$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: /jJUha54/x1blxLO9X47cua8cJmop+wUDphIOfLplkc= Subject key identifier: 7F:21:A7:9A:7D:B1:CF:91:22:66:72:FA:6E:7D:AA:DE:06:07:06:C0 Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: 54 Signing time: Thu 15 May 2025 05:33:59 +0000 Manifest this update: Thu 15 May 2025 05:33:58 +0000 Manifest next update: Thu 22 May 2025 05:33:58 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: JXGlqbADERPRiCS1bW8UxmOp3LKZSwkmM/ezLp2ufQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: May 15 05:33:58 2025 GMT Not After : May 22 05:33:58 2025 GMT Subject: CN=68257cc7-85ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:b8:e2:b5:df:3c:33:f1:64:cb:98:7c:4f: d7:d2:b6:7e:fd:11:88:64:f7:58:cd:ae:6b:33:54: fc:69:4d:86:8a:df:cb:3e:d5:79:39:ed:7d:1e:6c: b9:22:12:0c:a2:ed:20:f1:42:8d:18:17:be:93:39: d1:66:5c:ea:b9:7b:80:8d:c2:02:08:c3:77:35:d2: fd:05:37:10:07:ac:25:0b:29:fd:77:cd:61:0e:82: 1e:88:22:88:2c:e0:67:f5:1d:b0:36:33:a6:cf:b9: f5:5f:57:c5:d4:71:59:12:91:84:e3:14:31:cf:d5: e8:61:29:92:1c:48:b9:61:6a:60:55:8f:50:36:9e: 42:57:cd:1a:39:0b:ec:15:fd:87:db:5b:b6:3a:43: 8b:cb:06:12:cd:4d:b7:aa:f1:24:dd:a3:05:86:c3: de:2a:f3:b5:7c:37:2d:a8:54:56:8b:9a:4c:41:99: 12:6f:ca:d3:88:20:34:98:d3:e3:81:78:21:57:c1: 02:19:f2:91:f1:35:fc:8a:1a:61:70:b7:e0:65:1f: 22:24:f0:6d:c8:54:e6:5b:e8:3b:ed:c3:98:cb:81: ab:56:1c:b1:de:30:15:96:6e:11:2b:ed:c0:73:43: 8f:47:a1:92:64:e5:5f:0f:0e:91:94:ac:9c:55:b3: f5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:21:A7:9A:7D:B1:CF:91:22:66:72:FA:6E:7D:AA:DE:06:07:06:C0 X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f0:a6:1a:76:98:35:fd:9f:fa:bb:9a:e2:7d:e9:17:f2:91: ab:aa:fe:d1:5f:48:e5:92:c6:4b:61:7b:c8:60:95:a7:37:61: a1:4e:50:4c:a4:43:9b:26:3e:24:84:8f:29:4c:3c:5b:67:5b: db:69:9c:8a:00:24:22:9c:67:51:91:17:2d:04:8d:91:06:72: ea:f8:30:10:ae:a3:b7:27:ca:f0:d6:d8:e8:e8:1f:11:75:78: b1:48:fb:29:33:e4:d0:eb:c7:d8:84:9b:83:16:9f:f7:9d:6c: 84:ec:dd:b2:9d:d8:1f:ab:f9:c7:0c:b9:0a:21:31:50:f1:24: 41:18:cd:d6:de:66:f8:f1:24:bc:c4:bd:52:23:50:9e:1d:4b: 3b:85:e1:c0:a3:d7:3c:d9:2d:2c:04:ab:70:f7:6f:9f:0b:31: 6f:bd:4c:df:cb:44:cf:80:62:8a:fc:24:f6:53:02:52:ad:dd: c3:b8:ef:b6:c3:41:94:20:d1:81:6e:f3:5d:24:33:cf:71:b5: c1:4c:1e:37:f2:18:ba:db:fc:07:9f:a9:fd:9a:21:34:0c:06: 0f:a2:91:a3:75:89:3e:ef:e3:68:c5:41:aa:66:56:e6:cc:f9: e6:d5:d3:5a:e2:cb:7f:af:dd:18:c9:5f:8d:70:95:1f:81:ee: ca:88:10:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDg1NTExMC8GA1UEBRMoNUVGNUUxQTU4NUM0OEUyQkM0NTBCQTcyRjRDMzEzNDY4 MEU1MkIwRDAeFw0yNTA1MTUwNTMzNThaFw0yNTA1MjIwNTMzNThaMBgxFjAUBgNV BAMTDTY4MjU3Y2M3LTg1ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZZ7jitd88M/Fky5h8T9fStn79EYhk91jNrmszVPxpTYaK38s+1Xk57X0ebLki Egyi7SDxQo0YF76TOdFmXOq5e4CNwgIIw3c10v0FNxAHrCULKf13zWEOgh6IIogs 4Gf1HbA2M6bPufVfV8XUcVkSkYTjFDHP1ehhKZIcSLlhamBVj1A2nkJXzRo5C+wV /YfbW7Y6Q4vLBhLNTbeq8STdowWGw94q87V8Ny2oVFaLmkxBmRJvytOIIDSY0+OB eCFXwQIZ8pHxNfyKGmFwt+BlHyIk8G3IVOZb6Dvtw5jLgatWHLHeMBWWbhEr7cBz Q49HoZJk5V8PDpGUrJxVs/WtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfyGnmn2x z5EiZnL6bn2q3gYHBsAwHwYDVR0jBBgwFoAUXvXhpYXEjivEULpy9MMTRoDlKw0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwODU1L0UxQUU1NDdDQjEz ODExRUY5QjUwMzMxMkM0RjlBRTAyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHZYaHBZWEVqaXZFVUxweTlNTVRSb0RsS3cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw ODU1L0UxQUU1NDdDQjEzODExRUY5QjUwMzMxMkM0RjlBRTAyL1h2WGhwWVhFaml2 RVVMcHk5TU1UUm9EbEt3MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC3wphp2mDX9n/q7muJ96Rfykauq/tFfSOWSxkthe8hglac3YaFOUEyk Q5smPiSEjylMPFtnW9tpnIoAJCKcZ1GRFy0EjZEGcur4MBCuo7cnyvDW2OjoHxF1 eLFI+ykz5NDrx9iEm4MWn/edbITs3bKd2B+r+ccMuQohMVDxJEEYzdbeZvjxJLzE vVIjUJ4dSzuF4cCj1zzZLSwEq3D3b58LMW+9TN/LRM+AYor8JPZTAlKt3cO477bD QZQg0YFu810kM89xtcFMHjfyGLrb/Aefqf2aITQMBg+ikaN1iT7v42jFQapmVubM +ebV01riy3+v3RjJX41wlR+B7sqIENE= -----END CERTIFICATE-----Generated at Fri May 16 14:37:03 2025 by rpki-client