$ rpki-client -vvf rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft File: xPfznmL0ydeMXhL9wVGuTjK8mkI.mft (raw, json) Hash identifier: 3KFTJdcbuImLJlWryx1nBmWDhWle6MjnXUIY2lFuLro= Subject key identifier: 5B:3F:54:0A:98:14:21:0F:45:48:EA:0B:09:3D:04:A4:F8:39:82:B5 Authority key identifier: C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42 Certificate issuer: /CN=A914B29B/serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft Manifest number: C2 Signing time: Sun 11 May 2025 04:40:54 +0000 Manifest this update: Sun 11 May 2025 04:40:54 +0000 Manifest next update: Sun 18 May 2025 04:40:54 +0000 Files and hashes: 1: xPfznmL0ydeMXhL9wVGuTjK8mkI.crl (hash: IH3f4LqHXT80RwfShb7UQ7tVy62gZqUQnqgyx4FvpOE=) 2: 127604E20F8B11EF87FC5918C4F9AE02.roa (hash: 5edOTZ9WpkItw4RWOBwB3WoAQbD4XzuXBzAkLSr3s8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B29B, serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42 Validity Not Before: May 11 04:40:54 2025 GMT Not After : May 18 04:40:54 2025 GMT Subject: CN=68202a56-c2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5c:ac:b5:41:53:b9:d3:8c:2a:64:50:19:39: 71:7f:cc:20:78:dd:a2:ac:bb:7b:a9:92:d2:93:c2: 8a:d0:fb:44:12:bc:96:f8:b7:b8:06:26:71:2c:f8: 1a:e9:2e:17:ae:f1:4e:27:0f:c4:3d:2f:41:3a:b1: 25:0e:1f:35:4d:68:3e:68:ac:c7:2b:24:ed:ba:4f: 23:c5:7c:e2:17:c6:1d:10:34:58:f0:fd:58:6f:01: 51:fc:4c:b0:13:10:b7:a6:d1:15:c8:81:e9:75:45: 42:9c:0b:49:9b:d9:b1:6c:4d:32:40:bd:f3:1f:f1: 38:0d:4f:06:38:6d:5c:60:2d:50:9d:fc:1a:e4:2c: c1:58:d7:86:eb:22:ea:f8:b7:3b:b6:08:9c:9c:ac: 5d:62:7a:59:18:22:80:e3:49:4c:82:22:b6:b8:04: d2:b1:8f:11:1f:e0:e3:d1:96:ab:a1:ae:b8:ed:67: 20:a6:ce:af:5e:90:17:11:45:bf:d1:e9:5d:5d:9c: 7a:e4:8e:85:bd:e0:90:23:71:d7:d7:70:15:2c:9a: c5:aa:77:5a:69:6e:90:0c:30:c5:77:4e:b6:a6:96: d0:3b:4b:73:a5:43:c9:90:4e:7b:39:14:f0:30:c9: 30:32:cb:cc:67:1b:e6:a7:b1:41:1d:2c:c2:53:f8: 06:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3F:54:0A:98:14:21:0F:45:48:EA:0B:09:3D:04:A4:F8:39:82:B5 X509v3 Authority Key Identifier: keyid:C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:6c:9b:99:54:4c:05:30:9d:d0:75:55:c8:e0:08:ce:a9:05: 88:52:fc:1e:c0:02:61:e7:10:3e:6d:23:26:29:3b:b1:11:b2: 0f:ec:f7:ea:b3:77:bf:51:39:b1:3c:c7:10:6c:c1:76:d6:78: 1f:23:08:0b:54:8f:ca:35:8a:38:90:1e:c5:b0:9c:b5:9d:43: e1:2c:15:95:5b:fb:92:1b:dc:da:bb:50:5f:ff:4b:9d:94:fe: 38:7f:98:71:59:46:28:7a:6a:d2:e9:cd:9e:3f:1a:c3:36:00: 21:30:56:fc:c4:df:89:f3:a3:5d:60:b5:2b:58:20:08:e2:f9: da:31:e8:b1:33:d0:e5:c8:ce:6f:68:9d:f3:f9:27:bb:9d:4c: 11:e0:98:3b:e5:27:15:23:b4:c9:0d:b6:87:33:26:1c:3a:68: 14:49:40:c6:56:c9:d3:45:72:91:f2:70:e8:8f:38:f0:2c:8a: 97:c7:d6:a2:10:29:88:8d:bb:75:a7:d7:e4:01:b0:37:10:c2: f2:91:24:05:6e:ff:24:ae:4b:40:a5:0b:08:f7:2f:07:56:c6: c6:ba:4e:78:d5:a9:96:49:a5:1e:8a:e6:b9:c0:65:24:46:67: f3:fe:df:e5:a7:cb:7d:1e:07:96:20:20:69:43:f4:c5:70:ee: 21:04:65:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIyOUIxMTAvBgNVBAUTKEM0RjdGMzlFNjJGNEM5RDc4QzVFMTJGREMxNTFBRTRF MzJCQzlBNDIwHhcNMjUwNTExMDQ0MDU0WhcNMjUwNTE4MDQ0MDU0WjAYMRYwFAYD VQQDEw02ODIwMmE1Ni1jMmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lystUFTudOMKmRQGTlxf8wgeN2irLt7qZLSk8KK0PtEEryW+Le4BiZxLPga 6S4XrvFOJw/EPS9BOrElDh81TWg+aKzHKyTtuk8jxXziF8YdEDRY8P1YbwFR/Eyw ExC3ptEVyIHpdUVCnAtJm9mxbE0yQL3zH/E4DU8GOG1cYC1Qnfwa5CzBWNeG6yLq +Lc7tgicnKxdYnpZGCKA40lMgiK2uATSsY8RH+Dj0Zaroa647Wcgps6vXpAXEUW/ 0eldXZx65I6FveCQI3HX13AVLJrFqndaaW6QDDDFd062ppbQO0tzpUPJkE57ORTw MMkwMsvMZxvmp7FBHSzCU/gG6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFs/VAqY FCEPRUjqCwk9BKT4OYK1MB8GA1UdIwQYMBaAFMT3855i9MnXjF4S/cFRrk4yvJpC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjI5Qi84QTNFMUQxQTBG ODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlkZU1YaEw5d1ZHdVRqSzht a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZnpubUwweWRlTVhoTDl3Vkd1VGpLOG1rSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjI5Qi84QTNFMUQxQTBGODIxMUVGODI2NkYwNUVDNEY5QUUwMi94UGZ6bm1MMHlk ZU1YaEw5d1ZHdVRqSzhta0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgbJuZVEwFMJ3QdVXI4AjOqQWIUvwewAJh5xA+bSMmKTuxEbIP7Pfq s3e/UTmxPMcQbMF21ngfIwgLVI/KNYo4kB7FsJy1nUPhLBWVW/uSG9zau1Bf/0ud lP44f5hxWUYoemrS6c2ePxrDNgAhMFb8xN+J86NdYLUrWCAI4vnaMeixM9DlyM5v aJ3z+Se7nUwR4Jg75ScVI7TJDbaHMyYcOmgUSUDGVsnTRXKR8nDojzjwLIqXx9ai ECmIjbt1p9fkAbA3EMLykSQFbv8krktApQsI9y8HVsbGuk541amWSaUeiua5wGUk Rmfz/t/lp8t9HgeWICBpQ/TFcO4hBGUh -----END CERTIFICATE-----Generated at Tue May 13 03:41:20 2025 by rpki-client