$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json) Hash identifier: 7E80R38hIUsaJUhMTY9lTr1EZlMPM3E7dzo51FtR85I= Subject key identifier: 78:4D:46:E2:D0:73:77:87:58:0D:D6:C8:61:72:10:C7:EC:DD:07:A8 Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft Manifest number: 0635 Signing time: Mon 12 May 2025 22:28:24 +0000 Manifest this update: Mon 12 May 2025 22:28:24 +0000 Manifest next update: Mon 19 May 2025 22:28:24 +0000 Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: 3ya/LyOCoz67yyNUu3VAgGOFd9fYBRzK4U6GvJA+opI=) 2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: NSWzyjE2HPsrPxuhTouX2YNe98sTsio9BMgnAVmwnyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Validity Not Before: May 12 22:28:24 2025 GMT Not After : May 19 22:28:24 2025 GMT Subject: CN=68227608-7433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:44:f4:91:e6:eb:72:42:ec:cf:01:16:c3: 73:fc:4f:93:5b:67:59:2d:ee:01:3f:21:7e:09:bd: e6:b8:70:d3:ae:d9:3c:73:93:c4:0a:f1:09:7c:e8: 58:f7:dd:36:75:2c:d8:3e:4f:5f:8f:03:62:44:45: a5:bb:c6:72:48:5a:a1:9f:f1:b3:c4:bc:f5:cf:0e: 27:f9:ef:67:0f:b9:36:18:9a:27:6c:b0:28:03:25: 83:6b:ec:da:76:a4:5d:87:12:6a:eb:7c:9a:8d:64: 34:a0:ae:48:f8:46:5d:28:7b:17:4a:1b:48:37:28: cd:44:a7:34:a0:eb:b9:67:3d:38:b5:9e:59:67:a6: 9f:f3:f5:0b:ca:e1:d0:90:bf:84:93:0a:b8:fc:b6: 82:4b:9e:17:2f:25:1e:97:61:6c:b1:a3:26:20:e3: 3f:cf:5e:5c:c0:24:d5:37:b2:4a:12:b6:c2:30:ec: 87:13:aa:79:03:fb:bf:e6:47:65:30:5b:5f:64:3e: 89:60:59:30:3f:2e:06:d2:30:3e:3b:75:1a:33:32: e3:11:b8:9e:2b:8c:54:9e:b6:6c:6a:bf:4d:a7:2e: d3:79:be:28:ac:50:63:a1:ff:97:3a:e2:ae:49:aa: 3b:3e:78:56:57:e6:d2:3f:57:8f:d5:4d:eb:35:c1: 66:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4D:46:E2:D0:73:77:87:58:0D:D6:C8:61:72:10:C7:EC:DD:07:A8 X509v3 Authority Key Identifier: keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:24:97:63:ac:37:07:7f:50:1f:c4:ce:50:d9:f8:0d:e2:b5: 2f:5b:b6:06:45:c6:34:37:27:17:c8:7b:52:c9:13:d9:4b:ce: d6:52:dd:89:4e:35:70:7a:a7:af:90:37:05:31:83:43:60:96: fa:b8:38:f2:33:03:7e:9e:eb:4c:06:5c:7e:7c:0c:64:c2:62: b4:25:2f:ce:83:53:f9:69:88:51:5c:ea:c9:6c:fa:7f:25:a5: 07:fd:af:d6:81:a6:18:48:39:13:60:6d:e5:e9:37:9d:64:28: 37:8f:63:af:75:fa:74:42:81:00:44:71:54:5f:51:9f:cf:87: 89:6c:40:64:ab:81:61:11:5b:c6:ae:9b:4b:18:b1:8f:4f:c0: 49:e5:c6:b9:e7:d1:9b:e3:32:b4:4e:1a:3f:b3:ba:21:28:4e: 3a:cf:0b:80:c1:95:73:56:b7:34:a8:bf:d8:2a:ac:a2:b0:df: dd:5a:e8:21:91:f3:11:72:b5:9e:bc:e1:60:36:c6:f8:0f:e9: 12:89:16:3b:05:f4:1a:40:60:b2:09:15:a1:f8:7f:51:ab:74: 06:5c:d3:75:e9:a3:b5:78:5d:e5:62:32:9b:f1:7c:fe:7a:bf: 70:5a:4f:09:40:6e:5d:ab:ee:a7:64:64:86:a2:5a:df:9e:e3: 8a:10:a1:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFQkExMTAvBgNVBAUTKDVDMzdDREZDQzhFOUU5MEM0MTE2NEEzOTFFRTkwM0I0 REU1NERGQjEwHhcNMjUwNTEyMjIyODI0WhcNMjUwNTE5MjIyODI0WjAYMRYwFAYD VQQDEw02ODIyNzYwOC03NDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPlE9JHm63JC7M8BFsNz/E+TW2dZLe4BPyF+Cb3muHDTrtk8c5PECvEJfOhY 9902dSzYPk9fjwNiREWlu8ZySFqhn/GzxLz1zw4n+e9nD7k2GJonbLAoAyWDa+za dqRdhxJq63yajWQ0oK5I+EZdKHsXShtINyjNRKc0oOu5Zz04tZ5ZZ6af8/ULyuHQ kL+Ekwq4/LaCS54XLyUel2FssaMmIOM/z15cwCTVN7JKErbCMOyHE6p5A/u/5kdl MFtfZD6JYFkwPy4G0jA+O3UaMzLjEbieK4xUnrZsar9Npy7Teb4orFBjof+XOuKu Sao7PnhWV+bSP1eP1U3rNcFmzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhNRuLQ c3eHWA3WyGFyEMfs3QeoMB8GA1UdIwQYMBaAFFw3zfzI6ekMQRZKOR7pA7TeVN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVCQS84Mzk0RTI1MDkx RUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZReEJGa281SHVrRHRONVUz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEZk5fTWpwNlF4QkZrbzVIdWtEdE41VTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUVCQS84Mzk0RTI1MDkxRUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZR eEJGa281SHVrRHRONVUzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYJJdjrDcHf1AfxM5Q2fgN4rUvW7YGRcY0NycXyHtSyRPZS87WUt2J TjVweqevkDcFMYNDYJb6uDjyMwN+nutMBlx+fAxkwmK0JS/Og1P5aYhRXOrJbPp/ JaUH/a/WgaYYSDkTYG3l6TedZCg3j2Ovdfp0QoEARHFUX1Gfz4eJbEBkq4FhEVvG rptLGLGPT8BJ5ca559Gb4zK0Tho/s7ohKE46zwuAwZVzVrc0qL/YKqyisN/dWugh kfMRcrWevOFgNsb4D+kSiRY7BfQaQGCyCRWh+H9Rq3QGXNN16aO1eF3lYjKb8Xz+ er9wWk8JQG5dq+6nZGSGolrfnuOKEKHz -----END CERTIFICATE-----Generated at Wed May 14 11:35:09 2025 by rpki-client