$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft File: X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft (raw, json) Hash identifier: UaelImzZ/JI6vU51/MaZSEggCVNCIuKx77GP3vqgdv8= Subject key identifier: AE:29:C6:E7:06:C2:E9:71:E6:BC:A1:A8:F2:78:E0:46:B9:70:A4:9D Authority key identifier: 5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 Certificate issuer: /CN=A9170304/serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Certificate serial: 3490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft Manifest number: 3487 Signing time: Fri 16 May 2025 14:40:53 +0000 Manifest this update: Fri 16 May 2025 14:40:52 +0000 Manifest next update: Fri 23 May 2025 14:40:52 +0000 Files and hashes: 1: X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl (hash: ajsdkLFauNXtULdTVBcNfAJ7Yz3teZMJA6OiB17BgeQ=) 2: 6D106CEE3AA011EB963B4842C4F9AE02.roa (hash: m1Ja+K+BQF88h58Y18w9A7vu3WiRuOsB65pKsql8BvI=) 3: 3A304DB4F54411EE8FF34627C4F9AE02.roa (hash: Zl4gUZhHt66LNUFLaLmernm+th1hHU0/5O3LszjxBds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 14:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13456 (0x3490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=5FC2792CF440B857839D688A70B60F0762ABAB35 Validity Not Before: May 16 14:40:52 2025 GMT Not After : May 23 14:40:52 2025 GMT Subject: CN=68274e74-c162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:35:ca:cc:5b:ba:22:5b:f7:09:c0:16:9f: 1c:7c:2e:47:48:9f:c7:20:f0:9e:a6:f4:a9:46:a2: 37:a7:f2:59:80:fd:4e:75:c5:c1:b1:a1:57:c3:d6: aa:1f:bd:88:70:90:1f:32:5f:4b:2f:0b:3b:3f:2f: 5b:b6:a0:76:94:3d:56:f1:1e:bf:94:ee:a4:9d:e5: ac:67:c6:e9:df:fc:a2:c3:7e:62:03:59:45:d4:13: 73:f1:14:7c:d2:55:e7:c3:00:0d:96:15:c1:13:79: 95:9c:85:d6:46:aa:b6:0c:7f:d3:c0:39:3c:67:63: e0:a3:eb:19:21:57:df:f0:33:2c:94:d9:67:5e:c6: 6f:fb:7c:34:60:c3:51:31:e6:ea:f0:69:ad:6e:09: a3:3c:10:cc:4a:86:33:ba:ee:fb:b9:17:59:73:f9: 71:db:18:f8:63:b7:f9:48:f0:44:7f:ae:42:21:79: 2b:94:10:ca:d7:34:c8:3d:59:e0:a5:8b:14:34:01: dd:03:53:e6:ac:34:8b:39:f1:cf:f6:10:e7:82:5b: fc:2f:09:1c:0c:e2:f3:58:33:d3:b1:e5:b0:2d:c0: 7c:65:2d:56:9c:a8:b5:66:c2:76:44:c7:a2:4e:90: 68:9a:3d:46:41:cc:0d:fb:37:6d:7e:a6:9c:52:0b: 17:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:29:C6:E7:06:C2:E9:71:E6:BC:A1:A8:F2:78:E0:46:B9:70:A4:9D X509v3 Authority Key Identifier: keyid:5F:C2:79:2C:F4:40:B8:57:83:9D:68:8A:70:B6:0F:07:62:AB:AB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/AB8249B21D8E11E2B18226ED08B02CD2/X8J5LPRAuFeDnWiKcLYPB2KrqzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:dd:f4:e7:81:59:20:81:66:a3:4c:58:42:ce:ba:b5:73:98: 33:c6:ab:9b:1c:57:06:ff:28:e6:6b:39:ff:5c:f4:80:db:2e: d0:17:da:d6:35:46:aa:d1:88:42:6a:94:98:d9:3e:e2:ec:b4: 65:15:7a:ea:74:8c:80:62:bf:c1:b9:5c:2e:37:1c:cb:87:18: cb:3a:16:5f:e7:ac:e6:43:fa:25:cb:ef:b6:ee:0b:30:39:a3: de:96:67:b2:79:1b:33:af:f0:25:ec:8e:30:12:b2:3a:fe:5a: 95:72:5b:b3:2e:de:20:be:09:0c:8f:2e:1c:44:b8:f8:90:5b: 5b:78:6d:c0:c1:2c:33:fc:53:84:bd:cf:ac:6c:5d:fe:98:15: 1d:cb:ff:b1:92:cf:fc:74:8a:8d:1d:6f:08:03:c0:65:e6:d3: 33:5c:bd:22:53:b2:39:b2:23:4f:7d:56:23:64:0d:26:c8:12: e9:97:79:8a:56:1e:56:54:02:7e:67:4b:67:38:c6:ca:13:bd: 0c:16:56:a0:15:14:d0:eb:7d:a4:11:5a:58:cd:a4:09:f1:87: 8f:28:9a:50:db:d6:ae:24:88:08:ec:03:f9:75:29:c1:64:ba: a3:a6:f7:05:4d:8b:6a:2c:b1:27:7f:72:66:b1:71:92:87:b3: ed:be:e5:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKDVGQzI3OTJDRjQ0MEI4NTc4MzlENjg4QTcwQjYwRjA3 NjJBQkFCMzUwHhcNMjUwNTE2MTQ0MDUyWhcNMjUwNTIzMTQ0MDUyWjAYMRYwFAYD VQQDEw02ODI3NGU3NC1jMTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0c1ysxbuiJb9wnAFp8cfC5HSJ/HIPCepvSpRqI3p/JZgP1OdcXBsaFXw9aq H72IcJAfMl9LLws7Py9btqB2lD1W8R6/lO6kneWsZ8bp3/yiw35iA1lF1BNz8RR8 0lXnwwANlhXBE3mVnIXWRqq2DH/TwDk8Z2Pgo+sZIVff8DMslNlnXsZv+3w0YMNR Mebq8GmtbgmjPBDMSoYzuu77uRdZc/lx2xj4Y7f5SPBEf65CIXkrlBDK1zTIPVng pYsUNAHdA1PmrDSLOfHP9hDnglv8LwkcDOLzWDPTseWwLcB8ZS1WnKi1ZsJ2RMei TpBomj1GQcwN+zdtfqacUgsXywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4pxucG wulx5ryhqPJ44Ea5cKSdMB8GA1UdIwQYMBaAFF/CeSz0QLhXg51oinC2Dwdiq6s1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC9BQjgyNDlCMjFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVGZURuV2lLY0xZUEIyS3Jx elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g4SjVMUFJBdUZlRG5XaUtjTFlQQjJLcnF6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC9BQjgyNDlCMjFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9YOEo1TFBSQXVG ZURuV2lLY0xZUEIyS3JxelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB93fTngVkggWajTFhCzrq1c5gzxqubHFcG/yjmazn/XPSA2y7QF9rW NUaq0YhCapSY2T7i7LRlFXrqdIyAYr/BuVwuNxzLhxjLOhZf56zmQ/oly++27gsw OaPelmeyeRszr/Al7I4wErI6/lqVcluzLt4gvgkMjy4cRLj4kFtbeG3AwSwz/FOE vc+sbF3+mBUdy/+xks/8dIqNHW8IA8Bl5tMzXL0iU7I5siNPfVYjZA0myBLpl3mK Vh5WVAJ+Z0tnOMbKE70MFlagFRTQ632kEVpYzaQJ8YePKJpQ29auJIgI7AP5dSnB ZLqjpvcFTYtqLLEnf3JmsXGSh7PtvuXG -----END CERTIFICATE-----Generated at Sat May 17 16:26:23 2025 by rpki-client