$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: wMAxVnvhQmu9b7NZCjPYvn7iXv/guMtO9dP92jsRbys= Subject key identifier: 7D:92:E4:D9:7C:E7:41:64:7C:00:06:20:96:0D:18:1B:44:65:C5:3F Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: 01BC Signing time: Tue 13 May 2025 02:27:30 +0000 Manifest this update: Tue 13 May 2025 02:27:29 +0000 Manifest next update: Tue 20 May 2025 02:27:29 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: 5D87uCOjQWaVg/qSGP+5dM93Yd8SIWzbUD54ut0JjTk=) 2: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: V96z6p8lv3v3DbzjaaBJkTxNIi5ZsjxmKx2jknu2pAQ=) 3: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: SvTUBZIdDCre/uFlRBRgrIMaL1ITzuHCA8WYxGN/4tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: May 13 02:27:29 2025 GMT Not After : May 20 02:27:29 2025 GMT Subject: CN=6822ae11-4cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:94:2f:65:72:05:26:f0:e0:e7:a7:96:28:6a: 7f:36:08:a2:f9:55:e8:25:84:0d:8b:a5:6b:f8:3b: b6:0d:7d:11:19:16:55:78:2c:02:94:c8:1b:a0:0d: 9f:35:7b:67:28:b6:fa:c2:87:18:fb:4f:59:29:e8: 7c:a1:a5:82:22:3c:75:1c:c2:00:c0:35:b8:f5:d0: 6b:cc:4a:d0:0c:ec:0f:0b:d0:6a:be:ab:ad:8b:0b: e4:28:29:a7:a3:fd:f8:78:5d:fb:a2:f6:bb:59:df: 68:47:e8:72:65:f4:e2:a3:cd:bf:b4:6b:4b:15:3b: 07:a2:ed:2f:98:3a:78:2a:97:53:3c:02:35:4b:ca: ff:2e:c1:8e:69:b1:2d:c3:13:3e:94:9e:46:a2:79: 39:80:4d:a3:c6:3d:3a:4f:f2:2f:34:54:c5:ac:4a: 1a:97:57:1b:3e:a4:e8:30:9b:98:61:fb:c8:9f:46: d7:57:ea:29:03:4c:8a:d5:73:5d:48:19:9b:91:8b: fd:a1:84:ba:90:a9:24:ad:be:3e:a5:6f:92:d3:95: d6:9b:69:59:4b:cb:b2:ce:0e:21:60:90:68:e6:9d: f6:78:de:64:cd:eb:bc:3d:90:04:2d:2c:8a:2c:bb: 8d:e6:ff:8a:70:32:7f:a0:9f:2e:84:5a:99:29:7e: a2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:92:E4:D9:7C:E7:41:64:7C:00:06:20:96:0D:18:1B:44:65:C5:3F X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c2:1c:a0:e8:49:b8:2a:12:6e:1b:cc:9b:13:bd:64:9a:e3: 54:fd:29:f8:7b:d3:e5:b3:cf:84:0b:28:9f:d3:18:73:a3:b0: 75:c5:29:5a:3c:80:47:22:5e:66:9c:39:98:16:33:80:ac:b6: 0d:55:c5:24:ce:2e:8f:93:21:8c:23:b5:7f:f7:0d:ba:67:5f: 96:4f:0a:4a:d2:6e:5c:91:30:f9:4f:ff:07:53:ad:a6:0f:59: 5c:40:a2:d9:6e:13:2e:ab:f5:37:6e:e7:de:6e:f3:9a:cc:af: c1:28:07:7c:5b:34:bc:da:aa:63:2c:9e:6e:95:79:a8:c0:6b: d1:2c:ec:27:f1:85:a9:00:0c:c3:2a:13:90:74:af:2b:73:67: 89:5c:ff:2f:c3:00:e8:c4:70:53:77:56:ab:55:19:e9:ee:18: 3a:eb:55:4a:3d:a0:47:ce:06:ec:27:f1:e2:16:84:43:cd:5b: 13:9e:ee:71:d4:21:b7:5e:09:ac:8f:b5:19:4d:c3:ba:70:42: 55:df:a0:20:59:32:25:1d:ee:e5:ad:75:4c:97:0e:8f:84:e6: ef:fa:29:e2:c3:31:e1:9a:bd:ae:ee:1c:da:cc:60:9f:38:2d: 61:54:b0:45:22:d6:cc:5a:fe:ac:d6:20:7b:d9:06:f6:1c:ec: 03:2a:05:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjUwNTEzMDIyNzI5WhcNMjUwNTIwMDIyNzI5WjAYMRYwFAYD VQQDEw02ODIyYWUxMS00Y2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pQvZXIFJvDg56eWKGp/Ngii+VXoJYQNi6Vr+Du2DX0RGRZVeCwClMgboA2f NXtnKLb6wocY+09ZKeh8oaWCIjx1HMIAwDW49dBrzErQDOwPC9BqvqutiwvkKCmn o/34eF37ova7Wd9oR+hyZfTio82/tGtLFTsHou0vmDp4KpdTPAI1S8r/LsGOabEt wxM+lJ5Gonk5gE2jxj06T/IvNFTFrEoal1cbPqToMJuYYfvIn0bXV+opA0yK1XNd SBmbkYv9oYS6kKkkrb4+pW+S05XWm2lZS8uyzg4hYJBo5p32eN5kzeu8PZAELSyK LLuN5v+KcDJ/oJ8uhFqZKX6ikQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2S5Nl8 50FkfAAGIJYNGBtEZcU/MB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPwhyg6Em4KhJuG8ybE71kmuNU/Sn4e9Pls8+ECyif0xhzo7B1xSla PIBHIl5mnDmYFjOArLYNVcUkzi6PkyGMI7V/9w26Z1+WTwpK0m5ckTD5T/8HU62m D1lcQKLZbhMuq/U3bufebvOazK/BKAd8WzS82qpjLJ5ulXmowGvRLOwn8YWpAAzD KhOQdK8rc2eJXP8vwwDoxHBTd1arVRnp7hg661VKPaBHzgbsJ/HiFoRDzVsTnu5x 1CG3Xgmsj7UZTcO6cEJV36AgWTIlHe7lrXVMlw6PhObv+iniwzHhmr2u7hzazGCf OC1hVLBFItbMWv6s1iB72Qb2HOwDKgVJ -----END CERTIFICATE-----Generated at Wed May 14 08:30:53 2025 by rpki-client