$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft File: MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json) Hash identifier: 61hPm7mhAst1d2CngBiG2uphtH0irnCIuaDuRAG9yFg= Subject key identifier: AF:19:35:6E:75:A7:7E:58:06:F1:90:5B:6B:88:9B:F4:E9:FF:94:C6 Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E Certificate issuer: /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft Manifest number: 8D Signing time: Sat 17 May 2025 05:59:33 +0000 Manifest this update: Sat 17 May 2025 05:59:32 +0000 Manifest next update: Sat 24 May 2025 05:59:32 +0000 Files and hashes: 1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: yrKYgdA9DdLHTY1NMHr4Kn1dZe5j+08aHE26mmNqNYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E Validity Not Before: May 17 05:59:32 2025 GMT Not After : May 24 05:59:32 2025 GMT Subject: CN=682825c4-efcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:5f:4a:aa:67:91:1e:c9:2e:3d:a8:d0:11: 2f:4d:51:e6:a3:8e:5d:93:22:fe:2c:43:84:b9:7e: 6b:0e:64:43:9d:38:4c:38:82:63:2f:34:ea:f4:d4: 59:cf:01:b0:f4:cd:ed:c8:40:d2:bf:8a:e4:e2:6a: 4e:28:24:be:79:fc:cf:3b:2d:8e:45:f8:5b:be:91: b6:91:c3:3e:a0:a9:32:d2:54:e3:87:77:83:61:59: 5b:d6:47:39:72:94:0e:b2:ed:22:56:19:14:ba:30: 31:cb:36:d9:38:41:68:9b:e0:ae:09:18:0b:96:6b: 50:ff:f7:29:76:c8:03:c1:c1:3e:43:4c:87:ca:12: 63:df:25:68:dd:4f:f3:a7:eb:46:04:00:16:74:de: 15:fb:3b:a2:3c:0f:81:51:f5:97:79:1a:69:e3:e4: e5:9d:36:ac:a6:bb:2c:5a:e4:c6:e5:39:8e:e1:9b: a0:6b:46:40:6b:68:e2:9d:fc:fa:33:38:a7:f8:d1: 4a:ef:51:76:bb:af:10:01:0c:56:05:e1:09:2e:c2: af:ac:bf:e7:22:8c:ae:16:e2:36:c9:4a:9a:15:79: 4b:69:09:9e:79:ea:d4:e4:a6:3c:0d:a4:7f:b1:16: f2:62:c0:7d:77:53:fb:ac:53:f3:3c:ae:d6:6a:bb: 7f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:19:35:6E:75:A7:7E:58:06:F1:90:5B:6B:88:9B:F4:E9:FF:94:C6 X509v3 Authority Key Identifier: keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:e4:63:aa:7b:64:0d:7f:ad:01:21:fb:7b:6d:b4:36:d4:52: a4:36:ca:74:3c:43:14:a4:9d:e5:51:28:d8:e8:19:3c:64:1d: ff:ed:ca:f0:96:1f:d1:92:4f:69:38:c3:22:29:02:cf:18:c1: 24:c2:50:3f:e4:d2:6d:36:1c:72:30:4b:cd:c2:fa:fc:99:a6: 3b:1c:a7:e0:59:0a:ae:ea:67:68:02:3f:07:99:9c:9f:44:54: ad:49:f9:b3:05:2e:70:76:c4:4a:79:d0:26:11:e4:6a:16:5c: 6c:7b:57:ef:b1:1f:02:ee:8a:7d:8b:9f:3c:b8:9b:53:e3:99: 2e:3e:44:26:00:6e:eb:31:a0:55:d9:16:18:13:f6:dd:1b:0f: 2e:66:fa:d9:1e:0b:c3:d5:a9:53:56:a1:6a:c5:ba:aa:1d:68: 57:29:b8:83:3d:3a:c8:67:57:56:3b:96:f1:ec:05:dd:00:7d: 35:38:7e:64:d0:47:2a:5e:35:32:c6:83:d5:cc:dc:96:74:aa: 96:6c:38:35:f8:08:ff:c6:7c:b3:d3:7a:5e:91:59:99:dd:c8: 88:48:75:96:e2:61:36:46:23:5e:12:8f:e6:b4:6e:3d:39:b1: ec:53:53:d2:77:03:4c:d4:d9:a5:8f:d9:4c:8c:f0:2c:07:5c: 40:e6:21:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgzRDMxMTAvBgNVBAUTKDMxN0E3MjdGRjYzRTI3QzI5Q0MwMUNCNjc5OTNFMkM2 MUYwODA0MUUwHhcNMjUwNTE3MDU1OTMyWhcNMjUwNTI0MDU1OTMyWjAYMRYwFAYD VQQDEw02ODI4MjVjNC1lZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy51fSqpnkR7JLj2o0BEvTVHmo45dkyL+LEOEuX5rDmRDnThMOIJjLzTq9NRZ zwGw9M3tyEDSv4rk4mpOKCS+efzPOy2ORfhbvpG2kcM+oKky0lTjh3eDYVlb1kc5 cpQOsu0iVhkUujAxyzbZOEFom+CuCRgLlmtQ//cpdsgDwcE+Q0yHyhJj3yVo3U/z p+tGBAAWdN4V+zuiPA+BUfWXeRpp4+TlnTasprssWuTG5TmO4Zuga0ZAa2jinfz6 Mzin+NFK71F2u68QAQxWBeEJLsKvrL/nIoyuFuI2yUqaFXlLaQmeeerU5KY8DaR/ sRbyYsB9d1P7rFPzPK7Wart/YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8ZNW51 p35YBvGQW2uIm/Tp/5TGMB8GA1UdIwQYMBaAFDF6cn/2PifCnMActnmT4sYfCAQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy85NTc2MDE2ODVF MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4S2N3QnkyZVpQaXhoOElC QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01YcHlmX1ktSjhLY3dCeTJlWlBpeGg4SUJCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODNEMy85NTc2MDE2ODVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4 S2N3QnkyZVpQaXhoOElCQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA5GOqe2QNf60BIft7bbQ21FKkNsp0PEMUpJ3lUSjY6Bk8ZB3/7crw lh/Rkk9pOMMiKQLPGMEkwlA/5NJtNhxyMEvNwvr8maY7HKfgWQqu6mdoAj8HmZyf RFStSfmzBS5wdsRKedAmEeRqFlxse1fvsR8C7op9i588uJtT45kuPkQmAG7rMaBV 2RYYE/bdGw8uZvrZHgvD1alTVqFqxbqqHWhXKbiDPTrIZ1dWO5bx7AXdAH01OH5k 0EcqXjUyxoPVzNyWdKqWbDg1+Aj/xnyz03pekVmZ3ciISHWW4mE2RiNeEo/mtG49 ObHsU1PSdwNM1Nmlj9lMjPAsB1xA5iEy -----END CERTIFICATE-----Generated at Sat May 17 13:32:54 2025 by rpki-client