$ rpki-client -vvf rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft File: xA63gWRRh1SG2mQ_j5Nht337IaM.mft (raw, json) Hash identifier: WW81rAMP9HBdp7/VaiDM5yr4Rc9Kj/Azk6DxZx9EbZw= Subject key identifier: 30:BC:FA:E2:B6:28:19:72:E2:6D:EF:48:5E:0C:AB:2D:5B:0D:F3:E9 Authority key identifier: C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 Certificate issuer: /CN=A9125590/serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Certificate serial: 34B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft Manifest number: 3499 Signing time: Mon 12 May 2025 14:19:29 +0000 Manifest this update: Mon 12 May 2025 14:19:29 +0000 Manifest next update: Mon 19 May 2025 14:19:29 +0000 Files and hashes: 1: xA63gWRRh1SG2mQ_j5Nht337IaM.crl (hash: ByLIIgGcHm6fQSYBZSAAg+tt4RYkHt/K75QgQJ/mCWg=) 2: 26E02598562F11EB94FD0463C4F9AE02.roa (hash: PJCdta/4Q6f57KQKAkTotBkGcFV1WNt4V36v9eyDoQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13489 (0x34b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125590, serialNumber=C40EB7816451875486DA643F8F9361B77DFB21A3 Validity Not Before: May 12 14:19:29 2025 GMT Not After : May 19 14:19:29 2025 GMT Subject: CN=68220371-3769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:9d:30:12:bc:73:d4:3e:29:1e:d3:54:66: 5a:a0:75:a6:c7:7d:23:45:b4:d9:fe:3a:0b:08:3d: b0:e1:7d:f1:3d:a8:97:ea:f3:05:86:b6:50:c1:55: dd:54:e4:a1:4b:0f:f6:80:00:14:6c:81:2b:ba:e3: 48:18:a3:67:fa:ce:12:23:fc:6c:8a:ac:93:16:7d: c2:e0:60:99:fe:0a:34:da:af:99:05:21:c6:7a:04: 0e:a1:75:03:b8:39:ae:a2:20:89:2a:22:b2:34:8c: fa:8d:a5:e8:bd:ff:e6:55:ba:54:00:28:25:70:a7: e5:36:ed:35:5c:72:ab:98:37:5f:26:05:99:7b:c1: d8:bf:d4:f1:71:ba:90:81:66:fc:47:6a:fd:44:eb: 6d:e9:8f:13:30:df:15:e2:9b:2e:ee:5f:73:fb:fc: 62:3b:61:06:91:1f:f2:eb:39:ef:0a:f6:a0:98:65: e5:8f:11:1c:0f:c7:51:ef:97:45:c0:70:f6:70:60: 63:e6:2c:d3:96:d5:dc:85:fb:94:39:9d:3e:32:a7: 52:df:74:7e:d9:23:11:b7:0d:74:6a:c2:d4:5e:0f: 83:6c:8e:36:08:10:4b:74:90:d3:b3:96:0d:62:de: f3:4e:4f:49:16:4f:ef:d1:f9:58:f1:e8:1a:c9:a5: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BC:FA:E2:B6:28:19:72:E2:6D:EF:48:5E:0C:AB:2D:5B:0D:F3:E9 X509v3 Authority Key Identifier: keyid:C4:0E:B7:81:64:51:87:54:86:DA:64:3F:8F:93:61:B7:7D:FB:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xA63gWRRh1SG2mQ_j5Nht337IaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125590/FC44B38A1D7011E28951A9B508B02CD2/xA63gWRRh1SG2mQ_j5Nht337IaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:dc:b6:7a:84:84:b7:ec:07:9f:3b:df:c3:f8:06:30:51:46: 55:c4:e5:08:a2:f5:4f:8b:f8:ce:4d:a1:99:44:7f:3e:17:94: de:16:79:0b:0f:83:84:6b:8f:b7:70:45:24:9b:ae:5b:80:5a: 22:b0:82:48:2f:75:96:7d:74:db:25:eb:bb:d6:4d:bd:07:0e: 53:57:6c:c6:f7:6b:de:df:9b:ee:bf:f1:68:3c:11:6e:f5:a9: 84:5b:18:32:be:fb:e1:c4:92:29:0b:b4:4e:9e:05:10:a6:03: 11:b8:f1:81:f1:69:76:eb:f7:e0:bc:86:74:f6:6d:d0:32:77: 36:be:bb:b4:b4:8f:9e:74:62:ce:2d:ed:b9:27:bf:82:9d:28: 3e:2a:13:55:f8:10:08:01:72:bb:4a:cd:59:5b:e6:c8:a8:3a: 54:1b:07:56:07:44:7f:d9:41:a9:ac:95:54:99:c0:33:5e:05: d2:7a:07:b1:d2:90:bb:8e:56:79:de:8d:ac:8b:cb:9b:1a:8b: 67:18:39:49:24:4a:50:83:55:6b:f5:07:18:a7:71:6f:e1:44: ae:1f:00:44:87:69:40:80:ee:48:42:05:e6:4e:f5:a4:9a:a2: 13:d8:de:7f:88:8f:8a:a4:ca:ac:3d:e6:a0:9a:f4:92:9c:7c: c3:41:71:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU1OTAxMTAvBgNVBAUTKEM0MEVCNzgxNjQ1MTg3NTQ4NkRBNjQzRjhGOTM2MUI3 N0RGQjIxQTMwHhcNMjUwNTEyMTQxOTI5WhcNMjUwNTE5MTQxOTI5WjAYMRYwFAYD VQQDEw02ODIyMDM3MS0zNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4KdMBK8c9Q+KR7TVGZaoHWmx30jRbTZ/joLCD2w4X3xPaiX6vMFhrZQwVXd VOShSw/2gAAUbIEruuNIGKNn+s4SI/xsiqyTFn3C4GCZ/go02q+ZBSHGegQOoXUD uDmuoiCJKiKyNIz6jaXovf/mVbpUACglcKflNu01XHKrmDdfJgWZe8HYv9TxcbqQ gWb8R2r9ROtt6Y8TMN8V4psu7l9z+/xiO2EGkR/y6znvCvagmGXljxEcD8dR75dF wHD2cGBj5izTltXchfuUOZ0+MqdS33R+2SMRtw10asLUXg+DbI42CBBLdJDTs5YN Yt7zTk9JFk/v0flY8egayaVnuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDC8+uK2 KBly4m3vSF4Mqy1bDfPpMB8GA1UdIwQYMBaAFMQOt4FkUYdUhtpkP4+TYbd9+yGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTU5MC9GQzQ0QjM4QTFE NzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgxU0cybVFfajVOaHQzMzdJ YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hBNjNnV1JSaDFTRzJtUV9qNU5odDMzN0lhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTU5MC9GQzQ0QjM4QTFENzAxMUUyODk1MUE5QjUwOEIwMkNEMi94QTYzZ1dSUmgx U0cybVFfajVOaHQzMzdJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn3LZ6hIS37AefO9/D+AYwUUZVxOUIovVPi/jOTaGZRH8+F5TeFnkL D4OEa4+3cEUkm65bgFoisIJIL3WWfXTbJeu71k29Bw5TV2zG92ve35vuv/FoPBFu 9amEWxgyvvvhxJIpC7ROngUQpgMRuPGB8Wl26/fgvIZ09m3QMnc2vru0tI+edGLO Le25J7+CnSg+KhNV+BAIAXK7Ss1ZW+bIqDpUGwdWB0R/2UGprJVUmcAzXgXSegex 0pC7jlZ53o2si8ubGotnGDlJJEpQg1Vr9QcYp3Fv4USuHwBEh2lAgO5IQgXmTvWk mqIT2N5/iI+KpMqsPeagmvSSnHzDQXGj -----END CERTIFICATE-----Generated at Wed May 14 10:22:50 2025 by rpki-client