$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft File: xVGHsAsaczdfhFaIX2oQfuHZNc8.mft (raw, json) Hash identifier: CsSV/Pzfe83deb8TIW31+23j0qlRYwXXYc072m67Ofo= Subject key identifier: E3:4D:FE:4B:7C:04:C3:5B:79:F1:69:30:FE:14:75:AF:47:A1:EE:3D Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF Certificate issuer: /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft Manifest number: DB Signing time: Thu 15 May 2025 04:55:51 +0000 Manifest this update: Thu 15 May 2025 04:55:50 +0000 Manifest next update: Thu 22 May 2025 04:55:50 +0000 Files and hashes: 1: xVGHsAsaczdfhFaIX2oQfuHZNc8.crl (hash: pi24RFOIjnTZeXC3k5c3tZkGZ5qYxH8/EgteGaRoBdk=) 2: C9FDEC12E82411EE81065223C4F9AE02.roa (hash: w8SNcu2W86NVWJqOd27to5fWU6al9qmk5VnBP7mMOjs=) 3: EF1E7F70E82411EE9005BA2DC4F9AE02.roa (hash: q12pisfHJtoL9XkqG0on+CXyPl8Ax23nksmjhCAQXBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF Validity Not Before: May 15 04:55:50 2025 GMT Not After : May 22 04:55:50 2025 GMT Subject: CN=682573d6-561b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:91:82:36:a2:10:c9:0b:5a:1c:33:99:9a: 44:90:65:36:52:22:3c:bc:ec:97:b5:2c:6c:cf:92: c5:a2:dd:c2:21:c6:fa:30:2e:99:28:b2:6d:46:93: 3a:c7:78:5e:15:8d:5e:f9:37:e7:06:ee:11:78:1a: 6a:61:fe:dc:19:79:63:61:52:8f:63:ea:c0:13:42: d1:12:f3:8a:89:fd:db:27:40:19:81:4f:f2:ff:37: f3:1a:50:48:05:38:98:fb:89:b5:27:7b:42:df:28: 4c:08:c1:e9:e7:26:af:db:bb:bf:e5:b2:f1:90:78: b2:83:d4:a5:c0:04:0a:69:19:80:1c:b7:67:71:b7: 4a:7e:c6:7f:db:ad:3d:27:86:d3:ef:35:f0:84:c7: d2:a3:46:1a:5e:63:a9:27:9c:2a:9b:e7:0a:25:c6: e1:1e:c4:c9:63:be:2d:9e:99:d1:0e:95:51:3b:62: 93:3c:8b:ea:2a:84:d4:3c:8b:1b:ac:90:44:3a:32: c3:e5:25:7a:68:7b:82:a8:a9:84:bb:51:d1:28:24: 46:8f:40:e1:07:b3:7a:b3:65:f5:66:ec:62:4c:00: 76:93:fb:de:c4:60:da:af:cc:c4:ec:ad:58:27:a5: f7:3a:0b:e8:e8:51:c5:6d:43:43:75:ee:88:7f:ed: 87:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4D:FE:4B:7C:04:C3:5B:79:F1:69:30:FE:14:75:AF:47:A1:EE:3D X509v3 Authority Key Identifier: keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c8:01:97:33:9e:20:d0:66:67:6c:62:d9:6e:ac:39:ef:54: 73:e6:24:6a:b2:4b:11:c7:0c:0c:30:3f:d2:ea:3b:8f:07:2b: 1d:05:97:c9:ed:b4:3b:60:ca:6f:ee:12:36:f6:39:b8:c2:75: b6:36:4a:c8:9d:84:dc:51:36:51:fa:5a:4c:b8:25:7b:e0:12: 07:c8:f1:01:df:a4:b7:cb:e0:f5:cd:9b:dd:b7:f1:95:b8:f7: a8:ac:e3:db:09:21:d1:8c:b9:b9:7d:53:18:30:9d:0c:de:1b: db:a4:1c:b6:5a:82:cc:69:6d:97:04:ef:1f:e9:95:6c:2a:72: 3d:30:25:f3:e4:5f:c8:71:84:aa:b5:79:bd:33:d3:b2:62:ae: af:37:81:80:29:50:01:13:36:35:d5:d8:58:38:6f:be:4f:a2: 8e:85:a7:f4:6c:c7:cc:ce:e5:f2:87:87:dc:54:4b:9f:18:81: 78:a2:63:c8:17:b3:7a:9e:90:b1:3c:91:fc:6b:84:32:aa:d0: 11:8c:6f:54:be:63:9e:37:17:ee:52:5f:11:62:01:ba:77:df: 74:c0:05:1f:70:27:21:bf:bb:4b:29:c1:98:13:72:90:cd:72: 53:c2:ed:4e:7d:eb:23:d9:13:6a:54:0d:b4:70:85:3a:34:62: b1:2b:5a:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNCMjkxMTAvBgNVBAUTKEM1NTE4N0IwMEIxQTczMzc1Rjg0NTY4ODVGNkExMDdF RTFEOTM1Q0YwHhcNMjUwNTE1MDQ1NTUwWhcNMjUwNTIyMDQ1NTUwWjAYMRYwFAYD VQQDEw02ODI1NzNkNi01NjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/eRgjaiEMkLWhwzmZpEkGU2UiI8vOyXtSxsz5LFot3CIcb6MC6ZKLJtRpM6 x3heFY1e+TfnBu4ReBpqYf7cGXljYVKPY+rAE0LREvOKif3bJ0AZgU/y/zfzGlBI BTiY+4m1J3tC3yhMCMHp5yav27u/5bLxkHiyg9SlwAQKaRmAHLdncbdKfsZ/2609 J4bT7zXwhMfSo0YaXmOpJ5wqm+cKJcbhHsTJY74tnpnRDpVRO2KTPIvqKoTUPIsb rJBEOjLD5SV6aHuCqKmEu1HRKCRGj0DhB7N6s2X1ZuxiTAB2k/vexGDar8zE7K1Y J6X3Ogvo6FHFbUNDde6If+2HZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONN/kt8 BMNbefFpMP4Uda9Hoe49MB8GA1UdIwQYMBaAFMVRh7ALGnM3X4RWiF9qEH7h2TXP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0IyOS82MTdFOTQ0OEU4 MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6ZGZoRmFJWDJvUWZ1SFpO YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hWR0hzQXNhY3pkZmhGYUlYMm9RZnVIWk5jOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0IyOS82MTdFOTQ0OEU4MjQxMUVFQUZCN0RBN0RDNEY5QUUwMi94VkdIc0FzYWN6 ZGZoRmFJWDJvUWZ1SFpOYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4yAGXM54g0GZnbGLZbqw571Rz5iRqsksRxwwMMD/S6juPBysdBZfJ 7bQ7YMpv7hI29jm4wnW2NkrInYTcUTZR+lpMuCV74BIHyPEB36S3y+D1zZvdt/GV uPeorOPbCSHRjLm5fVMYMJ0M3hvbpBy2WoLMaW2XBO8f6ZVsKnI9MCXz5F/IcYSq tXm9M9OyYq6vN4GAKVABEzY11dhYOG++T6KOhaf0bMfMzuXyh4fcVEufGIF4omPI F7N6npCxPJH8a4QyqtARjG9UvmOeNxfuUl8RYgG6d990wAUfcCchv7tLKcGYE3KQ zXJTwu1Ofesj2RNqVA20cIU6NGKxK1pm -----END CERTIFICATE-----Generated at Fri May 16 13:09:40 2025 by rpki-client