$ rpki-client -vvf rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft File: 4XcstdOWUnbPTpjTdmtjDX4_gXg.mft (raw, json) Hash identifier: r4xyGzoGlO8YIgoh1+PYl91bcn4y9LZxFqmGPL5tPIo= Subject key identifier: 06:7F:44:D5:75:12:28:5D:06:45:EA:C2:AE:C3:04:47:7B:09:02:FD Authority key identifier: E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 Certificate issuer: /CN=A9175027/serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Certificate serial: 077D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft Manifest number: 075C Signing time: Thu 24 Apr 2025 21:31:00 +0000 Manifest this update: Thu 24 Apr 2025 21:31:00 +0000 Manifest next update: Thu 01 May 2025 21:31:00 +0000 Files and hashes: 1: 4XcstdOWUnbPTpjTdmtjDX4_gXg.crl (hash: c1bbECjOmp4yRQpULiotCehngcpTW7F3+UU0kge7S9U=) 2: 12DBAD3CDAFF11ECA67DA10BC4F9AE02.roa (hash: 3/Y1r0LMBII6zW5USQairn62r7Znj5u8VXmSgbR98nY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1917 (0x77d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175027, serialNumber=E1772CB5D3965276CF4E98D3766B630D7E3F8178 Validity Not Before: Apr 24 21:31:00 2025 GMT Not After : May 1 21:31:00 2025 GMT Subject: CN=680aad94-1f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:e6:12:5b:9e:04:29:d7:d3:a8:74:0d:0f: f3:e1:85:a7:a5:d8:d5:02:c9:34:c8:c9:63:01:f7: 03:83:11:39:bb:6d:58:8b:b2:61:7b:22:a2:67:0b: 2d:ef:37:cd:8c:4c:e4:e1:e2:3c:5e:5f:e8:41:83: 4a:4a:73:50:97:cc:24:51:ee:25:52:06:75:39:2c: ed:fa:f4:8d:dd:ad:ae:87:ac:0b:7b:b9:a6:54:bb: 93:96:41:2e:bb:dd:c5:91:b0:f7:06:fb:5b:6e:10: df:2c:a2:a8:97:13:2d:17:2f:85:df:a2:a5:1d:b0: 3c:db:76:1c:93:ba:3f:1f:7d:89:f7:2d:7e:1a:7f: 99:2d:75:4d:f8:54:94:32:b7:43:34:18:95:79:79: d7:cf:ff:5d:33:ea:25:5e:4c:31:93:d6:b1:ac:98: bc:90:c5:12:e2:f1:77:d5:8b:3e:d5:69:13:de:7a: a1:c9:a7:0c:29:94:23:e2:b9:cb:4e:cc:63:7b:c8: 91:98:18:81:37:69:ce:b4:24:f0:f8:59:4a:d9:8f: f9:91:a0:b7:3e:40:eb:20:5a:e3:30:0a:bb:7a:36: 7d:1e:7c:cd:5b:b6:ce:69:02:d3:5a:70:8b:40:69: 72:d0:e7:e8:f2:e4:b0:0d:2a:9e:a5:5c:8a:10:8b: 4b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7F:44:D5:75:12:28:5D:06:45:EA:C2:AE:C3:04:47:7B:09:02:FD X509v3 Authority Key Identifier: keyid:E1:77:2C:B5:D3:96:52:76:CF:4E:98:D3:76:6B:63:0D:7E:3F:81:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4XcstdOWUnbPTpjTdmtjDX4_gXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175027/2505CEDC256811EBAC2CAC5AC4F9AE02/4XcstdOWUnbPTpjTdmtjDX4_gXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:5d:b0:9e:ab:db:d6:78:29:e8:2f:66:32:3e:73:b1:9d:df: 48:bb:03:0f:34:ab:c2:a9:c3:22:75:45:40:d1:69:03:38:ee: 3c:3d:f8:6a:8f:f2:4b:ce:8c:ed:ad:9c:ae:5f:86:5d:c8:4e: 3c:a5:27:cf:a4:3a:a3:0b:20:3e:60:14:98:96:6a:d2:d4:b9: 80:48:23:e4:19:a8:b9:49:67:b7:c3:4d:55:19:80:41:2a:8c: a8:89:50:1b:5d:77:78:2f:dc:7b:04:20:ed:dc:b1:f6:0d:0d: 0d:4c:b2:cb:46:8a:06:41:b4:81:e8:a4:4d:a4:83:2c:53:63: 6e:4a:df:d9:6f:8c:0f:9a:2e:24:af:84:dc:89:ef:05:3b:8b: 6d:4e:d8:43:31:0c:a2:57:01:03:53:0b:22:6c:df:23:db:c2: ab:cf:1d:bc:8a:5b:e0:29:ff:96:c8:21:80:9a:f3:89:a1:e2: da:fb:e4:a0:d1:51:89:5a:a4:13:c3:4c:92:d0:19:ad:e7:af: 50:bf:5b:ca:88:ca:68:19:62:cd:a9:53:d5:ad:02:bf:e0:25: f8:c0:0e:b5:48:06:d9:64:df:26:f5:27:d0:33:1a:07:43:84: 9e:8e:80:61:f9:cd:ae:25:13:a8:27:bb:e8:b1:65:2e:f7:92: fd:c5:65:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUwMjcxMTAvBgNVBAUTKEUxNzcyQ0I1RDM5NjUyNzZDRjRFOThEMzc2NkI2MzBE N0UzRjgxNzgwHhcNMjUwNDI0MjEzMTAwWhcNMjUwNTAxMjEzMTAwWjAYMRYwFAYD VQQDEw02ODBhYWQ5NC0xZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfrmElueBCnX06h0DQ/z4YWnpdjVAsk0yMljAfcDgxE5u21Yi7JheyKiZwst 7zfNjEzk4eI8Xl/oQYNKSnNQl8wkUe4lUgZ1OSzt+vSN3a2uh6wLe7mmVLuTlkEu u93FkbD3BvtbbhDfLKKolxMtFy+F36KlHbA823Yck7o/H32J9y1+Gn+ZLXVN+FSU MrdDNBiVeXnXz/9dM+olXkwxk9axrJi8kMUS4vF31Ys+1WkT3nqhyacMKZQj4rnL Tsxje8iRmBiBN2nOtCTw+FlK2Y/5kaC3PkDrIFrjMAq7ejZ9HnzNW7bOaQLTWnCL QGly0Ofo8uSwDSqepVyKEItL/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZ/RNV1 EihdBkXqwq7DBEd7CQL9MB8GA1UdIwQYMBaAFOF3LLXTllJ2z06Y03ZrYw1+P4F4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTAyNy8yNTA1Q0VEQzI1 NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1VuYlBUcGpUZG10akRYNF9n WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRYY3N0ZE9XVW5iUFRwalRkbXRqRFg0X2dYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTAyNy8yNTA1Q0VEQzI1NjgxMUVCQUMyQ0FDNUFDNEY5QUUwMi80WGNzdGRPV1Vu YlBUcGpUZG10akRYNF9nWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWXbCeq9vWeCnoL2YyPnOxnd9IuwMPNKvCqcMidUVA0WkDOO48Pfhq j/JLzoztrZyuX4ZdyE48pSfPpDqjCyA+YBSYlmrS1LmASCPkGai5SWe3w01VGYBB KoyoiVAbXXd4L9x7BCDt3LH2DQ0NTLLLRooGQbSB6KRNpIMsU2NuSt/Zb4wPmi4k r4Tcie8FO4ttTthDMQyiVwEDUwsibN8j28Krzx28ilvgKf+WyCGAmvOJoeLa++Sg 0VGJWqQTw0yS0Bmt569Qv1vKiMpoGWLNqVPVrQK/4CX4wA61SAbZZN8m9SfQMxoH Q4SejoBh+c2uJROoJ7vosWUu95L9xWWI -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:17 2025 by rpki-client