$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json) Hash identifier: Sbejl87dvEykD+0eyYCKWLQIFdxt5N4eBQWWq9P23zo= Subject key identifier: 65:51:BE:9B:A2:B2:69:2B:37:1B:76:92:F8:BD:43:58:CF:BA:78:9D Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Certificate serial: 3478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft Manifest number: 3476 Signing time: Mon 12 May 2025 15:07:44 +0000 Manifest this update: Mon 12 May 2025 15:07:44 +0000 Manifest next update: Mon 19 May 2025 15:07:44 +0000 Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: sSViErB7XXLpA1Bh1HXYTEFogGor2gRWPEjIJf7K35M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13432 (0x3478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Validity Not Before: May 12 15:07:44 2025 GMT Not After : May 19 15:07:44 2025 GMT Subject: CN=68220ec0-0cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d4:28:c4:74:c3:77:c5:04:29:a3:0e:65:47: db:60:56:e2:39:99:30:19:f7:9d:16:d5:6a:eb:23: 9a:94:fd:2f:54:47:94:5b:1a:b9:ca:32:5f:3e:21: ed:9e:f9:eb:ed:ed:82:4e:32:5e:e9:c5:ff:91:d8: 6c:50:90:db:cc:7b:69:ca:28:46:7b:9b:0c:0c:34: 94:07:3a:81:bc:d2:a6:57:8f:7d:69:b7:58:c9:57: 8c:27:9a:62:3b:9e:ea:14:0f:1b:1e:a9:ba:b8:3c: 8b:75:ac:93:1a:a5:bc:d3:a5:44:0c:d1:e4:0f:2b: 98:7e:72:21:88:bf:24:c0:26:c7:58:ea:cc:71:e2: dc:51:c2:c5:10:fb:9a:ea:ff:4c:10:b1:6d:69:11: 13:b1:ac:6e:81:f0:81:86:6f:df:c7:b4:48:36:1b: ef:d3:8a:71:31:f7:a2:a2:10:c4:c4:7f:10:77:ca: 17:de:76:07:fe:e5:d1:86:74:90:08:a9:ee:b6:47: c4:35:68:5f:98:d5:57:f1:ef:9d:b0:a3:32:c1:22: 7b:43:5e:80:7e:8c:c9:dd:91:65:35:3c:17:67:2a: de:31:ee:4b:72:53:cd:24:fd:2b:95:9f:69:b7:6d: c4:7a:90:82:ca:7c:45:4e:70:d0:bb:e0:bf:78:c8: fa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:51:BE:9B:A2:B2:69:2B:37:1B:76:92:F8:BD:43:58:CF:BA:78:9D X509v3 Authority Key Identifier: keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:7a:3a:89:fd:27:95:8e:c5:4c:80:1c:f2:fa:9a:df:15:8a: 6b:ff:31:bb:08:cd:78:a2:f3:43:cc:8f:57:68:55:ed:b4:fd: 9d:94:6d:73:8f:37:9d:00:f4:0d:ee:8c:f9:9b:05:b2:bc:a8: b1:47:94:ae:74:2f:f5:00:ad:97:e4:32:eb:ff:f8:70:be:b3: 7a:89:55:3a:63:6a:28:13:ca:17:6c:30:86:4a:63:09:7c:2d: ce:bc:cb:ec:da:01:59:20:a7:ca:f7:44:46:d9:53:67:e2:4c: 7b:91:c2:44:7a:57:e8:08:bc:1e:c8:65:95:58:4b:f7:3c:0a: 38:42:29:45:f7:fa:e7:2a:82:d7:d7:52:bf:c6:d1:05:9e:05: aa:95:f5:5f:c5:29:1c:f0:f5:35:9d:eb:1a:61:58:a0:e0:15: 96:4d:53:fd:d0:e8:68:e5:0f:06:f6:91:3b:9e:65:69:b1:e8: 68:78:fd:ca:ae:58:24:33:ed:d6:f3:b6:8b:17:cd:be:ff:f2: 7d:03:04:60:fb:93:69:5c:1b:db:ad:aa:d0:7c:fb:54:ce:58: cd:a1:49:78:2a:e7:cd:0c:3b:34:a6:9a:e1:f8:1a:cc:b8:be: aa:e5:c2:a5:d6:dc:29:20:6a:b3:4e:7f:3c:9d:21:1c:a4:ac: 12:a3:0e:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE NUJEMENCQTUwHhcNMjUwNTEyMTUwNzQ0WhcNMjUwNTE5MTUwNzQ0WjAYMRYwFAYD VQQDEw02ODIyMGVjMC0wY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkdQoxHTDd8UEKaMOZUfbYFbiOZkwGfedFtVq6yOalP0vVEeUWxq5yjJfPiHt nvnr7e2CTjJe6cX/kdhsUJDbzHtpyihGe5sMDDSUBzqBvNKmV499abdYyVeMJ5pi O57qFA8bHqm6uDyLdayTGqW806VEDNHkDyuYfnIhiL8kwCbHWOrMceLcUcLFEPua 6v9MELFtaRETsaxugfCBhm/fx7RINhvv04pxMfeiohDExH8Qd8oX3nYH/uXRhnSQ CKnutkfENWhfmNVX8e+dsKMywSJ7Q16AfozJ3ZFlNTwXZyreMe5LclPNJP0rlZ9p t23EepCCynxFTnDQu+C/eMj66wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVRvpui smkrNxt2kvi9Q1jPunidMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l eGFDU192NVY1QWZWdlF5NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTejqJ/SeVjsVMgBzy+prfFYpr/zG7CM14ovNDzI9XaFXttP2dlG1z jzedAPQN7oz5mwWyvKixR5SudC/1AK2X5DLr//hwvrN6iVU6Y2ooE8oXbDCGSmMJ fC3OvMvs2gFZIKfK90RG2VNn4kx7kcJEelfoCLweyGWVWEv3PAo4QilF9/rnKoLX 11K/xtEFngWqlfVfxSkc8PU1nesaYVig4BWWTVP90Oho5Q8G9pE7nmVpsehoeP3K rlgkM+3W87aLF82+//J9AwRg+5NpXBvbrarQfPtUzljNoUl4KufNDDs0pprh+BrM uL6q5cKl1twpIGqzTn88nSEcpKwSow6I -----END CERTIFICATE-----Generated at Mon May 12 22:52:21 2025 by rpki-client