$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft File: Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft (raw, json) Hash identifier: Orn8wd5FhI9+nfqOebcvUv1/XKmgcBPWIIewJPVj5Qg= Subject key identifier: D3:D3:00:80:B0:25:E7:B6:55:69:52:F8:24:C6:79:78:26:02:35:B0 Authority key identifier: 5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 Certificate issuer: /CN=A9199CFF/serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft Manifest number: 36 Signing time: Sun 27 Apr 2025 06:27:18 +0000 Manifest this update: Sun 27 Apr 2025 06:27:18 +0000 Manifest next update: Sun 04 May 2025 06:27:18 +0000 Files and hashes: 1: Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl (hash: T6RCrcQ4d40ovrchp+OQ0jASqUVHKG7eitKCLB5qs28=) 2: 8A941156D7E211EFBF26DA72C4F9AE02.roa (hash: a4pNtK3CV+mQ7nJwDHXCGhAdmpO8QsQ6bTiqCpOkfws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 06:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199CFF, serialNumber=5EFDE98C4FBF8D1187B6858EBC81F0625B293160 Validity Not Before: Apr 27 06:27:18 2025 GMT Not After : May 4 06:27:18 2025 GMT Subject: CN=680dce46-50df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:fe:8d:c4:55:b7:c5:9a:e7:51:fb:90:85: ad:ce:02:73:55:22:df:2e:27:bc:8b:03:1f:c2:8b: cb:fd:6b:83:bd:e5:fa:2a:a5:3b:fa:33:90:1b:8a: 5d:2f:cb:90:dc:e0:ff:03:61:c8:cf:99:e8:4c:6e: 5c:26:7d:39:83:81:1f:3a:4a:35:e5:5b:bc:d2:ff: 66:55:e6:54:b9:cb:b5:63:21:92:b8:71:ea:66:d2: b8:01:04:15:98:e4:e5:a7:27:bd:f5:45:19:c6:ff: ac:34:98:de:3f:ba:ea:e4:fa:99:f7:79:33:6e:e3: eb:0e:36:93:3a:b9:e3:a0:80:59:34:3f:ae:bb:a0: 0e:85:cf:c9:d9:11:1b:32:0e:9a:e1:2e:8b:5a:3b: 77:1a:3a:f4:75:19:5b:b6:68:28:9f:8b:ab:d0:a3: de:3d:c9:8e:77:36:8f:4c:80:89:af:a0:7b:10:92: 8b:86:a9:b3:b7:60:d9:42:4d:33:66:2c:91:68:cc: d5:29:ce:ab:88:e0:a3:d7:f6:3f:0e:4a:74:68:01: ad:6a:40:4f:d2:5b:fb:13:9a:94:26:f1:5c:4e:7f: 9e:71:4a:39:8b:a2:cb:8b:81:7b:97:c1:90:5f:b0: f5:79:90:40:2b:a4:22:4a:3b:d3:fe:60:53:a1:51: 40:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D3:00:80:B0:25:E7:B6:55:69:52:F8:24:C6:79:78:26:02:35:B0 X509v3 Authority Key Identifier: keyid:5E:FD:E9:8C:4F:BF:8D:11:87:B6:85:8E:BC:81:F0:62:5B:29:31:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xv3pjE-_jRGHtoWOvIHwYlspMWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CFF/20BE1A30D7E011EF8B173D2FC4F9AE02/Xv3pjE-_jRGHtoWOvIHwYlspMWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:2b:39:e6:89:43:e3:af:ea:a2:10:0f:7c:72:ef:42:36:ac: 94:d3:27:66:a2:ad:0e:63:3a:e7:ad:99:53:78:fb:d3:a2:f7: 8c:e2:42:73:53:91:69:b6:bc:fd:70:17:31:88:2f:60:bd:d2: 89:e7:6f:a3:c3:34:3e:cb:00:ae:44:a0:b5:5f:2e:17:60:a0: 2e:4f:2d:33:27:d4:c1:10:ec:22:cc:a0:5c:a8:b6:bf:a5:ed: 7c:79:d7:0a:f7:5e:e0:c2:e4:eb:15:93:19:1c:e8:37:02:df: cc:e0:5a:45:1f:97:b9:95:26:9a:98:a3:2a:03:43:c6:ac:2a: 5c:e6:3b:94:e9:0a:57:ff:c6:99:7a:84:2a:e3:4c:c4:d1:e9: 90:35:18:78:96:00:c5:92:85:2e:c8:dd:29:be:79:53:24:40: 2e:2e:1d:c7:21:2d:e7:dc:28:64:f1:91:00:7d:c5:e8:b3:74: 71:19:8c:e5:de:e4:ce:ac:24:80:37:11:ec:f1:91:dc:d2:88: 7e:16:33:22:27:16:9d:91:d8:39:a1:b0:dd:68:05:a9:7a:3a: 67:d2:0f:b8:06:de:1c:9a:44:d8:86:c6:ad:03:c5:20:8f:64: cd:6b:2f:d9:16:0f:9c:ac:28:ae:72:8a:23:b2:73:f4:e2:e2: 2d:2d:fd:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUNGRjExMC8GA1UEBRMoNUVGREU5OEM0RkJGOEQxMTg3QjY4NThFQkM4MUYwNjI1 QjI5MzE2MDAeFw0yNTA0MjcwNjI3MThaFw0yNTA1MDQwNjI3MThaMBgxFjAUBgNV BAMTDTY4MGRjZTQ2LTUwZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKBf6NxFW3xZrnUfuQha3OAnNVIt8uJ7yLAx/Ci8v9a4O95foqpTv6M5Abil0v y5Dc4P8DYcjPmehMblwmfTmDgR86SjXlW7zS/2ZV5lS5y7VjIZK4cepm0rgBBBWY 5OWnJ731RRnG/6w0mN4/uurk+pn3eTNu4+sONpM6ueOggFk0P667oA6Fz8nZERsy DprhLotaO3caOvR1GVu2aCifi6vQo949yY53No9MgImvoHsQkouGqbO3YNlCTTNm LJFozNUpzquI4KPX9j8OSnRoAa1qQE/SW/sTmpQm8VxOf55xSjmLosuLgXuXwZBf sPV5kEArpCJKO9P+YFOhUUC3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU09MAgLAl 57ZVaVL4JMZ5eCYCNbAwHwYDVR0jBBgwFoAUXv3pjE+/jRGHtoWOvIHwYlspMWAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Q0ZGLzIwQkUxQTMwRDdF MDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJHSHRvV092SUh3WWxzcE1X QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWHYzcGpFLV9qUkdIdG9XT3ZJSHdZbHNwTVdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Q0ZGLzIwQkUxQTMwRDdFMDExRUY4QjE3M0QyRkM0RjlBRTAyL1h2M3BqRS1falJH SHRvV092SUh3WWxzcE1XQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACgrOeaJQ+Ov6qIQD3xy70I2rJTTJ2airQ5jOuetmVN4+9Oi94ziQnNT kWm2vP1wFzGIL2C90onnb6PDND7LAK5EoLVfLhdgoC5PLTMn1MEQ7CLMoFyotr+l 7Xx51wr3XuDC5OsVkxkc6DcC38zgWkUfl7mVJpqYoyoDQ8asKlzmO5TpClf/xpl6 hCrjTMTR6ZA1GHiWAMWShS7I3Sm+eVMkQC4uHcchLefcKGTxkQB9xeizdHEZjOXe 5M6sJIA3EezxkdzSiH4WMyInFp2R2DmhsN1oBal6OmfSD7gG3hyaRNiGxq0DxSCP ZM1rL9kWD5ysKK5yiiOyc/Ti4i0t/a4= -----END CERTIFICATE-----Generated at Mon Apr 28 13:52:48 2025 by rpki-client