$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft File: xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft (raw, json) Hash identifier: dDZapovs4nD3WxbV2K+BwW+nK4bgTH5DtjHwPQVAmok= Subject key identifier: BD:3A:98:83:84:93:77:9D:DF:F1:64:85:0B:89:DA:F5:04:F4:DC:9D Authority key identifier: C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 Certificate issuer: /CN=A9157B66/serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft Manifest number: 0636 Signing time: Wed 14 May 2025 22:41:25 +0000 Manifest this update: Wed 14 May 2025 22:41:24 +0000 Manifest next update: Wed 21 May 2025 22:41:24 +0000 Files and hashes: 1: xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl (hash: 25MNls3lKgKhGfDAeqzBSK92VP1K2us8Uq3EDqgJ/Ys=) 2: 807CB298903A11EBA9783756C4F9AE02.roa (hash: HcRkeL0L46StqN8XUYCiDhZBU5a1szFT/RluEKL79UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B66, serialNumber=C455B086BAB8647CD2510CA83241E70014CD8A44 Validity Not Before: May 14 22:41:24 2025 GMT Not After : May 21 22:41:24 2025 GMT Subject: CN=68251c15-b686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:29:f8:d0:89:65:6f:f0:6b:28:e0:72:ec:3f: 47:6b:3e:56:a4:23:6a:f0:d2:c1:fd:98:52:d2:db: 1e:66:d4:77:3c:85:4f:92:28:72:1d:0c:77:51:d1: 69:03:8b:4f:d7:f1:23:57:4e:eb:01:60:e9:91:c0: 68:b0:f9:cb:2b:5e:44:e6:7b:41:b7:ea:e0:95:66: 71:36:f2:a5:f0:99:cd:a9:68:59:1a:4b:de:70:82: 43:6f:52:14:f6:c4:6b:b6:06:09:0f:74:b7:a2:73: 1c:db:ca:ee:74:38:65:0a:81:1b:5a:34:39:0b:28: 8b:a2:52:fb:54:09:09:cb:2b:71:c5:c5:c1:5d:16: 63:64:99:d6:c8:59:ab:fd:c0:9b:40:b4:26:89:30: 68:cb:bc:42:2c:5b:e7:34:d6:be:4e:c7:f6:94:b9: ce:2b:8a:9d:07:58:02:0a:13:f8:e0:ca:30:f5:5f: 2b:ed:a3:7b:cc:84:1c:36:bc:4f:cd:c4:0a:5d:a1: ab:ed:87:13:7f:af:2a:c0:dc:c4:e4:ac:3a:16:0a: 86:06:33:9a:60:51:dc:95:12:12:d9:f5:8b:ce:3d: 6b:94:71:9a:fd:13:20:94:ce:00:2a:fc:02:5c:aa: 72:e7:eb:59:7a:4c:80:50:47:99:10:02:01:40:5a: e0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3A:98:83:84:93:77:9D:DF:F1:64:85:0B:89:DA:F5:04:F4:DC:9D X509v3 Authority Key Identifier: keyid:C4:55:B0:86:BA:B8:64:7C:D2:51:0C:A8:32:41:E7:00:14:CD:8A:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xFWwhrq4ZHzSUQyoMkHnABTNikQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B66/E5C4D326903811EBA4DC5A54C4F9AE02/xFWwhrq4ZHzSUQyoMkHnABTNikQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:e8:96:82:80:5e:3a:1a:05:23:46:49:d0:47:fc:a1:b2:1b: 01:f2:ad:4e:b4:fa:e0:e4:b5:bf:68:d2:8d:d4:b8:95:20:08: da:bc:17:32:56:f7:56:96:f1:c1:b4:c8:af:0b:0c:4b:a2:c0: aa:e5:47:21:75:c4:51:18:67:99:02:6f:b2:9d:2f:65:21:a9: 7f:fa:4a:f2:92:ab:4b:25:28:07:a4:c3:6b:0a:7e:b4:b0:0c: f8:d5:af:01:de:62:ef:1a:c7:81:e4:d5:6b:01:d8:2f:b5:cf: db:1c:80:62:f6:2e:09:ea:11:dc:53:84:42:f8:14:98:5c:f1: 29:8e:21:37:e3:a3:7c:e7:b8:eb:87:2f:12:a2:65:53:34:5f: d7:46:09:ec:0c:9e:b8:9a:90:1b:33:de:10:3f:47:23:70:a9: 8d:c1:85:d6:0e:e5:03:14:c5:2e:a9:7b:1a:3d:a4:1c:a7:79: 67:bc:7f:15:e8:ca:11:b5:11:e9:43:be:a8:56:35:3b:cc:53: 7a:ef:23:89:bc:ff:59:de:0a:2b:51:ac:0f:18:0e:2c:5b:b6: af:35:77:ed:c5:37:3a:4c:13:f0:2c:66:e9:b6:d7:c4:d8:16: 87:f3:4a:44:66:85:61:61:7d:a0:76:e0:e0:0b:85:5a:d4:3d: 5f:89:ec:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdCNjYxMTAvBgNVBAUTKEM0NTVCMDg2QkFCODY0N0NEMjUxMENBODMyNDFFNzAw MTRDRDhBNDQwHhcNMjUwNTE0MjI0MTI0WhcNMjUwNTIxMjI0MTI0WjAYMRYwFAYD VQQDEw02ODI1MWMxNS1iNjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Sn40Illb/BrKOBy7D9Haz5WpCNq8NLB/ZhS0tseZtR3PIVPkihyHQx3UdFp A4tP1/EjV07rAWDpkcBosPnLK15E5ntBt+rglWZxNvKl8JnNqWhZGkvecIJDb1IU 9sRrtgYJD3S3onMc28rudDhlCoEbWjQ5CyiLolL7VAkJyytxxcXBXRZjZJnWyFmr /cCbQLQmiTBoy7xCLFvnNNa+Tsf2lLnOK4qdB1gCChP44Mow9V8r7aN7zIQcNrxP zcQKXaGr7YcTf68qwNzE5Kw6FgqGBjOaYFHclRIS2fWLzj1rlHGa/RMglM4AKvwC XKpy5+tZekyAUEeZEAIBQFrgpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL06mIOE k3ed3/FkhQuJ2vUE9NydMB8GA1UdIwQYMBaAFMRVsIa6uGR80lEMqDJB5wAUzYpE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0I2Ni9FNUM0RDMyNjkw MzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpIelNVUXlvTWtIbkFCVE5p a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hGV3docnE0Wkh6U1VReW9Na0huQUJUTmlrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0I2Ni9FNUM0RDMyNjkwMzgxMUVCQTREQzVBNTRDNEY5QUUwMi94Rld3aHJxNFpI elNVUXlvTWtIbkFCVE5pa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB26JaCgF46GgUjRknQR/yhshsB8q1OtPrg5LW/aNKN1LiVIAjavBcy VvdWlvHBtMivCwxLosCq5UchdcRRGGeZAm+ynS9lIal/+krykqtLJSgHpMNrCn60 sAz41a8B3mLvGseB5NVrAdgvtc/bHIBi9i4J6hHcU4RC+BSYXPEpjiE346N857jr hy8SomVTNF/XRgnsDJ64mpAbM94QP0cjcKmNwYXWDuUDFMUuqXsaPaQcp3lnvH8V 6MoRtRHpQ76oVjU7zFN67yOJvP9Z3gorUawPGA4sW7avNXftxTc6TBPwLGbpttfE 2BaH80pEZoVhYX2gduDgC4Va1D1fiezz -----END CERTIFICATE-----Generated at Thu May 15 19:16:50 2025 by rpki-client