$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: mSY3/08SjHfND7N78NtgfHNNlba8MJVgY2x9Lu3nj5o= Subject key identifier: 19:78:29:66:B3:BA:C9:0D:D6:27:09:59:04:13:31:B3:74:E3:8F:DF Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: 93 Signing time: Thu 15 May 2025 05:39:56 +0000 Manifest this update: Thu 15 May 2025 05:39:55 +0000 Manifest next update: Thu 22 May 2025 05:39:55 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: YU4jx2gGZDIMyiBfaDfyqCV9sk5eraJQtPOW+IAdhNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: May 15 05:39:55 2025 GMT Not After : May 22 05:39:55 2025 GMT Subject: CN=68257e2c-2b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:1c:ac:f6:f0:ce:8b:b6:a0:5b:ca:43:41: c3:a7:08:f6:02:33:ee:17:e5:89:7e:2b:ad:db:0e: c7:f6:cd:69:7f:2e:0b:62:53:74:9e:f0:d1:1a:35: 53:7e:be:ad:f8:cc:33:1a:59:70:61:2f:37:c1:20: 5f:f6:f7:fd:3e:b3:95:45:95:33:cf:f5:0c:bd:86: bf:f8:4f:be:1a:df:5f:fa:20:46:23:95:ac:e2:eb: 19:f7:fb:48:a3:21:39:70:0b:29:78:26:73:b6:4d: f0:fc:d3:24:28:0d:a8:7d:ed:a0:5d:93:e0:1f:31: c3:e6:41:3d:71:d5:c1:0e:11:13:f4:87:ac:7f:9e: 1a:ec:58:2b:3a:e3:ec:da:0b:7a:33:e9:8d:6d:1a: f5:1d:fd:ac:22:01:47:0b:9b:cf:ae:55:1a:db:1c: be:2e:43:e0:1e:31:3c:7e:72:64:d3:c5:cd:7d:58: 63:49:75:54:65:96:06:b0:9d:b0:1a:1f:bd:87:54: 21:31:b0:ea:6a:72:dd:30:6c:5a:5e:e4:8a:73:02: da:c7:da:78:6f:5e:ef:4e:d8:4c:e2:40:89:c5:fd: 9c:72:28:d7:ae:f1:0a:c2:f6:45:90:1d:d6:a9:3d: ed:4e:be:59:49:54:c9:70:b6:6b:27:b3:36:9c:4f: 51:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:78:29:66:B3:BA:C9:0D:D6:27:09:59:04:13:31:B3:74:E3:8F:DF X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ff:79:f8:9e:d2:a5:00:09:6a:74:2c:30:e6:ed:13:68:90: 3f:a0:14:94:00:34:b7:3d:f8:6a:e8:66:08:85:62:f3:51:8d: 4d:73:e4:ca:8d:df:1b:9e:3e:57:95:0c:75:8f:63:56:05:91: 1b:87:4f:f0:bb:61:7a:99:27:5e:35:80:45:1b:dc:96:5f:b2: ae:f7:3d:56:47:09:29:68:3c:77:9e:32:56:b8:84:62:60:b9: 4b:d3:62:89:46:41:6d:5c:c8:50:10:db:e0:04:11:83:d0:e1: f8:b1:28:62:0a:b3:49:ff:06:9d:e0:e6:bb:45:b6:92:43:69: c6:ff:e1:1c:1e:32:9f:c9:90:22:7c:d4:0f:36:89:02:8a:06: 0f:23:5a:8c:8b:cf:1d:7c:a0:bd:c7:9a:e3:16:a2:87:63:d0: 62:76:30:c1:b4:b6:fe:9a:24:de:6d:04:96:5b:47:f5:3c:1e: 31:a3:a9:ec:ee:f6:eb:ea:57:71:b4:4d:24:f1:44:e5:74:7e: 57:cd:70:76:2b:9d:ff:7b:a3:82:e3:5c:bd:86:36:79:bd:66: 18:2c:73:b9:ef:e3:48:06:7c:48:2d:2a:e6:3a:06:a0:de:fa: ac:3d:c2:98:b3:6b:20:db:b1:59:bd:7d:58:81:00:f5:c2:48: ec:4c:42:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG QUE4OENEODQwHhcNMjUwNTE1MDUzOTU1WhcNMjUwNTIyMDUzOTU1WjAYMRYwFAYD VQQDEw02ODI1N2UyYy0yYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovAcrPbwzou2oFvKQ0HDpwj2AjPuF+WJfiut2w7H9s1pfy4LYlN0nvDRGjVT fr6t+MwzGllwYS83wSBf9vf9PrOVRZUzz/UMvYa/+E++Gt9f+iBGI5Ws4usZ9/tI oyE5cAspeCZztk3w/NMkKA2ofe2gXZPgHzHD5kE9cdXBDhET9Iesf54a7FgrOuPs 2gt6M+mNbRr1Hf2sIgFHC5vPrlUa2xy+LkPgHjE8fnJk08XNfVhjSXVUZZYGsJ2w Gh+9h1QhMbDqanLdMGxaXuSKcwLax9p4b17vTthM4kCJxf2ccijXrvEKwvZFkB3W qT3tTr5ZSVTJcLZrJ7M2nE9RowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBl4KWaz uskN1icJWQQTMbN044/fMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6 WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1 RkdwQU92cFZmRno2cUl6WVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj/3n4ntKlAAlqdCww5u0TaJA/oBSUADS3Pfhq6GYIhWLzUY1Nc+TK jd8bnj5XlQx1j2NWBZEbh0/wu2F6mSdeNYBFG9yWX7Ku9z1WRwkpaDx3njJWuIRi YLlL02KJRkFtXMhQENvgBBGD0OH4sShiCrNJ/wad4Oa7RbaSQ2nG/+EcHjKfyZAi fNQPNokCigYPI1qMi88dfKC9x5rjFqKHY9BidjDBtLb+miTebQSWW0f1PB4xo6ns 7vbr6ldxtE0k8UTldH5XzXB2K53/e6OC41y9hjZ5vWYYLHO57+NIBnxILSrmOgag 3vqsPcKYs2sg27FZvX1YgQD1wkjsTEJF -----END CERTIFICATE-----Generated at Thu May 15 19:10:20 2025 by rpki-client