$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft File: c0XTOFGViQaITYcWQKS-0shG0U4.mft (raw, json) Hash identifier: vMzCUqc8dmVYJ7eHeWhgtFw9+AWgLRqpCRVKC1nYmZ4= Subject key identifier: BE:58:C8:F2:11:F3:88:E8:68:E3:26:1A:A0:94:00:9D:CA:17:1D:09 Authority key identifier: 73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E Certificate issuer: /CN=A912F3B6/serialNumber=7345D33851958906884D871640A4BED2C846D14E Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft Manifest number: 98 Signing time: Tue 13 May 2025 05:31:46 +0000 Manifest this update: Tue 13 May 2025 05:31:46 +0000 Manifest next update: Tue 20 May 2025 05:31:46 +0000 Files and hashes: 1: c0XTOFGViQaITYcWQKS-0shG0U4.crl (hash: IlEurdgzxLgWBT8uDZ+c6aqbuW0Z7MWFaX+/KHDpG30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=7345D33851958906884D871640A4BED2C846D14E Validity Not Before: May 13 05:31:46 2025 GMT Not After : May 20 05:31:46 2025 GMT Subject: CN=6822d942-248c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:99:14:fa:ad:51:d6:1f:d0:51:f0:22:0f: 7d:4d:4c:e9:aa:87:fe:78:10:d9:23:de:19:ef:02: 94:52:39:8f:51:ac:30:c9:a2:42:a6:51:61:e2:cb: e8:78:55:60:56:2d:75:39:06:83:e9:61:1e:3c:28: 94:ad:00:d0:0d:ca:03:5d:10:d2:d7:76:5c:3e:20: 22:99:db:e5:c7:8c:14:3a:d0:83:2c:db:3e:dc:c6: ab:04:68:bb:3d:e5:6e:8c:35:f0:03:79:6f:fb:1d: f5:11:e2:7a:8f:6d:76:1c:ff:2b:9b:e5:7a:89:9d: af:b5:f2:77:fa:44:86:65:15:8b:02:09:21:c7:84: a2:db:63:e7:4d:41:98:f0:74:2e:7a:fb:e3:dc:9e: 04:fb:0a:2c:86:eb:cb:b6:f2:9d:f1:39:e5:85:f1: 68:29:74:3d:d4:1c:7f:5e:5d:24:51:fe:84:1c:49: 85:f8:3e:7c:0a:2a:53:b3:45:df:3c:7d:a1:e9:ae: ff:9e:f2:71:53:a5:86:2d:2e:fd:35:d0:c9:0d:c3: 4d:ea:ae:25:dd:cd:fd:89:bd:e2:56:95:29:0e:7d: f1:0f:08:a3:de:bb:aa:a6:eb:de:75:7b:84:24:fd: 01:3e:e1:5f:80:79:e9:a1:a0:53:cf:0a:9c:70:83: 1c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:58:C8:F2:11:F3:88:E8:68:E3:26:1A:A0:94:00:9D:CA:17:1D:09 X509v3 Authority Key Identifier: keyid:73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:27:42:72:35:bf:db:de:d8:3c:37:ba:00:76:85:cb:20:0d: d7:8c:b3:04:65:ed:89:78:f3:54:9e:56:06:41:e1:ad:c4:b3: e5:f4:a0:56:b4:15:99:c2:88:c3:bb:77:16:3d:71:8f:24:20: 52:62:36:72:69:7c:4e:c3:b7:07:6e:2c:6a:ac:2b:e5:86:81: 62:ee:9d:ef:21:51:68:b0:34:e2:1a:7f:56:c6:9f:c0:a2:e9: 06:27:c0:e8:4a:b6:76:1e:b3:86:97:9f:a8:e0:0e:88:d2:9b: 03:87:0e:16:bc:79:1e:ad:71:ec:35:03:e3:55:33:63:1d:53: a6:f9:f9:bc:92:85:f8:aa:ff:31:cd:60:d9:17:9b:14:d2:f5: b6:88:7f:e4:21:23:2e:c5:dd:9f:99:9a:44:d2:d9:dc:db:dc: 01:6b:ed:df:cd:2a:15:df:34:6f:55:ab:2c:e2:0d:33:6a:94: de:36:34:3d:9a:66:31:22:c0:1c:8b:c0:01:a4:cb:73:02:59: 1f:c7:5a:b7:75:64:fd:cd:dd:39:1f:26:49:b8:b3:ef:87:ee: 8e:ae:ce:b6:2d:23:58:15:20:d6:d9:0a:98:5a:b7:02:f0:91: 40:5d:ea:ae:85:ce:f7:23:eb:c1:d4:7d:d2:bf:43:d9:1e:7a: 6a:33:5b:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDczNDVEMzM4NTE5NTg5MDY4ODREODcxNjQwQTRCRUQy Qzg0NkQxNEUwHhcNMjUwNTEzMDUzMTQ2WhcNMjUwNTIwMDUzMTQ2WjAYMRYwFAYD VQQDEw02ODIyZDk0Mi0yNDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQOZFPqtUdYf0FHwIg99TUzpqof+eBDZI94Z7wKUUjmPUawwyaJCplFh4svo eFVgVi11OQaD6WEePCiUrQDQDcoDXRDS13ZcPiAimdvlx4wUOtCDLNs+3MarBGi7 PeVujDXwA3lv+x31EeJ6j212HP8rm+V6iZ2vtfJ3+kSGZRWLAgkhx4Si22PnTUGY 8HQuevvj3J4E+woshuvLtvKd8TnlhfFoKXQ91Bx/Xl0kUf6EHEmF+D58CipTs0Xf PH2h6a7/nvJxU6WGLS79NdDJDcNN6q4l3c39ib3iVpUpDn3xDwij3ruqpuvedXuE JP0BPuFfgHnpoaBTzwqccIMcBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5YyPIR 84joaOMmGqCUAJ3KFx0JMB8GA1UdIwQYMBaAFHNF0zhRlYkGiE2HFkCkvtLIRtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81OUM0QUQ0QTQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlRYUlUWWNXUUtTLTBzaEcw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwWFRPRkdWaVFhSVRZY1dRS1MtMHNoRzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81OUM0QUQ0QTQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlR YUlUWWNXUUtTLTBzaEcwVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCJ0JyNb/b3tg8N7oAdoXLIA3XjLMEZe2JePNUnlYGQeGtxLPl9KBW tBWZwojDu3cWPXGPJCBSYjZyaXxOw7cHbixqrCvlhoFi7p3vIVFosDTiGn9Wxp/A oukGJ8DoSrZ2HrOGl5+o4A6I0psDhw4WvHkerXHsNQPjVTNjHVOm+fm8koX4qv8x zWDZF5sU0vW2iH/kISMuxd2fmZpE0tnc29wBa+3fzSoV3zRvVass4g0zapTeNjQ9 mmYxIsAci8ABpMtzAlkfx1q3dWT9zd05HyZJuLPvh+6Ors62LSNYFSDW2QqYWrcC 8JFAXequhc73I+vB1H3Sv0PZHnpqM1tI -----END CERTIFICATE-----Generated at Wed May 14 06:19:56 2025 by rpki-client