43:a5:9a:af:27:2d:f1:27:80: 64:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D1:DC:91:0A:41:91:46:9E:9F:81:C0:13:26:F8:F6:08:6C:0B:F0 X509v3 Authority Key Identifier: keyid:D7:15:18:FC:6E:56:C7:C4:EC:A9:EA:18:B1:B5:41:D8:B0:C2:CA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D65/4F421F523B0B11ECAA25E33AC4F9AE02/1xUY_G5Wx8TsqeoYsbVB2LDCyiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:e5:d5:be:e0:eb:15:63:3f:67:cb:e4:5a:84:d8:19:d0:6f: 90:f8:49:c5:31:b4:97:84:4a:03:ac:48:f5:5c:99:0f:47:f8: 71:4e:bb:95:7b:f5:b7:8b:a5:82:24:09:15:d5:28:8d:e8:3c: 99:97:23:2e:d2:df:7e:4e:ec:e9:4b:63:af:11:31:21:bf:19: ee:15:be:14:c9:94:dd:57:c1:6d:eb:d5:17:67:58:d1:15:ab: 44:d0:a0:64:99:44:a8:e1:69:0c:e0:07:b5:8a:e8:64:cc:55: 37:10:a8:75:df:7b:7e:86:9e:e4:7d:2b:2f:4a:58:35:4a:ca: c7:4d:46:6e:9f:7f:2f:5f:ed:f2:19:15:a9:b7:42:e4:5c:43: f5:da:cc:00:7f:16:53:8b:42:bf:23:f8:26:50:f3:d4:f3:24: 70:00:41:18:bb:56:46:0d:94:c0:22:78:38:a7:4a:5b:69:0a: 08:fa:72:70:d8:fb:04:f7:1a:3e:54:85:5a:59:38:2b:0c:1a: 29:f1:b6:21:df:5d:09:28:7c:2e:24:df:15:5f:43:b5:4d:f6: f0:e3:9e:77:ba:a0:66:24:d9:40:55:34:66:fb:61:3e:2d:8d: e2:de:3f:ae:3d:bc:17:8a:54:93:8b:9d:fb:68:6e:00:ad:88: df:73:fc:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJENjUxMTAvBgNVBAUTKEQ3MTUxOEZDNkU1NkM3QzRFQ0E5RUExOEIxQjU0MUQ4 QjBDMkNBMjIwHhcNMjUwNDI0MjM1MDI1WhcNMjUwNTAxMjM1MDI1WjAYMRYwFAYD VQQDEw02ODBhY2U0MS1hNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArusJnrGCmJH9NDad9sVIApnnLrfhebKxZ4BrbSHSmYvG+zsbIMPJz5guBOQv /57Kwn19iZ/l4BXHjUGK9eBmF2eH5+Hrq3eiic6Kbz8Oq53HDxmqOeCGR9+m+Lu5 LrNwwPo/Ph4L5eqW/+X+2LwGrFwlMp0Jz6y8r/BE0/t+dzZvo9k/YS879yyCu23U vDjBDCemPHm492UVLJzFg0Yx0/hIPXY0MqfukJsCWDLXg52HVaopIdaJ7qnjQTk4 08AyF5635WZ1vaLpmea6vrAw/MIRijH6Z6OQd6ddhRANeNS/dMO42HiN5ZF2j8ya y6iduO2ClYlDpZqvJy3xJ4BkiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErR3JEK QZFGnp+BwBMm+PYIbAvwMB8GA1UdIwQYMBaAFNcVGPxuVsfE7KnqGLG1Qdiwwsoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkQ2NS80RjQyMUY1MjNC MEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4VHNxZW9Zc2JWQjJMREN5 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF4VVlfRzVXeDhUc3Flb1lzYlZCMkxEQ3lpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkQ2NS80RjQyMUY1MjNCMEIxMUVDQUEyNUUzM0FDNEY5QUUwMi8xeFVZX0c1V3g4 VHNxZW9Zc2JWQjJMREN5aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj5dW+4OsVYz9ny+RahNgZ0G+Q+EnFMbSXhEoDrEj1XJkPR/hxTruV e/W3i6WCJAkV1SiN6DyZlyMu0t9+TuzpS2OvETEhvxnuFb4UyZTdV8Ft69UXZ1jR FatE0KBkmUSo4WkM4Ae1iuhkzFU3EKh133t+hp7kfSsvSlg1SsrHTUZun38vX+3y GRWpt0LkXEP12swAfxZTi0K/I/gmUPPU8yRwAEEYu1ZGDZTAIng4p0pbaQoI+nJw 2PsE9xo+VIVaWTgrDBop8bYh310JKHwuJN8VX0O1Tfbw4553uqBmJNlAVTRm+2E+ LY3i3j+uPbwXilSTi537aG4ArYjfc/yX -----END CERTIFICATE-----Generated at Sat Apr 26 04:32:22 2025 by rpki-client