$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json) Hash identifier: UG648bA24hv+1DIMWCGuH2dpKxDtmmzmjDc7UA+/yUE= Subject key identifier: 23:85:27:F9:B1:A4:86:13:1E:70:B5:BA:56:8F:62:A2:A8:B3:EB:92 Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Certificate serial: 0663 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft Manifest number: 0660 Signing time: Thu 24 Apr 2025 22:11:08 +0000 Manifest this update: Thu 24 Apr 2025 22:11:08 +0000 Manifest next update: Thu 01 May 2025 22:11:08 +0000 Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: YohqZ7G2AJFQlR/hxFVAnYdZy1HDCQgnB3n0uo/BmLs=) 2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: yju+fZAWtM3RsMZrSlngexqtu4I3chkHV+7N/8ZbBdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Validity Not Before: Apr 24 22:11:08 2025 GMT Not After : May 1 22:11:08 2025 GMT Subject: CN=680ab6fc-e610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:82:1a:7f:13:71:00:88:fd:b7:ea:02:42: a4:bf:7c:a8:b5:ea:cd:a8:38:00:0e:b5:bb:12:52: 78:34:8f:4e:dd:02:73:24:fb:70:c8:f4:61:7a:7f: 31:8b:5a:9e:37:51:79:53:97:bc:23:43:08:80:bb: fe:69:bc:9b:a7:24:70:7d:f2:b7:8f:51:a9:5a:21: 3d:ae:52:53:66:67:23:67:72:b3:58:62:1c:ff:9d: 4a:ba:c5:9d:b2:81:ff:2b:0d:6c:5d:b1:7a:28:09: 2b:d0:3c:37:63:a4:28:68:80:56:f2:c0:50:9d:a8: 81:d6:a8:f4:00:c0:68:c6:31:73:db:ba:d9:29:3c: d3:e6:50:fa:a5:ba:4a:44:3b:13:ba:2c:e3:aa:fd: 6a:ce:49:ed:dd:f0:e1:3c:dc:f1:cd:9c:99:fa:74: d8:89:78:4d:76:67:05:62:a5:b9:5d:17:a6:8e:1b: 93:33:bd:20:d9:5d:02:1e:f9:9b:f0:b2:fb:96:cf: f0:e3:90:7a:dc:73:ea:8d:85:8a:c0:16:38:5a:ab: 82:e7:6e:04:9c:dc:58:17:2f:5c:f8:3d:38:71:23: cb:f5:ba:9a:a2:4e:58:4b:07:ea:3e:03:e3:e2:06: 76:54:cb:c4:b5:23:be:e1:1e:96:23:92:3f:58:59: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:85:27:F9:B1:A4:86:13:1E:70:B5:BA:56:8F:62:A2:A8:B3:EB:92 X509v3 Authority Key Identifier: keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:f3:5c:f6:f1:89:76:45:c9:b7:27:cc:04:e2:b9:f2:25:3a: 58:81:d3:bb:75:76:b7:d4:58:0d:fa:2c:e8:ec:20:27:00:95: e1:78:97:56:92:9d:d8:e7:c0:f1:21:84:39:20:ee:5f:1f:aa: e3:d0:02:e1:a8:fe:d4:0a:f4:e9:ed:17:92:cf:8e:67:53:ae: ff:92:e7:92:9f:49:41:1f:72:62:d2:59:a0:cb:da:ac:01:d8: 9b:1d:6b:aa:f6:f8:f0:a0:2c:86:95:75:c9:ad:82:03:ff:db: 56:71:2a:9a:55:f5:20:4d:e3:7b:7f:48:3e:04:83:ed:d6:b8: e8:1d:6e:54:95:9d:ef:8b:ac:9a:62:dd:30:f3:12:bc:7f:8a: 4e:3a:94:db:13:6b:d3:01:ce:a7:74:dd:64:d6:20:da:66:83: 8c:86:a5:0f:7b:84:16:01:54:1b:20:b6:30:ea:55:14:80:fb: 54:8b:9a:d5:8f:3a:4d:17:33:e4:5e:2a:02:de:8a:03:1f:ac: 29:86:96:36:75:9b:65:f1:75:a1:29:31:05:4b:00:23:f8:b5: 3b:b4:39:65:2c:5b:de:74:4a:48:f9:3c:c5:f0:8a:d8:7a:6c: 7a:ea:4d:70:91:6f:d6:9c:c8:15:1f:e8:60:59:e7:53:a0:3a: e2:23:8d:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDVGQUQxQjM5QkU0NTU1MjYyMjA2RDE5RjVBNjY5QkM3 QjY5RjcyQzgwHhcNMjUwNDI0MjIxMTA4WhcNMjUwNTAxMjIxMTA4WjAYMRYwFAYD VQQDEw02ODBhYjZmYy1lNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuraCGn8TcQCI/bfqAkKkv3yoterNqDgADrW7ElJ4NI9O3QJzJPtwyPRhen8x i1qeN1F5U5e8I0MIgLv+abybpyRwffK3j1GpWiE9rlJTZmcjZ3KzWGIc/51KusWd soH/Kw1sXbF6KAkr0Dw3Y6QoaIBW8sBQnaiB1qj0AMBoxjFz27rZKTzT5lD6pbpK RDsTuizjqv1qzknt3fDhPNzxzZyZ+nTYiXhNdmcFYqW5XRemjhuTM70g2V0CHvmb 8LL7ls/w45B63HPqjYWKwBY4WquC524EnNxYFy9c+D04cSPL9bqaok5YSwfqPgPj 4gZ2VMvEtSO+4R6WI5I/WFnJiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOFJ/mx pIYTHnC1ulaPYqKos+uSMB8GA1UdIwQYMBaAFF+tGzm+RVUmIgbRn1pmm8e2n3LI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wM0EwMTc4NDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZTWWlCdEdmV21hYng3YWZj c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1g2MGJPYjVGVlNZaUJ0R2ZXbWFieDdhZmNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wM0EwMTc4NDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZT WWlCdEdmV21hYng3YWZjc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB581z28Yl2Rcm3J8wE4rnyJTpYgdO7dXa31FgN+izo7CAnAJXheJdW kp3Y58DxIYQ5IO5fH6rj0ALhqP7UCvTp7ReSz45nU67/kueSn0lBH3Ji0lmgy9qs AdibHWuq9vjwoCyGlXXJrYID/9tWcSqaVfUgTeN7f0g+BIPt1rjoHW5UlZ3vi6ya Yt0w8xK8f4pOOpTbE2vTAc6ndN1k1iDaZoOMhqUPe4QWAVQbILYw6lUUgPtUi5rV jzpNFzPkXioC3ooDH6wphpY2dZtl8XWhKTEFSwAj+LU7tDllLFvedEpI+TzF8IrY emx66k1wkW/WnMgVH+hgWedToDriI421 -----END CERTIFICATE-----Generated at Sat Apr 26 14:01:41 2025 by rpki-client