$ rpki-client -vvf rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft File: 75-XzrKSdlHWT6oC452-DaO3H5U.mft (raw, json) Hash identifier: hNCu4wZA7ZEyaROS+IRUIoozohY/pGSpIY+FOa2ds2s= Subject key identifier: 15:3A:44:2C:36:F6:70:EA:01:FD:24:6D:EC:55:F7:AA:A3:08:7A:E1 Authority key identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95 Certificate issuer: /CN=A9165588/serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft Manifest number: 2C Signing time: Tue 13 May 2025 07:01:01 +0000 Manifest this update: Tue 13 May 2025 07:01:01 +0000 Manifest next update: Tue 20 May 2025 07:01:01 +0000 Files and hashes: 1: 75-XzrKSdlHWT6oC452-DaO3H5U.crl (hash: u/xhzhe3oNOGYZPhflwinVE534JmKm/+mEDDhU8Lg6g=) 2: C405E494FCBF11EF8E586B7AC4F9AE02.roa (hash: 8p+dYc7w4P5cdTWL4po8oK48UBPSJ7b6JBGkywZrPZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 07:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165588, serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95 Validity Not Before: May 13 07:01:01 2025 GMT Not After : May 20 07:01:01 2025 GMT Subject: CN=6822ee2d-8513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:43:d6:aa:70:1c:10:ed:19:ca:32:b1:04:16: 0c:a0:22:1b:04:7b:f2:60:53:27:be:ae:95:ca:d3: 9b:65:0b:aa:a5:a2:fd:67:d5:5a:f3:4d:65:04:3b: 2b:ef:c2:b1:19:79:f8:7b:30:a5:e5:1e:51:00:c4: c6:62:18:8a:44:1f:6f:7f:87:d9:c9:d5:43:93:e3: cb:b8:4a:78:8a:33:5c:f7:96:33:12:94:1c:9c:2f: c7:87:e3:80:6f:58:61:6b:99:3f:a4:1a:bb:b8:8d: be:48:ae:40:ab:98:dc:7c:bd:df:1c:8c:6f:ae:2c: 71:66:60:b1:7c:03:f9:48:02:1e:74:0c:68:45:d7: bc:fa:f5:c2:3a:cd:41:31:cf:ee:c4:89:7f:d9:48: 29:25:ce:87:cf:4c:36:ee:cf:bb:27:82:1c:57:b4: b5:1f:f8:96:6d:32:a1:61:26:be:ed:6d:ea:73:e5: b4:d0:2e:4c:00:f0:fe:d8:1d:ac:4f:a0:5d:5b:38: 80:d7:37:39:2a:05:52:7e:7f:98:03:86:36:23:0d: 35:59:d9:69:4e:65:f2:fd:40:d3:37:42:6c:c0:4c: 66:c9:54:63:f6:cb:d1:81:a8:90:51:41:b2:43:c8: 7c:4f:4b:96:a1:2b:a0:68:26:8b:66:ed:97:86:24: a6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3A:44:2C:36:F6:70:EA:01:FD:24:6D:EC:55:F7:AA:A3:08:7A:E1 X509v3 Authority Key Identifier: keyid:EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f0:08:e8:a3:d1:34:51:b3:d1:5d:cc:10:1d:40:91:e1:d8: 29:9f:bb:b4:93:00:66:f5:1e:f1:9d:ec:e1:22:bf:5d:43:7b: 79:d6:ca:7f:bc:d4:b8:68:99:1f:6c:93:8f:30:75:3d:64:de: 8a:05:f3:9f:45:c0:08:c6:ae:f6:65:40:d8:4c:3d:f6:9a:1d: e6:2b:a5:6d:da:69:60:63:61:b3:1f:aa:06:5f:cc:d0:38:7a: 11:0b:18:57:65:39:09:6a:a2:6a:33:a0:9b:83:b6:7b:5e:89: c6:2f:a2:40:66:56:86:6f:41:35:95:3b:3a:f4:6b:4d:7a:de: e5:e0:b0:88:b8:06:78:a8:f6:e2:27:a8:70:7b:0b:ad:c0:db: 24:32:89:74:ff:a1:34:c9:bd:41:ca:3b:a3:f2:cb:d8:32:e1: dc:3d:60:48:07:de:f5:46:d0:4f:c6:f0:82:9a:13:61:65:65: 3c:75:f0:39:63:34:af:bb:0b:14:de:73:08:0f:7f:6f:13:32: 4e:99:29:3c:49:26:cb:fc:dc:31:32:48:4c:f1:63:ef:0e:e5: 3f:20:1b:7d:79:61:27:2e:5b:40:c8:32:d6:2e:c0:d7:ea:24: ab:85:d7:1b:0b:94:70:e6:62:b3:cc:f7:0f:73:78:1f:ca:68: 94:cf:95:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTU4ODExMC8GA1UEBRMoRUY5Rjk3Q0VCMjkyNzY1MUQ2NEZBQTAyRTM5REJFMERB M0I3MUY5NTAeFw0yNTA1MTMwNzAxMDFaFw0yNTA1MjAwNzAxMDFaMBgxFjAUBgNV BAMTDTY4MjJlZTJkLTg1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmQ9aqcBwQ7RnKMrEEFgygIhsEe/JgUye+rpXK05tlC6qlov1n1VrzTWUEOyvv wrEZefh7MKXlHlEAxMZiGIpEH29/h9nJ1UOT48u4SniKM1z3ljMSlBycL8eH44Bv WGFrmT+kGru4jb5IrkCrmNx8vd8cjG+uLHFmYLF8A/lIAh50DGhF17z69cI6zUEx z+7EiX/ZSCklzofPTDbuz7snghxXtLUf+JZtMqFhJr7tbepz5bTQLkwA8P7YHaxP oF1bOIDXNzkqBVJ+f5gDhjYjDTVZ2WlOZfL9QNM3QmzATGbJVGP2y9GBqJBRQbJD yHxPS5ahK6BoJotm7ZeGJKYpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFTpELDb2 cOoB/SRt7FX3qqMIeuEwHwYDVR0jBBgwFoAU75+XzrKSdlHWT6oC452+DaO3H5Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NTg4LzY5NDUzMUYyRkE4 NzExRUY4M0VERUMyREM0RjlBRTAyLzc1LVh6cktTZGxIV1Q2b0M0NTItRGFPM0g1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNzUtWHpyS1NkbEhXVDZvQzQ1Mi1EYU8zSDVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NTg4LzY5NDUzMUYyRkE4NzExRUY4M0VERUMyREM0RjlBRTAyLzc1LVh6cktTZGxI V1Q2b0M0NTItRGFPM0g1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIDwCOij0TRRs9FdzBAdQJHh2Cmfu7STAGb1HvGd7OEiv11De3nWyn+8 1LhomR9sk48wdT1k3ooF859FwAjGrvZlQNhMPfaaHeYrpW3aaWBjYbMfqgZfzNA4 ehELGFdlOQlqomozoJuDtnteicYvokBmVoZvQTWVOzr0a0163uXgsIi4Bnio9uIn qHB7C63A2yQyiXT/oTTJvUHKO6Pyy9gy4dw9YEgH3vVG0E/G8IKaE2FlZTx18Dlj NK+7CxTecwgPf28TMk6ZKTxJJsv83DEySEzxY+8O5T8gG315YScuW0DIMtYuwNfq JKuF1xsLlHDmYrPM9w9zeB/KaJTPlf8= -----END CERTIFICATE-----Generated at Tue May 13 18:57:23 2025 by rpki-client