$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json) Hash identifier: Od5gNS81PS9OYuyKvToo4gqSynBP7KwsCo/KliwnQmY= Subject key identifier: 1C:8A:16:53:4C:A4:57:37:99:F3:98:9D:B8:8B:0D:80:BB:4F:D3:EC Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Certificate serial: 09FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft Manifest number: 09F0 Signing time: Thu 24 Apr 2025 19:46:31 +0000 Manifest this update: Thu 24 Apr 2025 19:46:30 +0000 Manifest next update: Thu 01 May 2025 19:46:30 +0000 Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: KaD+7d5sQbLxjGGDdRvoW1/+hHS3+uje+WGVKdDSMLk=) 2: CA67185A02E511EF8ED1355CC4F9AE02.roa (hash: dM/bkocbrskLUTOMClpNK4FPOQXtlGaqmRxFxTWilMw=) 3: C98E616802E511EF8ED1355CC4F9AE02.roa (hash: gcadtXqsvUpMiAzq36zy8qMAKjIAq2N8zE6RS42bGR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2554 (0x9fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157 Validity Not Before: Apr 24 19:46:30 2025 GMT Not After : May 1 19:46:30 2025 GMT Subject: CN=680a9516-7130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:69:65:db:56:39:d1:34:f8:1d:4a:f4:ca: ad:36:5f:d8:7d:de:b9:70:42:7a:a1:4e:e0:da:f5: e1:b4:5d:b7:1a:1c:cf:87:8e:e2:67:b8:2a:8d:c7: 51:66:8a:d4:ee:62:49:0a:e9:5e:49:44:57:13:5c: 48:41:50:0b:da:9f:77:3c:ad:98:11:37:d4:6d:2a: ea:1b:67:46:0a:dd:20:44:e7:87:4b:1a:1e:6e:94: fc:fc:e7:72:d3:9e:6e:f5:da:00:b3:99:e0:43:00: dd:28:7b:5d:3e:ca:09:61:07:0d:95:33:9d:a8:e5: 9f:ef:4b:c2:6e:3b:77:56:77:58:3e:d9:6f:2d:13: 15:be:75:c3:f9:f2:18:e6:3d:b7:dc:c7:da:7b:81: 03:de:25:23:28:56:6d:74:b9:78:01:85:0c:84:9a: 0a:4f:15:df:5d:49:99:ae:7e:a2:ab:9b:8e:d9:8f: b0:a5:58:d7:e0:95:38:b0:d8:01:f1:e1:e7:bb:15: 13:1b:61:99:01:d3:08:24:a1:5b:09:a3:72:9b:ca: 42:87:43:65:1a:c7:92:01:9f:9f:bf:89:6d:30:0d: a4:02:40:7f:49:af:43:40:85:19:40:be:2c:10:3a: e8:d6:c4:63:bb:f3:21:fa:40:4c:26:f3:e5:9d:d2: ad:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8A:16:53:4C:A4:57:37:99:F3:98:9D:B8:8B:0D:80:BB:4F:D3:EC X509v3 Authority Key Identifier: keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:a6:9a:64:8e:d3:15:f6:9d:e8:b5:60:0e:f4:ac:90:2c:e8: 6f:f6:30:15:3c:d9:3e:ba:0c:09:66:71:2d:a1:0d:da:18:f3: e5:c6:80:5c:9c:42:b4:cd:6d:3d:5d:74:6f:ce:2c:ae:5a:03: 29:09:a9:30:b6:3a:89:b0:82:15:28:c5:bb:bb:52:18:29:0c: 4d:47:5a:1b:e4:43:da:8c:6f:cb:7a:40:cf:a7:a1:42:be:ee: 29:4c:78:81:72:bf:c9:c9:38:e5:e0:50:21:90:a5:16:94:e8: a0:fb:18:94:7a:3e:e5:fa:ee:2e:b2:d1:88:53:4d:6d:ef:d3: b6:f7:d2:4e:f1:83:3b:b2:76:42:49:f4:9e:8c:bb:26:d1:d7: 92:68:ce:63:26:14:6c:4f:c6:0b:9e:94:04:b1:b0:c5:c1:52: 6a:3e:b4:98:56:7b:18:20:6b:bd:d1:a4:38:1f:d3:16:f3:70: 65:9c:15:89:2d:bc:39:23:e3:e0:58:89:e4:a2:34:e0:c4:43: 09:1e:af:21:4f:58:e9:f5:dd:6a:ef:cc:fd:81:9b:4c:94:e9: e2:8d:17:a1:fc:75:03:5b:63:ed:f5:87:67:4f:92:98:e1:ac: 10:e8:73:ae:7a:69:11:51:e0:c8:16:1d:45:07:7e:bf:03:77: 90:41:dd:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJERUIxMTAvBgNVBAUTKEM0QUQ2NDlGQzVGMjMzMDY5RDUxRDg2RDU1QURDQUNG MTQyRDYxNTcwHhcNMjUwNDI0MTk0NjMwWhcNMjUwNTAxMTk0NjMwWjAYMRYwFAYD VQQDEw02ODBhOTUxNi03MTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu35pZdtWOdE0+B1K9MqtNl/Yfd65cEJ6oU7g2vXhtF23GhzPh47iZ7gqjcdR ZorU7mJJCuleSURXE1xIQVAL2p93PK2YETfUbSrqG2dGCt0gROeHSxoebpT8/Ody 055u9doAs5ngQwDdKHtdPsoJYQcNlTOdqOWf70vCbjt3VndYPtlvLRMVvnXD+fIY 5j233Mfae4ED3iUjKFZtdLl4AYUMhJoKTxXfXUmZrn6iq5uO2Y+wpVjX4JU4sNgB 8eHnuxUTG2GZAdMIJKFbCaNym8pCh0NlGseSAZ+fv4ltMA2kAkB/Sa9DQIUZQL4s EDro1sRju/Mh+kBMJvPlndKtxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByKFlNM pFc3mfOYnbiLDYC7T9PsMB8GA1UdIwQYMBaAFMStZJ/F8jMGnVHYbVWtys8ULWFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkRFQi9GQTVDRjQyQzc1 QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13YWRVZGh0VmEzS3p4UXRZ VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hLMWtuOFh5TXdhZFVkaHRWYTNLenhRdFlWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkRFQi9GQTVDRjQyQzc1QkMxMUVBQTNFM0EwNkFDNEY5QUUwMi94SzFrbjhYeU13 YWRVZGh0VmEzS3p4UXRZVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYpppkjtMV9p3otWAO9KyQLOhv9jAVPNk+ugwJZnEtoQ3aGPPlxoBc nEK0zW09XXRvziyuWgMpCakwtjqJsIIVKMW7u1IYKQxNR1ob5EPajG/LekDPp6FC vu4pTHiBcr/JyTjl4FAhkKUWlOig+xiUej7l+u4ustGIU01t79O299JO8YM7snZC SfSejLsm0deSaM5jJhRsT8YLnpQEsbDFwVJqPrSYVnsYIGu90aQ4H9MW83BlnBWJ Lbw5I+PgWInkojTgxEMJHq8hT1jp9d1q78z9gZtMlOnijReh/HUDW2Pt9YdnT5KY 4awQ6HOuemkRUeDIFh1FB36/A3eQQd2N -----END CERTIFICATE-----Generated at Sat Apr 26 05:00:48 2025 by rpki-client