$ rpki-client -vvf rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft File: XrCY701WVcxmtq-Bw83kBi2ALzs.mft (raw, json) Hash identifier: 1CVlN7HJvWPlH4mJuOLo+ByDS/uNgwFKAM8cBxJuTAc= Subject key identifier: 85:7E:A4:AF:FE:88:CC:16:BB:3D:99:DD:0B:24:E7:55:F7:6C:A0:CB Authority key identifier: 5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B Certificate issuer: /CN=A919E3FB/serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B Certificate serial: 04B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft Manifest number: 04B4 Signing time: Thu 24 Apr 2025 23:39:36 +0000 Manifest this update: Thu 24 Apr 2025 23:39:36 +0000 Manifest next update: Thu 01 May 2025 23:39:36 +0000 Files and hashes: 1: XrCY701WVcxmtq-Bw83kBi2ALzs.crl (hash: eXSgWc2b+pqhi05JpbAZxnlWvdYW4QDU2Eiyn3Em9T4=) 2: B4D8E692267111ECA0546981C4F9AE02.roa (hash: APl5b4vCPo52FjFgWioqB5D0vfXVOhLUTwuTuf6xSiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1209 (0x4b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E3FB, serialNumber=5EB098EF4D5655CC66B6AF81C3CDE4062D802F3B Validity Not Before: Apr 24 23:39:36 2025 GMT Not After : May 1 23:39:36 2025 GMT Subject: CN=680acbb8-ce4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:79:e5:67:34:10:d0:ca:41:aa:d2:18:10:ba: ad:d5:5c:27:b0:75:7a:51:96:db:12:a5:ae:7b:cb: db:e5:f8:86:7d:27:01:41:c4:0e:cd:16:1a:0d:44: df:02:f6:0f:54:a3:c0:36:9f:13:62:bb:91:a1:29: af:4e:ee:d5:29:75:96:5d:f8:1a:3f:5c:53:f5:25: ad:ba:6c:9b:72:26:50:87:b1:a9:06:e9:88:4e:8f: cb:b5:b4:4f:b0:03:ba:e5:21:62:72:f2:00:78:c1: a3:71:50:49:cb:26:1b:8b:68:98:b4:19:65:73:05: 59:f1:f0:3c:16:67:0c:a8:be:c9:a3:b8:52:88:01: 97:26:fc:f7:de:f4:bf:0b:41:75:31:94:6c:0c:f1: f3:23:a3:cb:90:f3:ad:36:71:f4:27:a0:48:d5:e2: 0f:fe:6f:3d:ae:f5:4d:36:d6:ea:87:79:a6:c7:ff: f0:dc:f3:35:b9:41:ee:50:cd:19:29:d9:c2:d1:f2: 6c:00:bf:74:c5:8d:82:7c:69:50:ed:68:a0:8c:7a: f4:f7:68:59:6a:7e:0a:ed:94:f7:46:19:e4:73:f8: 64:30:e7:ea:15:bb:3b:ef:7a:27:a2:a4:92:b6:7c: 1d:76:ba:4d:a2:e2:ac:64:d6:1e:30:b2:5b:75:46: 80:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7E:A4:AF:FE:88:CC:16:BB:3D:99:DD:0B:24:E7:55:F7:6C:A0:CB X509v3 Authority Key Identifier: keyid:5E:B0:98:EF:4D:56:55:CC:66:B6:AF:81:C3:CD:E4:06:2D:80:2F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XrCY701WVcxmtq-Bw83kBi2ALzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E3FB/FDD44C22266E11ECAC097C7BC4F9AE02/XrCY701WVcxmtq-Bw83kBi2ALzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2e:44:86:7d:7f:80:80:3f:dd:44:20:18:75:9f:d2:ee:c8: c2:fc:6a:08:f2:b3:c9:af:7e:9d:ee:6f:cc:b3:d4:58:5d:ee: f5:4f:2e:87:e4:a5:d8:7e:97:ec:9e:66:67:8d:03:a4:d4:4a: 54:e9:83:86:ae:38:64:23:b2:c6:07:5a:62:8d:f0:54:05:85: cc:68:f2:70:f7:0b:0c:ff:57:6c:a1:2e:ef:52:40:26:40:3e: d0:da:63:c4:18:b8:c7:35:15:a3:27:48:61:34:8c:06:9e:b3: cf:b9:b9:c6:95:db:cf:5f:ab:67:79:d9:99:4d:81:27:9b:eb: 44:ea:f9:2b:49:01:ce:29:59:0c:23:d8:cf:dc:3e:9a:f5:0c: 99:9d:a5:f3:1c:6f:22:91:04:9a:fb:0f:79:42:6e:79:3a:da: d5:52:c1:68:41:19:04:93:47:1a:9d:3a:45:65:df:c7:1c:5d: ed:79:a8:6c:0e:f2:6e:25:52:6d:b8:01:eb:ae:07:c5:f3:40: 6e:00:0b:1a:49:25:79:f0:bc:06:c4:03:e2:44:b6:5a:9d:36: 5e:d7:eb:23:fc:74:65:59:5f:81:44:e1:c4:c4:6f:88:13:04: ca:50:28:59:b1:86:22:e0:68:e5:cc:f6:bc:c6:60:67:3f:70: 0f:03:e4:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUzRkIxMTAvBgNVBAUTKDVFQjA5OEVGNEQ1NjU1Q0M2NkI2QUY4MUMzQ0RFNDA2 MkQ4MDJGM0IwHhcNMjUwNDI0MjMzOTM2WhcNMjUwNTAxMjMzOTM2WjAYMRYwFAYD VQQDEw02ODBhY2JiOC1jZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nnlZzQQ0MpBqtIYELqt1VwnsHV6UZbbEqWue8vb5fiGfScBQcQOzRYaDUTf AvYPVKPANp8TYruRoSmvTu7VKXWWXfgaP1xT9SWtumybciZQh7GpBumITo/LtbRP sAO65SFicvIAeMGjcVBJyyYbi2iYtBllcwVZ8fA8FmcMqL7Jo7hSiAGXJvz33vS/ C0F1MZRsDPHzI6PLkPOtNnH0J6BI1eIP/m89rvVNNtbqh3mmx//w3PM1uUHuUM0Z KdnC0fJsAL90xY2CfGlQ7WigjHr092hZan4K7ZT3Rhnkc/hkMOfqFbs773onoqSS tnwddrpNouKsZNYeMLJbdUaA5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIV+pK/+ iMwWuz2Z3Qsk51X3bKDLMB8GA1UdIwQYMBaAFF6wmO9NVlXMZravgcPN5AYtgC87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTNGQi9GREQ0NEMyMjI2 NkUxMUVDQUMwOTdDN0JDNEY5QUUwMi9YckNZNzAxV1ZjeG10cS1Cdzgza0JpMkFM enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hyQ1k3MDFXVmN4bXRxLUJ3ODNrQmkyQUx6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTNGQi9GREQ0NEMyMjI2NkUxMUVDQUMwOTdDN0JDNEY5QUUwMi9YckNZNzAxV1Zj eG10cS1Cdzgza0JpMkFMenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvLkSGfX+AgD/dRCAYdZ/S7sjC/GoI8rPJr36d7m/Ms9RYXe71Ty6H 5KXYfpfsnmZnjQOk1EpU6YOGrjhkI7LGB1pijfBUBYXMaPJw9wsM/1dsoS7vUkAm QD7Q2mPEGLjHNRWjJ0hhNIwGnrPPubnGldvPX6tnedmZTYEnm+tE6vkrSQHOKVkM I9jP3D6a9QyZnaXzHG8ikQSa+w95Qm55OtrVUsFoQRkEk0canTpFZd/HHF3teahs DvJuJVJtuAHrrgfF80BuAAsaSSV58LwGxAPiRLZanTZe1+sj/HRlWV+BROHExG+I EwTKUChZsYYi4GjlzPa8xmBnP3APA+T/ -----END CERTIFICATE-----Generated at Sat Apr 26 14:25:01 2025 by rpki-client