$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft File: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft (raw, json) Hash identifier: drDJ5TiU3MQbbRqGfxk8a4JgTVD5n2oHkEYWadfYvfE= Subject key identifier: DF:AA:2C:DE:36:F9:7C:93:90:C8:5D:68:50:B2:E5:EE:D1:86:B0:C8 Authority key identifier: C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24 Certificate issuer: /CN=A913EF9C/serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft Manifest number: 3F Signing time: Thu 15 May 2025 06:47:23 +0000 Manifest this update: Thu 15 May 2025 06:47:23 +0000 Manifest next update: Thu 22 May 2025 06:47:23 +0000 Files and hashes: 1: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl (hash: nMal63RCi0aAP4dB+rlz4Tg2vB0nKwTcocLPeRPEjf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EF9C, serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524 Validity Not Before: May 15 06:47:23 2025 GMT Not After : May 22 06:47:23 2025 GMT Subject: CN=68258dfb-4535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:db:1f:49:0e:8f:44:98:cc:d8:7f:21:c1: 54:30:7d:9c:31:eb:6e:61:f4:d1:10:82:4a:f2:3c: 29:c9:34:7b:4e:85:14:6d:3b:09:c1:cd:f7:4a:98: ad:5d:24:0b:21:b5:fb:6c:6a:f6:10:a9:15:44:d1: b9:c6:40:12:04:e7:f8:45:1a:4b:0d:d9:27:0f:7e: 27:c2:15:04:10:e2:67:6c:1b:af:a1:65:65:45:8e: 6c:18:cd:04:6c:cb:55:51:8b:aa:52:7e:bc:be:be: a5:ea:1b:0c:38:75:d8:51:71:c8:50:fc:31:86:45: 60:49:a0:7c:5c:b8:5f:57:61:a6:e2:eb:3e:6f:d2: 9d:cc:55:fd:d3:98:a4:2e:a4:29:1c:62:0a:95:7e: 4a:77:79:11:e1:2f:e6:c8:06:b1:c6:82:af:ea:c6: 9a:17:0e:56:e8:bf:4f:4c:33:ba:47:1c:d2:4f:bc: 8b:93:7e:e7:cd:c7:ea:85:07:67:5e:6c:60:3d:e2: b6:4b:37:d5:61:9e:30:ca:85:da:46:06:19:43:2b: 97:77:63:9e:7a:9f:88:25:76:35:84:97:20:e3:55: d8:30:f4:6e:fb:2d:22:fc:15:24:fc:c1:1a:00:68: 8e:f4:33:30:70:91:ca:c0:09:7d:e4:ec:37:3c:87: cd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AA:2C:DE:36:F9:7C:93:90:C8:5D:68:50:B2:E5:EE:D1:86:B0:C8 X509v3 Authority Key Identifier: keyid:C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:a4:69:01:69:3f:1e:97:b3:5f:97:f5:1c:9d:d4:73:58:b8: 22:e7:a2:06:e0:0c:2d:c4:1e:f9:d3:49:23:52:e8:41:3b:78: 8d:e7:2f:56:48:f0:14:fe:f8:fc:b9:56:bc:a3:ae:07:9f:52: 2a:8c:87:87:fe:4e:44:53:5e:d3:02:be:65:9f:c8:ac:ad:ba: d0:21:06:8f:2f:de:54:4a:be:82:05:81:2d:ba:ae:81:93:c5: b4:0c:b7:6a:b1:e3:17:8d:84:89:70:fa:97:fa:6f:01:96:f8: cb:2c:69:76:2f:89:d1:e5:76:40:20:cc:2b:6b:fb:76:62:bb: b9:f1:e7:8c:c5:ce:ec:f4:7e:67:58:3c:09:9f:72:52:b6:99: fa:7e:ba:07:15:e1:39:94:61:7f:3a:4f:98:48:9a:0e:0b:37: 55:5b:2d:0e:ac:b3:74:64:01:e6:1a:0f:9e:55:e6:97:09:bd: f5:fd:0a:e0:a6:23:e8:15:ea:06:9a:23:f7:b6:81:37:ca:7a: ac:01:a9:a1:77:95:83:3b:86:0b:ac:15:a6:8b:f8:37:f4:65: 39:1d:1e:7d:41:8a:f2:dc:61:21:6d:c4:fb:64:b3:c0:d0:92: 46:01:e1:54:fe:ae:f0:eb:ec:90:fe:e9:0d:34:df:89:20:da: bc:0c:9a:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RUY5QzExMC8GA1UEBRMoQzQ0MzlEQzAxRTIwRDE2Q0M1QTBFRjk4MTdENDFCRjYy ODk3NjUyNDAeFw0yNTA1MTUwNjQ3MjNaFw0yNTA1MjIwNjQ3MjNaMBgxFjAUBgNV BAMTDTY4MjU4ZGZiLTQ1MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpvNsfSQ6PRJjM2H8hwVQwfZwx625h9NEQgkryPCnJNHtOhRRtOwnBzfdKmK1d JAshtftsavYQqRVE0bnGQBIE5/hFGksN2ScPfifCFQQQ4mdsG6+hZWVFjmwYzQRs y1VRi6pSfry+vqXqGww4ddhRcchQ/DGGRWBJoHxcuF9XYabi6z5v0p3MVf3TmKQu pCkcYgqVfkp3eRHhL+bIBrHGgq/qxpoXDlbov09MM7pHHNJPvIuTfufNx+qFB2de bGA94rZLN9VhnjDKhdpGBhlDK5d3Y556n4gldjWElyDjVdgw9G77LSL8FST8wRoA aI70MzBwkcrACX3k7Dc8h81XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU36os3jb5 fJOQyF1oULLl7tGGsMgwHwYDVR0jBBgwFoAUxEOdwB4g0WzFoO+YF9Qb9iiXZSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFRjlDL0NEMkNBOEY4RDNF QTExRUZBNjZDNDc2MEM0RjlBRTAyL3hFT2R3QjRnMFd6Rm9PLVlGOVFiOWlpWFpT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEVPZHdCNGcwV3pGb08tWUY5UWI5aWlYWlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF RjlDL0NEMkNBOEY4RDNFQTExRUZBNjZDNDc2MEM0RjlBRTAyL3hFT2R3QjRnMFd6 Rm9PLVlGOVFiOWlpWFpTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADakaQFpPx6Xs1+X9Ryd1HNYuCLnogbgDC3EHvnTSSNS6EE7eI3nL1ZI 8BT++Py5VryjrgefUiqMh4f+TkRTXtMCvmWfyKytutAhBo8v3lRKvoIFgS26roGT xbQMt2qx4xeNhIlw+pf6bwGW+MssaXYvidHldkAgzCtr+3Ziu7nx54zFzuz0fmdY PAmfclK2mfp+ugcV4TmUYX86T5hImg4LN1VbLQ6ss3RkAeYaD55V5pcJvfX9CuCm I+gV6gaaI/e2gTfKeqwBqaF3lYM7hgusFaaL+Df0ZTkdHn1BivLcYSFtxPtks8DQ kkYB4VT+rvDr7JD+6Q0034kg2rwMmkw= -----END CERTIFICATE-----Generated at Fri May 16 08:54:18 2025 by rpki-client