$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft File: XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft (raw, json) Hash identifier: Yy8mcbj7E7hgee4rzWxuOVKDO843BfqmVjvhbAFBj64= Subject key identifier: 4A:07:B9:C8:37:C0:8C:DD:70:0F:97:53:A4:64:28:58:AB:1E:E6:65 Authority key identifier: 5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 Certificate issuer: /CN=A913AE78/serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Certificate serial: 0744 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft Manifest number: 073E Signing time: Mon 12 May 2025 21:29:35 +0000 Manifest this update: Mon 12 May 2025 21:29:35 +0000 Manifest next update: Mon 19 May 2025 21:29:35 +0000 Files and hashes: 1: XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl (hash: b8mJ8SjBxaCfyWWjwUCME15mzgtskQdv3+2iyNYn5/4=) 2: D6138A3C292A11EB9CEDCC26C4F9AE02.roa (hash: eaeoz8RqOSGEC4peCpxGpY2PbARdRPwT9kf9QvE/Y6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE78, serialNumber=5EE7CF439A4223232982A2CB4DE54F37C7205AA9 Validity Not Before: May 12 21:29:35 2025 GMT Not After : May 19 21:29:35 2025 GMT Subject: CN=6822683f-8361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:26:63:ff:11:47:f2:e3:b3:76:c4:30:ba: 06:f8:c3:18:0e:f6:98:3e:80:25:fa:12:f0:37:06: 06:43:d0:ee:4c:44:6a:61:6c:a3:d8:44:08:fa:ae: d9:77:ed:26:d5:b6:99:4a:23:1b:26:2a:92:c0:0d: e4:82:28:fa:31:4d:b9:98:ab:8c:9a:d5:e4:35:f0: 92:4e:41:dd:a9:ee:4e:b3:51:8b:e0:5e:cb:e1:ba: b2:e3:cf:68:e0:0d:f7:8b:dd:af:60:34:0d:7f:30: 30:d8:1f:54:7c:c5:65:68:0c:0c:96:3e:b3:e3:52: 0e:f3:3a:95:78:25:64:94:da:42:ba:ca:ff:74:a7: 7a:20:e3:d3:bb:06:3f:f1:0e:7a:68:9f:7d:9c:73: 1c:83:ce:f6:a3:1d:c3:f3:62:e1:2b:cd:3e:6a:08: aa:1d:5d:c5:43:63:13:53:c7:cd:f6:ed:95:c6:e9: 3a:8b:e6:62:30:b6:54:98:c6:3d:b4:6e:ff:f3:13: 86:a1:55:c0:6d:11:3b:fe:8c:2b:a9:63:9a:fc:d3: 48:40:83:ff:55:22:8a:9d:27:e6:b4:83:45:3c:76: 1d:42:12:3e:db:35:8b:26:54:bb:f3:92:57:1b:b6: 5a:b9:77:50:b7:5f:68:c1:82:9a:37:f7:ac:51:b2: 96:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:07:B9:C8:37:C0:8C:DD:70:0F:97:53:A4:64:28:58:AB:1E:E6:65 X509v3 Authority Key Identifier: keyid:5E:E7:CF:43:9A:42:23:23:29:82:A2:CB:4D:E5:4F:37:C7:20:5A:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XufPQ5pCIyMpgqLLTeVPN8cgWqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE78/F1F4D3CE292911EB94E38D26C4F9AE02/XufPQ5pCIyMpgqLLTeVPN8cgWqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:a4:28:26:22:ed:32:91:9d:52:c4:7a:ad:b6:ca:55:d6:6c: 89:05:54:cc:d9:63:0e:7b:8d:bf:27:4e:d7:98:26:de:0e:ea: 78:a8:6e:e1:f8:4e:51:92:3c:04:81:a6:e8:fa:a8:4f:e3:c4: 46:77:c8:f1:64:7e:5c:d8:d7:48:34:79:a3:d9:a6:8f:b7:d3: 3f:ac:9e:ba:1d:f6:5d:46:0e:69:61:08:a7:e8:30:64:a9:d6: f2:5d:86:b3:e6:59:25:b6:2c:b9:0c:4e:c3:13:0a:c1:80:35: 7f:0e:23:bd:c8:80:60:5f:07:84:71:63:3c:6e:cb:fb:dc:21: 21:fb:0e:b5:ef:3f:51:7d:ed:df:4c:8d:10:52:ec:70:2c:1c: 7f:56:67:52:26:25:37:7b:e7:e9:16:b8:bf:23:cb:ee:00:60: 67:d4:7b:a0:b6:3b:a2:f3:70:fb:65:96:22:0d:cf:cd:93:ba: 45:a5:7b:91:e0:71:c5:0c:16:95:94:fd:ad:e8:d2:40:7c:e5: 66:0c:b7:e9:8b:61:b6:c0:0c:84:8b:a0:cc:5e:fa:d3:4e:43: bc:3f:f8:a9:91:1d:51:98:35:15:70:9d:8b:99:aa:4d:b4:34: b4:a5:df:2e:3d:16:d5:6c:f3:b7:6d:fb:30:a4:a9:59:fa:6f: 98:91:31:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFNzgxMTAvBgNVBAUTKDVFRTdDRjQzOUE0MjIzMjMyOTgyQTJDQjRERTU0RjM3 QzcyMDVBQTkwHhcNMjUwNTEyMjEyOTM1WhcNMjUwNTE5MjEyOTM1WjAYMRYwFAYD VQQDEw02ODIyNjgzZi04MzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLkmY/8RR/Ljs3bEMLoG+MMYDvaYPoAl+hLwNwYGQ9DuTERqYWyj2EQI+q7Z d+0m1baZSiMbJiqSwA3kgij6MU25mKuMmtXkNfCSTkHdqe5Os1GL4F7L4bqy489o 4A33i92vYDQNfzAw2B9UfMVlaAwMlj6z41IO8zqVeCVklNpCusr/dKd6IOPTuwY/ 8Q56aJ99nHMcg872ox3D82LhK80+agiqHV3FQ2MTU8fN9u2Vxuk6i+ZiMLZUmMY9 tG7/8xOGoVXAbRE7/owrqWOa/NNIQIP/VSKKnSfmtINFPHYdQhI+2zWLJlS785JX G7ZauXdQt19owYKaN/esUbKWdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoHucg3 wIzdcA+XU6RkKFirHuZlMB8GA1UdIwQYMBaAFF7nz0OaQiMjKYKiy03lTzfHIFqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU3OC9GMUY0RDNDRTI5 MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5TXBncUxMVGVWUE44Y2dX cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h1ZlBRNXBDSXlNcGdxTExUZVZQTjhjZ1dxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUU3OC9GMUY0RDNDRTI5MjkxMUVCOTRFMzhEMjZDNEY5QUUwMi9YdWZQUTVwQ0l5 TXBncUxMVGVWUE44Y2dXcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9pCgmIu0ykZ1SxHqttspV1myJBVTM2WMOe42/J07XmCbeDup4qG7h +E5RkjwEgabo+qhP48RGd8jxZH5c2NdINHmj2aaPt9M/rJ66HfZdRg5pYQin6DBk qdbyXYaz5lkltiy5DE7DEwrBgDV/DiO9yIBgXweEcWM8bsv73CEh+w617z9Rfe3f TI0QUuxwLBx/VmdSJiU3e+fpFri/I8vuAGBn1Hugtjui83D7ZZYiDc/Nk7pFpXuR 4HHFDBaVlP2t6NJAfOVmDLfpi2G2wAyEi6DMXvrTTkO8P/ipkR1RmDUVcJ2LmapN tDS0pd8uPRbVbPO3bfswpKlZ+m+YkTHw -----END CERTIFICATE-----Generated at Tue May 13 22:05:08 2025 by rpki-client