$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft File: XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft (raw, json) Hash identifier: /SEJWMUz5q8PwkZQ8LfXrLIZYNU46FtH2yWcUc1Wj+k= Subject key identifier: 28:89:57:73:C1:1E:99:BC:B2:EA:03:5D:F9:DE:62:7F:52:A6:0B:A3 Authority key identifier: 5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 Certificate issuer: /CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft Manifest number: 06C9 Signing time: Mon 12 May 2025 21:49:01 +0000 Manifest this update: Mon 12 May 2025 21:49:00 +0000 Manifest next update: Mon 19 May 2025 21:49:00 +0000 Files and hashes: 1: XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl (hash: D7KBXqTfq1Kmvh08fgAzNKIsXQS+FdgQMMUjnxQAhXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F9E, serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Validity Not Before: May 12 21:49:00 2025 GMT Not After : May 19 21:49:00 2025 GMT Subject: CN=68226ccc-d6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cc:eb:7c:1c:bb:ec:f2:6f:15:88:82:36:35: ac:b1:5b:1c:e4:78:df:ba:4e:87:04:e9:98:9c:57: 0e:24:ef:61:e7:b7:ac:41:25:4f:bb:ad:b2:3a:da: b2:23:2f:00:fa:32:d9:68:5d:7f:5a:6e:4e:e4:1e: 13:9b:be:89:f3:b2:30:44:2e:34:cf:ed:52:28:f6: 7e:f9:48:28:20:e1:eb:77:9a:bf:06:33:86:09:59: eb:8c:1a:0a:2f:58:59:6a:a1:32:f0:14:0a:c7:1e: 50:90:86:15:f9:e9:ee:f1:2c:e8:b5:44:71:ec:f3: 43:28:72:8e:07:6a:22:51:a5:00:44:d6:9e:d9:c4: 09:eb:cd:8b:94:42:c5:c6:f7:0e:a6:e5:a8:8f:46: ff:98:fd:78:1c:1c:c5:28:a1:05:4a:c8:89:e3:56: 81:95:9f:e1:c4:fb:a2:e6:80:8b:71:91:8c:19:20: b8:00:04:b6:a6:ca:71:b9:97:a1:a6:27:07:5d:46: 83:ad:54:34:a2:4b:ac:5f:49:5c:c1:23:da:86:38: c7:ad:bc:35:b0:c7:2f:ba:3d:64:0c:fd:39:36:0e: 12:bb:ae:a5:73:36:42:33:54:1d:4e:96:a6:f0:6c: f3:0f:b5:a6:bb:d1:5a:fc:0d:66:a5:74:2a:b7:df: 47:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:89:57:73:C1:1E:99:BC:B2:EA:03:5D:F9:DE:62:7F:52:A6:0B:A3 X509v3 Authority Key Identifier: keyid:5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:62:31:8d:e5:b9:f3:ba:00:c9:55:dc:09:03:74:fd:31:2f: 21:61:f8:fa:1f:32:73:c5:51:9b:f8:f9:89:9a:a1:1f:f8:f3: 51:27:c1:f4:fd:07:60:6f:e5:9c:c3:f2:8a:c4:7f:c4:d7:bc: 0e:ab:7a:2f:92:44:d3:f0:ce:52:9e:dd:f7:91:8c:c6:93:e0: f8:8b:04:b8:f7:82:b5:21:39:bc:3d:81:3d:79:a2:35:91:8c: 07:3c:fa:36:39:60:77:d2:bc:74:fa:ab:7b:24:7c:06:9a:28: 6d:3e:b2:a7:4c:5a:58:bb:78:56:70:20:94:00:a3:04:40:27: f9:2f:0e:6b:4f:a7:59:31:f4:9d:3b:10:36:81:03:c9:92:82: eb:10:e8:85:d7:a8:e1:9c:53:b3:8a:ad:94:65:01:13:ab:d4: d3:ac:db:3a:11:1a:75:6a:34:34:53:95:e4:b4:5c:4e:60:76: 43:78:e2:c3:8d:81:23:e8:0d:08:d2:5a:95:1c:b7:2d:44:e3: 46:e8:f4:76:6d:75:e0:24:df:0a:e1:61:9b:d6:20:4b:05:38: 06:61:19:c4:58:a2:63:bd:f5:58:cb:32:f8:fe:51:67:40:ab: 7e:02:e9:42:09:eb:2e:f9:69:7a:fb:e4:12:bf:f8:59:ee:50: 92:2a:32:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNGOUUxMTAvBgNVBAUTKDVDMkM1ODI3QzRFODk5QkMyQTUwMzQwNkM1Q0IwOUIx OEUxMzNGQzYwHhcNMjUwNTEyMjE0OTAwWhcNMjUwNTE5MjE0OTAwWjAYMRYwFAYD VQQDEw02ODIyNmNjYy1kNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMzrfBy77PJvFYiCNjWssVsc5Hjfuk6HBOmYnFcOJO9h57esQSVPu62yOtqy Iy8A+jLZaF1/Wm5O5B4Tm76J87IwRC40z+1SKPZ++UgoIOHrd5q/BjOGCVnrjBoK L1hZaqEy8BQKxx5QkIYV+enu8SzotURx7PNDKHKOB2oiUaUARNae2cQJ682LlELF xvcOpuWoj0b/mP14HBzFKKEFSsiJ41aBlZ/hxPui5oCLcZGMGSC4AAS2pspxuZeh picHXUaDrVQ0okusX0lcwSPahjjHrbw1sMcvuj1kDP05Ng4Su66lczZCM1QdTpam 8GzzD7Wmu9Fa/A1mpXQqt99HdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiJV3PB Hpm8suoDXfneYn9SpgujMB8GA1UdIwQYMBaAFFwsWCfE6Jm8KlA0BsXLCbGOEz/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0Y5RS8wMEQ4Qzg4QzUz QUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21id3FVRFFHeGNzSnNZNFRQ OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDeFlKOFRvbWJ3cVVEUUd4Y3NKc1k0VFA4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Y5RS8wMEQ4Qzg4QzUzQUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21i d3FVRFFHeGNzSnNZNFRQOFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4YjGN5bnzugDJVdwJA3T9MS8hYfj6HzJzxVGb+PmJmqEf+PNRJ8H0 /Qdgb+Wcw/KKxH/E17wOq3ovkkTT8M5Snt33kYzGk+D4iwS494K1ITm8PYE9eaI1 kYwHPPo2OWB30rx0+qt7JHwGmihtPrKnTFpYu3hWcCCUAKMEQCf5Lw5rT6dZMfSd OxA2gQPJkoLrEOiF16jhnFOziq2UZQETq9TTrNs6ERp1ajQ0U5XktFxOYHZDeOLD jYEj6A0I0lqVHLctRONG6PR2bXXgJN8K4WGb1iBLBTgGYRnEWKJjvfVYyzL4/lFn QKt+AulCCesu+Wl6++QSv/hZ7lCSKjLF -----END CERTIFICATE-----Generated at Wed May 14 04:43:28 2025 by rpki-client