$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft File: XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft (raw, json) Hash identifier: 65EsK70+3O7bhG/Zk8CK4M8KIGuCMlJLATTU2W3w3EE= Subject key identifier: C7:4C:83:6D:15:4E:7C:56:25:D4:01:E2:37:1F:13:C4:B4:56:F6:5C Authority key identifier: 5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 Certificate issuer: /CN=A91D28E1/serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft Manifest number: 010B Signing time: Tue 13 May 2025 04:12:49 +0000 Manifest this update: Tue 13 May 2025 04:12:49 +0000 Manifest next update: Tue 20 May 2025 04:12:49 +0000 Files and hashes: 1: XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl (hash: 1lLBRwSK2Ms0PK2OEGCp344li+AgZaF7x5P1Ec5KBgY=) 2: 0A576F089A4C11EEBD557E12C4F9AE02.roa (hash: W3PBLvmUcdE3zAX7FZy5vyT9kW67f//Ujbv+JZHmvZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28E1, serialNumber=5D5F6190215DFF0AC35432BC3A52A08BD341B700 Validity Not Before: May 13 04:12:49 2025 GMT Not After : May 20 04:12:49 2025 GMT Subject: CN=6822c6c1-a9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:aa:61:58:69:31:b7:ac:d9:94:d0:8a:9b: b1:3d:de:bf:c5:62:51:86:cc:a7:7d:ae:be:fb:5a: 96:1c:34:1b:63:63:1c:3d:98:20:fd:2d:97:d8:e2: 6a:a7:15:ff:28:9f:6a:d0:9e:ce:49:83:0e:b3:eb: ff:5f:8e:c4:05:39:a7:55:b8:f7:7d:e2:84:3c:3a: ab:41:3e:11:9d:b3:b3:fb:22:ff:1a:cd:39:65:c3: 85:a3:a8:ed:82:45:fb:b1:1e:6c:f3:a5:94:4e:51: 85:e3:b4:e6:84:52:56:7d:e2:b5:79:80:4b:12:99: b1:55:d2:92:fa:c1:cc:de:77:16:71:85:90:47:63: bd:32:85:d3:be:5f:4e:04:0b:eb:12:c7:ab:47:2a: 5e:63:33:4c:41:25:2a:a4:33:82:bb:f3:51:8a:ae: 6e:70:d7:40:32:d3:ee:c1:69:07:a9:fe:24:94:92: ed:9a:52:43:8a:de:62:28:f9:66:1e:c5:75:18:9c: 03:d9:90:a1:9d:b5:48:39:ae:e1:f4:08:7c:6a:76: 0b:3f:fb:6d:f5:cc:22:70:b9:a2:3e:ba:98:b2:a7: c8:ae:94:6b:f2:f3:5d:85:73:6d:90:d4:62:ce:69: 6f:28:58:5b:79:99:55:9e:4d:69:6d:de:aa:88:b9: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4C:83:6D:15:4E:7C:56:25:D4:01:E2:37:1F:13:C4:B4:56:F6:5C X509v3 Authority Key Identifier: keyid:5D:5F:61:90:21:5D:FF:0A:C3:54:32:BC:3A:52:A0:8B:D3:41:B7:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XV9hkCFd_wrDVDK8OlKgi9NBtwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28E1/BBE3D43A9A4911EE9092E070C4F9AE02/XV9hkCFd_wrDVDK8OlKgi9NBtwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:8c:d9:bb:b4:7f:54:ba:d1:07:98:8f:a7:2e:5f:99:74:43: f5:45:fc:d8:c6:22:db:93:1f:5a:6b:b9:0b:ca:52:4e:73:25: 96:d9:3d:ea:f8:d4:38:22:e4:47:fa:47:d0:80:2a:b8:cd:8c: 83:d5:48:d9:7e:96:3d:26:66:89:1f:1d:11:e4:f4:bf:34:77: 78:85:48:cb:c7:21:29:63:c1:96:a3:3e:ef:da:c2:36:56:3d: 63:0a:6d:19:4e:d2:37:7f:64:07:17:50:35:56:ee:ac:7a:f7: a9:5f:bf:6a:85:ff:4b:f2:4f:01:f4:e8:79:dc:78:08:48:e8: 8c:38:0d:fe:fc:b9:20:e1:01:7f:dd:f2:6e:99:be:06:eb:a8: e7:ce:92:c7:f7:f4:3e:46:51:50:63:e0:de:d6:b2:da:d2:ed: 14:5b:9e:42:69:4d:f2:98:22:d3:8b:c7:0f:60:25:c9:21:42: 23:71:8f:8a:dd:26:ab:0d:ee:da:5e:7f:e2:35:59:fe:94:4c: 72:72:69:32:66:fc:62:ce:5f:0c:8e:63:65:33:4c:9a:6f:26: cb:8c:8c:87:30:78:45:88:98:9d:ed:b8:a4:98:84:25:36:f8: 21:c6:37:85:03:59:e0:53:9d:3a:12:67:96:a5:59:93:be:fd: d9:0f:21:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4RTExMTAvBgNVBAUTKDVENUY2MTkwMjE1REZGMEFDMzU0MzJCQzNBNTJBMDhC RDM0MUI3MDAwHhcNMjUwNTEzMDQxMjQ5WhcNMjUwNTIwMDQxMjQ5WjAYMRYwFAYD VQQDEw02ODIyYzZjMS1hOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZ+qYVhpMbes2ZTQipuxPd6/xWJRhsynfa6++1qWHDQbY2McPZgg/S2X2OJq pxX/KJ9q0J7OSYMOs+v/X47EBTmnVbj3feKEPDqrQT4RnbOz+yL/Gs05ZcOFo6jt gkX7sR5s86WUTlGF47TmhFJWfeK1eYBLEpmxVdKS+sHM3ncWcYWQR2O9MoXTvl9O BAvrEserRypeYzNMQSUqpDOCu/NRiq5ucNdAMtPuwWkHqf4klJLtmlJDit5iKPlm HsV1GJwD2ZChnbVIOa7h9Ah8anYLP/tt9cwicLmiPrqYsqfIrpRr8vNdhXNtkNRi zmlvKFhbeZlVnk1pbd6qiLnwlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdMg20V TnxWJdQB4jcfE8S0VvZcMB8GA1UdIwQYMBaAFF1fYZAhXf8Kw1QyvDpSoIvTQbcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhFMS9CQkUzRDQzQTlB NDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93ckRWREs4T2xLZ2k5TkJ0 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hWOWhrQ0ZkX3dyRFZESzhPbEtnaTlOQnR3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhFMS9CQkUzRDQzQTlBNDkxMUVFOTA5MkUwNzBDNEY5QUUwMi9YVjloa0NGZF93 ckRWREs4T2xLZ2k5TkJ0d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQjNm7tH9UutEHmI+nLl+ZdEP1RfzYxiLbkx9aa7kLylJOcyWW2T3q +NQ4IuRH+kfQgCq4zYyD1UjZfpY9JmaJHx0R5PS/NHd4hUjLxyEpY8GWoz7v2sI2 Vj1jCm0ZTtI3f2QHF1A1Vu6sevepX79qhf9L8k8B9Oh53HgISOiMOA3+/Lkg4QF/ 3fJumb4G66jnzpLH9/Q+RlFQY+De1rLa0u0UW55CaU3ymCLTi8cPYCXJIUIjcY+K 3SarDe7aXn/iNVn+lExycmkyZvxizl8MjmNlM0yabybLjIyHMHhFiJid7bikmIQl NvghxjeFA1ngU506EmeWpVmTvv3ZDyEl -----END CERTIFICATE-----Generated at Tue May 13 23:12:17 2025 by rpki-client