$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft File: XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft (raw, json) Hash identifier: Fhy+dIDJXj8lAQJVWOsWOYPaDOp6WAqlWWuzIR4cW+U= Subject key identifier: BF:8A:DD:62:7C:3B:A0:AD:1A:15:63:9E:CF:3B:1D:D7:20:18:71:57 Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 Certificate issuer: /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft Manifest number: 0101 Signing time: Fri 25 Apr 2025 04:13:09 +0000 Manifest this update: Fri 25 Apr 2025 04:13:08 +0000 Manifest next update: Fri 02 May 2025 04:13:08 +0000 Files and hashes: 1: XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl (hash: Z6n0Yq80NX3kdiQfA4BX4Wp1iha4/GGEJJ9xlt/PutU=) 2: 262FD0CEFE5C11EFA373D67EC4F9AE02.roa (hash: VFctWPQwbtoig1M0ZyXvaaJ8FzDcDhRRe13XKfb+93w=) 3: 55D387BCFE5C11EFAC82C181C4F9AE02.roa (hash: BXDB9E72EwnR8CUZxXbSk5J1hAgTnGg/I9qirr0mHEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F54, serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Validity Not Before: Apr 25 04:13:08 2025 GMT Not After : May 2 04:13:08 2025 GMT Subject: CN=680b0bd4-fdaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:78:26:45:e7:40:8c:c9:fd:88:8b:9b:e0: 32:ca:80:21:c1:ad:c5:ba:51:0d:c0:ee:2f:79:0e: 8a:86:82:6c:a6:c3:e7:98:2e:b1:f4:13:39:45:52: ea:14:25:4a:9f:e0:0c:08:65:15:fc:b6:c2:85:2d: 11:0e:84:00:40:b0:85:d0:cf:5e:bf:3f:94:fe:16: 42:0e:07:0c:63:7b:a2:44:12:36:fc:a7:c5:0d:ad: 3a:60:cf:64:a3:18:b2:2a:9a:ff:c2:c0:2c:33:31: 7b:0f:e6:85:f0:42:6f:6f:2e:ef:4a:e6:a9:26:61: 2a:8d:3b:25:bc:f1:cd:2b:3d:7d:97:30:20:67:13: 22:23:7c:92:11:c6:fa:47:63:b5:9e:a0:c9:68:b6: 06:f8:12:f7:11:a3:f9:e9:8e:ba:0b:ff:c7:fb:a2: e7:07:a4:ad:d7:31:e0:96:81:c7:4a:a8:a9:9c:ac: 87:56:76:cb:d9:7b:60:ae:2e:8b:1c:c1:3f:36:e9: fe:eb:fb:92:ab:d0:37:c7:de:a1:7b:5b:a5:7b:2d: 4e:3d:9e:c8:67:42:8b:70:13:6c:11:26:c2:f4:9e: 52:fd:cd:c7:04:38:db:67:e6:87:db:c2:fe:81:97: e1:56:17:f6:ab:21:61:e9:12:5f:8f:f7:04:80:d0: f5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8A:DD:62:7C:3B:A0:AD:1A:15:63:9E:CF:3B:1D:D7:20:18:71:57 X509v3 Authority Key Identifier: keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:71:0f:f2:d4:0d:17:6f:91:97:bf:0f:a7:2a:b3:e1:d6:1a: f7:dc:42:a6:c1:25:35:41:e6:18:0f:0d:e8:1f:c6:4a:bd:80: 3a:1e:ac:22:b4:48:85:6b:9c:b6:fb:51:ec:f3:0e:f4:11:5b: 75:ab:93:76:2b:ed:84:d7:23:6b:a3:18:55:27:db:cc:9f:1f: dd:52:fc:6b:c8:57:a2:18:7c:50:b4:ca:b4:f8:17:b0:63:b0: 5d:b6:37:c9:0e:ff:4e:9d:b9:42:be:75:24:3f:54:9d:91:70: e4:2f:a6:42:b0:f6:e4:77:19:e9:24:05:d3:e6:ec:ac:b5:b4: b0:6d:86:2d:a8:04:6e:81:40:5a:65:38:78:c6:91:d3:bd:0b: 85:56:37:91:40:5f:51:c1:de:ef:ed:a1:bd:28:3a:2c:48:05: 1d:79:56:b4:3f:82:86:6a:91:74:85:52:1d:8a:94:ed:81:1d: 79:c5:d7:f2:20:f4:be:1f:48:7c:cd:a4:7d:9a:75:52:6d:7c: 83:a5:7b:d4:0e:8d:42:a0:b2:8d:56:05:0d:b6:73:81:e6:d2: c2:43:83:88:21:b3:80:bf:2a:88:74:17:4c:09:68:a5:db:8f: 44:38:e4:fb:50:a3:98:f3:91:9b:27:ad:5d:93:f2:fe:cb:74: 29:9e:cb:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNTQxMTAvBgNVBAUTKDVEQjU3RUQzODYwMzlFQTY2NEQxRUZGNzU3MDczNkQ2 RjlGMDRDNDQwHhcNMjUwNDI1MDQxMzA4WhcNMjUwNTAyMDQxMzA4WjAYMRYwFAYD VQQDEw02ODBiMGJkNC1mZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsn54JkXnQIzJ/YiLm+AyyoAhwa3FulENwO4veQ6KhoJspsPnmC6x9BM5RVLq FCVKn+AMCGUV/LbChS0RDoQAQLCF0M9evz+U/hZCDgcMY3uiRBI2/KfFDa06YM9k oxiyKpr/wsAsMzF7D+aF8EJvby7vSuapJmEqjTslvPHNKz19lzAgZxMiI3ySEcb6 R2O1nqDJaLYG+BL3EaP56Y66C//H+6LnB6St1zHgloHHSqipnKyHVnbL2Xtgri6L HME/Nun+6/uSq9A3x96he1uley1OPZ7IZ0KLcBNsESbC9J5S/c3HBDjbZ+aH28L+ gZfhVhf2qyFh6RJfj/cEgND1xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+K3WJ8 O6CtGhVjns87HdcgGHFXMB8GA1UdIwQYMBaAFF21ftOGA56mZNHv91cHNtb58ExE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1NC81MUI2RUNFNDlG MjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5xWmswZV8zVndjMjF2bndU RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hiVi0wNFlEbnFaazBlXzNWd2MyMXZud1RFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1NC81MUI2RUNFNDlGMjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5x WmswZV8zVndjMjF2bndURVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFcQ/y1A0Xb5GXvw+nKrPh1hr33EKmwSU1QeYYDw3oH8ZKvYA6Hqwi tEiFa5y2+1Hs8w70EVt1q5N2K+2E1yNroxhVJ9vMnx/dUvxryFeiGHxQtMq0+Bew Y7BdtjfJDv9OnblCvnUkP1SdkXDkL6ZCsPbkdxnpJAXT5uystbSwbYYtqARugUBa ZTh4xpHTvQuFVjeRQF9Rwd7v7aG9KDosSAUdeVa0P4KGapF0hVIdipTtgR15xdfy IPS+H0h8zaR9mnVSbXyDpXvUDo1CoLKNVgUNtnOB5tLCQ4OIIbOAvyqIdBdMCWil 249EOOT7UKOY85GbJ61dk/L+y3Qpnsvd -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:53 2025 by rpki-client