$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: BxNaCoTBmyTNI6FVzMOJyvry+WAKnw9d4ipCJnb1eko= Subject key identifier: D8:40:1B:C5:E4:BE:32:60:0D:E4:E5:0E:01:1A:81:3B:F2:E9:19:22 Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 347C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 347C Signing time: Fri 16 May 2025 15:19:49 +0000 Manifest this update: Fri 16 May 2025 15:19:49 +0000 Manifest next update: Fri 23 May 2025 15:19:49 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: JCoXULhRk7g799pBq3XnqegK3Vo9lxwvnyDLcC0GNpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13436 (0x347c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: May 16 15:19:49 2025 GMT Not After : May 23 15:19:49 2025 GMT Subject: CN=68275795-fc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e3:46:2c:43:8a:c3:f1:04:b9:82:00:6e:42: a5:a0:34:2b:56:72:ec:44:30:08:e4:54:2e:b2:13: 19:3a:78:1f:b5:8f:82:a4:1b:08:2f:9c:d1:1c:42: 2d:40:d1:7b:c6:9e:12:8e:ca:b9:96:97:6a:73:e6: d9:d8:68:46:47:ce:e1:63:65:c1:c9:bc:45:19:3d: 7f:b2:e8:f2:5a:88:f1:8a:eb:e3:c9:c2:39:e8:56: b2:df:4f:0b:9a:0c:fe:d5:3c:58:93:6c:b2:45:4b: 4d:c1:bc:e8:df:7c:25:31:f4:96:03:2a:5c:38:4d: d1:17:5c:be:cc:49:7e:5b:de:88:82:36:88:be:8b: b1:94:46:f5:a2:ec:da:f3:d1:74:f5:86:6b:6a:dc: 4c:f8:92:c8:4f:77:8d:7b:07:76:3e:4d:2e:4f:52: 7b:ca:9b:18:7f:76:a8:df:78:cd:47:27:ad:6e:dd: e5:ce:b2:7c:69:02:94:11:ae:9c:75:d5:cb:77:f7: 01:d5:60:41:10:6e:38:11:8b:12:1d:4a:07:f7:c2: 04:6a:30:41:2b:83:87:55:98:af:7d:8d:55:12:f8: 09:77:1e:bf:e6:5f:b8:9a:8c:9c:ce:fa:2a:52:cd: b2:c3:60:57:31:79:f1:eb:f1:eb:c5:46:59:0b:c7: e1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:40:1B:C5:E4:BE:32:60:0D:E4:E5:0E:01:1A:81:3B:F2:E9:19:22 X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a6:c3:12:8b:e6:da:10:56:4a:84:1a:30:45:81:47:fc:0e: ec:4c:bd:e0:46:39:a6:cd:a6:78:ea:b4:0a:51:13:9f:7e:81: ef:a4:0c:88:74:d2:15:6e:45:72:c6:4c:19:79:5e:d7:40:d9: a2:17:d6:db:ae:3f:0a:77:af:38:e3:8a:7f:cd:eb:dd:b8:92: 21:27:59:a3:16:89:6f:8e:51:aa:3c:3f:46:38:3d:4d:b6:6c: 75:48:2f:ee:b5:6f:57:e1:5f:d8:85:79:c8:8b:40:1f:4c:76: 26:77:f1:75:04:9f:fd:1f:e6:fd:47:86:9f:3f:3b:66:db:cd: f4:55:1d:6c:18:03:c3:64:48:e7:dd:83:42:2d:d6:68:eb:53: 7a:85:fa:7a:f7:95:4b:61:86:8b:67:3b:34:59:fa:62:46:9c: db:84:40:ff:d1:6a:80:f6:60:a2:63:17:84:72:e9:a6:09:22: 23:80:3b:89:b7:d6:60:06:0e:37:4f:5d:5b:6c:25:fb:0a:a1: 61:27:5a:ea:b5:79:9e:78:f9:7b:75:c4:e6:4a:c9:57:78:17: a4:4e:35:f4:b4:a4:3f:3e:99:87:69:e0:59:a2:58:99:6b:36: e4:69:5c:38:d7:2e:d2:fe:e0:ff:62:c1:da:ad:3b:e6:bf:90: 26:a3:d4:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjUwNTE2MTUxOTQ5WhcNMjUwNTIzMTUxOTQ5WjAYMRYwFAYD VQQDEw02ODI3NTc5NS1mYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzONGLEOKw/EEuYIAbkKloDQrVnLsRDAI5FQushMZOngftY+CpBsIL5zRHEIt QNF7xp4Sjsq5lpdqc+bZ2GhGR87hY2XBybxFGT1/sujyWojxiuvjycI56Fay308L mgz+1TxYk2yyRUtNwbzo33wlMfSWAypcOE3RF1y+zEl+W96IgjaIvouxlEb1ouza 89F09YZratxM+JLIT3eNewd2Pk0uT1J7ypsYf3ao33jNRyetbt3lzrJ8aQKUEa6c ddXLd/cB1WBBEG44EYsSHUoH98IEajBBK4OHVZivfY1VEvgJdx6/5l+4moyczvoq Us2yw2BXMXnx6/HrxUZZC8fhDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhAG8Xk vjJgDeTlDgEagTvy6RkiMB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArpsMSi+baEFZKhBowRYFH/A7sTL3gRjmmzaZ46rQKUROffoHvpAyI dNIVbkVyxkwZeV7XQNmiF9bbrj8Kd68444p/zevduJIhJ1mjFolvjlGqPD9GOD1N tmx1SC/utW9X4V/YhXnIi0AfTHYmd/F1BJ/9H+b9R4afPztm2830VR1sGAPDZEjn 3YNCLdZo61N6hfp695VLYYaLZzs0WfpiRpzbhED/0WqA9mCiYxeEcummCSIjgDuJ t9ZgBg43T11bbCX7CqFhJ1rqtXmeePl7dcTmSslXeBekTjX0tKQ/PpmHaeBZoliZ azbkaVw41y7S/uD/YsHarTvmv5Amo9Sq -----END CERTIFICATE-----Generated at Sat May 17 14:46:58 2025 by rpki-client