$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: x1HyfxmDz7dXvdxjkfPK6Pm5jjasPRgKwajW8O2BYmc= Subject key identifier: 2F:DD:F6:E6:93:13:D0:61:29:35:EE:71:3C:7E:CB:C8:92:4D:DD:79 Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 01A5 Signing time: Wed 14 May 2025 23:42:40 +0000 Manifest this update: Wed 14 May 2025 23:42:39 +0000 Manifest next update: Wed 21 May 2025 23:42:39 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: CVTEgZPo0M+0yQu0R+5PO7jfgjt0ZMD1h8lUT7Za0n8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: May 14 23:42:39 2025 GMT Not After : May 21 23:42:39 2025 GMT Subject: CN=68252a70-f064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4e:6b:55:5b:f6:c7:f3:79:60:3d:5e:c2:e1: 88:68:ff:fc:fe:70:e6:96:fc:8d:8c:19:57:5b:42: 0d:9e:78:c7:da:3f:ad:ad:91:19:b1:ff:67:44:c3: a0:57:41:47:d8:46:a1:75:c8:15:24:01:3d:b4:af: 2a:2e:b7:75:3e:d8:82:91:d3:2c:e4:eb:6d:64:d6: d2:69:dc:50:e3:49:90:6b:72:9b:b7:02:70:a0:b6: 78:3c:ea:1f:71:d5:d6:48:c1:1d:e4:f7:90:22:cb: b5:57:19:f8:04:46:93:24:fe:ea:0e:a0:ff:42:43: e0:db:20:f9:b4:5f:b6:d1:58:01:6f:21:df:a0:58: e1:bf:05:a6:4f:db:26:5b:c7:18:2a:91:e6:a0:da: 35:2f:b2:17:05:fa:cf:79:b1:2f:85:2e:9c:5b:af: 92:a9:45:32:55:3d:54:90:04:5e:f1:c1:9c:37:a9: 41:61:61:7a:a4:29:b3:9c:3a:6f:8a:ab:d2:d2:30: 51:39:6a:9e:4a:c0:76:27:b4:4c:c4:44:38:96:4d: ae:85:25:86:b2:a1:b9:61:98:67:5f:57:38:35:48: 48:96:b1:69:27:24:49:36:18:2f:de:e2:ef:3d:99: 5f:1f:65:6e:0c:7b:1b:4e:66:51:b2:a7:ed:d7:94: 5c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DD:F6:E6:93:13:D0:61:29:35:EE:71:3C:7E:CB:C8:92:4D:DD:79 X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a4:4b:c5:5d:75:39:77:2b:31:ff:12:c5:03:6b:c0:7e:2c: 4c:86:91:47:dc:cf:61:dc:5c:8c:79:a0:81:56:cd:5f:05:5b: 30:f9:1d:3b:01:0e:d7:fb:c7:6c:99:0a:03:ac:ed:99:79:a6: b3:f3:fa:22:1b:25:71:ca:9b:4f:50:7a:4e:f1:16:7d:ff:6b: 8d:15:29:5f:25:c9:34:6a:d0:36:a4:27:1b:d9:72:7a:a5:9a: 9e:67:ad:3e:1b:48:4d:47:7a:7f:c1:60:7e:e3:71:30:1a:33: e4:86:39:25:35:28:6b:77:da:bc:2b:7f:b1:ef:82:5c:94:79: 5c:63:3c:63:b1:f9:c0:58:51:2c:ed:52:8a:85:0b:3a:23:49: de:2d:f1:e7:f2:73:1a:72:16:55:6f:4d:7a:45:4b:65:63:62: 72:3a:f7:d7:9f:43:aa:be:7d:ea:e1:a7:cc:59:5a:f7:9c:23: eb:6a:28:ec:52:10:4d:97:c2:5b:f8:6f:ae:9d:01:d6:11:0d: 1b:7f:d8:bb:02:d5:76:a6:64:cd:7f:a0:44:85:2c:ef:40:dd: 5f:37:8f:db:b6:b6:83:77:39:4a:5e:4d:29:ef:db:8c:dc:fd: ea:3c:be:7a:e7:35:11:2a:df:9d:a1:a9:47:a3:3d:d0:2f:b6: 59:b7:42:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjUwNTE0MjM0MjM5WhcNMjUwNTIxMjM0MjM5WjAYMRYwFAYD VQQDEw02ODI1MmE3MC1mMDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA805rVVv2x/N5YD1ewuGIaP/8/nDmlvyNjBlXW0INnnjH2j+trZEZsf9nRMOg V0FH2EahdcgVJAE9tK8qLrd1PtiCkdMs5OttZNbSadxQ40mQa3KbtwJwoLZ4POof cdXWSMEd5PeQIsu1Vxn4BEaTJP7qDqD/QkPg2yD5tF+20VgBbyHfoFjhvwWmT9sm W8cYKpHmoNo1L7IXBfrPebEvhS6cW6+SqUUyVT1UkARe8cGcN6lBYWF6pCmznDpv iqvS0jBROWqeSsB2J7RMxEQ4lk2uhSWGsqG5YZhnX1c4NUhIlrFpJyRJNhgv3uLv PZlfH2VuDHsbTmZRsqft15RcRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/d9uaT E9BhKTXucTx+y8iSTd15MB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLpEvFXXU5dysx/xLFA2vAfixMhpFH3M9h3FyMeaCBVs1fBVsw+R07 AQ7X+8dsmQoDrO2Zeaaz8/oiGyVxyptPUHpO8RZ9/2uNFSlfJck0atA2pCcb2XJ6 pZqeZ60+G0hNR3p/wWB+43EwGjPkhjklNShrd9q8K3+x74JclHlcYzxjsfnAWFEs 7VKKhQs6I0neLfHn8nMachZVb016RUtlY2JyOvfXn0Oqvn3q4afMWVr3nCPraijs UhBNl8Jb+G+unQHWEQ0bf9i7AtV2pmTNf6BEhSzvQN1fN4/btraDdzlKXk0p79uM 3P3qPL565zURKt+doalHoz3QL7ZZt0KG -----END CERTIFICATE-----Generated at Thu May 15 19:26:47 2025 by rpki-client