$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: vJAIsQtK7I5TAFkOtbvAX8FyLDFLDFQmoWIrobnKywc= Subject key identifier: DB:C0:A0:43:B6:A0:12:D7:1E:71:86:04:2F:EF:62:DC:E7:0F:BC:36 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: EF Signing time: Tue 13 May 2025 04:29:35 +0000 Manifest this update: Tue 13 May 2025 04:29:34 +0000 Manifest next update: Tue 20 May 2025 04:29:34 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: 69mVBKb20qQ2yi3rupwpnTT+k44oZuDVpm9jRW6tShc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: May 13 04:29:34 2025 GMT Not After : May 20 04:29:34 2025 GMT Subject: CN=6822caae-9f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:bf:93:af:d5:05:fe:ae:1d:06:61:47:26: 86:12:c3:6d:9b:e9:64:2c:4b:bb:df:3b:8e:1b:7e: 10:2e:b4:8e:fb:9d:99:85:00:66:16:5d:b2:09:f9: ff:e7:37:1f:3f:d8:99:f7:a9:1f:f0:14:aa:28:5b: 43:6d:8d:57:fd:37:1f:fb:6b:7c:b6:77:5a:cb:d0: a6:dc:f1:af:91:1d:54:5c:27:f4:5a:a0:7b:84:89: 69:20:25:eb:86:5b:88:16:f3:61:65:60:03:17:7e: a2:ee:95:c0:2b:d2:f6:57:2c:79:04:42:17:fd:fe: 33:54:e4:53:f2:9b:ac:2f:52:d7:cb:1d:28:87:7c: 49:eb:62:71:64:f7:0d:12:e1:ab:c0:cc:b7:da:66: 16:63:68:c8:44:37:d5:d0:d9:ea:3b:11:f7:b8:b3: 82:10:88:22:31:e1:69:cd:b5:97:bf:4e:42:95:52: c6:47:13:0f:9c:4d:56:a5:1e:5b:5c:a0:ff:1e:b0: eb:f6:a7:09:b8:da:a8:a9:f8:24:36:1c:f4:01:56: ce:f9:50:83:e8:b0:62:f7:dc:88:a8:b8:10:3a:fc: b9:ee:ac:db:cc:0a:3c:ce:3b:c2:e0:ba:fe:55:2a: 7f:cd:91:e2:48:22:8b:ac:4d:0e:59:66:12:2c:e9: d7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C0:A0:43:B6:A0:12:D7:1E:71:86:04:2F:EF:62:DC:E7:0F:BC:36 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:56:f3:2d:95:dd:3a:b1:95:cc:43:3a:5f:36:a4:0f:a0:c3: 9b:1e:85:77:25:4b:86:7b:63:54:ab:8f:e8:73:17:41:85:3a: ed:db:1c:19:54:c4:4e:9a:a0:0f:ff:c1:fc:64:8d:22:95:e7: 4a:e4:fe:22:1c:2a:68:be:c0:26:e2:8a:53:22:f7:ab:96:e3: eb:3c:bb:5c:f4:89:df:dd:92:4e:8b:26:52:d4:6a:89:f7:4a: 80:bb:40:7e:5c:e5:c2:3d:e0:0c:4a:21:41:bf:d7:3e:0f:50: 99:bb:9e:21:96:fe:dc:68:63:40:3f:ee:35:f0:66:fd:41:b1: 2d:19:7d:9e:34:e3:9f:d9:a6:1e:a9:59:77:58:07:d4:76:7a: 3a:36:51:4f:39:7e:c3:df:8c:28:a6:01:ef:f1:6d:53:e4:52: d8:e4:ef:8a:6e:44:29:52:13:da:4e:9a:db:c5:99:a2:8c:61: d5:fc:6e:80:b7:8e:86:69:b2:02:70:fc:31:1a:77:c0:29:02: d4:08:16:fe:19:89:36:ef:59:ba:54:ee:6d:9d:35:cb:a0:6c: 9f:b5:42:59:ae:c1:80:f1:e2:38:8b:9e:3c:d8:56:f5:d8:60: 19:65:73:f3:e4:5c:e8:11:8d:55:ce:a0:ca:ee:36:49:50:a1: cf:58:1e:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjUwNTEzMDQyOTM0WhcNMjUwNTIwMDQyOTM0WjAYMRYwFAYD VQQDEw02ODIyY2FhZS05ZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJy/k6/VBf6uHQZhRyaGEsNtm+lkLEu73zuOG34QLrSO+52ZhQBmFl2yCfn/ 5zcfP9iZ96kf8BSqKFtDbY1X/Tcf+2t8tnday9Cm3PGvkR1UXCf0WqB7hIlpICXr hluIFvNhZWADF36i7pXAK9L2Vyx5BEIX/f4zVORT8pusL1LXyx0oh3xJ62JxZPcN EuGrwMy32mYWY2jIRDfV0NnqOxH3uLOCEIgiMeFpzbWXv05ClVLGRxMPnE1WpR5b XKD/HrDr9qcJuNqoqfgkNhz0AVbO+VCD6LBi99yIqLgQOvy57qzbzAo8zjvC4Lr+ VSp/zZHiSCKLrE0OWWYSLOnXfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvAoEO2 oBLXHnGGBC/vYtznD7w2MB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPVvMtld06sZXMQzpfNqQPoMObHoV3JUuGe2NUq4/ocxdBhTrt2xwZ VMROmqAP/8H8ZI0iledK5P4iHCpovsAm4opTIverluPrPLtc9Inf3ZJOiyZS1GqJ 90qAu0B+XOXCPeAMSiFBv9c+D1CZu54hlv7caGNAP+418Gb9QbEtGX2eNOOf2aYe qVl3WAfUdno6NlFPOX7D34wopgHv8W1T5FLY5O+KbkQpUhPaTprbxZmijGHV/G6A t46GabICcPwxGnfAKQLUCBb+GYk271m6VO5tnTXLoGyftUJZrsGA8eI4i5482Fb1 2GAZZXPz5FzoEY1VzqDK7jZJUKHPWB6h -----END CERTIFICATE-----Generated at Wed May 14 19:50:04 2025 by rpki-client