$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json) Hash identifier: EjaAX+wuhraJEebn9y1hecj/AybcYDDEfsqOBTiJGNQ= Subject key identifier: 0F:20:88:FA:DA:B4:39:BF:C8:01:11:B4:8C:2D:AA:F2:E1:0F:1B:7D Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Certificate serial: 1BC2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft Manifest number: 1BC0 Signing time: Sat 10 May 2025 16:09:32 +0000 Manifest this update: Sat 10 May 2025 16:09:32 +0000 Manifest next update: Sat 17 May 2025 16:09:32 +0000 Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: 0EfWVF0uJcHARvBGzjWr0AomOoLD4ECRutrnZ14Twis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7106 (0x1bc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Validity Not Before: May 10 16:09:32 2025 GMT Not After : May 17 16:09:32 2025 GMT Subject: CN=681f7a3c-b65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:42:77:52:2f:38:30:fc:35:1b:7f:4b:50:88: 7f:8d:6c:5e:c9:53:35:d1:6d:e0:f0:53:cd:e2:0d: ec:44:0d:08:da:3b:8d:57:2a:58:23:51:3d:f5:3f: 5b:57:05:f3:64:45:d0:9a:6e:67:a1:e7:72:dd:01: 99:bb:c9:f9:45:29:9a:8c:2f:50:24:de:c8:57:bf: a5:0c:f2:04:42:a6:d3:42:43:cc:4d:05:68:ad:5e: 9d:58:d3:fe:1b:50:d5:d0:79:2a:bb:2d:57:1c:05: cd:19:4e:58:6e:0d:69:4f:d6:4b:17:26:af:17:90: 02:63:74:b1:63:f3:92:3c:a3:4c:93:28:f9:ef:76: 6c:b5:74:2b:de:aa:de:26:55:a5:c2:80:16:c1:78: 08:d7:a7:bc:c6:bc:2b:d6:cb:05:21:27:5a:bc:ee: 20:88:25:fc:88:56:e5:24:09:a6:9f:41:97:e9:e6: e0:cb:11:58:88:d9:eb:a6:6f:8e:50:db:c9:11:3b: 8b:24:b6:82:78:bd:0e:e3:a1:d3:86:a1:6d:b6:98: be:ed:7b:97:01:63:91:ac:b8:92:d4:73:86:a7:ea: 07:31:b0:48:f9:38:b9:12:04:71:40:6e:95:af:b0: b0:c1:c4:ec:f6:a8:46:67:bf:17:e4:09:37:06:5e: 2c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:20:88:FA:DA:B4:39:BF:C8:01:11:B4:8C:2D:AA:F2:E1:0F:1B:7D X509v3 Authority Key Identifier: keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:aa:91:e3:49:e3:a8:96:90:87:39:d7:17:de:05:74:e3:13: 8b:fb:78:3e:7f:fc:59:24:3c:4f:83:37:9f:f3:ae:86:05:c0: 34:20:45:5e:fd:81:a8:7f:8e:b1:a0:db:3a:5e:71:d8:a3:07: f6:7a:60:93:80:ee:e4:2f:4a:13:e7:63:e7:56:18:8c:e8:74: 06:0b:b5:e6:6d:44:71:f3:80:41:28:54:d2:52:32:5f:f4:3c: d2:43:dd:03:f5:e3:e6:4a:ff:c1:05:b1:ca:e9:6f:fb:e6:3d: 5d:41:77:ff:50:1b:b5:9a:10:ba:2c:1a:b3:c0:44:7c:5c:2d: 31:73:24:84:50:60:71:1e:97:7b:19:bc:95:60:31:f8:69:29: 41:7a:36:e0:43:d2:6e:87:8e:57:fd:db:65:53:83:2c:3a:db: 29:94:d5:c6:e5:5b:e1:f4:ad:c0:93:32:41:0b:cb:82:e5:65: fa:b9:07:cb:f7:d1:40:20:a5:5f:9f:84:c4:2c:43:74:6a:bb: ee:07:0a:e5:1d:02:8a:3e:6e:86:14:05:cf:c4:93:0b:56:8c: a5:74:cb:87:7a:2d:6a:aa:dd:0d:83:f6:94:e8:8c:01:0d:43: d0:ea:67:3b:5a:d8:51:3e:3c:fe:e5:db:41:c4:7e:b0:4e:94: 16:26:fb:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKEJGNDVENDdFN0Y4RkQxNzdENDU5MkM0MzRCQ0Y5NjJC QzBBOEM2NjkwHhcNMjUwNTEwMTYwOTMyWhcNMjUwNTE3MTYwOTMyWjAYMRYwFAYD VQQDEw02ODFmN2EzYy1iNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30J3Ui84MPw1G39LUIh/jWxeyVM10W3g8FPN4g3sRA0I2juNVypYI1E99T9b VwXzZEXQmm5noedy3QGZu8n5RSmajC9QJN7IV7+lDPIEQqbTQkPMTQVorV6dWNP+ G1DV0Hkquy1XHAXNGU5Ybg1pT9ZLFyavF5ACY3SxY/OSPKNMkyj573ZstXQr3qre JlWlwoAWwXgI16e8xrwr1ssFISdavO4giCX8iFblJAmmn0GX6ebgyxFYiNnrpm+O UNvJETuLJLaCeL0O46HThqFttpi+7XuXAWORrLiS1HOGp+oHMbBI+Ti5EgRxQG6V r7CwwcTs9qhGZ78X5Ak3Bl4smQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8giPra tDm/yAERtIwtqvLhDxt9MB8GA1UdIwQYMBaAFL9F1H5/j9F31FksQ0vPlivAqMZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8yQjBCRkQ5OEY2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBYZlVXU3hEUzgtV0s4Q294 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YwWFVmbi1QMFhmVVdTeERTOC1XSzhDb3htay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8yQjBCRkQ5OEY2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBY ZlVXU3hEUzgtV0s4Q294bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKqpHjSeOolpCHOdcX3gV04xOL+3g+f/xZJDxPgzef866GBcA0IEVe /YGof46xoNs6XnHYowf2emCTgO7kL0oT52PnVhiM6HQGC7XmbURx84BBKFTSUjJf 9DzSQ90D9ePmSv/BBbHK6W/75j1dQXf/UBu1mhC6LBqzwER8XC0xcySEUGBxHpd7 GbyVYDH4aSlBejbgQ9Juh45X/dtlU4MsOtsplNXG5Vvh9K3AkzJBC8uC5WX6uQfL 99FAIKVfn4TELEN0arvuBwrlHQKKPm6GFAXPxJMLVoyldMuHei1qqt0Ng/aU6IwB DUPQ6mc7WthRPjz+5dtBxH6wTpQWJvtK -----END CERTIFICATE-----Generated at Sun May 11 07:36:17 2025 by rpki-client