$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft File: XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft (raw, json) Hash identifier: 6j3Y2EDrsRe06jmv/vvDWYS8jwFxlrcsDJupLQjowRo= Subject key identifier: E2:09:57:62:52:28:5D:05:6C:81:0C:C3:6F:98:12:53:39:20:47:08 Authority key identifier: 5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 Certificate issuer: /CN=A914CB9F/serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Certificate serial: 0C38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft Manifest number: 0C31 Signing time: Mon 12 May 2025 18:22:13 +0000 Manifest this update: Mon 12 May 2025 18:22:12 +0000 Manifest next update: Mon 19 May 2025 18:22:12 +0000 Files and hashes: 1: XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl (hash: /U7aQ95zM0L8CiwJgeflxELsGUj2LRG204UzFWMPANc=) 2: 4EE9B36406C711EA84978821C4F9AE02.roa (hash: jepyyGmhyczAJbapeZ5nuaRxeukad7rFEbIHfvNySKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3128 (0xc38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CB9F, serialNumber=5D62DF1921DE1B598BAFB857D49D236D2E15F2B6 Validity Not Before: May 12 18:22:12 2025 GMT Not After : May 19 18:22:12 2025 GMT Subject: CN=68223c55-ca08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fd:85:8e:9c:fc:e5:01:9d:97:74:d8:97:50: 24:1f:c6:51:09:48:16:a7:68:d3:93:ad:b5:45:95: 4f:b7:94:66:19:92:e1:2c:0f:b6:3d:89:6b:c2:06: 5e:ac:89:88:f2:aa:95:16:fe:9c:9a:d1:18:71:df: 92:3a:52:fb:81:fa:24:32:f5:08:7d:05:9b:0a:32: a0:7c:b9:f5:f0:1b:62:92:75:df:27:d7:63:a6:f8: 86:f8:5a:54:14:2b:e0:59:91:23:29:05:36:dd:f5: 5d:0e:50:e5:b4:8f:01:5b:54:68:46:b9:36:d6:5e: 3f:45:28:ec:57:bc:bb:fa:87:84:72:0d:d1:c9:28: 8c:c1:cb:1e:46:ca:92:f6:a0:41:a8:80:00:6c:30: 37:16:b4:2f:0f:99:26:5e:a1:d6:9c:ae:db:41:30: d3:1c:a5:93:d5:5b:92:b8:33:16:c6:15:a2:a2:01: 75:f3:1d:11:a3:d2:6c:fd:f0:78:9e:83:97:02:cf: 35:af:f3:fb:69:4b:db:d8:ad:d6:93:21:f2:8b:2a: 9a:7c:c0:2d:74:47:b0:0b:2f:8b:d8:25:d3:0c:13: 63:04:1c:62:b9:ef:76:c6:ac:ab:e5:2d:6f:b5:f4: 89:b6:79:4f:e6:1b:65:b6:b7:42:90:49:79:b1:11: 99:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:09:57:62:52:28:5D:05:6C:81:0C:C3:6F:98:12:53:39:20:47:08 X509v3 Authority Key Identifier: keyid:5D:62:DF:19:21:DE:1B:59:8B:AF:B8:57:D4:9D:23:6D:2E:15:F2:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XWLfGSHeG1mLr7hX1J0jbS4V8rY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB9F/115739FA06C611EAAD2D601CC4F9AE02/XWLfGSHeG1mLr7hX1J0jbS4V8rY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:9f:2c:ed:b8:b4:2f:86:3e:cd:c7:30:bb:c9:84:0c:e2:e9: 6c:92:e9:30:9f:32:26:0d:87:34:f1:91:34:c4:68:8b:8b:1a: 1d:62:98:c1:65:5f:47:2e:a9:0a:14:8a:73:b7:21:d4:d4:13: 30:52:30:2c:ef:05:0a:51:37:63:38:a9:41:25:9b:de:08:e2: ac:dc:3e:35:a3:e5:4f:49:11:10:62:73:63:bd:c4:b1:e1:25: 61:80:22:32:d5:0b:ae:af:37:86:47:53:b6:1a:57:ae:44:98: f3:c4:1f:2f:d8:23:be:db:f5:d6:7a:31:0f:61:13:3f:97:b5: ce:37:49:35:ab:f2:e4:c8:a7:ff:18:6b:f9:7d:fb:ad:a8:4e: 01:87:2b:39:ac:36:0b:12:77:a7:c5:b1:2b:4b:19:ed:c7:04: 1b:ea:83:37:5e:b0:48:7d:58:06:de:85:c2:63:4a:24:7f:bd: dd:3e:ce:d1:91:6c:09:20:b6:fd:f6:57:b0:c1:b4:78:74:41: 3e:f9:4c:0e:8e:86:da:40:fa:bb:c5:42:4b:20:08:35:76:70: 58:d7:b1:b9:01:d8:ca:fe:5a:f5:1c:cd:51:f5:eb:3e:88:97: c1:e9:75:15:40:d9:5d:65:57:67:7d:72:9f:ce:a3:f2:11:67: 0f:e2:39:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENCOUYxMTAvBgNVBAUTKDVENjJERjE5MjFERTFCNTk4QkFGQjg1N0Q0OUQyMzZE MkUxNUYyQjYwHhcNMjUwNTEyMTgyMjEyWhcNMjUwNTE5MTgyMjEyWjAYMRYwFAYD VQQDEw02ODIyM2M1NS1jYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2P2Fjpz85QGdl3TYl1AkH8ZRCUgWp2jTk621RZVPt5RmGZLhLA+2PYlrwgZe rImI8qqVFv6cmtEYcd+SOlL7gfokMvUIfQWbCjKgfLn18BtiknXfJ9djpviG+FpU FCvgWZEjKQU23fVdDlDltI8BW1RoRrk21l4/RSjsV7y7+oeEcg3RySiMwcseRsqS 9qBBqIAAbDA3FrQvD5kmXqHWnK7bQTDTHKWT1VuSuDMWxhWiogF18x0Ro9Js/fB4 noOXAs81r/P7aUvb2K3WkyHyiyqafMAtdEewCy+L2CXTDBNjBBxiue92xqyr5S1v tfSJtnlP5htltrdCkEl5sRGZ4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIJV2JS KF0FbIEMw2+YElM5IEcIMB8GA1UdIwQYMBaAFF1i3xkh3htZi6+4V9SdI20uFfK2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0I5Ri8xMTU3MzlGQTA2 QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcxbUxyN2hYMUowamJTNFY4 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hXTGZHU0hlRzFtTHI3aFgxSjBqYlM0VjhyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0I5Ri8xMTU3MzlGQTA2QzYxMUVBQUQyRDYwMUNDNEY5QUUwMi9YV0xmR1NIZUcx bUxyN2hYMUowamJTNFY4clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApnyztuLQvhj7NxzC7yYQM4ulskukwnzImDYc08ZE0xGiLixodYpjB ZV9HLqkKFIpztyHU1BMwUjAs7wUKUTdjOKlBJZveCOKs3D41o+VPSREQYnNjvcSx 4SVhgCIy1QuurzeGR1O2GleuRJjzxB8v2CO+2/XWejEPYRM/l7XON0k1q/LkyKf/ GGv5ffutqE4Bhys5rDYLEnenxbErSxntxwQb6oM3XrBIfVgG3oXCY0okf73dPs7R kWwJILb99lewwbR4dEE++UwOjobaQPq7xUJLIAg1dnBY17G5AdjK/lr1HM1R9es+ iJfB6XUVQNldZVdnfXKfzqPyEWcP4jn5 -----END CERTIFICATE-----Generated at Wed May 14 18:25:19 2025 by rpki-client