$ rpki-client -vvf rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft File: xwv3nojjEZrpa7dhopO7UaSGFzw.mft (raw, json) Hash identifier: 0X4IRJpodbUMwbA08Rq528oVrT1QvJgxvmeJNZQ0rn4= Subject key identifier: B7:03:41:5F:3C:2E:C2:5D:2F:C2:C0:89:37:BA:3A:61:D3:B8:54:5C Authority key identifier: C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C Certificate issuer: /CN=A9170ADF/serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Certificate serial: 0728 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft Manifest number: 071C Signing time: Wed 14 May 2025 21:56:52 +0000 Manifest this update: Wed 14 May 2025 21:56:52 +0000 Manifest next update: Wed 21 May 2025 21:56:52 +0000 Files and hashes: 1: xwv3nojjEZrpa7dhopO7UaSGFzw.crl (hash: Pf7CqnQlaArdeg6Eo3DsWmj4oBgzvGn1h9KnzEeYpb8=) 2: AC53A55C7B3611EBB7C5F122C4F9AE02.roa (hash: Xmj6Hu3XamtN1TfoLFF4zTOGMT8EY6KW6APUipxbG/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:56:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1832 (0x728) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170ADF, serialNumber=C70BF79E88E3119AE96BB761A293BB51A486173C Validity Not Before: May 14 21:56:52 2025 GMT Not After : May 21 21:56:52 2025 GMT Subject: CN=682511a4-015e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:62:03:ff:3e:56:de:b1:41:e3:1a:cc:da: 8b:d7:b0:7e:bf:ce:9c:7b:3b:96:74:65:a9:19:2b: b9:09:f7:bc:f4:8a:57:5b:6a:78:71:0d:ef:5d:3e: 57:67:b4:88:77:15:85:d0:1d:af:c1:e7:09:a8:f5: f5:9a:1c:cf:2d:e1:af:e2:a5:7d:65:b9:3f:bc:23: e6:68:af:39:2f:bb:2e:40:ba:1d:7c:d6:93:25:c9: 27:46:23:da:72:2c:12:1e:16:17:08:ef:06:95:30: 21:fa:5c:33:e5:9f:46:b4:d1:74:64:09:4e:e9:f8: 76:31:f2:ff:c2:ee:ee:dc:d1:c3:ba:04:1f:30:86: 1e:61:b3:fa:af:07:13:e0:fa:bc:01:8d:ff:ed:d4: 05:77:da:8b:3b:76:fc:17:30:07:cb:5a:41:17:65: ef:76:44:b3:1f:5e:55:4f:d5:97:e6:7b:46:e5:45: 85:f2:ee:1a:22:a9:d6:5d:8d:49:65:c6:0d:8d:6b: b4:53:44:7e:da:e2:ce:76:49:33:a5:5d:65:02:47: 4a:5f:d8:2b:c7:d9:f1:0f:a6:b8:0f:53:51:0e:24: 56:70:76:00:3e:15:59:18:4e:dd:80:66:46:68:c5: 03:b9:47:02:da:b7:ce:c5:58:ba:21:50:2a:89:99: 0d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:03:41:5F:3C:2E:C2:5D:2F:C2:C0:89:37:BA:3A:61:D3:B8:54:5C X509v3 Authority Key Identifier: keyid:C7:0B:F7:9E:88:E3:11:9A:E9:6B:B7:61:A2:93:BB:51:A4:86:17:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwv3nojjEZrpa7dhopO7UaSGFzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170ADF/B85F0E8C3ACB11EBA225AD17C4F9AE02/xwv3nojjEZrpa7dhopO7UaSGFzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ef:d4:07:ad:19:41:70:5c:2f:6a:c7:33:c9:9e:6a:64:66: 9c:7a:9e:de:00:80:d1:61:51:5e:94:e0:3b:f0:e2:fe:0c:2d: a9:77:85:26:76:e8:0e:07:0e:3f:5b:ba:01:3b:48:22:98:26: 63:0b:e9:86:5a:70:0a:fc:ce:e1:cd:ec:e9:15:ce:db:5c:37: 6e:01:04:03:cf:af:63:37:a0:9c:fc:63:58:15:c5:73:22:62: ce:f8:28:e9:8a:74:b4:84:99:16:00:70:e9:5c:ec:7c:77:21: c9:14:8b:62:e0:f4:c4:15:6a:22:7b:98:14:36:11:d8:cb:6a: d2:f9:9c:02:6f:16:09:1e:13:fe:d4:8b:7d:1c:32:7e:c7:51: 8f:13:13:56:fd:86:93:49:3c:4b:3f:59:13:9e:40:9e:db:89: f0:12:4c:be:77:ac:2a:f2:c3:4a:06:c7:ee:91:07:13:67:65: ac:62:a5:67:04:21:ef:20:ad:4d:fd:97:96:50:55:c1:ef:fa: c9:a9:1c:8c:d8:61:e4:32:2a:8c:77:fe:10:5b:31:9d:c0:b2: c0:ee:d9:17:d3:1d:b5:6e:82:e2:d2:97:03:01:a9:f2:60:96: bc:31:97:75:44:ca:b2:a1:60:df:9a:2d:24:8f:e4:a6:d3:e8: 56:4a:21:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBREYxMTAvBgNVBAUTKEM3MEJGNzlFODhFMzExOUFFOTZCQjc2MUEyOTNCQjUx QTQ4NjE3M0MwHhcNMjUwNTE0MjE1NjUyWhcNMjUwNTIxMjE1NjUyWjAYMRYwFAYD VQQDEw02ODI1MTFhNC0wMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4liA/8+Vt6xQeMazNqL17B+v86cezuWdGWpGSu5Cfe89IpXW2p4cQ3vXT5X Z7SIdxWF0B2vwecJqPX1mhzPLeGv4qV9Zbk/vCPmaK85L7suQLodfNaTJcknRiPa ciwSHhYXCO8GlTAh+lwz5Z9GtNF0ZAlO6fh2MfL/wu7u3NHDugQfMIYeYbP6rwcT 4Pq8AY3/7dQFd9qLO3b8FzAHy1pBF2XvdkSzH15VT9WX5ntG5UWF8u4aIqnWXY1J ZcYNjWu0U0R+2uLOdkkzpV1lAkdKX9grx9nxD6a4D1NRDiRWcHYAPhVZGE7dgGZG aMUDuUcC2rfOxVi6IVAqiZkN9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcDQV88 LsJdL8LAiTe6OmHTuFRcMB8GA1UdIwQYMBaAFMcL956I4xGa6Wu3YaKTu1Gkhhc8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFERi9CODVGMEU4QzNB Q0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVacnBhN2Rob3BPN1VhU0dG encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h3djNub2pqRVpycGE3ZGhvcE83VWFTR0Z6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFERi9CODVGMEU4QzNBQ0IxMUVCQTIyNUFEMTdDNEY5QUUwMi94d3Yzbm9qakVa cnBhN2Rob3BPN1VhU0dGencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA879QHrRlBcFwvasczyZ5qZGacep7eAIDRYVFelOA78OL+DC2pd4Um dugOBw4/W7oBO0gimCZjC+mGWnAK/M7hzezpFc7bXDduAQQDz69jN6Cc/GNYFcVz ImLO+CjpinS0hJkWAHDpXOx8dyHJFIti4PTEFWoie5gUNhHYy2rS+ZwCbxYJHhP+ 1It9HDJ+x1GPExNW/YaTSTxLP1kTnkCe24nwEky+d6wq8sNKBsfukQcTZ2WsYqVn BCHvIK1N/ZeWUFXB7/rJqRyM2GHkMiqMd/4QWzGdwLLA7tkX0x21boLi0pcDAany YJa8MZd1RMqyoWDfmi0kj+Sm0+hWSiEa -----END CERTIFICATE-----Generated at Thu May 15 17:59:17 2025 by rpki-client