$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft File: XaSteg0ZJFUV5aLYSgxnRwCkP80.mft (raw, json) Hash identifier: hMOfzDE46FhRvPJzkIPrI6ElNzD1BnYOTa4pnAfBexE= Subject key identifier: C5:D1:2F:41:21:62:EB:5A:A6:EA:EC:4C:DC:D8:62:CB:03:21:91:77 Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD Certificate issuer: /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft Manifest number: 0149 Signing time: Sun 11 May 2025 03:09:19 +0000 Manifest this update: Sun 11 May 2025 03:09:18 +0000 Manifest next update: Sun 18 May 2025 03:09:18 +0000 Files and hashes: 1: XaSteg0ZJFUV5aLYSgxnRwCkP80.crl (hash: rJRuIq/BJPNOFbdGEc02ASYOFGzjn1NYEhXr5G1k/YM=) 2: 9062BB863C3F11EE8DA7781AC4F9AE02.roa (hash: 40lvaLr1gKHAad8xOy7yfS2hh56AhlCYkcilzIpf0Sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192BCF, serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD Validity Not Before: May 11 03:09:18 2025 GMT Not After : May 18 03:09:18 2025 GMT Subject: CN=682014de-2c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2e:f5:16:3d:5d:86:b1:bc:8c:d2:56:ef:9e: 74:a8:d9:08:a7:b6:18:00:ba:c9:cf:38:8a:12:74: 8e:f2:78:44:c0:dc:7e:3d:cd:96:51:66:6c:14:a7: b1:3d:45:51:cc:2c:ed:17:4e:ec:ef:f3:ff:74:5e: dd:ef:03:10:6a:9b:05:e3:d5:9b:e2:f0:2d:6c:44: 85:1e:a6:61:7b:2e:4e:7a:a4:b5:3e:17:f1:17:98: fe:8b:c0:c6:c2:6d:b3:95:5d:22:7d:fd:c0:90:88: e0:48:d1:c3:fd:87:cc:be:16:78:63:44:7f:e4:ef: 12:1f:35:47:41:63:a8:97:a2:fc:94:2c:89:eb:87: 2c:4c:0f:0e:ed:81:0a:f1:a4:30:78:9e:e9:3a:1a: 5c:4f:c3:da:e7:f8:ac:6f:ab:f9:89:fe:0d:57:b0: 73:5f:b5:28:03:3f:69:21:a0:13:a5:e7:59:d4:2b: de:4c:e2:ed:bd:b6:14:a0:ea:ce:43:24:35:c5:56: 64:26:6d:14:f1:8a:da:ee:42:e3:a6:59:c0:e1:fe: b6:69:28:1f:a0:a7:37:dc:72:02:3c:60:bd:31:96: 6b:92:ea:2a:c3:2b:bf:60:e7:93:b1:34:88:26:e5: 08:43:bd:ff:13:20:71:e3:63:bb:36:20:91:83:d9: bd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D1:2F:41:21:62:EB:5A:A6:EA:EC:4C:DC:D8:62:CB:03:21:91:77 X509v3 Authority Key Identifier: keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:69:dc:3d:da:2c:1f:2d:62:1a:be:85:54:0f:07:ca:88:51: 56:24:a4:1b:ab:74:dd:21:77:25:92:b0:e1:38:3e:85:16:06: 16:f8:56:9f:01:32:74:c0:44:fb:eb:ef:f2:ed:4c:47:9e:ee: 71:71:c5:19:22:a5:89:e8:5b:c7:80:82:05:9a:1b:93:14:6f: 5a:34:0d:66:88:dc:94:3e:b6:29:78:db:00:f0:6b:27:27:6a: e7:f2:d9:97:ac:c0:70:c5:3b:2f:bb:82:e2:b7:1e:39:7c:35: 47:a8:cf:3b:9e:cc:7e:c0:4e:e8:fd:a8:36:b7:79:45:30:13: c2:c7:a4:40:91:dd:ed:e8:db:38:8c:f2:09:2b:e0:64:91:36: cd:3d:65:68:a0:fd:40:a8:6e:95:52:54:d8:b2:55:ab:54:40: 83:55:43:6b:32:87:9f:0d:ab:15:48:c1:fe:00:04:45:f0:65: 66:87:15:fa:77:46:ea:75:19:77:7f:41:c7:84:b5:4b:34:65: cd:3c:c7:72:cb:04:29:c0:b5:e3:fe:98:0e:7a:4f:63:4e:c4: c9:97:bd:09:f5:73:ab:26:26:87:ab:29:45:58:90:d0:52:60: 87:17:f0:12:93:50:9b:40:27:79:44:a0:ad:b9:e1:e8:c1:63: e6:56:ab:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTJCQ0YxMTAvBgNVBAUTKDVEQTRBRDdBMEQxOTI0NTUxNUU1QTJEODRBMEM2NzQ3 MDBBNDNGQ0QwHhcNMjUwNTExMDMwOTE4WhcNMjUwNTE4MDMwOTE4WjAYMRYwFAYD VQQDEw02ODIwMTRkZS0yYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi71Fj1dhrG8jNJW7550qNkIp7YYALrJzziKEnSO8nhEwNx+Pc2WUWZsFKex PUVRzCztF07s7/P/dF7d7wMQapsF49Wb4vAtbESFHqZhey5OeqS1PhfxF5j+i8DG wm2zlV0iff3AkIjgSNHD/YfMvhZ4Y0R/5O8SHzVHQWOol6L8lCyJ64csTA8O7YEK 8aQweJ7pOhpcT8Pa5/isb6v5if4NV7BzX7UoAz9pIaATpedZ1CveTOLtvbYUoOrO QyQ1xVZkJm0U8Yra7kLjplnA4f62aSgfoKc33HICPGC9MZZrkuoqwyu/YOeTsTSI JuUIQ73/EyBx42O7NiCRg9m9KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXRL0Eh YutapursTNzYYssDIZF3MB8GA1UdIwQYMBaAFF2krXoNGSRVFeWi2EoMZ0cApD/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkJDRi8zMDUyQ0NBNjNC NEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpGVVY1YUxZU2d4blJ3Q2tQ ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hhU3RlZzBaSkZVVjVhTFlTZ3huUndDa1A4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MkJDRi8zMDUyQ0NBNjNCNEQxMUVFOUUxQjA3NzJDNEY5QUUwMi9YYVN0ZWcwWkpG VVY1YUxZU2d4blJ3Q2tQODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVadw92iwfLWIavoVUDwfKiFFWJKQbq3TdIXclkrDhOD6FFgYW+Faf ATJ0wET76+/y7UxHnu5xccUZIqWJ6FvHgIIFmhuTFG9aNA1miNyUPrYpeNsA8Gsn J2rn8tmXrMBwxTsvu4Litx45fDVHqM87nsx+wE7o/ag2t3lFMBPCx6RAkd3t6Ns4 jPIJK+BkkTbNPWVooP1AqG6VUlTYslWrVECDVUNrMoefDasVSMH+AARF8GVmhxX6 d0bqdRl3f0HHhLVLNGXNPMdyywQpwLXj/pgOek9jTsTJl70J9XOrJiaHqylFWJDQ UmCHF/ASk1CbQCd5RKCtueHowWPmVquA -----END CERTIFICATE-----Generated at Mon May 12 18:18:59 2025 by rpki-client