$ rpki-client -vvf rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft File: xVZN7BAWY79D0_LjQDlMAHZqY-M.mft (raw, json) Hash identifier: QTeIdBw6dqnOV5FKc3eBSPWMocZozJi6QRIrJTSDU+M= Subject key identifier: 4A:CA:74:3C:2A:E7:C8:9B:7B:4A:45:7D:6C:37:B8:F3:A4:6C:E7:34 Authority key identifier: C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 Certificate issuer: /CN=A9122B85/serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft Manifest number: 64 Signing time: Sun 11 May 2025 03:44:01 +0000 Manifest this update: Sun 11 May 2025 03:44:01 +0000 Manifest next update: Sun 18 May 2025 03:44:01 +0000 Files and hashes: 1: xVZN7BAWY79D0_LjQDlMAHZqY-M.crl (hash: dUwHNuqqdIcZY1bpEVY/FJoSbowEeRPBQ9ApSbBixQo=) 2: 21D32B1EC54211EFBA442C85C4F9AE02.roa (hash: xY5rRYGsWrcsy57HxUo/DUZymmQ+QbhnmZvTvm4JJxQ=) 3: 42582BE6C54211EFBC189185C4F9AE02.roa (hash: 3NBZi9t73NGUqewcrwzUwAEjzkPNxuY/EA9dZDJA11Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122B85, serialNumber=C5564DEC101663BF43D3F2E340394C00766A63E3 Validity Not Before: May 11 03:44:01 2025 GMT Not After : May 18 03:44:01 2025 GMT Subject: CN=68201d01-6e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6d:98:aa:95:2d:71:5e:27:15:ec:45:62:f8: be:3a:9a:2d:95:78:19:b9:4b:90:85:41:65:74:24: 16:25:d6:3d:f9:3d:d8:06:d2:9f:e0:16:03:34:86: 99:aa:55:d6:43:65:8b:a1:5f:3e:ff:6e:40:c4:fd: 75:63:4e:d2:96:69:30:86:fa:22:c8:b2:bf:df:56: 81:eb:5f:ca:6f:eb:51:7a:41:90:3d:a2:15:46:01: 32:cd:65:2e:21:50:aa:e7:97:49:f5:30:23:d0:a2: 49:36:fc:a2:ba:ac:3e:fa:7e:ef:38:07:72:ff:da: 02:75:09:30:05:1a:c5:ca:6b:32:20:84:d2:be:62: 37:92:1f:aa:52:a8:8c:6a:c0:8d:2e:b2:33:bf:61: 97:49:ae:21:c9:08:7f:68:19:c8:d1:d2:ac:b1:93: d6:9a:ac:5d:04:33:59:58:0e:50:8f:4f:55:10:31: c1:1f:92:22:a3:f6:8f:7e:4e:5a:80:26:03:97:50: 7f:83:89:80:23:e2:ae:1f:00:1b:b3:34:8a:a8:49: d9:ee:e3:63:70:5a:ec:45:b5:37:16:79:4b:c6:cc: 37:d5:03:c1:37:14:88:36:8a:5d:6e:cc:fe:80:33: 21:37:28:b9:74:c6:18:07:cb:71:71:dc:eb:0a:18: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CA:74:3C:2A:E7:C8:9B:7B:4A:45:7D:6C:37:B8:F3:A4:6C:E7:34 X509v3 Authority Key Identifier: keyid:C5:56:4D:EC:10:16:63:BF:43:D3:F2:E3:40:39:4C:00:76:6A:63:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xVZN7BAWY79D0_LjQDlMAHZqY-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122B85/CCBBABEA9F6411EFA931473CC4F9AE02/xVZN7BAWY79D0_LjQDlMAHZqY-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d3:72:ec:e0:23:16:df:fd:b5:73:6b:73:82:90:57:7b:c3: e2:28:0d:9b:6c:86:5e:75:72:56:34:a4:ac:01:eb:58:3f:78: 67:a0:69:b3:8f:20:e7:be:79:7e:84:a5:41:96:07:6c:45:00: 38:98:36:28:3a:78:43:f3:14:50:c0:00:ff:17:0e:95:1e:4f: 71:0d:29:ae:c4:70:7d:f0:04:5f:c0:84:e2:3a:11:ba:2b:6f: 85:c2:5d:26:6f:a0:e5:1a:a8:57:da:c4:18:05:b1:05:57:c7: 95:f3:72:ef:b2:24:f3:f6:77:17:ce:cd:3b:8d:d4:4d:bd:df: 33:d1:10:b3:6a:86:40:9a:d0:d6:af:61:75:39:16:26:ad:7b: 8c:ae:56:88:3c:7f:2f:4e:9f:df:fe:1e:f0:16:ed:44:a4:9d: d4:5e:94:23:c7:0a:b4:dd:e2:e7:38:d9:43:3b:39:8e:96:88: b5:fd:5e:b8:03:b3:6b:63:5a:ed:65:fc:4c:4f:15:cc:92:fb: 51:3b:14:00:3f:cc:c2:13:ef:4d:b2:79:d1:19:b3:87:31:a6: 65:ce:76:18:bd:46:cc:80:2e:53:9f:66:92:d0:5b:22:05:85: 9b:99:97:ba:6a:85:33:9c:8e:6c:c5:4d:24:1e:49:e3:8d:04: d2:d0:13:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkI4NTExMC8GA1UEBRMoQzU1NjRERUMxMDE2NjNCRjQzRDNGMkUzNDAzOTRDMDA3 NjZBNjNFMzAeFw0yNTA1MTEwMzQ0MDFaFw0yNTA1MTgwMzQ0MDFaMBgxFjAUBgNV BAMTDTY4MjAxZDAxLTZlMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdbZiqlS1xXicV7EVi+L46mi2VeBm5S5CFQWV0JBYl1j35PdgG0p/gFgM0hpmq VdZDZYuhXz7/bkDE/XVjTtKWaTCG+iLIsr/fVoHrX8pv61F6QZA9ohVGATLNZS4h UKrnl0n1MCPQokk2/KK6rD76fu84B3L/2gJ1CTAFGsXKazIghNK+YjeSH6pSqIxq wI0usjO/YZdJriHJCH9oGcjR0qyxk9aarF0EM1lYDlCPT1UQMcEfkiKj9o9+TlqA JgOXUH+DiYAj4q4fABuzNIqoSdnu42NwWuxFtTcWeUvGzDfVA8E3FIg2il1uzP6A MyE3KLl0xhgHy3Fx3OsKGB0HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSsp0PCrn yJt7SkV9bDe486Rs5zQwHwYDVR0jBBgwFoAUxVZN7BAWY79D0/LjQDlMAHZqY+Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyQjg1L0NDQkJBQkVBOUY2 NDExRUZBOTMxNDczQ0M0RjlBRTAyL3hWWk43QkFXWTc5RDBfTGpRRGxNQUhacVkt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveFZaTjdCQVdZNzlEMF9MalFEbE1BSFpxWS1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy Qjg1L0NDQkJBQkVBOUY2NDExRUZBOTMxNDczQ0M0RjlBRTAyL3hWWk43QkFXWTc5 RDBfTGpRRGxNQUhacVktTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGLTcuzgIxbf/bVza3OCkFd7w+IoDZtshl51clY0pKwB61g/eGegabOP IOe+eX6EpUGWB2xFADiYNig6eEPzFFDAAP8XDpUeT3ENKa7EcH3wBF/AhOI6Ebor b4XCXSZvoOUaqFfaxBgFsQVXx5Xzcu+yJPP2dxfOzTuN1E293zPRELNqhkCa0Nav YXU5Fiate4yuVog8fy9On9/+HvAW7USkndRelCPHCrTd4uc42UM7OY6WiLX9XrgD s2tjWu1l/ExPFcyS+1E7FAA/zMIT702yedEZs4cxpmXOdhi9RsyALlOfZpLQWyIF hZuZl7pqhTOcjmzFTSQeSeONBNLQEwE= -----END CERTIFICATE-----Generated at Sun May 11 22:26:20 2025 by rpki-client