$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft File: XpYNUYjwNveeqnlBVSzPRrh6vwc.mft (raw, json) Hash identifier: tzjAin4H+21CRb4vSBwCXv9YbBw7Jhq1TyQyJfWirCk= Subject key identifier: 67:39:1C:7D:1E:1A:BD:D6:58:54:F7:AC:51:77:3E:55:EC:E5:03:2E Authority key identifier: 5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07 Certificate issuer: /CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft Manifest number: 75 Signing time: Fri 09 May 2025 05:48:13 +0000 Manifest this update: Fri 09 May 2025 05:48:12 +0000 Manifest next update: Fri 16 May 2025 05:48:12 +0000 Files and hashes: 1: XpYNUYjwNveeqnlBVSzPRrh6vwc.crl (hash: 4yZMvMLHOCmGvMmf+/UuVNgJQAbEYHFHU2jVJeZNqpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07 Validity Not Before: May 9 05:48:12 2025 GMT Not After : May 16 05:48:12 2025 GMT Subject: CN=681d971d-b6a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:67:6c:ba:5d:b4:97:a2:03:59:51:4d:13: 83:cf:ae:45:71:3d:ed:16:a9:c4:6d:b9:17:2a:57: d0:9c:fa:82:2e:42:be:4a:cb:3f:5f:2e:60:b9:9a: 33:9b:61:5c:fd:61:9b:8a:86:ae:39:29:98:0b:c9: 97:ea:dd:cd:56:31:ca:00:35:37:e3:c5:77:5a:8d: bc:fa:91:d8:84:a9:85:f1:ab:2c:dc:4a:f1:1f:a6: 5a:37:ef:ed:e0:ad:d0:38:0a:6c:7f:20:87:c0:5b: d3:c6:ef:e5:ac:c8:d2:a4:09:e1:63:7e:62:66:03: 53:67:8b:1d:d1:f5:c0:f6:a4:c7:2d:28:35:d6:43: e1:18:1b:84:7b:5c:cd:af:e5:ca:d3:1a:15:2f:e8: 37:c3:23:7e:96:a3:39:2f:d3:ce:2a:d7:16:9a:94: 88:17:fc:13:07:d4:36:8c:cb:82:61:ff:45:a8:6a: a4:0d:7d:cf:9b:7a:f1:2c:23:b2:b3:12:cf:8a:e4: f9:55:05:11:75:7a:d9:51:ce:27:06:74:64:c1:b3: 82:f6:ba:60:aa:85:34:3c:2c:26:7e:8f:22:4d:d3: 86:3c:ad:bf:8b:b4:2d:4a:35:1a:a8:7f:4b:f4:ad: 8e:ba:3a:96:1d:bd:59:91:9d:92:fa:47:05:d4:6f: 31:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:39:1C:7D:1E:1A:BD:D6:58:54:F7:AC:51:77:3E:55:EC:E5:03:2E X509v3 Authority Key Identifier: keyid:5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d9:4f:14:41:35:40:30:56:f2:b2:05:b3:0f:64:38:f3:21: 6c:33:3c:bb:21:da:01:16:a8:73:cd:76:59:11:4d:ff:79:f5: 76:1d:9b:52:51:61:90:7d:a0:d4:52:9c:33:f6:cc:75:e5:1c: 11:f4:dd:67:5b:7e:b5:f0:8f:23:ba:79:bf:e7:de:10:11:d2: 65:1f:88:28:64:e3:88:90:64:3b:e6:df:48:60:87:9f:3b:bc: d9:f4:15:53:e5:8a:a8:b0:08:35:b6:bb:9a:14:bb:64:f1:a3: 4d:5e:03:03:6d:88:6e:0b:f9:36:08:e4:3b:31:57:5b:d2:4c: e4:2e:18:ea:35:50:7d:07:94:d8:66:8c:15:b6:35:ca:c6:a6: 63:f3:89:17:72:61:69:bd:4d:2f:c3:f6:a9:97:fb:c4:47:6b: dd:3b:6f:b6:fc:88:c3:58:1f:7f:29:17:03:98:a1:7f:bd:e8: 90:10:6c:76:af:db:bc:2c:83:a0:8a:69:d6:54:63:fe:ea:03: 35:56:fb:f2:ee:e3:3e:3f:ae:9d:66:cd:8f:ea:7c:46:d2:7f: 53:7b:0f:4e:f7:81:a8:6e:c2:d0:cf:38:3f:5a:07:b2:31:68: 6b:7f:f1:ff:b2:04:aa:85:36:96:f6:ae:61:46:ad:24:a9:22: ba:e9:35:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTkwRjExMC8GA1UEBRMoNUU5NjBENTE4OEYwMzZGNzlFQUE3OTQxNTUyQ0NGNDZC ODdBQkYwNzAeFw0yNTA1MDkwNTQ4MTJaFw0yNTA1MTYwNTQ4MTJaMBgxFjAUBgNV BAMTDTY4MWQ5NzFkLWI2YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpxWdsul20l6IDWVFNE4PPrkVxPe0WqcRtuRcqV9Cc+oIuQr5Kyz9fLmC5mjOb YVz9YZuKhq45KZgLyZfq3c1WMcoANTfjxXdajbz6kdiEqYXxqyzcSvEfplo37+3g rdA4Cmx/IIfAW9PG7+WsyNKkCeFjfmJmA1Nnix3R9cD2pMctKDXWQ+EYG4R7XM2v 5crTGhUv6DfDI36Wozkv084q1xaalIgX/BMH1DaMy4Jh/0WoaqQNfc+bevEsI7Kz Es+K5PlVBRF1etlRzicGdGTBs4L2umCqhTQ8LCZ+jyJN04Y8rb+LtC1KNRqof0v0 rY66OpYdvVmRnZL6RwXUbzFHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZzkcfR4a vdZYVPesUXc+VezlAy4wHwYDVR0jBBgwFoAUXpYNUYjwNveeqnlBVSzPRrh6vwcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxOTBGL0M4NUJBMTJDN0JF QzExRUY5OTlGQkMxOUM0RjlBRTAyL1hwWU5VWWp3TnZlZXFubEJWU3pQUnJoNnZ3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHBZTlVZandOdmVlcW5sQlZTelBScmg2dndjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx OTBGL0M4NUJBMTJDN0JFQzExRUY5OTlGQkMxOUM0RjlBRTAyL1hwWU5VWWp3TnZl ZXFubEJWU3pQUnJoNnZ3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKTZTxRBNUAwVvKyBbMPZDjzIWwzPLsh2gEWqHPNdlkRTf959XYdm1JR YZB9oNRSnDP2zHXlHBH03WdbfrXwjyO6eb/n3hAR0mUfiChk44iQZDvm30hgh587 vNn0FVPliqiwCDW2u5oUu2Txo01eAwNtiG4L+TYI5DsxV1vSTOQuGOo1UH0HlNhm jBW2NcrGpmPziRdyYWm9TS/D9qmX+8RHa907b7b8iMNYH38pFwOYoX+96JAQbHav 27wsg6CKadZUY/7qAzVW+/Lu4z4/rp1mzY/qfEbSf1N7D073gahuwtDPOD9aB7Ix aGt/8f+yBKqFNpb2rmFGrSSpIrrpNdc= -----END CERTIFICATE-----Generated at Sat May 10 04:00:45 2025 by rpki-client