$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft File: xH0VZB2jsUx05cspvMBIgSMK0U4.mft (raw, json) Hash identifier: qYUVisAPwuAAybtQRE0NbLRL9dcnx019tP8As2oMHAE= Subject key identifier: 36:09:5C:92:30:4B:18:1D:21:DE:A0:93:B6:01:63:FB:EB:9B:93:8D Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E Certificate issuer: /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Certificate serial: 0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft Manifest number: 0263 Signing time: Fri 25 Apr 2025 01:32:59 +0000 Manifest this update: Fri 25 Apr 2025 01:32:58 +0000 Manifest next update: Fri 02 May 2025 01:32:58 +0000 Files and hashes: 1: xH0VZB2jsUx05cspvMBIgSMK0U4.crl (hash: LuZlHg6Rb03rZvP01KZKSpIbVK0jBUzvGGohxt16y4g=) 2: 62B575B8104C11ED8CE56267C4F9AE02.roa (hash: LJhv9R+LostgKj3I2cWW/yrIOe+4xlAQa1Sq/wPUOsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187364, serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E Validity Not Before: Apr 25 01:32:58 2025 GMT Not After : May 2 01:32:58 2025 GMT Subject: CN=680ae64b-198c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4e:84:c1:db:d4:f3:21:05:c1:2f:bf:dd:ec: 24:a6:d9:ad:ec:30:8c:ff:4a:1a:97:c0:c7:3f:6b: 06:64:ed:3e:ae:61:42:e8:6e:d0:0f:b5:39:24:35: 4c:3d:3a:f2:f5:ac:21:d0:54:f7:53:ca:03:89:a1: 65:06:3c:1c:68:d5:ce:23:be:ab:56:43:e7:f8:0a: e8:83:47:0c:27:23:18:5d:37:81:d2:01:da:45:e5: 1a:f7:10:79:74:6a:04:ff:9c:ab:cf:cb:74:2b:09: de:1f:7e:73:01:df:ff:ab:5e:37:ea:56:6e:69:3a: d2:fc:7f:ef:e3:03:8e:7e:3b:dc:a3:0b:8f:8a:b6: 10:1d:ec:97:58:7c:07:c9:4a:e2:70:19:f8:65:1a: 56:02:1b:ca:e1:06:f3:fb:21:29:82:15:97:ea:cc: 30:37:18:20:bf:fb:4f:ed:0f:2f:f4:f8:83:c7:03: 0e:84:e9:65:fa:4b:ea:65:ab:b1:59:85:8e:94:d0: dd:c0:95:e6:79:5a:ce:84:28:e6:f8:94:af:c2:18: cd:69:e1:22:d0:e7:28:46:5e:2e:9c:27:ec:d4:6e: f2:67:14:3f:4d:bf:70:ad:67:12:ed:d5:6c:13:28: 2b:38:01:9d:a9:9f:64:e7:bb:fb:95:2d:5f:60:6e: 91:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:09:5C:92:30:4B:18:1D:21:DE:A0:93:B6:01:63:FB:EB:9B:93:8D X509v3 Authority Key Identifier: keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:03:62:8f:40:89:ef:ec:e0:01:be:fc:dc:c3:30:64:d5:f4: 65:53:41:20:b9:15:66:ac:70:aa:70:46:4b:f2:4e:ba:c4:30: f3:eb:1a:9d:5a:f6:0a:fd:52:77:b3:f6:06:cf:59:5e:4e:dc: 58:71:5c:63:a4:87:6d:9e:3b:2b:c9:5a:bc:56:cb:ea:03:aa: 8f:b1:a8:ef:46:f2:e9:f9:32:e1:c7:a0:38:5a:ad:76:f9:e6: c0:7c:26:d6:34:2f:6e:14:17:e1:3c:3f:eb:fb:f2:5c:86:29: 9c:a7:e9:8d:19:fe:16:80:ed:41:6c:fc:16:7a:2a:05:6f:c7: 57:cd:c9:d4:d3:1c:7c:bd:a0:82:b3:61:dd:42:b9:d6:02:f5: de:ac:b6:26:88:51:2c:6e:c7:d8:89:0c:53:d7:14:e6:a9:7f: d1:e9:36:76:0e:f7:32:a1:03:83:f8:94:32:27:83:e7:0b:fc: d9:ed:68:83:57:2c:90:e0:53:0c:22:52:1b:ea:fa:8e:1f:3c: 40:7c:27:5c:2e:20:68:5e:f2:3e:1e:96:77:58:0f:63:97:2c: b9:29:b5:d6:ab:80:9c:0f:38:ef:e1:58:69:de:b6:cd:1f:b3: 1d:c7:45:a5:f4:e8:63:c2:f0:57:63:5f:d3:1d:51:4c:8e:a0: 82:c3:05:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczNjQxMTAvBgNVBAUTKEM0N0QxNTY0MURBM0IxNEM3NEU1Q0IyOUJDQzA0ODgx MjMwQUQxNEUwHhcNMjUwNDI1MDEzMjU4WhcNMjUwNTAyMDEzMjU4WjAYMRYwFAYD VQQDEw02ODBhZTY0Yi0xOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E6EwdvU8yEFwS+/3ewkptmt7DCM/0oal8DHP2sGZO0+rmFC6G7QD7U5JDVM PTry9awh0FT3U8oDiaFlBjwcaNXOI76rVkPn+Arog0cMJyMYXTeB0gHaReUa9xB5 dGoE/5yrz8t0KwneH35zAd//q1436lZuaTrS/H/v4wOOfjvcowuPirYQHeyXWHwH yUricBn4ZRpWAhvK4Qbz+yEpghWX6swwNxggv/tP7Q8v9PiDxwMOhOll+kvqZaux WYWOlNDdwJXmeVrOhCjm+JSvwhjNaeEi0OcoRl4unCfs1G7yZxQ/Tb9wrWcS7dVs EygrOAGdqZ9k57v7lS1fYG6RIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYJXJIw SxgdId6gk7YBY/vrm5ONMB8GA1UdIwQYMBaAFMR9FWQdo7FMdOXLKbzASIEjCtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzM2NC9FOUE0RUE3MDEw NDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNVeDA1Y3Nwdk1CSWdTTUsw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIMFZaQjJqc1V4MDVjc3B2TUJJZ1NNSzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzM2NC9FOUE0RUE3MDEwNDkxMUVEOEVGMEY3NjJDNEY5QUUwMi94SDBWWkIyanNV eDA1Y3Nwdk1CSWdTTUswVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvA2KPQInv7OABvvzcwzBk1fRlU0EguRVmrHCqcEZL8k66xDDz6xqd WvYK/VJ3s/YGz1leTtxYcVxjpIdtnjsryVq8VsvqA6qPsajvRvLp+TLhx6A4Wq12 +ebAfCbWNC9uFBfhPD/r+/Jchimcp+mNGf4WgO1BbPwWeioFb8dXzcnU0xx8vaCC s2HdQrnWAvXerLYmiFEsbsfYiQxT1xTmqX/R6TZ2DvcyoQOD+JQyJ4PnC/zZ7WiD VyyQ4FMMIlIb6vqOHzxAfCdcLiBoXvI+HpZ3WA9jlyy5KbXWq4CcDzjv4Vhp3rbN H7Mdx0Wl9OhjwvBXY1/THVFMjqCCwwVr -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:56 2025 by rpki-client