$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft File: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json) Hash identifier: 3d+jMn9vBm155vAlz/1o3QLi6q8llVbE6T9WEJVVD68= Subject key identifier: EB:2C:1F:40:B2:4A:EE:7A:B6:A9:F4:A8:D8:D6:83:42:AD:A8:D0:CC Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft Manifest number: 01AF Signing time: Fri 25 Apr 2025 02:21:20 +0000 Manifest this update: Fri 25 Apr 2025 02:21:20 +0000 Manifest next update: Fri 02 May 2025 02:21:20 +0000 Files and hashes: 1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: CouUd03SBOMWrMbktW4RtLc8wQ3WDsczu4waPhptxgk=) 2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: RmJtDMkcxfQ3eQrKn0Yy1kaaLYDY2h9Y7DjrNYqUSm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CA19, serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201 Validity Not Before: Apr 25 02:21:20 2025 GMT Not After : May 2 02:21:20 2025 GMT Subject: CN=680af1a0-160a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:ef:37:aa:7b:35:a3:3f:15:1a:99:7e:6b: 25:36:03:85:73:a7:b5:32:a7:bd:77:a8:83:6b:b1: 53:d6:d4:f0:52:50:c4:ed:98:12:53:2f:aa:78:37: ca:b5:0a:30:b0:05:cf:40:6b:38:00:5b:30:07:4d: 10:4c:c8:a1:14:65:06:83:75:ec:3f:2b:0b:2f:79: 87:9f:52:65:56:ff:2e:27:0e:cf:1b:3b:b9:d1:bc: 74:93:b8:4c:a7:7f:56:a6:e0:78:93:6a:bd:66:67: 3d:3f:06:d9:e6:1b:25:0d:05:2a:4c:a1:61:ab:e1: 89:c1:df:0e:c3:c6:db:4f:20:ae:8d:35:18:d4:4b: cd:b5:11:bc:5e:92:bf:2e:0c:87:23:9a:43:d6:b0: a7:6e:31:45:fb:c8:d2:e0:ab:ab:57:b7:7a:f0:63: c4:b3:7a:be:f0:3e:29:5b:9d:91:df:06:9e:23:84: e1:ea:1c:2c:7a:df:81:74:7e:c5:7a:38:16:1d:16: 66:98:11:76:e1:e4:79:4d:31:d1:29:b2:98:29:9c: 33:64:92:75:3f:d7:c1:21:2b:48:f2:2d:f8:d1:5e: d0:92:32:1e:63:75:c7:8e:b4:e5:3c:c0:2a:8d:db: ca:e5:29:c5:68:a3:5c:e2:51:38:90:24:94:3b:41: 8d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2C:1F:40:B2:4A:EE:7A:B6:A9:F4:A8:D8:D6:83:42:AD:A8:D0:CC X509v3 Authority Key Identifier: keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:e3:45:ab:f0:be:47:6b:aa:b0:86:e0:36:66:d3:cd:a9:5f: 40:3f:9e:95:03:16:ec:dd:90:1e:8d:f6:be:fe:a2:2b:22:16: 96:78:2e:62:4c:95:10:e5:56:e9:6b:b4:2b:63:db:e5:fd:eb: 82:1e:d9:8b:fb:44:7a:46:04:68:aa:93:83:de:c9:d0:24:f2: d1:45:48:e0:de:ef:db:84:dd:24:6f:84:67:be:74:64:c9:42: 4a:81:27:08:72:73:8b:6b:67:29:7c:e3:f9:8b:3d:b0:67:dd: 02:f3:bb:7d:0d:ff:7c:21:ae:73:86:f1:86:eb:50:68:43:3c: 02:5b:5d:29:ca:fc:de:f1:03:57:1e:c3:16:58:63:a6:09:fb: 02:c3:21:87:0f:da:5f:bd:1c:b3:52:b1:04:6f:f9:cd:6f:65: 60:ad:8f:29:40:76:eb:ef:62:0d:cc:50:9d:04:3b:52:fc:52: 93:e9:8b:70:a6:8e:37:59:1b:4f:1a:9a:48:b5:97:8b:9c:09: 17:db:eb:3c:9c:bb:c0:6b:98:2f:c4:ad:2f:1f:cd:3f:a3:11: b0:f7:62:c6:00:74:6b:33:6b:09:ac:4a:55:ed:24:c1:97:00: ba:99:5f:a3:48:d4:1a:f8:d0:77:15:de:08:43:f0:74:da:2d: 33:7e:32:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBMTkxMTAvBgNVBAUTKEM0RjkzMjJFRUU5NjcwOUU0MjIxQzZERDNDRUNCODQw Mzg0RjAyMDEwHhcNMjUwNDI1MDIyMTIwWhcNMjUwNTAyMDIyMTIwWjAYMRYwFAYD VQQDEw02ODBhZjFhMC0xNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznvvN6p7NaM/FRqZfmslNgOFc6e1Mqe9d6iDa7FT1tTwUlDE7ZgSUy+qeDfK tQowsAXPQGs4AFswB00QTMihFGUGg3XsPysLL3mHn1JlVv8uJw7PGzu50bx0k7hM p39WpuB4k2q9Zmc9PwbZ5hslDQUqTKFhq+GJwd8Ow8bbTyCujTUY1EvNtRG8XpK/ LgyHI5pD1rCnbjFF+8jS4KurV7d68GPEs3q+8D4pW52R3waeI4Th6hwset+BdH7F ejgWHRZmmBF24eR5TTHRKbKYKZwzZJJ1P9fBIStI8i340V7QkjIeY3XHjrTlPMAq jdvK5SnFaKNc4lE4kCSUO0GNNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOssH0Cy Su56tqn0qNjWg0KtqNDMMB8GA1UdIwQYMBaAFMT5Mi7ulnCeQiHG3TzsuEA4TwIB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ExOS9GODAyQTQyNDhD RDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NKNUNJY2JkUE95NFFEaFBB Z0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQa3lMdTZXY0o1Q0ljYmRQT3k0UURoUEFnRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ExOS9GODAyQTQyNDhDRDkxMUVEOTkwOTdEMEZDNEY5QUUwMi94UGt5THU2V2NK NUNJY2JkUE95NFFEaFBBZ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA140Wr8L5Ha6qwhuA2ZtPNqV9AP56VAxbs3ZAejfa+/qIrIhaWeC5i TJUQ5Vbpa7QrY9vl/euCHtmL+0R6RgRoqpOD3snQJPLRRUjg3u/bhN0kb4RnvnRk yUJKgScIcnOLa2cpfOP5iz2wZ90C87t9Df98Ia5zhvGG61BoQzwCW10pyvze8QNX HsMWWGOmCfsCwyGHD9pfvRyzUrEEb/nNb2VgrY8pQHbr72INzFCdBDtS/FKT6Ytw po43WRtPGppItZeLnAkX2+s8nLvAa5gvxK0vH80/oxGw92LGAHRrM2sJrEpV7STB lwC6mV+jSNQa+NB3Fd4IQ/B02i0zfjJG -----END CERTIFICATE-----Generated at Sat Apr 26 14:12:54 2025 by rpki-client