$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json) Hash identifier: i3Yps+l3/QgRQaPSvBsheOmNSXiezobBiyKUrcZJoyA= Subject key identifier: 26:2A:98:4E:67:AE:AA:75:59:8D:03:8E:7C:35:D8:01:37:93:D9:0A Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 2307 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft Manifest number: 22EE Signing time: Thu 08 May 2025 15:54:29 +0000 Manifest this update: Thu 08 May 2025 15:54:29 +0000 Manifest next update: Thu 15 May 2025 15:54:29 +0000 Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: mRt+Wk1F3n+oyzoAJbJfVoj607n4icfgH3K5SAhVCXI=) 2: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: 6e21k1t3PwcFuMYhxFKByN0N0S9Vi6EW4w95vWK0udo=) 3: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: w2d5iGO1DzNwRW9XaGG0C+Ss9EnEjj1pHZpwfJJ5U1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 15:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8967 (0x2307) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: May 8 15:54:29 2025 GMT Not After : May 15 15:54:29 2025 GMT Subject: CN=681cd3b5-c1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f7:ac:6a:7c:9d:4a:41:51:64:15:0e:57:8c: e2:93:35:67:8f:c9:99:ae:d2:00:e4:be:37:bc:c9: 9d:a7:e6:13:aa:76:f2:cf:c3:23:3f:96:60:2e:69: 0d:9e:a2:87:27:6d:b4:5f:09:96:c3:b2:26:3c:6b: 42:1b:21:6d:cc:bd:49:69:6e:3b:09:63:54:d0:15: 60:62:70:6b:65:21:19:c5:22:dc:a8:05:62:45:db: 03:e3:fe:0c:93:f8:32:e4:81:16:d8:99:49:3f:03: a7:00:40:84:4b:f0:aa:09:f2:11:c4:2d:4f:50:5c: 41:c5:9a:94:57:f1:6d:df:1f:fc:3f:b1:8a:1d:59: 0d:31:51:1d:3e:d6:ed:ff:bc:8e:c3:2a:2e:0c:08: af:2a:03:58:9e:09:d4:79:1c:68:63:e6:d3:92:6f: 3c:75:67:57:4a:40:76:fc:b3:73:af:78:fe:e1:27: 71:da:0f:ad:34:f7:fe:65:5b:fe:65:c5:e9:bc:a6: 81:b8:2e:61:06:5d:88:1d:69:13:33:9c:d4:f7:21: f7:b5:5e:3a:83:fb:d7:be:f6:f5:61:73:84:3f:34: 1c:f0:72:9f:91:7d:8b:de:36:5a:59:d4:d0:0b:d6: 9e:19:ee:d4:ff:5e:2f:3c:35:1d:f3:29:7b:1c:ca: 3c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2A:98:4E:67:AE:AA:75:59:8D:03:8E:7C:35:D8:01:37:93:D9:0A X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:66:4c:2a:e0:11:cd:64:ca:d2:7e:26:03:95:0e:59:6f:1f: e0:0d:9b:e7:03:e3:0e:14:8c:e0:8e:80:68:41:79:a5:59:62: 1c:cf:51:08:a7:63:7c:0a:6a:37:f6:49:8f:8b:79:a5:6c:72: 6e:e8:30:3f:25:e3:cd:57:96:9d:e1:0f:6e:10:61:66:a6:f0: 67:f2:21:ee:a1:ef:c1:b0:6e:b7:e5:74:0a:ba:aa:53:72:e6: 70:34:aa:dd:21:fc:db:45:1f:b6:92:81:48:7a:a4:4a:7e:cf: ca:2a:1b:81:ce:f2:f1:35:5c:60:32:93:ce:f1:99:e6:7c:61: 75:8f:75:6c:47:6f:56:15:3e:cf:28:a7:80:27:f8:4f:2b:a2: ff:da:bd:c0:9c:3e:7d:8f:c6:f3:4c:f0:8d:87:c0:84:d0:d8: 70:4c:ae:61:74:62:75:66:eb:0d:e5:57:72:7f:c1:5a:43:67: d3:e9:41:71:3e:2e:71:eb:98:68:df:6d:a4:bc:71:13:e1:6c: 81:04:a3:56:d7:7b:d9:e4:19:c7:9a:15:f8:c3:56:6e:3d:e9: a8:72:61:3f:3b:52:67:68:cf:61:71:1b:a9:1c:c2:ac:fc:9b: 40:1c:c5:36:db:5f:25:bf:1f:68:94:ad:f5:93:03:61:44:88: 53:8b:54:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjUwNTA4MTU1NDI5WhcNMjUwNTE1MTU1NDI5WjAYMRYwFAYD VQQDEw02ODFjZDNiNS1jMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfesanydSkFRZBUOV4zikzVnj8mZrtIA5L43vMmdp+YTqnbyz8MjP5ZgLmkN nqKHJ220XwmWw7ImPGtCGyFtzL1JaW47CWNU0BVgYnBrZSEZxSLcqAViRdsD4/4M k/gy5IEW2JlJPwOnAECES/CqCfIRxC1PUFxBxZqUV/Ft3x/8P7GKHVkNMVEdPtbt /7yOwyouDAivKgNYngnUeRxoY+bTkm88dWdXSkB2/LNzr3j+4Sdx2g+tNPf+ZVv+ ZcXpvKaBuC5hBl2IHWkTM5zU9yH3tV46g/vXvvb1YXOEPzQc8HKfkX2L3jZaWdTQ C9aeGe7U/14vPDUd8yl7HMo8OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYqmE5n rqp1WY0Djnw12AE3k9kKMB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzM0Mi82RERCQzdGQzkzMjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10 ZERoQXZHZjloNy1PQVZSbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7Zkwq4BHNZMrSfiYDlQ5Zbx/gDZvnA+MOFIzgjoBoQXmlWWIcz1EI p2N8Cmo39kmPi3mlbHJu6DA/JePNV5ad4Q9uEGFmpvBn8iHuoe/BsG635XQKuqpT cuZwNKrdIfzbRR+2koFIeqRKfs/KKhuBzvLxNVxgMpPO8ZnmfGF1j3VsR29WFT7P KKeAJ/hPK6L/2r3AnD59j8bzTPCNh8CE0NhwTK5hdGJ1ZusN5Vdyf8FaQ2fT6UFx Pi5x65ho322kvHET4WyBBKNW13vZ5BnHmhX4w1ZuPemocmE/O1JnaM9hcRupHMKs /JtAHMU2218lvx9olK31kwNhRIhTi1Q1 -----END CERTIFICATE-----Generated at Fri May 9 02:46:19 2025 by rpki-client