$ rpki-client -vvf rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft File: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft (raw, json) Hash identifier: 3TWAOxH0GOemQHJKyK7OwscVFjvj/yD0TB1xWs1ePn0= Subject key identifier: F9:28:C3:15:7A:9D:B7:E2:84:11:B5:AD:87:B8:72:0F:6D:FC:F8:25 Authority key identifier: C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 Certificate issuer: /CN=A9148E62/serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Certificate serial: 029D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft Manifest number: 0291 Signing time: Thu 15 May 2025 01:35:41 +0000 Manifest this update: Thu 15 May 2025 01:35:40 +0000 Manifest next update: Thu 22 May 2025 01:35:40 +0000 Files and hashes: 1: xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl (hash: rJa2ZhUxtsbLUQbiDv/IoctOAIvTYCAX/5CC5C7uJok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148E62, serialNumber=C63056041C0F90B92B2B87DBFFA97E3E9DA028D4 Validity Not Before: May 15 01:35:40 2025 GMT Not After : May 22 01:35:40 2025 GMT Subject: CN=682544ec-e4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:da:ee:ea:b9:aa:1c:fd:d6:9b:42:bc:b1:b7: 6a:e1:ed:34:c1:7d:fd:e6:ea:84:75:f9:77:87:78: 22:04:4e:30:50:4e:67:ec:02:69:1e:56:12:1d:68: 89:70:05:82:89:cf:27:50:d3:f1:db:ee:2f:e2:0b: 03:0d:d7:be:01:93:dc:43:ad:d5:3d:92:df:e9:a4: a2:c0:9a:1a:42:48:12:ba:60:12:b9:e7:94:f0:fa: 6b:3b:e2:43:2d:40:47:b6:6d:f1:80:22:6c:8e:1c: 71:36:b7:3d:13:1f:ae:23:dc:2b:c9:59:68:30:55: 78:3c:a1:30:4a:5f:bd:04:8a:61:b6:d6:6b:b2:35: bb:27:54:3b:f6:02:52:ff:c6:e5:f1:fa:10:03:94: e2:9e:f5:f5:c7:34:51:c5:6d:bd:da:fb:68:02:a1: 73:0c:1c:a8:a8:d9:a1:7c:9e:69:a2:7f:e8:f9:18: 03:77:9a:13:09:56:fd:69:37:a7:5f:86:87:58:a0: a8:12:8e:39:3d:9c:ed:19:72:9e:0c:50:ad:9c:a4: f6:7e:18:e2:e3:bd:57:6c:5d:eb:42:a5:8b:6f:44: ea:a1:6f:e3:cd:e0:87:2b:74:cd:78:ff:83:7c:55: fc:59:79:83:20:c5:74:cb:60:24:65:79:84:8d:44: 86:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:28:C3:15:7A:9D:B7:E2:84:11:B5:AD:87:B8:72:0F:6D:FC:F8:25 X509v3 Authority Key Identifier: keyid:C6:30:56:04:1C:0F:90:B9:2B:2B:87:DB:FF:A9:7E:3E:9D:A0:28:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148E62/D6B9796202A211ED91216E19C4F9AE02/xjBWBBwPkLkrK4fb_6l-Pp2gKNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:0b:15:b6:10:42:53:02:3a:a6:78:2e:bb:dd:b2:e5:54:3c: 07:51:57:f7:4a:ed:c5:78:cf:b4:f7:7e:f8:36:38:7e:4f:c4: 44:1b:0d:f5:60:1b:33:8e:3d:ae:fe:40:de:ac:ce:7b:85:6e: 3f:0a:59:fb:4c:0a:d3:cb:a8:85:f7:1f:7b:b0:d0:8d:4b:c2: 52:3d:df:2e:f0:dc:95:3f:97:92:76:af:14:2a:a9:e3:10:c8: f2:6e:07:3b:b4:9c:a1:cc:e0:f4:f9:91:82:20:da:90:8b:70: ca:83:58:ac:e7:a0:e1:4d:c2:04:1c:af:c5:cb:f3:8b:af:72: 21:33:7b:06:de:aa:86:b6:db:e8:d6:20:81:f8:08:2e:ab:c6: 1e:44:0e:7e:6e:7a:3f:5d:03:e1:3e:be:25:f6:f9:ff:e8:97: 94:8a:92:1d:a1:ec:09:15:fd:75:4e:b6:07:e2:fc:81:31:6d: d0:42:c1:ca:c4:06:cf:20:4c:4e:64:2d:ad:4c:f0:b5:9c:7a: 70:e8:d7:fb:58:f8:e8:49:05:9c:f8:20:3d:7c:91:e5:a4:d2: ef:6c:47:79:67:ee:84:9f:9a:26:46:0c:89:64:c6:ee:ca:60: b3:c8:4c:42:be:e2:95:cb:c2:4f:bc:39:76:2d:f0:78:ee:53: 96:2e:fe:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFNjIxMTAvBgNVBAUTKEM2MzA1NjA0MUMwRjkwQjkyQjJCODdEQkZGQTk3RTNF OURBMDI4RDQwHhcNMjUwNTE1MDEzNTQwWhcNMjUwNTIyMDEzNTQwWjAYMRYwFAYD VQQDEw02ODI1NDRlYy1lNGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9ru6rmqHP3Wm0K8sbdq4e00wX395uqEdfl3h3giBE4wUE5n7AJpHlYSHWiJ cAWCic8nUNPx2+4v4gsDDde+AZPcQ63VPZLf6aSiwJoaQkgSumASueeU8PprO+JD LUBHtm3xgCJsjhxxNrc9Ex+uI9wryVloMFV4PKEwSl+9BIphttZrsjW7J1Q79gJS /8bl8foQA5TinvX1xzRRxW292vtoAqFzDByoqNmhfJ5pon/o+RgDd5oTCVb9aTen X4aHWKCoEo45PZztGXKeDFCtnKT2fhji471XbF3rQqWLb0TqoW/jzeCHK3TNeP+D fFX8WXmDIMV0y2AkZXmEjUSGWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkowxV6 nbfihBG1rYe4cg9t/PglMB8GA1UdIwQYMBaAFMYwVgQcD5C5KyuH2/+pfj6doCjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEU2Mi9ENkI5Nzk2MjAy QTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtMa3JLNGZiXzZsLVBwMmdL TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hqQldCQndQa0xrcks0ZmJfNmwtUHAyZ0tOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEU2Mi9ENkI5Nzk2MjAyQTIxMUVEOTEyMTZFMTlDNEY5QUUwMi94akJXQkJ3UGtM a3JLNGZiXzZsLVBwMmdLTlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6CxW2EEJTAjqmeC673bLlVDwHUVf3Su3FeM+09374Njh+T8REGw31 YBszjj2u/kDerM57hW4/Cln7TArTy6iF9x97sNCNS8JSPd8u8NyVP5eSdq8UKqnj EMjybgc7tJyhzOD0+ZGCINqQi3DKg1is56DhTcIEHK/Fy/OLr3IhM3sG3qqGttvo 1iCB+Aguq8YeRA5+bno/XQPhPr4l9vn/6JeUipIdoewJFf11TrYH4vyBMW3QQsHK xAbPIExOZC2tTPC1nHpw6Nf7WPjoSQWc+CA9fJHlpNLvbEd5Z+6En5omRgyJZMbu ymCzyExCvuKVy8JPvDl2LfB47lOWLv5V -----END CERTIFICATE-----Generated at Fri May 16 21:39:09 2025 by rpki-client