$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json) Hash identifier: lTfYQk7EvzBqWxTH0gaz3wzik4SjQYi/jtR92CJI1M8= Subject key identifier: 8E:75:08:A7:C2:27:72:9A:42:54:B0:26:C3:74:70:9D:C8:6D:D0:6D Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Certificate serial: 2B9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft Manifest number: 2B9F Signing time: Wed 14 May 2025 15:35:39 +0000 Manifest this update: Wed 14 May 2025 15:35:39 +0000 Manifest next update: Wed 21 May 2025 15:35:39 +0000 Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: aXpgZpe6q2T7Jj60Zu1rMWTvpTjZoVMt4EIjJAvEjBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11167 (0x2b9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Validity Not Before: May 14 15:35:39 2025 GMT Not After : May 21 15:35:39 2025 GMT Subject: CN=6824b84b-d69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:17:52:2a:97:c6:45:6b:f2:10:77:a4:a2: 29:c5:a8:39:fd:83:e8:7a:c8:23:a3:63:9b:2d:16: 18:47:62:09:a5:cf:9e:10:fd:9d:0e:9d:f4:a8:0b: 71:9c:f8:4a:ad:83:ec:eb:86:fc:b8:fa:ff:07:38: 1c:de:e1:e5:fa:6f:e4:90:3d:8d:94:3e:43:3a:37: bb:a4:6e:5e:24:9e:3f:d0:45:c3:7f:a3:5c:31:88: d3:cd:51:b8:10:d8:0c:9e:58:13:8e:3c:63:76:d4: 64:33:22:ae:0a:9e:bf:53:9e:04:20:d5:e5:2d:c8: 1f:30:6b:20:30:06:46:a8:88:a3:a9:92:50:df:d5: e5:c9:d3:e6:c1:3f:da:99:ca:c8:f3:3d:f4:c3:c4: 8c:a5:dc:02:2b:fd:3e:c2:a3:ad:6c:82:ef:1a:27: 1c:1d:2f:73:b5:ef:0f:fa:7a:2c:3b:c5:6d:ff:9e: 0b:6c:1f:c8:6f:8d:c6:00:75:91:d9:e7:cd:34:17: 85:9e:52:0a:f2:7f:b9:16:50:9d:58:79:8a:26:bd: 89:0f:1b:14:8c:e4:4b:a6:c2:b1:b9:33:92:e4:c3: 76:9e:23:14:3a:aa:6b:f4:86:7e:d4:d7:8f:e3:bd: 5c:37:fe:65:5a:fc:c7:5f:dd:b7:1f:1e:a2:d7:d7: 3f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:75:08:A7:C2:27:72:9A:42:54:B0:26:C3:74:70:9D:C8:6D:D0:6D X509v3 Authority Key Identifier: keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:12:a9:cf:0c:43:85:bd:42:dd:ed:57:01:62:1d:9c:b7:ce: 06:5a:fa:e4:8c:46:6e:1b:18:39:32:e6:80:f3:71:4d:5f:7e: 5b:e2:d4:0b:9a:e3:ff:02:c2:fd:17:b8:95:8a:44:23:71:8f: 16:6a:e8:e4:e4:4e:41:f0:6b:09:52:44:15:42:bc:c3:18:66: cd:71:d4:d3:21:0b:a6:d9:03:97:64:5f:a6:4c:65:fb:af:8c: 7e:ba:b7:fb:33:3b:9b:a2:69:74:91:34:9f:9a:09:44:7f:ed: 03:2b:7d:9d:c3:92:65:d1:3c:34:9a:42:ad:29:c5:0a:41:4c: bb:a3:dc:58:07:71:b8:09:09:4e:ea:3d:67:a7:a0:97:f2:0c: b2:b2:a3:ad:4a:ff:54:1e:62:03:4f:cc:e4:91:26:e3:14:ca: 60:ae:12:d2:09:aa:13:03:6c:1f:06:e3:70:10:6e:fa:a7:bb: f9:80:d3:3a:39:64:df:a4:c6:0b:2e:61:94:84:89:ba:ad:c2: 7f:d7:d5:5f:92:47:bf:df:1f:a4:da:39:98:1e:db:91:b7:b3: 1b:01:5c:c1:0b:b6:6d:85:2a:ef:b1:49:8f:f0:03:ec:81:b2: aa:9b:44:da:57:14:7a:55:b7:ce:4a:ec:82:4e:6e:1e:f1:57: f1:4a:a5:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEM2NTU4RjhGQzBEOEQwNDI5RUQ3ODdFQUY5NjdCRUZD N0EwOURDMTMwHhcNMjUwNTE0MTUzNTM5WhcNMjUwNTIxMTUzNTM5WjAYMRYwFAYD VQQDEw02ODI0Yjg0Yi1kNjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGcXUiqXxkVr8hB3pKIpxag5/YPoesgjo2ObLRYYR2IJpc+eEP2dDp30qAtx nPhKrYPs64b8uPr/Bzgc3uHl+m/kkD2NlD5DOje7pG5eJJ4/0EXDf6NcMYjTzVG4 ENgMnlgTjjxjdtRkMyKuCp6/U54EINXlLcgfMGsgMAZGqIijqZJQ39XlydPmwT/a mcrI8z30w8SMpdwCK/0+wqOtbILvGiccHS9zte8P+nosO8Vt/54LbB/Ib43GAHWR 2efNNBeFnlIK8n+5FlCdWHmKJr2JDxsUjORLpsKxuTOS5MN2niMUOqpr9IZ+1NeP 471cN/5lWvzHX923Hx6i19c/8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI51CKfC J3KaQlSwJsN0cJ3IbdBtMB8GA1UdIwQYMBaAFMZVj4/A2NBCnteH6vlnvvx6CdwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC80ODQ2MDRCMkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBFS2UxNGZxLVdlLV9Ib0oz Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsV1BqOERZMEVLZTE0ZnEtV2UtX0hvSjNCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC80ODQ2MDRCMkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBF S2UxNGZxLVdlLV9Ib0ozQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxEqnPDEOFvULd7VcBYh2ct84GWvrkjEZuGxg5MuaA83FNX35b4tQL muP/AsL9F7iVikQjcY8Waujk5E5B8GsJUkQVQrzDGGbNcdTTIQum2QOXZF+mTGX7 r4x+urf7Mzuboml0kTSfmglEf+0DK32dw5Jl0Tw0mkKtKcUKQUy7o9xYB3G4CQlO 6j1np6CX8gyysqOtSv9UHmIDT8zkkSbjFMpgrhLSCaoTA2wfBuNwEG76p7v5gNM6 OWTfpMYLLmGUhIm6rcJ/19Vfkke/3x+k2jmYHtuRt7MbAVzBC7ZthSrvsUmP8APs gbKqm0TaVxR6VbfOSuyCTm4e8VfxSqWp -----END CERTIFICATE-----Generated at Thu May 15 19:19:03 2025 by rpki-client