$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json) Hash identifier: uPmz3mTVqggkVWGakUMwWq9DRr089RrWjdFeWKCjt0M= Subject key identifier: 44:B4:D6:DF:59:EE:F5:C5:29:C0:CE:B1:C4:19:02:4E:35:91:72:8F Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Certificate serial: 3492 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft Manifest number: 3490 Signing time: Wed 02 Jul 2025 15:13:57 +0000 Manifest this update: Wed 02 Jul 2025 15:13:57 +0000 Manifest next update: Wed 09 Jul 2025 15:13:57 +0000 Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: 58W10H1ni9jjA42jLyvvDYucE/C0LRUcClKfCAnenVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13458 (0x3492) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Validity Not Before: Jul 2 15:13:57 2025 GMT Not After : Jul 9 15:13:57 2025 GMT Subject: CN=68654cb5-28e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2b:84:0e:2b:ff:08:c1:20:59:6d:4f:9a:15: 9f:fd:22:65:c4:c5:f3:40:9a:e5:1d:fb:3c:72:80: ac:ce:c0:ac:cf:90:c2:a4:8b:9e:02:f5:08:11:a6: ad:4d:26:b6:f2:87:5d:3c:be:43:7d:aa:ce:ca:22: d4:c3:b0:ad:2f:2f:a6:78:19:12:ec:e8:31:fe:a4: 5a:43:fc:83:7a:0c:e5:5d:ef:81:2b:cb:cc:7a:c3: 96:1e:bc:c4:df:82:9e:75:af:df:ee:75:a3:6b:a7: cf:a2:8f:03:56:96:4c:22:49:05:c0:6d:20:77:50: f3:a0:a8:ca:a1:04:f1:d3:c0:8c:44:3d:bd:8b:f0: 52:b4:3b:ab:f6:9f:1c:e3:ed:e2:58:b3:41:02:53: b1:94:79:67:e0:f5:22:7c:39:92:71:0c:7f:89:dd: 46:d4:d8:20:50:2c:04:37:35:02:cc:0d:66:9e:f9: 4c:15:b0:07:66:3e:0a:47:e7:79:2e:13:60:c5:13: 25:3a:a5:7f:2c:ed:39:8e:85:d9:ca:78:4a:09:ce: bf:ba:8f:67:50:7a:92:c6:8e:8a:07:fe:45:f6:da: f6:d5:10:c0:ff:bf:a7:5d:5d:4c:08:7b:0b:ee:ed: d7:53:bf:e9:4e:74:82:74:64:40:64:a0:d4:fe:f0: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B4:D6:DF:59:EE:F5:C5:29:C0:CE:B1:C4:19:02:4E:35:91:72:8F X509v3 Authority Key Identifier: keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:94:3b:ae:d5:5a:ac:28:05:e5:02:f2:f5:e4:16:70:1b:98: 3c:7c:c7:32:3a:42:77:72:40:d6:c6:cd:5e:ce:fa:45:d2:3c: a3:9d:43:99:e7:75:62:9b:cd:16:da:e7:ca:6a:49:56:6d:5e: ca:a1:07:e4:24:71:e6:38:34:93:e7:fc:2f:32:b8:1a:f3:52: ff:db:ff:34:fd:ea:b9:f6:76:fe:a0:04:21:1b:dc:53:84:05: 7b:a7:f2:d7:35:6c:e9:ac:0d:15:54:ab:71:6e:a1:40:fc:fc: 3f:6b:4c:16:88:b1:f0:84:6c:93:f9:e4:c3:dd:69:09:f5:da: 31:b6:ce:bd:9a:06:1b:f4:7c:60:20:26:12:dd:bf:ca:12:d9: 0a:91:9d:7c:a1:ad:dd:c3:ff:92:5f:22:6d:ea:ef:8a:45:18: b8:a4:b8:83:39:af:bd:d3:d6:54:a6:d9:96:9c:6e:72:1e:ad: 6a:20:72:63:c5:26:94:c7:a9:1e:0d:9f:8b:c4:d6:0b:80:97: c0:ef:5c:3a:cd:f9:0e:33:51:73:54:2e:4c:8b:e1:06:56:84: 76:2a:c0:26:27:d5:08:a3:d7:64:b2:ec:dc:e0:c2:99:98:50: bd:47:bf:3c:4e:79:7e:52:98:e7:8d:f0:d8:e2:29:a5:39:b5: 2d:cd:80:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE NUJEMENCQTUwHhcNMjUwNzAyMTUxMzU3WhcNMjUwNzA5MTUxMzU3WjAYMRYwFAYD VQQDEw02ODY1NGNiNS0yOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyuEDiv/CMEgWW1PmhWf/SJlxMXzQJrlHfs8coCszsCsz5DCpIueAvUIEaat TSa28oddPL5DfarOyiLUw7CtLy+meBkS7Ogx/qRaQ/yDegzlXe+BK8vMesOWHrzE 34Keda/f7nWja6fPoo8DVpZMIkkFwG0gd1DzoKjKoQTx08CMRD29i/BStDur9p8c 4+3iWLNBAlOxlHln4PUifDmScQx/id1G1NggUCwENzUCzA1mnvlMFbAHZj4KR+d5 LhNgxRMlOqV/LO05joXZynhKCc6/uo9nUHqSxo6KB/5F9tr21RDA/7+nXV1MCHsL 7u3XU7/pTnSCdGRAZKDU/vBtHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFES01t9Z 7vXFKcDOscQZAk41kXKPMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l eGFDU192NVY1QWZWdlF5NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCslDuu1VqsKAXlAvL15BZwG5g8fMcyOkJ3ckDWxs1ezvpF0jyjnUOZ 53Vim80W2ufKaklWbV7KoQfkJHHmODST5/wvMrga81L/2/80/eq59nb+oAQhG9xT hAV7p/LXNWzprA0VVKtxbqFA/Pw/a0wWiLHwhGyT+eTD3WkJ9doxts69mgYb9Hxg ICYS3b/KEtkKkZ18oa3dw/+SXyJt6u+KRRi4pLiDOa+909ZUptmWnG5yHq1qIHJj xSaUx6keDZ+LxNYLgJfA71w6zfkOM1FzVC5Mi+EGVoR2KsAmJ9UIo9dksuzc4MKZ mFC9R788Tnl+UpjnjfDY4imlObUtzYBf -----END CERTIFICATE-----Generated at Thu Jul 3 01:07:57 2025 by rpki-client