$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: Oq3EaiAgAuKy9bC2uphPU33nkxlpm21YlNr6EBtFjS8= Subject key identifier: AF:0F:5E:0A:CA:CF:FA:65:8C:EF:E3:86:44:A1:EC:E9:AB:C6:8D:77 Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 063C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 0633 Signing time: Sat 10 May 2025 22:19:10 +0000 Manifest this update: Sat 10 May 2025 22:19:10 +0000 Manifest next update: Sat 17 May 2025 22:19:10 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: P45JJ6OrYvpaS6yMebRe4F1LaB3IyOweeTa97qHgm4k=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: xnj1+DqNRGp1sU91Z+zGlbx4vpo9U2+YWkznSk4BLXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1596 (0x63c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: May 10 22:19:10 2025 GMT Not After : May 17 22:19:10 2025 GMT Subject: CN=681fd0de-a27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:3e:84:4b:fa:84:24:42:3e:0a:78:0f:1f: f5:d9:bf:f2:ef:30:72:b4:f5:9d:8e:c8:78:37:e0: e9:84:d4:7a:83:47:ce:fd:6d:6e:86:07:5f:48:e3: 48:3a:38:d0:9d:87:cf:f9:31:5e:2d:8f:c8:e2:9d: 1c:fe:35:44:e3:c8:a1:64:2c:9d:81:d7:46:28:69: ef:a0:a0:e9:1a:58:5f:d6:bf:03:21:8f:2f:9d:56: a2:16:fc:b4:a0:df:b8:d4:17:f2:40:a6:88:a1:43: 75:89:e4:be:aa:da:68:30:5b:a0:a2:bf:74:b0:50: 34:fd:6e:2c:4a:3a:28:1b:5f:3e:88:8a:4c:f9:bf: ce:1b:66:f6:63:78:c1:88:37:31:32:95:c3:93:3b: a5:6f:6e:8c:2e:10:36:11:c3:11:84:52:1a:ef:50: be:32:ec:fc:98:53:b6:5c:bd:36:f4:61:f4:76:92: 10:1b:8f:07:f3:f6:05:86:20:a7:79:87:ab:6e:2d: 7d:bf:21:f2:62:a7:0a:01:c2:a7:93:44:15:70:f3: 1d:49:e4:1b:f4:55:13:c4:2f:b4:3c:8e:71:3c:6d: 54:0b:8a:b9:09:7a:1c:49:48:0f:b9:fb:ee:b1:63: fe:25:d9:32:05:02:8a:fd:99:85:f7:28:5e:00:bd: 00:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0F:5E:0A:CA:CF:FA:65:8C:EF:E3:86:44:A1:EC:E9:AB:C6:8D:77 X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:1d:28:08:2e:76:ca:22:20:1d:93:b3:c1:16:e1:c4:31:af: 24:b6:7a:45:b4:48:45:99:43:27:8c:7c:55:ce:7e:23:47:ae: 9c:55:92:f2:e9:89:6f:0e:1a:28:78:7b:18:e4:36:21:53:46: cd:9c:e5:0e:9e:f3:06:3a:c4:00:d9:c0:fb:37:c3:99:11:9e: e8:30:75:af:2b:30:40:a2:46:01:dd:7c:df:9e:d2:98:07:b4: 58:8a:46:da:ce:a5:25:72:83:07:34:d9:e1:2c:6e:d3:ea:8f: a1:07:c5:75:8f:65:84:a2:11:48:42:e3:65:98:5e:37:80:6b: 04:6e:e2:29:b9:62:e1:08:23:4d:50:a9:da:87:f7:15:36:15: f2:b0:60:eb:f4:9c:63:d4:53:17:6d:d5:95:b0:41:82:fb:30: ec:36:52:23:7c:87:06:4d:d8:62:6b:54:47:ee:2e:fd:73:f2: c0:4a:55:6e:6c:44:d7:b1:f0:fb:61:25:e4:4b:1c:fd:1f:c9: c0:37:da:38:86:b8:14:02:16:ed:b3:91:73:de:29:e8:c7:6b: 1f:92:85:29:18:05:06:1b:77:81:3b:c8:d4:c4:16:57:99:a1: 9a:d2:0e:93:11:b9:11:f2:bf:88:42:bf:e2:29:60:12:2e:d5: c0:8e:d2:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjUwNTEwMjIxOTEwWhcNMjUwNTE3MjIxOTEwWjAYMRYwFAYD VQQDEw02ODFmZDBkZS1hMjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcE+hEv6hCRCPgp4Dx/12b/y7zBytPWdjsh4N+DphNR6g0fO/W1uhgdfSONI OjjQnYfP+TFeLY/I4p0c/jVE48ihZCydgddGKGnvoKDpGlhf1r8DIY8vnVaiFvy0 oN+41BfyQKaIoUN1ieS+qtpoMFugor90sFA0/W4sSjooG18+iIpM+b/OG2b2Y3jB iDcxMpXDkzulb26MLhA2EcMRhFIa71C+Muz8mFO2XL029GH0dpIQG48H8/YFhiCn eYerbi19vyHyYqcKAcKnk0QVcPMdSeQb9FUTxC+0PI5xPG1UC4q5CXocSUgPufvu sWP+JdkyBQKK/ZmF9yheAL0A3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8PXgrK z/pljO/jhkSh7Omrxo13MB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRHSgILnbKIiAdk7PBFuHEMa8ktnpFtEhFmUMnjHxVzn4jR66cVZLy 6YlvDhooeHsY5DYhU0bNnOUOnvMGOsQA2cD7N8OZEZ7oMHWvKzBAokYB3XzfntKY B7RYikbazqUlcoMHNNnhLG7T6o+hB8V1j2WEohFIQuNlmF43gGsEbuIpuWLhCCNN UKnah/cVNhXysGDr9Jxj1FMXbdWVsEGC+zDsNlIjfIcGTdhia1RH7i79c/LASlVu bETXsfD7YSXkSxz9H8nAN9o4hrgUAhbts5Fz3inox2sfkoUpGAUGG3eBO8jUxBZX maGa0g6TEbkR8r+IQr/iKWASLtXAjtIb -----END CERTIFICATE-----Generated at Sun May 11 04:17:46 2025 by rpki-client