$ rpki-client -vvf rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft File: xPprur_RmXzI8dIP5qVXTe6bMlY.mft (raw, json) Hash identifier: eRkZD7rYWeJdwo7L9N7Lw+y2AoDQImczdagELWlnzTE= Subject key identifier: 4A:06:8F:FE:C0:48:7C:17:C9:CD:B2:47:00:E4:C6:8A:D3:2F:60:EE Authority key identifier: C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56 Certificate issuer: /CN=A9187532/serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft Manifest number: 0176 Signing time: Thu 15 May 2025 03:10:57 +0000 Manifest this update: Thu 15 May 2025 03:10:56 +0000 Manifest next update: Thu 22 May 2025 03:10:56 +0000 Files and hashes: 1: xPprur_RmXzI8dIP5qVXTe6bMlY.crl (hash: jzhESQQ/gGXM/J4jHTCanZLYUkrWMTk+v7Q3K3+exW0=) 2: 8D176BFAF65011ED90F79C33C4F9AE02.roa (hash: 6AwMX4x/IYWolneJozQYQ/y6c1KiBasFJP05rV+jXS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187532, serialNumber=C4FA6BBABFD1997CC8F1D20FE6A5574DEE9B3256 Validity Not Before: May 15 03:10:56 2025 GMT Not After : May 22 03:10:56 2025 GMT Subject: CN=68255b41-8e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:21:5e:09:3f:e2:7b:c0:4a:f8:c9:69:bc:e2: 41:8d:de:97:36:19:d4:33:9a:bb:f6:9e:30:19:ce: 2b:e1:61:a5:ce:87:a7:7c:4b:ad:36:3d:1e:80:28: de:67:dd:a3:2a:9e:52:fd:6e:ef:e1:8e:5b:ba:45: 80:14:83:d6:f3:25:a9:bf:69:c9:49:2f:04:32:03: c2:21:0a:f3:30:1d:b9:1a:c4:da:09:c5:14:4e:80: 27:4a:f5:0d:18:46:e6:11:e5:36:00:30:92:b3:52: dd:10:06:2e:a9:0b:51:5c:14:9f:0b:48:33:36:48: 3e:27:96:a9:0f:11:47:cc:fa:d4:a2:97:2e:7f:50: 3b:aa:41:1e:0c:d9:70:53:ee:35:05:a6:56:ee:51: 28:80:c3:5b:46:ec:63:34:d4:8d:c8:8c:a1:54:f5: 71:f9:9d:3a:41:ff:b9:13:9d:79:20:47:3a:94:87: f1:53:bb:c0:e6:99:75:29:70:ac:6c:5b:ec:36:33: 52:d9:93:51:c1:58:64:ab:fc:97:0c:b4:a8:e4:a4: 90:4b:cc:2e:f6:3d:a7:b1:ab:68:f6:c6:60:c9:71: 27:9d:10:e8:b1:df:0a:a0:6f:68:4a:13:d2:32:39: 79:9f:43:3d:08:77:66:34:ff:ed:59:bf:80:39:8d: c5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:06:8F:FE:C0:48:7C:17:C9:CD:B2:47:00:E4:C6:8A:D3:2F:60:EE X509v3 Authority Key Identifier: keyid:C4:FA:6B:BA:BF:D1:99:7C:C8:F1:D2:0F:E6:A5:57:4D:EE:9B:32:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPprur_RmXzI8dIP5qVXTe6bMlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187532/9A66EB9EF64811EDAA671E17C4F9AE02/xPprur_RmXzI8dIP5qVXTe6bMlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:2b:f0:d4:39:22:ed:94:9e:07:19:14:a1:94:6a:7e:f8:b7: 5c:4e:b5:c3:7f:53:39:2f:28:91:68:fd:96:15:c8:6e:b0:c7: cc:20:6d:a3:c1:e9:c5:6c:14:5b:32:37:f0:7f:29:fd:01:22: ee:a1:22:31:01:59:88:b8:a8:65:25:c2:3a:c6:e0:e3:ec:ab: fb:08:4f:2e:42:be:4f:74:c6:c0:01:41:34:a8:f2:4a:ed:5b: fa:ef:8f:79:79:5f:fe:59:5a:12:26:0e:6d:69:41:e6:35:60: a9:37:1b:b6:58:e4:9b:ad:63:7f:0d:2f:09:a9:a6:f8:69:f5: d3:46:52:16:c3:24:c3:3a:94:2f:28:f3:5e:e3:74:50:24:31: bc:68:09:21:37:63:ea:ee:56:66:90:49:75:01:5b:08:a6:4f: 81:6e:28:d5:8c:52:85:a0:45:bf:bf:41:e8:98:55:c0:ef:91: a2:83:8b:e4:9d:61:68:f0:b7:04:f3:f3:17:9e:42:89:4b:47: 39:dc:3b:07:0f:32:5a:ce:ac:f5:3f:24:6d:e2:18:14:88:9d: 7e:a7:26:50:87:22:b0:3e:37:a7:ac:1f:82:c2:ae:c5:31:e0: 7a:72:00:a3:35:3e:7a:be:44:9a:d9:a1:43:f0:7f:93:50:23: 68:ce:3f:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1MzIxMTAvBgNVBAUTKEM0RkE2QkJBQkZEMTk5N0NDOEYxRDIwRkU2QTU1NzRE RUU5QjMyNTYwHhcNMjUwNTE1MDMxMDU2WhcNMjUwNTIyMDMxMDU2WjAYMRYwFAYD VQQDEw02ODI1NWI0MS04ZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCFeCT/ie8BK+MlpvOJBjd6XNhnUM5q79p4wGc4r4WGlzoenfEutNj0egCje Z92jKp5S/W7v4Y5bukWAFIPW8yWpv2nJSS8EMgPCIQrzMB25GsTaCcUUToAnSvUN GEbmEeU2ADCSs1LdEAYuqQtRXBSfC0gzNkg+J5apDxFHzPrUopcuf1A7qkEeDNlw U+41BaZW7lEogMNbRuxjNNSNyIyhVPVx+Z06Qf+5E515IEc6lIfxU7vA5pl1KXCs bFvsNjNS2ZNRwVhkq/yXDLSo5KSQS8wu9j2nsato9sZgyXEnnRDosd8KoG9oShPS Mjl5n0M9CHdmNP/tWb+AOY3F7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEoGj/7A SHwXyc2yRwDkxorTL2DuMB8GA1UdIwQYMBaAFMT6a7q/0Zl8yPHSD+alV03umzJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzMi85QTY2RUI5RUY2 NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Yekk4ZElQNXFWWFRlNmJN bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQcHJ1cl9SbVh6SThkSVA1cVZYVGU2Yk1sWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzUzMi85QTY2RUI5RUY2NDgxMUVEQUE2NzFFMTdDNEY5QUUwMi94UHBydXJfUm1Y ekk4ZElQNXFWWFRlNmJNbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmK/DUOSLtlJ4HGRShlGp++LdcTrXDf1M5LyiRaP2WFchusMfMIG2j wenFbBRbMjfwfyn9ASLuoSIxAVmIuKhlJcI6xuDj7Kv7CE8uQr5PdMbAAUE0qPJK 7Vv67495eV/+WVoSJg5taUHmNWCpNxu2WOSbrWN/DS8Jqab4afXTRlIWwyTDOpQv KPNe43RQJDG8aAkhN2Pq7lZmkEl1AVsIpk+BbijVjFKFoEW/v0HomFXA75Gig4vk nWFo8LcE8/MXnkKJS0c53DsHDzJazqz1PyRt4hgUiJ1+pyZQhyKwPjenrB+Cwq7F MeB6cgCjNT56vkSa2aFD8H+TUCNozj+N -----END CERTIFICATE-----Generated at Fri May 16 09:08:19 2025 by rpki-client