$ rpki-client -vvf rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft File: xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft (raw, json) Hash identifier: lJb56TkcWX5Lb7Rr8Tj9zS1Sq2qgXE48LeYaNXw9JEk= Subject key identifier: 7F:96:EE:5C:EF:6C:C5:F6:8B:44:95:F0:DD:00:68:EF:03:83:F4:12 Authority key identifier: C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 Certificate issuer: /CN=A918767B/serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Certificate serial: 0408 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft Manifest number: 0408 Signing time: Sun 11 May 2025 00:00:37 +0000 Manifest this update: Sun 11 May 2025 00:00:37 +0000 Manifest next update: Sun 18 May 2025 00:00:37 +0000 Files and hashes: 1: xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl (hash: oh9XdNWiR2AUbtV8onDCfy8PX5cVmfHw8RIHIo6iT0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1032 (0x408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918767B, serialNumber=C53423288F9FFC1004842BCC40A519238934AA77 Validity Not Before: May 11 00:00:37 2025 GMT Not After : May 18 00:00:37 2025 GMT Subject: CN=681fe8a5-e66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:31:80:00:dc:07:9a:60:1b:3d:a7:0e:8d: cf:61:ac:25:81:1d:66:be:e0:78:2d:be:5f:b7:8b: 1b:43:d8:43:1f:35:d8:8f:c6:d3:6d:a6:28:97:60: 3e:69:61:35:ba:b4:99:bc:bb:f3:f0:10:3c:ce:2b: 69:21:7b:6f:7c:e3:d1:cf:94:06:c1:dc:bb:6f:30: 01:98:ae:a0:bd:e1:96:23:3c:02:e6:41:56:cd:0c: 93:43:95:4a:d7:a8:ee:6f:fc:fa:08:b4:2c:eb:37: 5d:c4:71:f4:e2:ac:9a:6d:82:3f:bd:d1:95:0c:98: 0e:6e:19:d4:b7:74:ee:bd:4e:20:95:6c:4a:45:36: 5b:ee:84:25:f6:83:fe:92:49:23:f6:70:b2:1a:28: 9d:12:52:3a:ef:3b:5b:98:94:6a:57:38:25:e0:7f: f7:f5:f1:d1:c5:bc:55:18:93:3c:de:89:41:08:35: 47:0b:57:11:e0:fa:df:2e:da:69:97:c5:6f:ae:53: aa:eb:e6:f5:39:50:e7:23:bd:37:4b:33:59:7a:e2: 2b:f6:aa:55:0e:56:57:5f:24:19:f8:ee:9e:a4:6f: 1d:3e:4f:60:6d:63:1e:a4:e4:1f:9e:d3:d4:4f:4e: 04:70:c4:a4:b0:cd:05:18:dc:b4:39:1c:78:82:15: 8f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:96:EE:5C:EF:6C:C5:F6:8B:44:95:F0:DD:00:68:EF:03:83:F4:12 X509v3 Authority Key Identifier: keyid:C5:34:23:28:8F:9F:FC:10:04:84:2B:CC:40:A5:19:23:89:34:AA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTQjKI-f_BAEhCvMQKUZI4k0qnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918767B/F87FAD926AC611EC9EF5F262C4F9AE02/xTQjKI-f_BAEhCvMQKUZI4k0qnc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:d4:6e:09:e3:05:fe:9a:07:3a:99:85:6f:54:94:b9:56:3e: 53:2e:4b:8a:ce:02:52:8b:12:1d:91:25:4e:c8:f1:25:2b:24: a6:91:4d:40:cc:6f:a7:8d:a1:20:13:1c:aa:ec:da:4d:07:d2: ae:bf:80:22:3e:c7:d0:fb:f1:fc:f9:1f:40:96:37:de:83:35: fb:4b:13:2e:7e:85:44:ab:76:4a:ce:c6:8a:45:b5:0d:29:19: 72:d3:88:10:e1:69:f7:78:97:4b:cf:22:d0:a2:7c:f2:89:c2: 8d:1f:37:d4:6c:69:40:58:0a:b5:fc:de:37:2c:6c:be:76:53: ea:5c:69:8f:4d:63:28:b9:73:f6:74:b2:47:bd:ea:76:1c:5b: fa:c8:07:2a:13:f8:c8:43:92:cd:d3:b8:cc:46:ac:c7:c7:82: 1f:fc:9a:85:65:b4:f1:46:2e:72:c7:f1:3e:65:51:7b:c8:8f: 6e:ee:7e:23:29:6a:95:ab:b4:44:6d:d4:74:c1:93:20:43:6e: 3e:ea:48:20:d6:ac:c3:91:88:e7:5e:50:4b:90:ea:f3:16:5e: 57:1c:62:c7:78:c6:12:a3:20:45:36:14:18:58:a6:87:e8:ea: 48:f2:1e:1f:1f:52:47:d4:c8:6b:48:4f:a2:9e:0a:2c:cd:a7: f2:6a:84:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2N0IxMTAvBgNVBAUTKEM1MzQyMzI4OEY5RkZDMTAwNDg0MkJDQzQwQTUxOTIz ODkzNEFBNzcwHhcNMjUwNTExMDAwMDM3WhcNMjUwNTE4MDAwMDM3WjAYMRYwFAYD VQQDEw02ODFmZThhNS1lNjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNAxgADcB5pgGz2nDo3PYawlgR1mvuB4Lb5ft4sbQ9hDHzXYj8bTbaYol2A+ aWE1urSZvLvz8BA8zitpIXtvfOPRz5QGwdy7bzABmK6gveGWIzwC5kFWzQyTQ5VK 16jub/z6CLQs6zddxHH04qyabYI/vdGVDJgObhnUt3TuvU4glWxKRTZb7oQl9oP+ kkkj9nCyGiidElI67ztbmJRqVzgl4H/39fHRxbxVGJM83olBCDVHC1cR4PrfLtpp l8VvrlOq6+b1OVDnI703SzNZeuIr9qpVDlZXXyQZ+O6epG8dPk9gbWMepOQfntPU T04EcMSksM0FGNy0ORx4ghWPZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+W7lzv bMX2i0SV8N0AaO8Dg/QSMB8GA1UdIwQYMBaAFMU0IyiPn/wQBIQrzEClGSOJNKp3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY3Qi9GODdGQUQ5MjZB QzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9CQUVoQ3ZNUUtVWkk0azBx bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hUUWpLSS1mX0JBRWhDdk1RS1VaSTRrMHFuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY3Qi9GODdGQUQ5MjZBQzYxMUVDOUVGNUYyNjJDNEY5QUUwMi94VFFqS0ktZl9C QUVoQ3ZNUUtVWkk0azBxbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB41G4J4wX+mgc6mYVvVJS5Vj5TLkuKzgJSixIdkSVOyPElKySmkU1A zG+njaEgExyq7NpNB9Kuv4AiPsfQ+/H8+R9AljfegzX7SxMufoVEq3ZKzsaKRbUN KRly04gQ4Wn3eJdLzyLQonzyicKNHzfUbGlAWAq1/N43LGy+dlPqXGmPTWMouXP2 dLJHvep2HFv6yAcqE/jIQ5LN07jMRqzHx4If/JqFZbTxRi5yx/E+ZVF7yI9u7n4j KWqVq7REbdR0wZMgQ24+6kgg1qzDkYjnXlBLkOrzFl5XHGLHeMYSoyBFNhQYWKaH 6OpI8h4fH1JH1MhrSE+ingoszafyaoQa -----END CERTIFICATE-----Generated at Sun May 11 22:19:33 2025 by rpki-client