$ rpki-client -vvf rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft File: rXZeStXAqz70hB0-NIQoC-rLzC0.mft (raw, json) Hash identifier: z22apDAhMaKHANn05R6504GbYmYkm/343vAt2Mmiv38= Subject key identifier: CD:28:75:BD:55:6B:50:7F:53:2B:7F:40:F3:10:35:08:D9:4A:C6:A0 Authority key identifier: AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D Certificate issuer: /CN=A913CC0C/serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft Manifest number: 011B Signing time: Tue 13 May 2025 04:00:21 +0000 Manifest this update: Tue 13 May 2025 04:00:20 +0000 Manifest next update: Tue 20 May 2025 04:00:20 +0000 Files and hashes: 1: rXZeStXAqz70hB0-NIQoC-rLzC0.crl (hash: Kon0qRUMp9dDzfWTG/z4yv/NhCqJF1nnp7cWocH7Bzk=) 2: 1DD8238C836E11EEBBF2912FC4F9AE02.roa (hash: x3typY+Rz1v7YQKoz8/eFq0vzVSoB9fMyJducWo5h8o=) 3: 791E1D14836E11EEAD2B0731C4F9AE02.roa (hash: Zs0S8blgDDMs3jrlGY37AkPWRyP83xeb73R0yUfKf24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CC0C, serialNumber=AD765E4AD5C0AB3EF4841D3E3484280BEACBCC2D Validity Not Before: May 13 04:00:20 2025 GMT Not After : May 20 04:00:20 2025 GMT Subject: CN=6822c3d5-fea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dd:8a:db:bd:59:b8:56:d8:54:77:af:77:b2: 84:50:aa:36:ff:af:d3:84:96:02:24:ae:f7:c1:c9: 92:a6:7c:c0:3b:a0:70:fd:b9:35:f8:48:71:06:63: c7:fd:0b:c3:c7:83:9a:e4:33:5f:32:39:39:8e:db: 3b:fe:cf:ae:83:3e:78:fc:c4:6c:63:57:c7:bd:7c: 77:3c:a8:bb:e8:bf:d4:22:68:05:34:9e:20:9b:b2: 9c:e5:22:60:d4:79:e2:bc:10:62:1f:37:7f:b5:5c: d4:09:e0:ed:e2:aa:06:05:85:ab:65:16:48:06:cb: d2:21:83:b4:49:e7:db:cb:5c:11:35:44:91:d0:b9: 1f:8e:65:72:c9:c4:cd:f7:3d:b3:05:d6:19:71:af: 69:7a:e1:36:7d:6c:e1:62:2b:3a:a7:69:e4:eb:32: 1d:74:e8:d6:b0:3c:41:08:47:05:f5:04:2f:4f:4c: a6:05:1f:a2:7d:e7:86:62:49:6e:ee:54:ce:b5:93: 3e:55:56:20:2c:f6:02:b5:0f:23:8a:11:74:f5:a2: 53:87:21:81:82:06:0f:72:38:96:c3:0d:f0:56:83: 89:73:dc:b6:83:29:bd:ab:ab:d2:15:13:36:66:1d: 30:e2:bd:67:04:e2:29:b7:1f:f2:af:f4:89:2c:19: 82:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:28:75:BD:55:6B:50:7F:53:2B:7F:40:F3:10:35:08:D9:4A:C6:A0 X509v3 Authority Key Identifier: keyid:AD:76:5E:4A:D5:C0:AB:3E:F4:84:1D:3E:34:84:28:0B:EA:CB:CC:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXZeStXAqz70hB0-NIQoC-rLzC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CC0C/8425856A835711EEABEB2A3FC4F9AE02/rXZeStXAqz70hB0-NIQoC-rLzC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2a:76:05:31:67:94:47:cf:c1:6c:15:4f:a7:7d:de:eb:21: c3:ac:0c:df:73:d4:44:4f:02:32:da:c1:16:05:6f:b7:75:8c: 05:45:93:21:87:e6:8d:03:5a:e7:fb:29:e1:1e:2b:0c:e3:ac: bf:0b:ad:77:1c:c7:f5:69:5b:54:cd:1b:96:99:55:bf:80:8a: 71:58:43:dd:af:cd:4d:1a:67:76:c7:62:8b:f7:f9:59:b5:fd: 7b:85:4d:10:41:1e:d8:d9:95:2e:f9:dc:61:95:f7:ff:7c:c7: 8e:5e:d7:fb:88:b5:ff:11:0f:bd:67:33:78:2a:dc:22:5d:65: 1d:25:b0:0e:9c:d2:0c:5b:38:c1:68:90:0a:49:53:42:59:ee: db:52:07:b7:5a:35:11:01:09:32:08:89:45:87:c8:62:18:3a: 50:dd:80:c3:b5:66:f0:d8:6c:9b:f4:cb:b9:31:25:2d:c7:3a: 4a:e7:a5:46:ea:24:d6:f3:8d:49:2c:81:e0:a6:f5:39:3c:0f: f2:74:10:0f:48:a2:1a:01:b8:a9:48:01:47:c6:67:fc:9d:d7: 27:59:4e:f4:a1:f8:1c:a8:5e:bc:c4:a2:46:e0:d6:b2:ee:63: 7e:02:0c:e2:70:52:3f:d7:dc:d0:e9:27:14:01:fa:a4:42:28: 23:2f:8f:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NDMEMxMTAvBgNVBAUTKEFENzY1RTRBRDVDMEFCM0VGNDg0MUQzRTM0ODQyODBC RUFDQkNDMkQwHhcNMjUwNTEzMDQwMDIwWhcNMjUwNTIwMDQwMDIwWjAYMRYwFAYD VQQDEw02ODIyYzNkNS1mZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmN2K271ZuFbYVHevd7KEUKo2/6/ThJYCJK73wcmSpnzAO6Bw/bk1+EhxBmPH /QvDx4Oa5DNfMjk5jts7/s+ugz54/MRsY1fHvXx3PKi76L/UImgFNJ4gm7Kc5SJg 1HnivBBiHzd/tVzUCeDt4qoGBYWrZRZIBsvSIYO0Sefby1wRNUSR0LkfjmVyycTN 9z2zBdYZca9peuE2fWzhYis6p2nk6zIddOjWsDxBCEcF9QQvT0ymBR+ifeeGYklu 7lTOtZM+VVYgLPYCtQ8jihF09aJThyGBggYPcjiWww3wVoOJc9y2gym9q6vSFRM2 Zh0w4r1nBOIptx/yr/SJLBmCWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0odb1V a1B/Uyt/QPMQNQjZSsagMB8GA1UdIwQYMBaAFK12XkrVwKs+9IQdPjSEKAvqy8wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0MwQy84NDI1ODU2QTgz NTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6NzBoQjAtTklRb0Mtckx6 QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYWmVTdFhBcXo3MGhCMC1OSVFvQy1yTHpDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0MwQy84NDI1ODU2QTgzNTcxMUVFQUJFQjJBM0ZDNEY5QUUwMi9yWFplU3RYQXF6 NzBoQjAtTklRb0Mtckx6QzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKKnYFMWeUR8/BbBVPp33e6yHDrAzfc9RETwIy2sEWBW+3dYwFRZMh h+aNA1rn+ynhHisM46y/C613HMf1aVtUzRuWmVW/gIpxWEPdr81NGmd2x2KL9/lZ tf17hU0QQR7Y2ZUu+dxhlff/fMeOXtf7iLX/EQ+9ZzN4KtwiXWUdJbAOnNIMWzjB aJAKSVNCWe7bUge3WjURAQkyCIlFh8hiGDpQ3YDDtWbw2Gyb9Mu5MSUtxzpK56VG 6iTW841JLIHgpvU5PA/ydBAPSKIaAbipSAFHxmf8ndcnWU70ofgcqF68xKJG4Nay 7mN+AgzicFI/19zQ6ScUAfqkQigjL49c -----END CERTIFICATE-----Generated at Tue May 13 13:23:36 2025 by rpki-client