$ rpki-client -vvf rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft File: _XRQsRgVCpshTxoL7t8-Oyb-0Es.mft (raw, json) Hash identifier: N47CdzlHE2Rkl4OQ4dAaL0pkF2y9H1X4AjYK+K3cV08= Subject key identifier: DE:1A:B6:A8:B0:BE:07:4B:7B:3E:48:43:76:A9:8C:E0:7E:6C:28:F1 Authority key identifier: FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B Certificate issuer: /CN=A9144160/serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B Certificate serial: 0FDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft Manifest number: 0FD6 Signing time: Mon 12 May 2025 17:24:00 +0000 Manifest this update: Mon 12 May 2025 17:24:00 +0000 Manifest next update: Mon 19 May 2025 17:24:00 +0000 Files and hashes: 1: _XRQsRgVCpshTxoL7t8-Oyb-0Es.crl (hash: ZHLgI25O1MljbuRBVElqYYfGHyxAzrtggKahOPxRwl4=) 2: 378459525C6511E989D03610C4F9AE02.roa (hash: IiQprXM45ceBxjHWm+F/2TXqvKDyfsIZ5gHCOtJkT5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4062 (0xfde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144160, serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B Validity Not Before: May 12 17:24:00 2025 GMT Not After : May 19 17:24:00 2025 GMT Subject: CN=68222eb0-97ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7b:28:25:6b:24:e8:56:1c:77:96:da:8f:54: b1:a4:a1:19:5c:e1:4c:e2:0d:4e:67:de:dc:82:1b: 9c:cd:a9:9b:47:88:ab:e2:31:ae:42:15:19:3f:1a: 13:c9:bf:af:ed:09:1c:ec:71:06:ab:e0:75:60:5a: 76:40:be:d9:e6:bf:4e:b7:af:2e:d9:1f:4f:b7:c7: 83:c9:9c:1c:7c:c9:10:a1:4d:b8:72:9e:5d:35:77: c6:2e:af:7b:29:6b:d0:3c:f3:a0:29:34:bf:70:44: ce:9c:1d:0e:a1:30:a4:30:a9:34:7e:1d:2b:67:2a: 9c:b3:93:31:ec:1e:2f:40:b2:38:f7:3c:15:12:68: f6:c6:a2:a9:0e:59:1a:29:ae:5d:64:b1:56:17:35: 53:5c:2c:2e:fa:b2:f0:87:e3:b9:c1:74:39:3a:cd: 19:bc:d0:b3:9d:ae:50:d2:29:42:e0:42:bf:2c:ce: 0c:0b:30:2a:b7:57:9b:a2:e1:ad:4b:ab:ec:8c:3f: 50:3f:a9:80:9f:e3:eb:8c:1e:25:83:65:c1:2a:7a: 0f:b5:15:9a:45:74:bb:79:be:c8:33:1b:f9:04:d4: f3:f5:4f:95:50:39:90:68:c6:ee:7c:8c:24:f6:69: 12:0d:8f:01:42:85:66:64:b3:c8:90:74:52:57:a9: 18:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1A:B6:A8:B0:BE:07:4B:7B:3E:48:43:76:A9:8C:E0:7E:6C:28:F1 X509v3 Authority Key Identifier: keyid:FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c9:22:fd:81:01:af:d0:18:27:a6:42:a9:cb:b1:a6:1e:6c: a1:1c:bb:cf:44:2b:7a:9a:be:d4:fa:97:ca:53:6b:33:5a:6f: 54:e7:5f:92:c6:8c:69:46:77:01:b0:f5:3e:23:61:f2:4d:3d: 7b:67:14:a6:ad:a7:76:4c:62:2d:b4:30:4d:2d:b4:3a:fa:d6: 12:ff:50:76:2e:4e:42:38:1c:fe:1f:b0:6e:f8:29:a6:18:90: 19:19:fa:ed:0c:64:a5:b1:da:a1:6d:c2:bd:44:33:8c:54:b7: f2:89:27:23:52:03:ef:fc:f9:0b:d0:96:6f:ff:85:4d:4d:ec: f6:9c:64:39:83:c5:2f:59:4c:2d:3d:bf:d6:7f:d0:c1:7a:dc: ad:72:4b:ba:5f:c5:51:47:e5:c5:b2:e3:52:71:b6:e3:ec:bf: b6:20:ea:40:39:29:73:73:9d:d9:ed:40:c5:38:da:50:2b:8c: 15:0c:4c:86:04:de:53:b3:f3:f6:fc:6d:54:12:f4:82:9e:8d: 1f:2c:3f:73:14:9f:ce:15:4c:7e:4d:c5:87:8d:cd:1a:3e:aa: 12:bb:87:41:77:1c:09:59:df:ef:f2:64:8a:30:81:0d:2b:18: 7d:3a:3d:a6:c5:69:7a:09:95:39:d3:03:1b:16:aa:60:9e:c6: 53:87:49:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQxNjAxMTAvBgNVBAUTKEZENzQ1MEIxMTgxNTBBOUIyMTRGMUEwQkVFREYzRTNC MjZGRUQwNEIwHhcNMjUwNTEyMTcyNDAwWhcNMjUwNTE5MTcyNDAwWjAYMRYwFAYD VQQDEw02ODIyMmViMC05N2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23soJWsk6FYcd5baj1SxpKEZXOFM4g1OZ97cghuczambR4ir4jGuQhUZPxoT yb+v7Qkc7HEGq+B1YFp2QL7Z5r9Ot68u2R9Pt8eDyZwcfMkQoU24cp5dNXfGLq97 KWvQPPOgKTS/cETOnB0OoTCkMKk0fh0rZyqcs5Mx7B4vQLI49zwVEmj2xqKpDlka Ka5dZLFWFzVTXCwu+rLwh+O5wXQ5Os0ZvNCzna5Q0ilC4EK/LM4MCzAqt1ebouGt S6vsjD9QP6mAn+PrjB4lg2XBKnoPtRWaRXS7eb7IMxv5BNTz9U+VUDmQaMbufIwk 9mkSDY8BQoVmZLPIkHRSV6kYiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4atqiw vgdLez5IQ3apjOB+bCjxMB8GA1UdIwQYMBaAFP10ULEYFQqbIU8aC+7fPjsm/tBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDE2MC9ERDY1NzFBNjRG OTIxMUU5QUQxMEFBMTNDNEY5QUUwMi9fWFJRc1JnVkNwc2hUeG9MN3Q4LU95Yi0w RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YUlFzUmdWQ3BzaFR4b0w3dDgtT3liLTBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDE2MC9ERDY1NzFBNjRGOTIxMUU5QUQxMEFBMTNDNEY5QUUwMi9fWFJRc1JnVkNw c2hUeG9MN3Q4LU95Yi0wRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaySL9gQGv0BgnpkKpy7GmHmyhHLvPRCt6mr7U+pfKU2szWm9U51+S xoxpRncBsPU+I2HyTT17ZxSmrad2TGIttDBNLbQ6+tYS/1B2Lk5COBz+H7Bu+Cmm GJAZGfrtDGSlsdqhbcK9RDOMVLfyiScjUgPv/PkL0JZv/4VNTez2nGQ5g8UvWUwt Pb/Wf9DBetytcku6X8VRR+XFsuNScbbj7L+2IOpAOSlzc53Z7UDFONpQK4wVDEyG BN5Ts/P2/G1UEvSCno0fLD9zFJ/OFUx+TcWHjc0aPqoSu4dBdxwJWd/v8mSKMIEN Kxh9Oj2mxWl6CZU50wMbFqpgnsZTh0kl -----END CERTIFICATE-----Generated at Tue May 13 22:50:43 2025 by rpki-client