$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft File: R-xTv901EyDomyxUG6zdTY1SoLM.mft (raw, json) Hash identifier: F6zSuQ2I0pA0qv2zVl4N8Xf4lViZ1m2F0s5Et4NqfAI= Subject key identifier: AB:4D:29:21:27:80:66:5F:C3:1B:B6:40:1F:9F:C5:8D:A8:EF:78:D3 Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3 Certificate issuer: /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3 Certificate serial: 065B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft Manifest number: 0646 Signing time: Sat 10 May 2025 22:15:15 +0000 Manifest this update: Sat 10 May 2025 22:15:14 +0000 Manifest next update: Sat 17 May 2025 22:15:14 +0000 Files and hashes: 1: R-xTv901EyDomyxUG6zdTY1SoLM.crl (hash: SkbGwvvxjDA1rlbukfqX5kLsAWTSpkmzGOwLRLFE4ZE=) 2: A6556900C0DF11EE9BA7B27AC4F9AE02.roa (hash: EgfWV3bjapet1pWv+VKLGp7GszirbkxZGbTbDfXNKuw=) 3: 24D8D69CADAE11EBB6E7565AC4F9AE02.roa (hash: K9wbLHRivpF9DHQpXalpHkYwZPdlN5pD4XKKl0H+dMc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1627 (0x65b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3 Validity Not Before: May 10 22:15:14 2025 GMT Not After : May 17 22:15:14 2025 GMT Subject: CN=681fcff3-b10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8b:15:d3:5d:28:af:f2:29:0c:05:91:e7:3e: 6e:92:a4:a9:92:f3:15:11:e1:23:2e:8f:b8:a3:32: 58:50:41:0b:54:8d:c5:9c:e1:62:14:21:20:d9:f1: 2b:27:8a:8b:4f:62:fa:b8:38:9a:31:8d:ee:d5:1c: ca:38:13:59:02:b4:39:79:85:8a:57:a3:0f:2c:10: e9:12:8e:8f:b7:bf:39:68:16:16:be:90:7a:87:34: 01:0a:9c:64:7f:77:e7:42:0d:9d:56:bc:0a:ce:de: 21:ac:30:0c:f5:fe:f2:08:52:80:f3:29:c4:06:84: 62:3f:f0:c2:6d:9c:fa:f0:5c:e5:30:74:69:47:64: a3:f3:60:6a:60:74:ff:80:60:dc:21:d8:ce:c6:db: c8:e7:00:30:96:d9:5f:90:26:8e:60:f6:a1:6c:a0: 2a:12:34:a9:b0:7e:20:51:db:cd:14:16:f3:00:d6: 38:cd:ad:3d:f8:c4:0d:67:da:6c:4b:7f:c9:c6:83: 4b:29:09:43:15:fe:8f:79:67:fc:25:96:f0:c1:c8: 99:98:67:b8:b3:95:cb:7e:61:82:82:f5:68:32:4f: 62:4b:7d:be:79:ca:05:26:d5:e7:79:12:3a:b9:67: 15:a4:a6:45:10:19:c8:0d:aa:d9:5f:5a:e7:9d:2f: b5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4D:29:21:27:80:66:5F:C3:1B:B6:40:1F:9F:C5:8D:A8:EF:78:D3 X509v3 Authority Key Identifier: keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:80:ec:7a:ee:e7:2c:9b:97:cc:57:04:de:2e:00:94:34:06: ac:5b:17:d5:ab:27:4f:1d:53:d3:e2:8a:25:62:fd:54:f0:0f: c2:ee:8e:43:2a:77:ac:5c:7b:5c:c8:e2:c1:62:11:88:61:3c: 1d:d8:d3:5f:79:52:59:53:03:78:9f:6b:35:93:5a:37:aa:a6: 08:26:d2:0f:c6:30:74:dd:2c:a2:1e:43:6f:ca:e4:39:2e:ba: 73:90:33:99:73:82:8f:ec:08:cd:b9:78:c1:6d:0e:c6:3b:39: 31:6c:46:96:19:ea:be:17:1a:36:bd:1d:9c:cd:56:23:71:13: 9b:14:9f:db:67:da:58:a2:0e:27:07:e4:7b:f0:5e:7f:f2:a7: df:d6:55:f9:ad:4f:17:6f:9f:90:52:62:b8:89:65:e9:3a:10: 37:79:c1:84:e3:42:b0:f8:1a:61:24:0f:90:0c:ea:89:7f:67: e7:03:f3:81:55:53:e3:de:02:be:f8:1d:04:f1:b6:95:02:62: a2:78:9b:81:55:e5:72:81:73:f5:e4:92:ff:c7:1e:b2:5e:dc: a9:ef:e1:31:c9:d1:6b:d6:99:44:39:5f:19:da:90:68:09:92: 56:31:fc:6c:d9:dc:51:6e:99:c9:81:b0:4b:5c:55:a9:5e:64: f4:65:19:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNEQjUxMTAvBgNVBAUTKDQ3RUM1M0JGREQzNTEzMjBFODlCMkM1NDFCQUNERDRE OEQ1MkEwQjMwHhcNMjUwNTEwMjIxNTE0WhcNMjUwNTE3MjIxNTE0WjAYMRYwFAYD VQQDEw02ODFmY2ZmMy1iMTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4sV010or/IpDAWR5z5ukqSpkvMVEeEjLo+4ozJYUEELVI3FnOFiFCEg2fEr J4qLT2L6uDiaMY3u1RzKOBNZArQ5eYWKV6MPLBDpEo6Pt785aBYWvpB6hzQBCpxk f3fnQg2dVrwKzt4hrDAM9f7yCFKA8ynEBoRiP/DCbZz68FzlMHRpR2Sj82BqYHT/ gGDcIdjOxtvI5wAwltlfkCaOYPahbKAqEjSpsH4gUdvNFBbzANY4za09+MQNZ9ps S3/JxoNLKQlDFf6PeWf8JZbwwciZmGe4s5XLfmGCgvVoMk9iS32+ecoFJtXneRI6 uWcVpKZFEBnIDarZX1rnnS+1XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtNKSEn gGZfwxu2QB+fxY2o73jTMB8GA1UdIwQYMBaAFEfsU7/dNRMg6JssVBus3U2NUqCz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0RCNS8wQzk5OUVDMDhG QTExMUVCQTIyMDY2MUVDNEY5QUUwMi9SLXhUdjkwMUV5RG9teXhVRzZ6ZFRZMVNv TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IteFR2OTAxRXlEb215eFVHNnpkVFkxU29MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0RCNS8wQzk5OUVDMDhGQTExMUVCQTIyMDY2MUVDNEY5QUUwMi9SLXhUdjkwMUV5 RG9teXhVRzZ6ZFRZMVNvTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcgOx67ucsm5fMVwTeLgCUNAasWxfVqydPHVPT4oolYv1U8A/C7o5D KnesXHtcyOLBYhGIYTwd2NNfeVJZUwN4n2s1k1o3qqYIJtIPxjB03SyiHkNvyuQ5 LrpzkDOZc4KP7AjNuXjBbQ7GOzkxbEaWGeq+Fxo2vR2czVYjcRObFJ/bZ9pYog4n B+R78F5/8qff1lX5rU8Xb5+QUmK4iWXpOhA3ecGE40Kw+BphJA+QDOqJf2fnA/OB VVPj3gK++B0E8baVAmKieJuBVeVygXP15JL/xx6yXtyp7+ExydFr1plEOV8Z2pBo CZJWMfxs2dxRbpnJgbBLXFWpXmT0ZRkW -----END CERTIFICATE-----Generated at Mon May 12 16:49:22 2025 by rpki-client