$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft File: STXJCZ1YAoESreyiiRQ1_MWPuiw.mft (raw, json) Hash identifier: kHjFpi/WygieorKpe0sPTxxDf5/nX0spZrjOtZZDK98= Subject key identifier: 0A:62:71:C2:7E:52:91:2A:36:86:3B:DC:A7:65:9A:88:5F:43:BE:6A Authority key identifier: 49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C Certificate issuer: /CN=A9142E1E/serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft Manifest number: 74 Signing time: Sun 11 May 2025 05:33:50 +0000 Manifest this update: Sun 11 May 2025 05:33:50 +0000 Manifest next update: Sun 18 May 2025 05:33:50 +0000 Files and hashes: 1: STXJCZ1YAoESreyiiRQ1_MWPuiw.crl (hash: Lp0qC0LLfmcdj34gZZD69g05GBFvqUNDffsabranPlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E1E, serialNumber=4935C9099D58028112ADECA2891435FCC58FBA2C Validity Not Before: May 11 05:33:50 2025 GMT Not After : May 18 05:33:50 2025 GMT Subject: CN=682036be-a453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0b:73:5e:58:7c:81:e4:ee:dd:04:52:c5:a3: d3:f2:ea:e1:34:56:b8:83:30:6b:88:fa:dc:76:42: 76:8c:d9:a4:72:77:ca:05:cd:f7:1b:82:bd:20:d2: 4e:0b:49:8d:5b:64:df:65:e5:60:71:4e:9b:71:73: 73:9a:c9:3b:e7:f4:bd:63:65:d5:c8:e2:af:4f:0c: a1:0f:87:e0:8f:5d:50:74:a2:63:5a:55:e2:e4:6b: a9:af:33:7d:ec:a7:ce:a9:31:ea:eb:95:77:17:b8: 12:85:64:53:3f:fe:9c:1e:38:f3:0d:a7:6d:e3:ec: 31:9b:0b:3e:cd:8d:3c:b9:94:70:37:1c:b8:d1:6e: d4:5f:e7:94:16:cd:4f:be:2d:70:ea:58:b6:39:86: f4:52:39:82:42:e5:58:7b:44:8a:60:1b:b5:f1:fe: 5b:3e:0e:0c:c9:74:2c:b3:d2:0e:73:0f:54:14:10: 8e:1c:ee:64:44:8c:cf:ce:a4:d7:9d:58:b3:99:f4: 1e:4a:c6:8f:ce:bb:23:f0:71:8b:29:93:0d:37:b8: fb:5c:f9:29:d3:75:ea:cf:48:07:36:e2:28:81:c0: e4:1e:2c:37:2d:49:1d:58:10:e4:67:92:9a:45:a0: f3:5c:7c:a6:93:07:35:99:4d:a1:0f:3c:d7:a7:aa: ea:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:62:71:C2:7E:52:91:2A:36:86:3B:DC:A7:65:9A:88:5F:43:BE:6A X509v3 Authority Key Identifier: keyid:49:35:C9:09:9D:58:02:81:12:AD:EC:A2:89:14:35:FC:C5:8F:BA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/STXJCZ1YAoESreyiiRQ1_MWPuiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/1C7CDF68824211EFAD3D8181C4F9AE02/STXJCZ1YAoESreyiiRQ1_MWPuiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:f4:47:4b:d1:97:12:10:39:15:42:bd:4b:6a:67:b9:fc:6a: b3:35:1f:7a:24:aa:a3:b2:e7:3a:eb:36:80:2a:c0:fe:ba:a9: 4e:90:78:61:1c:8e:91:44:77:7d:89:33:da:02:72:ca:27:d1: 67:24:cc:9f:f0:79:c0:d4:a9:0b:6b:a8:83:da:ae:0b:ee:23: 55:ea:c1:df:08:45:74:d1:79:d2:69:6a:3d:20:1e:d6:ac:26: a7:41:d8:e4:0a:64:fe:8b:19:4a:7c:71:21:39:28:05:97:a8: 6f:65:0f:98:b9:5c:a9:b8:cc:4b:1f:2f:dd:8c:e4:44:ae:56: 48:70:6e:65:55:b3:29:74:4d:bd:c0:81:c6:70:0a:8f:9b:18: 8e:d7:1a:dd:ab:e1:0c:b4:0b:6f:97:60:b7:1c:1e:1a:17:e7: f4:c8:a2:12:da:d2:81:73:71:59:00:18:d0:85:30:4f:b5:21: 12:b3:ef:58:05:22:61:90:49:7b:0b:91:43:1c:99:28:24:95: 3f:a9:64:82:44:0c:e8:2f:72:c9:1b:a0:c5:3f:46:26:da:85: 19:90:6b:0d:0c:0e:d7:b5:d9:22:b2:fd:d9:34:d9:5a:dd:8d: 04:c8:16:39:bc:2f:86:f7:85:cb:85:88:35:f7:07:4b:6d:eb: d5:17:63:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkUxRTExMC8GA1UEBRMoNDkzNUM5MDk5RDU4MDI4MTEyQURFQ0EyODkxNDM1RkND NThGQkEyQzAeFw0yNTA1MTEwNTMzNTBaFw0yNTA1MTgwNTMzNTBaMBgxFjAUBgNV BAMTDTY4MjAzNmJlLWE0NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9C3NeWHyB5O7dBFLFo9Py6uE0VriDMGuI+tx2QnaM2aRyd8oFzfcbgr0g0k4L SY1bZN9l5WBxTptxc3OayTvn9L1jZdXI4q9PDKEPh+CPXVB0omNaVeLka6mvM33s p86pMerrlXcXuBKFZFM//pweOPMNp23j7DGbCz7NjTy5lHA3HLjRbtRf55QWzU++ LXDqWLY5hvRSOYJC5Vh7RIpgG7Xx/ls+DgzJdCyz0g5zD1QUEI4c7mREjM/OpNed WLOZ9B5Kxo/OuyPwcYspkw03uPtc+SnTderPSAc24iiBwOQeLDctSR1YEORnkppF oPNcfKaTBzWZTaEPPNenqurlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCmJxwn5S kSo2hjvcp2WaiF9DvmowHwYDVR0jBBgwFoAUSTXJCZ1YAoESreyiiRQ1/MWPuiww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyRTFFLzFDN0NERjY4ODI0 MjExRUZBRDNEODE4MUM0RjlBRTAyL1NUWEpDWjFZQW9FU3JleWlpUlExX01XUHVp dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU1RYSkNaMVlBb0VTcmV5aWlSUTFfTVdQdWl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy RTFFLzFDN0NERjY4ODI0MjExRUZBRDNEODE4MUM0RjlBRTAyL1NUWEpDWjFZQW9F U3JleWlpUlExX01XUHVpdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAET0R0vRlxIQORVCvUtqZ7n8arM1H3okqqOy5zrrNoAqwP66qU6QeGEc jpFEd32JM9oCcson0WckzJ/wecDUqQtrqIPargvuI1Xqwd8IRXTRedJpaj0gHtas JqdB2OQKZP6LGUp8cSE5KAWXqG9lD5i5XKm4zEsfL92M5ESuVkhwbmVVsyl0Tb3A gcZwCo+bGI7XGt2r4Qy0C2+XYLccHhoX5/TIohLa0oFzcVkAGNCFME+1IRKz71gF ImGQSXsLkUMcmSgklT+pZIJEDOgvcskboMU/RibahRmQaw0MDte12SKy/dk02Vrd jQTIFjm8L4b3hcuFiDX3B0tt69UXY7A= -----END CERTIFICATE-----Generated at Sun May 11 22:38:40 2025 by rpki-client