$ rpki-client -vvf rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft File: XucUYNY3KKxeq5GKVB0NcFFXfU0.mft (raw, json) Hash identifier: rj+Y3Q3Ak0biB+xskngWdvHvG38T9kvcixH1x7Mq6Lo= Subject key identifier: 7B:FC:FE:5B:A5:EE:7E:25:48:5B:08:8F:44:0D:BE:41:BF:6C:BB:96 Authority key identifier: 5E:E7:14:60:D6:37:28:AC:5E:AB:91:8A:54:1D:0D:70:51:57:7D:4D Certificate issuer: /CN=A91B758E/serialNumber=5EE71460D63728AC5EAB918A541D0D7051577D4D Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft Manifest number: E0 Signing time: Sun 11 May 2025 04:17:57 +0000 Manifest this update: Sun 11 May 2025 04:17:57 +0000 Manifest next update: Sun 18 May 2025 04:17:57 +0000 Files and hashes: 1: XucUYNY3KKxeq5GKVB0NcFFXfU0.crl (hash: ZYq8dsaGh8oKuK/VTbjoFOaruKIB6FnmpXTC+QUcnL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.crl rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B758E, serialNumber=5EE71460D63728AC5EAB918A541D0D7051577D4D Validity Not Before: May 11 04:17:57 2025 GMT Not After : May 18 04:17:57 2025 GMT Subject: CN=682024f5-40b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:2b:7e:d3:d4:40:39:2f:f6:d9:f1:0d:09: 6a:cc:ab:56:66:66:10:b2:98:fb:c4:04:8b:29:72: e6:62:6b:f0:f7:ea:2c:b2:9c:1f:02:e5:df:93:f5: 07:4b:6e:89:88:3d:8a:58:c0:31:48:bb:09:a5:e2: 54:34:f9:5f:e2:11:30:8e:df:3e:07:97:46:d2:c3: 3c:90:e7:57:a6:1a:8a:6f:6a:28:4a:14:2c:d5:9a: 66:98:3a:6a:b8:ad:14:1c:2f:87:9e:8f:70:b0:1d: 24:2a:7d:0d:f7:1e:09:c9:3d:06:a2:44:ab:bb:7c: 3b:ff:79:84:3e:76:8f:52:31:54:40:17:16:2c:e2: eb:a1:a9:4e:e3:b7:f2:c1:d6:e2:04:81:d1:be:28: 29:1a:45:16:d2:d2:d9:3b:18:e5:30:81:07:2b:b8: 21:c1:20:33:63:07:cb:e1:4e:99:30:e0:56:08:3d: 96:5e:1d:d6:68:e8:32:bb:3f:d4:6c:5d:0c:3e:75: aa:28:a7:95:20:c2:da:15:6c:75:30:c5:af:11:15: a5:70:92:c2:de:ad:7a:12:05:f0:0a:6c:2d:6e:1f: 3c:30:24:df:e0:a8:9c:dc:2b:87:22:4a:e5:79:b5: 09:1c:e3:ab:85:72:33:5d:33:04:a7:36:13:c4:12: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FC:FE:5B:A5:EE:7E:25:48:5B:08:8F:44:0D:BE:41:BF:6C:BB:96 X509v3 Authority Key Identifier: keyid:5E:E7:14:60:D6:37:28:AC:5E:AB:91:8A:54:1D:0D:70:51:57:7D:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XucUYNY3KKxeq5GKVB0NcFFXfU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/E799F922D53D11EE8F1E8A85C4F9AE02/XucUYNY3KKxeq5GKVB0NcFFXfU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:14:45:15:d2:58:19:17:72:55:d1:12:c6:0a:f2:0e:35:21: 12:9f:26:23:ec:fb:65:73:28:94:9f:ec:a8:7c:6b:a2:b9:44: 12:da:a9:39:f4:28:b8:70:f5:bd:c1:46:0b:67:60:4c:a8:45: 57:b5:d7:c9:2a:c8:70:86:e6:11:44:0c:48:76:d9:d3:ee:df: 31:14:36:75:c5:14:1f:ef:46:0b:8e:e0:76:2f:2e:55:2a:b3: 1e:3f:a6:9b:eb:17:a8:1d:c6:f3:26:f1:ad:7c:64:49:7b:8b: 8b:fb:ef:10:17:86:82:a0:c1:23:d0:70:5d:81:53:21:22:dc: 13:ef:c0:90:4c:9e:99:fd:5e:81:b8:a7:65:3a:df:81:eb:56: dd:09:07:ff:a9:27:b7:f4:89:f8:74:2a:b7:fe:2c:3f:fb:61: ea:53:66:08:7d:65:d3:64:e3:d6:d6:6b:24:06:07:c3:28:14: f2:f1:2b:47:54:10:14:cc:d8:6e:0e:ce:14:52:b7:51:42:57: 10:ea:76:0a:25:63:b1:77:ca:ba:e4:89:88:0d:5c:2d:69:8f: 7e:60:88:65:1f:d5:7f:fb:a2:68:83:31:ee:28:11:3b:2f:9d: 2d:51:01:ef:43:b1:56:81:70:32:32:89:3a:3a:b2:26:95:aa: 3d:a4:45:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc1OEUxMTAvBgNVBAUTKDVFRTcxNDYwRDYzNzI4QUM1RUFCOTE4QTU0MUQwRDcw NTE1NzdENEQwHhcNMjUwNTExMDQxNzU3WhcNMjUwNTE4MDQxNzU3WjAYMRYwFAYD VQQDEw02ODIwMjRmNS00MGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdkrftPUQDkv9tnxDQlqzKtWZmYQspj7xASLKXLmYmvw9+osspwfAuXfk/UH S26JiD2KWMAxSLsJpeJUNPlf4hEwjt8+B5dG0sM8kOdXphqKb2ooShQs1ZpmmDpq uK0UHC+Hno9wsB0kKn0N9x4JyT0GokSru3w7/3mEPnaPUjFUQBcWLOLroalO47fy wdbiBIHRvigpGkUW0tLZOxjlMIEHK7ghwSAzYwfL4U6ZMOBWCD2WXh3WaOgyuz/U bF0MPnWqKKeVIMLaFWx1MMWvERWlcJLC3q16EgXwCmwtbh88MCTf4Kic3CuHIkrl ebUJHOOrhXIzXTMEpzYTxBLaLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHv8/lul 7n4lSFsIj0QNvkG/bLuWMB8GA1UdIwQYMBaAFF7nFGDWNyisXquRilQdDXBRV31N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzU4RS9FNzk5RjkyMkQ1 M0QxMUVFOEYxRThBODVDNEY5QUUwMi9YdWNVWU5ZM0tLeGVxNUdLVkIwTmNGRlhm VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h1Y1VZTlkzS0t4ZXE1R0tWQjBOY0ZGWGZVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzU4RS9FNzk5RjkyMkQ1M0QxMUVFOEYxRThBODVDNEY5QUUwMi9YdWNVWU5ZM0tL eGVxNUdLVkIwTmNGRlhmVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0FEUV0lgZF3JV0RLGCvIONSESnyYj7PtlcyiUn+yofGuiuUQS2qk5 9Ci4cPW9wUYLZ2BMqEVXtdfJKshwhuYRRAxIdtnT7t8xFDZ1xRQf70YLjuB2Ly5V KrMeP6ab6xeoHcbzJvGtfGRJe4uL++8QF4aCoMEj0HBdgVMhItwT78CQTJ6Z/V6B uKdlOt+B61bdCQf/qSe39In4dCq3/iw/+2HqU2YIfWXTZOPW1mskBgfDKBTy8StH VBAUzNhuDs4UUrdRQlcQ6nYKJWOxd8q65ImIDVwtaY9+YIhlH9V/+6JogzHuKBE7 L50tUQHvQ7FWgXAyMok6OrImlao9pEXv -----END CERTIFICATE-----Generated at Mon May 12 23:16:35 2025 by rpki-client