$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft File: xjugMQfBPRiceeDnSox7hHpcdHE.mft (raw, json) Hash identifier: irR35RTJWCm5A3Lc/Uhn5X7bM0SwO6uu61pRBlzDHug= Subject key identifier: E7:62:F4:AC:D7:FC:49:C5:25:9D:63:4D:6E:C4:79:23:A8:F0:95:AE Authority key identifier: C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 Certificate issuer: /CN=A9154EC0/serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft Manifest number: 01CC Signing time: Tue 13 May 2025 02:15:54 +0000 Manifest this update: Tue 13 May 2025 02:15:53 +0000 Manifest next update: Tue 20 May 2025 02:15:53 +0000 Files and hashes: 1: xjugMQfBPRiceeDnSox7hHpcdHE.crl (hash: 02rH4Ch1jEHTP+vkk8x+FNvhpQPf+QXHmZCIZBAsdfE=) 2: 16DFC2548D6C11EDBB1B1C4FC4F9AE02.roa (hash: ziWoAY2hbvtxePvnZWAtSB5jp5zkw3S8bF9M6H2eX84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154EC0, serialNumber=C63BA03107C13D189C79E0E74A8C7B847A5C7471 Validity Not Before: May 13 02:15:53 2025 GMT Not After : May 20 02:15:53 2025 GMT Subject: CN=6822ab59-6315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:37:7d:3f:e4:7e:d8:2d:d3:b8:f2:49:14: 3b:ba:b1:37:4f:d7:e8:42:9b:4d:ed:13:7e:ea:46: 62:ca:d6:08:0a:bd:3b:91:0d:ae:0d:c0:8b:55:48: a5:ae:8a:d6:ec:2d:74:60:2a:b8:78:0f:98:44:73: 75:e4:67:b7:15:60:93:db:e9:cd:ec:e3:62:31:5b: b4:d5:cf:d3:35:6e:5d:df:61:b5:e1:9a:ce:5e:a9: ff:60:60:37:c2:40:45:ad:4f:d0:2f:25:71:d1:4d: b6:a3:d6:12:ec:96:e6:31:06:94:fa:33:44:98:46: 39:53:ef:df:74:e9:53:2a:86:99:f6:04:27:ae:61: 88:ef:e8:4a:ee:85:bb:15:bc:ce:17:13:6f:8e:17: 66:56:5f:8f:47:91:84:a6:6f:d7:e8:b4:2e:a9:fc: bd:22:3c:3e:82:5b:c2:6e:50:03:c4:2e:55:26:dd: 8d:9d:4e:46:37:22:ce:94:e0:21:bf:e3:00:43:8b: bc:3a:2d:81:fb:62:0f:18:03:89:ed:82:fd:9f:7b: 7b:79:31:dc:23:23:1a:a9:1b:85:f3:6a:69:ae:57: e1:3d:e0:60:81:12:f8:7d:5a:84:b1:66:44:df:49: b4:9e:bd:b8:65:37:75:9d:cb:45:c5:5b:d6:4a:e7: 43:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:62:F4:AC:D7:FC:49:C5:25:9D:63:4D:6E:C4:79:23:A8:F0:95:AE X509v3 Authority Key Identifier: keyid:C6:3B:A0:31:07:C1:3D:18:9C:79:E0:E7:4A:8C:7B:84:7A:5C:74:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjugMQfBPRiceeDnSox7hHpcdHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EC0/DAE6740C7F3B11EDA7A3EC68C4F9AE02/xjugMQfBPRiceeDnSox7hHpcdHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:7d:ee:7c:8a:79:a5:91:66:7b:4d:c8:d3:a7:c1:75:16:63: 44:cb:40:c1:3a:f8:f7:9b:d1:19:00:0a:a7:b2:31:3e:6b:56: 74:88:62:a7:e6:4c:7d:aa:49:79:64:20:2b:13:a3:8f:77:de: f2:46:3d:27:4c:f6:01:2f:06:29:4e:dc:ab:eb:a0:ea:9e:8c: 21:6c:2e:92:db:d6:7a:ce:a2:04:55:7a:38:f7:e3:f9:48:b2: 10:ae:0f:5c:12:3c:2d:63:d6:35:41:0f:55:05:b0:7a:7a:d4: 47:d1:f2:db:49:56:8f:51:dd:2f:23:a5:80:0c:d0:ea:10:32: 78:da:81:cd:2b:19:aa:53:47:cf:2f:22:a2:fd:78:1a:4a:9c: 60:04:ef:65:67:41:c7:62:3d:d3:9e:8b:fd:db:e7:91:8f:b9: e5:5f:c8:ab:fd:8d:dc:6f:3a:7e:4e:37:4a:cb:aa:5e:ca:64: 27:30:61:34:38:14:62:aa:d9:4d:bb:e8:ae:e4:18:2d:cd:ca: cd:e5:77:d5:85:10:6f:af:0d:1e:2f:88:34:32:f6:17:49:28: a0:42:2b:d2:82:83:b0:5e:81:34:41:e0:70:bd:1d:fc:f6:a1: 79:06:32:49:3d:d8:37:47:7d:41:77:79:73:38:14:ab:d7:db: 7f:4e:f4:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRFQzAxMTAvBgNVBAUTKEM2M0JBMDMxMDdDMTNEMTg5Qzc5RTBFNzRBOEM3Qjg0 N0E1Qzc0NzEwHhcNMjUwNTEzMDIxNTUzWhcNMjUwNTIwMDIxNTUzWjAYMRYwFAYD VQQDEw02ODIyYWI1OS02MzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMA3fT/kftgt07jySRQ7urE3T9foQptN7RN+6kZiytYICr07kQ2uDcCLVUil rorW7C10YCq4eA+YRHN15Ge3FWCT2+nN7ONiMVu01c/TNW5d32G14ZrOXqn/YGA3 wkBFrU/QLyVx0U22o9YS7JbmMQaU+jNEmEY5U+/fdOlTKoaZ9gQnrmGI7+hK7oW7 FbzOFxNvjhdmVl+PR5GEpm/X6LQuqfy9Ijw+glvCblADxC5VJt2NnU5GNyLOlOAh v+MAQ4u8Oi2B+2IPGAOJ7YL9n3t7eTHcIyMaqRuF82pprlfhPeBggRL4fVqEsWZE 30m0nr24ZTd1nctFxVvWSudDQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdi9KzX /EnFJZ1jTW7EeSOo8JWuMB8GA1UdIwQYMBaAFMY7oDEHwT0YnHng50qMe4R6XHRx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEVDMC9EQUU2NzQwQzdG M0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBSaWNlZURuU294N2hIcGNk SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqdWdNUWZCUFJpY2VlRG5Tb3g3aEhwY2RIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEVDMC9EQUU2NzQwQzdGM0IxMUVEQTdBM0VDNjhDNEY5QUUwMi94anVnTVFmQlBS aWNlZURuU294N2hIcGNkSEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADfe58inmlkWZ7TcjTp8F1FmNEy0DBOvj3m9EZAAqnsjE+a1Z0iGKn 5kx9qkl5ZCArE6OPd97yRj0nTPYBLwYpTtyr66DqnowhbC6S29Z6zqIEVXo49+P5 SLIQrg9cEjwtY9Y1QQ9VBbB6etRH0fLbSVaPUd0vI6WADNDqEDJ42oHNKxmqU0fP LyKi/XgaSpxgBO9lZ0HHYj3Tnov92+eRj7nlX8ir/Y3cbzp+TjdKy6peymQnMGE0 OBRiqtlNu+iu5BgtzcrN5XfVhRBvrw0eL4g0MvYXSSigQivSgoOwXoE0QeBwvR38 9qF5BjJJPdg3R31Bd3lzOBSr19t/TvRN -----END CERTIFICATE-----Generated at Tue May 13 15:12:00 2025 by rpki-client