$ rpki-client -vvf rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft File: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft (raw, json) Hash identifier: UNhr7jYRi8rE/6Hr67PfEHb6R9Zzdo1hNM18mPYHeEw= Subject key identifier: 18:22:76:5C:08:48:10:BF:E8:76:39:1E:2A:1E:D3:06:80:79:51:4D Authority key identifier: 5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D Certificate issuer: /CN=A918C538/serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft Manifest number: 01D7 Signing time: Fri 25 Apr 2025 01:59:02 +0000 Manifest this update: Fri 25 Apr 2025 01:59:02 +0000 Manifest next update: Fri 02 May 2025 01:59:02 +0000 Files and hashes: 1: Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl (hash: LCM6Fs1g6oznUOkf6vbC9RrnaLwffyuFVTyFCBVGfWU=) 2: 11DDFF8E54DF11EDB7409267C4F9AE02.roa (hash: 41cGdysFB7ELok3zBoJln9hijehCtCniAdRLT6XAhVQ=) 3: 114E5E6A54DF11EDB7409267C4F9AE02.roa (hash: 9MrQo9vUmAekuiwNJY8bO0MSIs29CkXwLMPEFiKNA44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C538, serialNumber=5F26F9C5D83C2D524F5A31D4702EF214033B352D Validity Not Before: Apr 25 01:59:02 2025 GMT Not After : May 2 01:59:02 2025 GMT Subject: CN=680aec66-89fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:01:bb:46:33:41:18:10:70:4e:4d:12:80:88: 22:eb:8f:c0:f5:90:d9:a0:b2:42:ab:c6:ea:ef:77: 31:0a:0b:5b:64:00:9f:38:db:29:21:85:b3:81:b4: 1c:19:4e:64:f2:01:1a:2f:3d:72:29:71:8d:14:6a: 39:ff:9a:52:2c:12:b6:40:a4:4f:e2:c1:e9:9d:9d: 40:d7:f6:da:d2:97:1d:df:7c:4c:c4:34:90:d7:62: 27:df:3b:a5:c6:67:8f:f2:30:36:18:3a:8d:ac:34: ea:5b:c2:ee:fc:7c:47:71:d2:a9:8b:f6:64:1b:2b: 37:e6:81:53:e1:2b:8c:ca:03:75:8e:7f:62:e5:a8: 24:58:92:0a:4d:26:17:21:4f:32:59:46:2b:f2:cc: 51:f1:24:61:49:aa:5a:e2:a0:d8:15:05:47:b8:51: 68:fb:b8:e6:06:af:fb:cd:b6:f1:6e:79:ef:4a:be: af:a9:38:fd:4f:ac:14:01:cd:51:09:4b:0a:96:73: 04:40:7d:71:fa:7d:be:fe:47:5d:1f:d0:ab:15:b6: 83:9a:80:bc:e1:21:e7:5d:83:2f:08:6b:c6:79:7d: 83:1c:af:25:29:0a:be:99:31:86:77:ad:54:c5:5d: 42:41:81:e2:f6:ad:a5:a0:d5:53:74:bd:ba:bb:2c: 0a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:22:76:5C:08:48:10:BF:E8:76:39:1E:2A:1E:D3:06:80:79:51:4D X509v3 Authority Key Identifier: keyid:5F:26:F9:C5:D8:3C:2D:52:4F:5A:31:D4:70:2E:F2:14:03:3B:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C538/DCA9536654DB11ED9D205965C4F9AE02/Xyb5xdg8LVJPWjHUcC7yFAM7NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f6:d1:6c:d8:e6:0f:c3:da:87:3e:ea:af:b0:5d:76:d4:47: 94:fb:a7:90:ee:4c:4c:1a:d4:30:f1:97:32:2b:80:bd:50:b1: bb:83:0d:78:c8:43:8f:c0:f9:6d:84:da:a6:79:4f:dc:3d:ec: 21:ee:bf:df:67:be:9c:b4:24:2c:f7:a9:33:4d:f7:7e:b0:32: aa:cf:40:f3:51:c0:79:f2:41:fd:97:aa:2c:f2:03:49:15:46: ce:ec:4d:56:62:10:1c:5e:64:fb:4b:28:da:e4:7c:4c:63:85: 6a:27:3e:87:f0:9e:98:ea:f8:1e:be:24:86:71:6d:da:03:c8: 98:66:d3:a2:1b:e9:e6:8f:c0:f3:21:fb:68:a0:32:0c:a8:4b: 82:88:fc:63:33:be:54:a5:5b:17:1b:6e:b0:39:d8:4e:b0:b8: 95:45:11:c9:0e:ea:7b:48:39:6c:88:6a:a7:44:4b:e4:64:a9: c1:ce:0d:24:a6:e4:32:03:ce:18:ce:9c:d1:41:7e:dd:0d:87: 7e:c4:97:91:0e:19:aa:a8:0a:30:f8:15:3e:58:1c:db:a2:97: ff:5c:25:d9:31:0f:cb:58:cb:0c:ea:87:7f:14:ed:fb:92:51: 16:07:ed:da:06:5b:bd:8d:64:5f:47:7b:69:17:56:9a:81:2c: 1d:c7:b2:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM1MzgxMTAvBgNVBAUTKDVGMjZGOUM1RDgzQzJENTI0RjVBMzFENDcwMkVGMjE0 MDMzQjM1MkQwHhcNMjUwNDI1MDE1OTAyWhcNMjUwNTAyMDE1OTAyWjAYMRYwFAYD VQQDEw02ODBhZWM2Ni04OWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QG7RjNBGBBwTk0SgIgi64/A9ZDZoLJCq8bq73cxCgtbZACfONspIYWzgbQc GU5k8gEaLz1yKXGNFGo5/5pSLBK2QKRP4sHpnZ1A1/ba0pcd33xMxDSQ12In3zul xmeP8jA2GDqNrDTqW8Lu/HxHcdKpi/ZkGys35oFT4SuMygN1jn9i5agkWJIKTSYX IU8yWUYr8sxR8SRhSapa4qDYFQVHuFFo+7jmBq/7zbbxbnnvSr6vqTj9T6wUAc1R CUsKlnMEQH1x+n2+/kddH9CrFbaDmoC84SHnXYMvCGvGeX2DHK8lKQq+mTGGd61U xV1CQYHi9q2loNVTdL26uywK7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgidlwI SBC/6HY5Hioe0waAeVFNMB8GA1UdIwQYMBaAFF8m+cXYPC1ST1ox1HAu8hQDOzUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUzOC9EQ0E5NTM2NjU0 REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExWSlBXakhVY0M3eUZBTTdO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5YjV4ZGc4TFZKUFdqSFVjQzd5RkFNN05TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzUzOC9EQ0E5NTM2NjU0REIxMUVEOUQyMDU5NjVDNEY5QUUwMi9YeWI1eGRnOExW SlBXakhVY0M3eUZBTTdOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe9tFs2OYPw9qHPuqvsF121EeU+6eQ7kxMGtQw8ZcyK4C9ULG7gw14 yEOPwPlthNqmeU/cPewh7r/fZ76ctCQs96kzTfd+sDKqz0DzUcB58kH9l6os8gNJ FUbO7E1WYhAcXmT7Syja5HxMY4VqJz6H8J6Y6vgeviSGcW3aA8iYZtOiG+nmj8Dz IftooDIMqEuCiPxjM75UpVsXG26wOdhOsLiVRRHJDup7SDlsiGqnREvkZKnBzg0k puQyA84YzpzRQX7dDYd+xJeRDhmqqAow+BU+WBzbopf/XCXZMQ/LWMsM6od/FO37 klEWB+3aBlu9jWRfR3tpF1aagSwdx7LL -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:44 2025 by rpki-client