$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft File: 125W2VTMXAD-XW6t2N9QJypb3yk.mft (raw, json) Hash identifier: Nkh/gKh90Qhm6+1FJHSP09ThdA37ymWfTyZiWIBy3/s= Subject key identifier: C8:A9:04:EC:72:67:1F:8B:B7:A4:68:D2:A0:16:27:1E:41:77:C3:CE Authority key identifier: D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29 Certificate issuer: /CN=A91ADB41/serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29 Certificate serial: 079A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft Manifest number: 079A Signing time: Wed 14 May 2025 21:19:42 +0000 Manifest this update: Wed 14 May 2025 21:19:42 +0000 Manifest next update: Wed 21 May 2025 21:19:42 +0000 Files and hashes: 1: 125W2VTMXAD-XW6t2N9QJypb3yk.crl (hash: WIhCe96dZ7RnJiaUy+Vh49KnURbfkuSg4JZuD2HyCH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1946 (0x79a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB41, serialNumber=D76E56D954CC5C00FE5D6EADD8DF50272A5BDF29 Validity Not Before: May 14 21:19:42 2025 GMT Not After : May 21 21:19:42 2025 GMT Subject: CN=682508ee-42b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:75:49:ae:3b:eb:16:cc:0a:bb:e1:ed:2d: 61:0d:70:1c:84:62:a8:04:19:88:90:bd:e7:b4:2b: c8:bb:27:15:ce:3a:10:e7:98:2f:65:1e:11:37:77: c2:7a:66:c9:e4:23:96:94:95:d4:3e:59:7b:e8:e5: ab:a7:76:99:05:8e:5a:f4:32:bd:81:f4:a1:3d:eb: 18:3a:c8:86:8f:e8:1d:62:2b:18:f1:ed:a1:72:78: 21:4f:a3:c6:0a:4d:89:6c:39:31:f0:a1:62:27:e3: 7f:cd:86:51:9c:7d:27:4f:01:f6:c4:55:27:5c:ab: 0f:d2:d7:c7:18:98:3b:61:4c:78:86:e9:36:2e:17: 5f:24:00:c3:e5:a0:bc:0b:d5:e4:52:d5:46:4c:be: 41:ca:fd:16:ef:47:f4:53:d0:0e:74:6a:59:20:85: 98:87:9c:f1:89:00:0d:87:ba:b5:d7:10:07:f1:66: 62:7e:3b:ca:e3:3e:be:ea:63:c5:6f:4f:80:e9:af: b0:d2:44:f9:db:78:6a:c7:77:e0:b2:77:9f:0c:f7: ea:52:5c:20:6a:17:b8:84:a0:5a:95:ca:0b:aa:e6: 90:a2:d3:0b:6c:91:d1:12:f8:0a:32:f4:f9:6e:23: de:e2:4e:6e:62:0e:a8:fe:9b:b6:2d:c6:55:a2:88: 62:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A9:04:EC:72:67:1F:8B:B7:A4:68:D2:A0:16:27:1E:41:77:C3:CE X509v3 Authority Key Identifier: keyid:D7:6E:56:D9:54:CC:5C:00:FE:5D:6E:AD:D8:DF:50:27:2A:5B:DF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125W2VTMXAD-XW6t2N9QJypb3yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB41/160B824E020111EB8E47B95CC4F9AE02/125W2VTMXAD-XW6t2N9QJypb3yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:05:36:30:b4:32:b1:0e:57:d8:3f:ed:9d:61:4b:d5:0e:74: 33:27:05:d6:12:3e:18:44:94:48:84:20:56:4b:0c:68:a0:2c: 6e:1e:64:47:7b:9d:5e:d9:8a:1c:71:19:b2:88:22:38:98:3c: 64:50:8c:fc:17:a6:a9:66:f6:21:d1:93:1a:47:3f:a9:3b:61: 14:99:74:47:15:d6:db:88:86:cc:88:48:3c:a7:c9:2a:bd:60: 1c:ea:d8:36:83:c2:26:6c:d5:f7:df:58:a3:db:7f:62:78:ae: 32:c8:be:14:05:e7:36:87:8a:60:c6:d9:7c:f5:04:a6:c8:72: 63:b8:fe:79:9c:fa:b2:96:fe:41:34:8c:a5:4e:54:5e:f4:92: 36:2c:c9:ad:de:a2:94:37:b1:5a:94:a3:43:d5:c0:aa:87:26: 16:37:12:df:d3:99:a5:9d:dc:e2:b3:84:08:4d:40:a9:2f:d8: ee:b3:c7:be:69:13:b4:60:78:d6:e0:d0:53:19:82:a0:0b:c4: d5:6d:f2:6f:4e:76:c5:01:6e:1a:ca:5a:03:74:73:7a:fa:8d: 23:09:91:55:ed:bf:d8:1c:59:25:cb:4e:4c:40:54:17:b0:26: af:f6:d0:66:4a:2a:b6:46:d1:85:d5:1d:af:fd:de:4a:48:09: 75:de:84:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCNDExMTAvBgNVBAUTKEQ3NkU1NkQ5NTRDQzVDMDBGRTVENkVBREQ4REY1MDI3 MkE1QkRGMjkwHhcNMjUwNTE0MjExOTQyWhcNMjUwNTIxMjExOTQyWjAYMRYwFAYD VQQDEw02ODI1MDhlZS00MmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDp1Sa476xbMCrvh7S1hDXAchGKoBBmIkL3ntCvIuycVzjoQ55gvZR4RN3fC embJ5COWlJXUPll76OWrp3aZBY5a9DK9gfShPesYOsiGj+gdYisY8e2hcnghT6PG Ck2JbDkx8KFiJ+N/zYZRnH0nTwH2xFUnXKsP0tfHGJg7YUx4huk2LhdfJADD5aC8 C9XkUtVGTL5Byv0W70f0U9AOdGpZIIWYh5zxiQANh7q11xAH8WZifjvK4z6+6mPF b0+A6a+w0kT523hqx3fgsnefDPfqUlwgahe4hKBalcoLquaQotMLbJHREvgKMvT5 biPe4k5uYg6o/pu2LcZVoohiAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMipBOxy Zx+Lt6Ro0qAWJx5Bd8POMB8GA1UdIwQYMBaAFNduVtlUzFwA/l1urdjfUCcqW98p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI0MS8xNjBCODI0RTAy MDExMUVCOEU0N0I5NUNDNEY5QUUwMi8xMjVXMlZUTVhBRC1YVzZ0Mk45UUp5cGIz eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEyNVcyVlRNWEFELVhXNnQyTjlRSnlwYjN5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI0MS8xNjBCODI0RTAyMDExMUVCOEU0N0I5NUNDNEY5QUUwMi8xMjVXMlZUTVhB RC1YVzZ0Mk45UUp5cGIzeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5BTYwtDKxDlfYP+2dYUvVDnQzJwXWEj4YRJRIhCBWSwxooCxuHmRH e51e2YoccRmyiCI4mDxkUIz8F6apZvYh0ZMaRz+pO2EUmXRHFdbbiIbMiEg8p8kq vWAc6tg2g8ImbNX331ij239ieK4yyL4UBec2h4pgxtl89QSmyHJjuP55nPqylv5B NIylTlRe9JI2LMmt3qKUN7FalKND1cCqhyYWNxLf05mlndzis4QITUCpL9jus8e+ aRO0YHjW4NBTGYKgC8TVbfJvTnbFAW4ayloDdHN6+o0jCZFV7b/YHFkly05MQFQX sCav9tBmSiq2RtGF1R2v/d5KSAl13oQI -----END CERTIFICATE-----Generated at Fri May 16 12:07:23 2025 by rpki-client