$ rpki-client -vvf rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft File: XA0XaoArLkVX6IWmwOq10NBw16c.mft (raw, json) Hash identifier: p0+jK3dEkKm/Zwihe8yZfLDbHWpTiNnsuTq6Y6OuhQM= Subject key identifier: D4:69:57:28:D9:95:CC:D0:59:91:81:26:E8:1E:DF:3A:D1:A6:13:F6 Authority key identifier: 5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 Certificate issuer: /CN=A911959A/serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Certificate serial: 05BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft Manifest number: 05B9 Signing time: Sat 10 May 2025 22:42:52 +0000 Manifest this update: Sat 10 May 2025 22:42:51 +0000 Manifest next update: Sat 17 May 2025 22:42:51 +0000 Files and hashes: 1: XA0XaoArLkVX6IWmwOq10NBw16c.crl (hash: un62rvlyYpDRdb9WJJtTPVuQBr1NBqavD38JMv1ShjI=) 2: E390F83EC1CD11EB86A00568C4F9AE02.roa (hash: l/jme7wWS4I9LN6Uqmqgm8y3qkl6ZZcy6rtZNU+mraw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1470 (0x5be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911959A, serialNumber=5C0D176A802B2E4557E885A6C0EAB5D0D070D7A7 Validity Not Before: May 10 22:42:51 2025 GMT Not After : May 17 22:42:51 2025 GMT Subject: CN=681fd66b-4560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:b2:72:6b:66:56:f3:c8:59:aa:11:8c:bd: c4:9d:d3:36:6e:f5:b3:5a:8e:77:d2:49:09:7d:3e: 12:cd:ce:59:fe:57:2f:bf:ad:97:8f:6b:7b:2c:2d: fb:bc:ff:ee:51:b7:a4:20:b4:f6:b1:07:91:d3:71: 86:07:59:91:71:32:df:95:87:42:c5:8e:4b:2d:97: dc:7d:e2:90:1d:91:b3:68:2f:7a:d1:aa:d1:da:50: ba:ec:dc:f6:b4:47:d0:52:b9:a9:85:ca:32:6b:00: a4:ef:73:a5:11:d3:b6:55:59:17:e5:83:0e:c2:62: be:c6:c0:5b:8f:5a:9d:01:a4:9b:58:11:47:16:fc: de:e9:24:c4:7c:7c:8c:18:6c:31:e3:8a:ec:d8:59: 2b:a0:31:a1:d8:28:5a:94:68:27:86:b6:a7:97:56: 97:26:2e:f7:a6:f2:bb:a5:fe:5a:71:22:47:44:60: 86:fd:85:43:83:b7:d0:59:44:27:d5:29:59:f5:35: 36:ae:31:62:cc:c9:91:28:1b:a1:6d:72:73:b1:14: da:fa:ac:9f:2a:3f:ce:16:d5:e3:1d:40:38:49:39: e7:1d:55:0d:73:37:66:01:c7:96:3c:c8:28:96:32: 6f:1b:ab:4d:65:a1:41:24:a7:78:b8:f2:4a:ed:e6: c4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:69:57:28:D9:95:CC:D0:59:91:81:26:E8:1E:DF:3A:D1:A6:13:F6 X509v3 Authority Key Identifier: keyid:5C:0D:17:6A:80:2B:2E:45:57:E8:85:A6:C0:EA:B5:D0:D0:70:D7:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XA0XaoArLkVX6IWmwOq10NBw16c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911959A/2F8DCB02C1CB11EB9175CE66C4F9AE02/XA0XaoArLkVX6IWmwOq10NBw16c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:62:32:ab:75:48:7b:b6:62:9e:3d:79:94:7c:0d:d5:b1:b1: 64:e2:d4:49:9e:fd:8f:4f:ff:28:df:a6:5b:1a:96:02:c7:8e: f7:99:17:ba:ca:df:8e:e6:02:f3:05:58:b5:15:11:97:e5:a9: 51:5b:be:5f:cf:9b:c1:53:da:1e:10:97:e4:94:4e:14:2e:75: 19:5b:2d:91:af:fc:b1:e7:72:35:76:78:47:a1:97:76:60:9d: 8a:90:67:1b:5d:7f:32:dc:08:85:2f:55:e3:79:9e:5b:89:25: 12:3c:9e:40:62:5a:2f:ad:a0:7e:49:d8:92:8f:ca:35:06:9c: 51:06:77:ec:85:9a:25:70:c7:8b:df:4e:04:62:b0:9f:40:8d: ac:35:59:9f:a2:e6:a5:b4:de:23:86:e4:33:44:b8:e7:f7:61: 2e:17:95:34:31:8c:a8:f4:2e:bb:21:e9:c2:0c:93:2b:3b:0d: 66:20:be:b4:1c:2e:97:4b:fe:96:7b:56:00:ea:13:99:60:4b: 17:99:b9:13:66:01:ab:8f:8d:62:4d:d5:be:13:9d:19:0f:0f: 7d:fa:ce:e0:e7:52:9a:b8:a0:32:f1:91:6b:e9:52:d3:13:3c: c3:ef:f4:90:0c:25:15:b0:fe:8a:24:bd:80:2d:f8:97:5a:fa: 8c:c5:f2:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1OUExMTAvBgNVBAUTKDVDMEQxNzZBODAyQjJFNDU1N0U4ODVBNkMwRUFCNUQw RDA3MEQ3QTcwHhcNMjUwNTEwMjI0MjUxWhcNMjUwNTE3MjI0MjUxWjAYMRYwFAYD VQQDEw02ODFmZDY2Yi00NTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZqycmtmVvPIWaoRjL3EndM2bvWzWo530kkJfT4Szc5Z/lcvv62Xj2t7LC37 vP/uUbekILT2sQeR03GGB1mRcTLflYdCxY5LLZfcfeKQHZGzaC960arR2lC67Nz2 tEfQUrmphcoyawCk73OlEdO2VVkX5YMOwmK+xsBbj1qdAaSbWBFHFvze6STEfHyM GGwx44rs2FkroDGh2ChalGgnhranl1aXJi73pvK7pf5acSJHRGCG/YVDg7fQWUQn 1SlZ9TU2rjFizMmRKBuhbXJzsRTa+qyfKj/OFtXjHUA4STnnHVUNczdmAceWPMgo ljJvG6tNZaFBJKd4uPJK7ebEuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRpVyjZ lczQWZGBJuge3zrRphP2MB8GA1UdIwQYMBaAFFwNF2qAKy5FV+iFpsDqtdDQcNen MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU5QS8yRjhEQ0IwMkMx Q0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9BckxrVlg2SVdtd09xMTBOQncx NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBMFhhb0FyTGtWWDZJV213T3ExME5CdzE2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU5QS8yRjhEQ0IwMkMxQ0IxMUVCOTE3NUNFNjZDNEY5QUUwMi9YQTBYYW9Bckxr Vlg2SVdtd09xMTBOQncxNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1YjKrdUh7tmKePXmUfA3VsbFk4tRJnv2PT/8o36ZbGpYCx473mRe6 yt+O5gLzBVi1FRGX5alRW75fz5vBU9oeEJfklE4ULnUZWy2Rr/yx53I1dnhHoZd2 YJ2KkGcbXX8y3AiFL1XjeZ5biSUSPJ5AYlovraB+SdiSj8o1BpxRBnfshZolcMeL 304EYrCfQI2sNVmfoualtN4jhuQzRLjn92EuF5U0MYyo9C67IenCDJMrOw1mIL60 HC6XS/6We1YA6hOZYEsXmbkTZgGrj41iTdW+E50ZDw99+s7g51KauKAy8ZFr6VLT EzzD7/SQDCUVsP6KJL2ALfiXWvqMxfI3 -----END CERTIFICATE-----Generated at Mon May 12 22:14:55 2025 by rpki-client