$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: gwhS1YeqL3tN7PYiG2u+KcVAxNDM4fdj2Kz/ivDXpas= Subject key identifier: C4:08:D5:5F:CE:B9:5F:52:4A:50:AE:E4:D8:65:69:85:FC:6E:43:D3 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 061D Signing time: Sun 04 May 2025 22:38:14 +0000 Manifest this update: Sun 04 May 2025 22:38:14 +0000 Manifest next update: Sun 11 May 2025 22:38:14 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: ZdwlTwVaH2W8JUgCO4oE0NgK19hujJbmzxZ7SwfVHYA=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: P11sIa+o699M+Jrp/6j9KRqVJetMbcC+wvd26lTDVLs=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: /zbyHciIwndBXlxJhKITEkhA9vsFIRYPFElbWadsiXw=) 4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: 6KG4K+YscUuCOPJskrNXUVs3OZB2ppYjCB4dtTgCAMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 22:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: May 4 22:38:14 2025 GMT Not After : May 11 22:38:14 2025 GMT Subject: CN=6817ec56-f0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:75:76:bd:a0:79:0c:7b:4b:24:5a:7f:17: 8a:43:d3:96:3f:82:de:a5:3f:70:a1:48:18:28:10: 1e:e9:8d:20:b9:67:f3:42:72:a1:50:ba:9b:65:f2: c5:d1:fb:43:48:76:1c:f8:b7:8b:7b:d5:ae:82:cf: 94:6a:9a:84:d5:28:07:25:31:88:d1:80:01:c4:ed: 28:96:02:97:1e:7e:9b:6a:10:c1:7a:ec:62:49:5d: 43:2f:87:87:79:e2:10:1b:81:cb:17:56:a0:95:1c: fb:6e:f1:7f:63:a4:0e:30:fe:17:d1:c5:16:9b:73: 3d:48:36:92:d4:84:85:a5:e5:c1:4f:01:3e:ea:33: c3:5a:2f:9c:ce:b7:1f:e8:73:07:f9:86:de:33:97: 26:45:05:da:56:36:4f:bd:38:4a:28:ae:d5:7a:f4: 7c:ff:09:59:64:7a:75:72:13:86:4c:ee:85:3d:38: 94:9a:c6:fb:c3:6e:1d:1b:b4:4b:fa:f3:fa:16:9c: f3:2a:f5:90:73:c9:1f:47:1c:09:67:af:2c:04:50: 20:88:a6:e3:35:89:53:89:2f:45:6c:7c:6b:ef:bd: 9b:5e:3f:85:f9:5d:d1:1e:f2:bf:84:b8:b7:ef:2e: 73:93:2e:21:5f:92:ec:47:f7:bc:71:5d:2f:d3:4d: 42:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:08:D5:5F:CE:B9:5F:52:4A:50:AE:E4:D8:65:69:85:FC:6E:43:D3 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:93:ba:0d:b6:95:03:6d:2e:10:9c:f9:05:a1:78:91:ec:76: 61:72:cc:45:da:38:e2:46:6a:13:b1:b7:b8:07:15:68:9e:9b: ce:36:5f:42:8c:58:92:fe:19:9a:0b:e6:ee:f7:4d:d5:b3:02: 13:77:1b:91:36:0b:b2:06:4f:07:0a:35:2b:11:ec:90:72:da: 67:37:aa:df:bb:a1:90:76:3c:3e:45:1b:3f:e1:8f:33:3e:8a: 68:74:d1:dc:88:d0:ff:4a:bb:63:83:c3:ed:63:8b:31:93:c3: 6c:68:10:1a:cb:c4:f5:04:17:af:78:6c:19:29:3f:3a:90:bf: 18:c8:d9:30:56:c1:e8:38:06:f9:a4:dc:50:a6:49:07:c9:95: 79:02:29:ad:db:9e:0f:ea:1d:3a:15:b7:e8:0f:8e:25:44:b5: c0:8a:d0:1a:d1:9f:30:ea:10:d9:a3:93:5c:9e:f6:a4:b3:03: 7d:c0:ec:ad:5b:31:72:69:96:f2:b1:a6:ba:95:3c:40:d5:aa: c8:ba:00:68:4f:c4:49:6a:b5:61:9e:d2:99:d5:ae:16:dc:ae: 81:b1:39:bc:53:4b:dc:59:e3:e1:86:1f:2d:c2:5e:3c:79:09: b9:be:01:ba:9e:f8:bc:1c:17:61:1b:69:16:78:ac:7e:88:c6: 55:09:b1:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjUwNTA0MjIzODE0WhcNMjUwNTExMjIzODE0WjAYMRYwFAYD VQQDEw02ODE3ZWM1Ni1mMGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lJ1dr2geQx7SyRafxeKQ9OWP4LepT9woUgYKBAe6Y0guWfzQnKhULqbZfLF 0ftDSHYc+LeLe9Wugs+UapqE1SgHJTGI0YABxO0olgKXHn6bahDBeuxiSV1DL4eH eeIQG4HLF1aglRz7bvF/Y6QOMP4X0cUWm3M9SDaS1ISFpeXBTwE+6jPDWi+czrcf 6HMH+YbeM5cmRQXaVjZPvThKKK7VevR8/wlZZHp1chOGTO6FPTiUmsb7w24dG7RL +vP6FpzzKvWQc8kfRxwJZ68sBFAgiKbjNYlTiS9FbHxr772bXj+F+V3RHvK/hLi3 7y5zky4hX5LsR/e8cV0v001C2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQI1V/O uV9SSlCu5NhlaYX8bkPTMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzk7oNtpUDbS4QnPkFoXiR7HZhcsxF2jjiRmoTsbe4BxVonpvONl9C jFiS/hmaC+bu903VswITdxuRNguyBk8HCjUrEeyQctpnN6rfu6GQdjw+RRs/4Y8z PopodNHciND/Srtjg8PtY4sxk8NsaBAay8T1BBeveGwZKT86kL8YyNkwVsHoOAb5 pNxQpkkHyZV5Aimt254P6h06FbfoD44lRLXAitAa0Z8w6hDZo5NcnvakswN9wOyt WzFyaZbysaa6lTxA1arIugBoT8RJarVhntKZ1a4W3K6BsTm8U0vcWePhhh8twl48 eQm5vgG6nvi8HBdhG2kWeKx+iMZVCbEb -----END CERTIFICATE-----Generated at Mon May 5 03:21:56 2025 by rpki-client