$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json) Hash identifier: +Y1WeNMjTdeDPufH8WoNIpLN58CfMIFnBf9zbZppPQ4= Subject key identifier: 2C:39:58:FE:B8:5C:4D:9B:1E:23:96:90:03:72:59:92:34:97:60:61 Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft Manifest number: 07AB Signing time: Wed 14 May 2025 21:17:31 +0000 Manifest this update: Wed 14 May 2025 21:17:31 +0000 Manifest next update: Wed 21 May 2025 21:17:31 +0000 Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: SkNUiLfvneYh7YfIXrFzj5P2lmctGKKvWOBsqzsvmdE=) 2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: pS3E0icAhyYawyxkXSLUFbWuAzA0NV/jlalvE1DTh1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE Validity Not Before: May 14 21:17:31 2025 GMT Not After : May 21 21:17:31 2025 GMT Subject: CN=6825086b-8be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:17:34:f5:6d:dd:b5:85:8e:30:2b:be:3f: 57:2c:f3:3c:5f:d5:4d:81:1f:6e:a8:14:e9:87:73: 5d:a3:bc:14:76:33:f1:8d:1c:b6:4d:c9:da:5b:f2: 37:e3:49:fa:2e:33:84:69:7c:f9:b8:a0:be:18:33: c7:28:20:8a:9a:c3:62:bb:81:20:7a:a0:99:4c:82: 9c:25:05:82:98:7e:58:9c:ab:a1:42:ab:09:df:cf: d8:39:3f:62:6f:5c:8c:82:0f:bd:c9:c9:24:5e:66: 9f:45:91:1c:26:4f:10:02:02:c6:46:b5:12:48:e0: 69:5e:6f:db:11:cd:57:20:24:41:05:30:be:8a:89: 6b:55:b4:5f:0e:06:78:f7:85:3a:20:d8:12:b2:e0: 35:20:1a:4b:8e:a3:69:ed:8b:62:76:c8:11:04:cb: 74:17:23:35:a6:bf:ed:86:0b:a7:4f:8d:c5:ec:b6: 6d:ee:a2:26:0d:33:0d:26:27:35:13:59:c1:4f:5b: 33:db:35:d7:55:1f:58:7d:67:66:37:ed:46:70:e0: 80:17:bb:81:68:a7:69:66:42:e2:00:19:0c:1b:2f: 7e:50:dc:4a:2d:01:00:64:0a:07:85:3e:f5:49:21: b6:a8:25:6c:15:60:93:78:17:40:73:3c:75:20:13: 6b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:39:58:FE:B8:5C:4D:9B:1E:23:96:90:03:72:59:92:34:97:60:61 X509v3 Authority Key Identifier: keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:9a:d8:87:b0:1f:6a:b5:0d:41:82:83:49:91:cc:f2:03:46: 92:ac:74:bd:13:85:a1:68:f5:52:2b:77:a7:21:e4:63:44:02: ee:57:88:e0:4d:e7:19:9e:e8:44:48:5c:db:91:8a:69:39:51: 7d:81:e6:a3:c7:15:17:05:03:d4:00:e4:3f:22:75:d9:4a:b2: e3:c5:00:ae:1e:ec:bf:45:08:60:fe:a3:ea:10:96:9e:2e:de: 09:4a:00:b3:80:86:83:e0:01:67:d1:ae:cb:9a:f4:33:75:0c: 82:32:58:85:0e:6c:5f:ea:d7:07:c7:e1:b9:77:68:74:14:67: d3:c3:cd:18:b5:51:e0:61:7a:e8:c6:af:ef:9f:bc:70:6f:cf: d4:81:e4:89:d5:6d:fa:36:fc:43:ff:e3:22:14:86:7d:c0:69: 50:73:a0:fa:71:13:04:cc:ad:55:a5:60:bf:0a:4b:17:b6:df: eb:e4:4c:2b:2c:6c:d5:9c:1f:21:09:48:aa:1f:0a:12:78:45: 45:03:c4:29:33:16:27:fb:be:f0:6e:fd:17:4b:44:49:2e:93: 25:95:b5:e8:fc:54:83:fd:b7:60:05:c2:fc:51:1b:2a:ec:31: 69:00:31:d5:25:91:99:de:e6:b2:6f:2c:84:35:f4:ae:63:6d: f1:09:c6:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1 NjFCOTVEREUwHhcNMjUwNTE0MjExNzMxWhcNMjUwNTIxMjExNzMxWjAYMRYwFAYD VQQDEw02ODI1MDg2Yi04YmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmh8XNPVt3bWFjjArvj9XLPM8X9VNgR9uqBTph3Ndo7wUdjPxjRy2TcnaW/I3 40n6LjOEaXz5uKC+GDPHKCCKmsNiu4EgeqCZTIKcJQWCmH5YnKuhQqsJ38/YOT9i b1yMgg+9yckkXmafRZEcJk8QAgLGRrUSSOBpXm/bEc1XICRBBTC+iolrVbRfDgZ4 94U6INgSsuA1IBpLjqNp7YtidsgRBMt0FyM1pr/thgunT43F7LZt7qImDTMNJic1 E1nBT1sz2zXXVR9YfWdmN+1GcOCAF7uBaKdpZkLiABkMGy9+UNxKLQEAZAoHhT71 SSG2qCVsFWCTeBdAczx1IBNrLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCw5WP64 XE2bHiOWkANyWZI0l2BhMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP SDBuSkNCTFJXeDlXRzVYZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACmtiHsB9qtQ1BgoNJkczyA0aSrHS9E4WhaPVSK3enIeRjRALuV4jg TecZnuhESFzbkYppOVF9geajxxUXBQPUAOQ/InXZSrLjxQCuHuy/RQhg/qPqEJae Lt4JSgCzgIaD4AFn0a7LmvQzdQyCMliFDmxf6tcHx+G5d2h0FGfTw80YtVHgYXro xq/vn7xwb8/UgeSJ1W36NvxD/+MiFIZ9wGlQc6D6cRMEzK1VpWC/CksXtt/r5Ewr LGzVnB8hCUiqHwoSeEVFA8QpMxYn+77wbv0XS0RJLpMllbXo/FSD/bdgBcL8URsq 7DFpADHVJZGZ3uaybyyENfSuY23xCcbf -----END CERTIFICATE-----Generated at Fri May 16 22:36:39 2025 by rpki-client