$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft File: F_XLSRgEUqiWf5wPZjdatwnQ52g.mft (raw, json) Hash identifier: 4Hi70zYZyoQMoDEDiVluFpYN86O5R4QIXHQXwjTfcpE= Subject key identifier: B8:E9:A5:2A:9C:D7:F2:08:A9:D1:1E:86:18:7F:B1:F2:00:7C:21:51 Authority key identifier: 17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 Certificate issuer: /CN=A917FD40/serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Certificate serial: 04F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft Manifest number: 053F Signing time: Thu 08 May 2025 23:29:42 +0000 Manifest this update: Thu 08 May 2025 23:29:42 +0000 Manifest next update: Thu 15 May 2025 23:29:42 +0000 Files and hashes: 1: F_XLSRgEUqiWf5wPZjdatwnQ52g.crl (hash: VVz3Q+xvkUfwb0Og5bY4I5SO+vF16iO5k+kIGNWvRt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 23:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1271 (0x4f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FD40, serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Validity Not Before: May 8 23:29:42 2025 GMT Not After : May 15 23:29:42 2025 GMT Subject: CN=681d3e66-2da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:c3:37:3a:b5:e3:86:3b:a0:cf:50:a9:89: 9c:d3:61:b8:7f:08:44:8f:7e:4d:5c:d8:0f:c2:77: 7c:b9:f1:7a:66:1a:c3:eb:2a:7f:04:65:14:34:dd: 8d:7b:fb:e9:51:43:e2:44:c0:80:d8:c9:3b:68:86: 32:df:25:f8:2d:79:90:05:35:0d:00:55:9e:c7:de: 91:e2:7d:74:00:a7:4f:f1:ec:22:bc:04:5c:b2:2c: e1:90:7f:26:23:45:d5:50:ce:1d:1c:4b:87:33:d1: f1:04:f2:c0:52:db:4f:a5:05:e0:2c:54:dd:2e:db: e0:67:b1:49:d0:f1:e3:e6:18:b0:a9:c9:24:02:fc: 46:10:19:c0:89:c2:bb:73:3d:72:9a:fe:04:34:c4: 4f:c1:f8:d3:aa:9a:71:4e:eb:b3:69:b0:99:e4:2b: 4d:55:67:e6:6b:05:f9:6e:0f:2c:ad:6f:ca:e5:bc: 06:11:3b:06:05:a8:d3:97:38:20:ff:1f:6b:a1:f8: 99:fb:38:d4:c7:a3:b0:cd:ad:87:25:4b:6f:dd:f8: dc:78:85:49:59:33:cb:e5:f7:31:6a:ac:24:4d:ad: 97:8a:4e:66:21:46:b3:b1:0c:cc:f1:7f:84:b9:32: 17:0e:e0:e0:4f:65:60:9b:66:b7:11:46:26:b7:36: ed:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E9:A5:2A:9C:D7:F2:08:A9:D1:1E:86:18:7F:B1:F2:00:7C:21:51 X509v3 Authority Key Identifier: keyid:17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:4a:0b:07:7a:d8:3b:1b:08:8d:99:85:17:d4:7b:11:23:3b: a3:97:b9:de:42:1d:54:87:51:0a:68:4d:7c:b2:78:07:ae:60: 64:f6:57:8c:3d:35:06:05:14:b0:b7:4d:87:2f:7a:3d:df:fc: 8a:61:e5:8b:b0:44:97:67:08:ad:fb:f0:0c:d4:aa:ff:b2:a1: a5:ef:ac:cf:1c:58:38:b3:b7:dc:f4:bc:11:a1:ff:30:ae:4b: 8d:ec:24:bc:15:34:5e:9d:0b:84:b6:8e:1a:ff:d9:65:81:64: 4e:e7:92:14:2e:9a:a4:99:32:f8:95:02:cc:06:32:82:84:cf: 01:d4:7b:d5:a4:a6:0d:b7:70:98:bd:61:97:7f:44:9d:13:2b: 11:37:ec:8c:31:5d:c0:fc:9d:98:e9:cb:a2:e2:d7:26:25:30: e2:7a:be:13:d0:b3:d0:80:6e:f0:50:eb:6e:47:d4:4b:a0:e9: 37:36:dc:af:53:73:e9:1a:fe:be:c3:70:81:70:e3:34:3f:3d: 77:f3:33:32:c3:d4:ab:73:79:01:55:0a:de:91:2e:40:26:39: 98:78:f5:1e:81:0d:a7:f7:59:92:db:b8:00:83:e1:b1:65:b3: 47:20:6c:89:d8:54:62:48:11:d4:2a:b3:07:9d:ab:54:ca:61: 94:36:7f:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZENDAxMTAvBgNVBAUTKDE3RjVDQjQ5MTgwNDUyQTg5NjdGOUMwRjY2Mzc1QUI3 MDlEMEU3NjgwHhcNMjUwNTA4MjMyOTQyWhcNMjUwNTE1MjMyOTQyWjAYMRYwFAYD VQQDEw02ODFkM2U2Ni0yZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtnDNzq144Y7oM9QqYmc02G4fwhEj35NXNgPwnd8ufF6ZhrD6yp/BGUUNN2N e/vpUUPiRMCA2Mk7aIYy3yX4LXmQBTUNAFWex96R4n10AKdP8ewivARcsizhkH8m I0XVUM4dHEuHM9HxBPLAUttPpQXgLFTdLtvgZ7FJ0PHj5hiwqckkAvxGEBnAicK7 cz1ymv4ENMRPwfjTqppxTuuzabCZ5CtNVWfmawX5bg8srW/K5bwGETsGBajTlzgg /x9rofiZ+zjUx6Owza2HJUtv3fjceIVJWTPL5fcxaqwkTa2Xik5mIUazsQzM8X+E uTIXDuDgT2Vgm2a3EUYmtzbtFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjppSqc 1/IIqdEehhh/sfIAfCFRMB8GA1UdIwQYMBaAFBf1y0kYBFKoln+cD2Y3WrcJ0Odo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkQ0MC9GQzIxOTU1RTBC RDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVxaVdmNXdQWmpkYXR3blE1 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfWExTUmdFVXFpV2Y1d1BaamRhdHduUTUyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkQ0MC9GQzIxOTU1RTBCRDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVx aVdmNXdQWmpkYXR3blE1MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJSgsHetg7GwiNmYUX1HsRIzujl7neQh1Uh1EKaE18sngHrmBk9leM PTUGBRSwt02HL3o93/yKYeWLsESXZwit+/AM1Kr/sqGl76zPHFg4s7fc9LwRof8w rkuN7CS8FTRenQuEto4a/9llgWRO55IULpqkmTL4lQLMBjKChM8B1HvVpKYNt3CY vWGXf0SdEysRN+yMMV3A/J2Y6cui4tcmJTDier4T0LPQgG7wUOtuR9RLoOk3Ntyv U3PpGv6+w3CBcOM0Pz138zMyw9Src3kBVQrekS5AJjmYePUegQ2n91mS27gAg+Gx ZbNHIGyJ2FRiSBHUKrMHnatUymGUNn9d -----END CERTIFICATE-----Generated at Sat May 10 19:40:57 2025 by rpki-client