$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft File: xqIW5CMmizknfcEi8-Gq2GxtmkM.mft (raw, json) Hash identifier: QOxLyb1Z3vkJOKIDcMgBWMAaWRfcN1gEPPHmddv1xLw= Subject key identifier: 06:20:97:1E:AB:EE:80:47:22:2F:4E:0F:A0:CB:A3:4B:26:76:67:6A Authority key identifier: C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 Certificate issuer: /CN=A9135FB6/serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft Manifest number: 53 Signing time: Sat 03 May 2025 06:34:31 +0000 Manifest this update: Sat 03 May 2025 06:34:31 +0000 Manifest next update: Sat 10 May 2025 06:34:31 +0000 Files and hashes: 1: xqIW5CMmizknfcEi8-Gq2GxtmkM.crl (hash: CnFT4dH5Ri4IB3P4QIA/aob7cR7vfR147hKPVb6nojk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135FB6, serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Validity Not Before: May 3 06:34:31 2025 GMT Not After : May 10 06:34:31 2025 GMT Subject: CN=6815b8f7-3a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:42:a5:8c:2b:af:4e:15:1b:d0:94:7b:6e:77: 17:04:df:85:f2:61:90:ba:3b:ed:7c:4d:4c:1a:f3: d8:4f:f6:cb:ac:97:91:b3:fc:b9:9c:2f:df:e0:78: 62:b8:af:76:ac:9b:65:4c:2e:1a:8d:3a:80:b0:65: f9:c3:9e:c8:97:29:e8:87:46:ed:c5:aa:1c:bf:8c: aa:ca:c5:71:7d:66:02:38:7d:a0:50:b9:cd:90:00: 7a:d9:45:a7:12:41:28:df:d7:d6:b7:60:b1:e2:33: 64:0d:b9:88:8f:ad:27:ae:00:ab:49:7f:34:c9:c6: 41:c6:78:94:2a:f0:ff:d2:8f:6f:e2:8f:e3:5a:9b: 67:48:6e:3c:76:56:e9:45:69:60:52:3c:41:77:6d: 6c:8f:b7:c3:ee:21:9a:97:70:67:f6:71:b8:3d:0d: aa:b1:53:9a:ab:32:d4:13:ed:8e:df:f8:65:5d:bd: 10:be:8e:ef:0e:9f:dc:84:9e:ea:7c:c4:92:2c:c4: 8b:d2:04:9f:3d:50:75:11:7f:89:b9:15:4e:1f:32: 09:d9:ba:ca:99:f2:28:f2:41:08:5b:2a:55:93:a1: 68:8b:ea:cc:44:30:4c:d0:99:25:de:7f:8e:c5:09: 56:f6:8f:d5:cc:f0:b2:43:e4:17:b1:0e:cb:d2:ed: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:20:97:1E:AB:EE:80:47:22:2F:4E:0F:A0:CB:A3:4B:26:76:67:6A X509v3 Authority Key Identifier: keyid:C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:77:27:98:59:41:2a:9f:25:8e:e3:d1:ae:e6:50:f9:2f:7c: a9:2f:84:d7:91:4d:ee:7d:88:45:57:f4:33:37:9e:7f:d9:f5: 07:20:98:95:28:18:00:00:f8:9f:2e:ce:7f:98:d3:db:af:0a: 98:33:62:42:c1:c6:ab:d7:25:fd:45:f8:c4:d6:c0:bd:8e:3f: 4e:aa:e1:c2:83:f0:9b:a4:aa:a8:4e:94:e6:5a:21:35:74:46: 6b:a7:c8:90:fc:70:76:31:eb:db:2c:1e:fd:10:88:04:68:c5: 01:b5:e3:22:51:a9:8c:ad:f6:79:bb:2d:a1:29:dd:10:0d:b8: a1:8d:45:79:7e:6b:56:79:0f:2d:9d:31:ef:39:47:89:bf:f4: e4:46:14:f6:00:f5:24:74:ac:56:a9:fc:2d:cd:24:29:0f:fd: aa:3b:d1:8a:60:3f:11:d9:93:2a:3c:98:ef:3f:de:f1:39:ed: 5d:b7:4e:a1:06:c6:e6:e9:cb:10:79:40:cb:49:5a:32:01:82: de:cc:46:fc:86:39:6f:4a:c2:26:fc:6b:77:84:b0:06:c7:43: 7a:16:0f:96:fd:c1:6d:44:bd:5d:16:d5:a8:a7:c5:a6:00:91: 28:08:1d:0a:fe:fe:90:3d:a9:75:3f:ba:96:35:c7:35:e6:09: a9:e1:88:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUZCNjExMC8GA1UEBRMoQzZBMjE2RTQyMzI2OEIzOTI3N0RDMTIyRjNFMUFBRDg2 QzZEOUE0MzAeFw0yNTA1MDMwNjM0MzFaFw0yNTA1MTAwNjM0MzFaMBgxFjAUBgNV BAMTDTY4MTViOGY3LTNhM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdQqWMK69OFRvQlHtudxcE34XyYZC6O+18TUwa89hP9susl5Gz/LmcL9/geGK4 r3asm2VMLhqNOoCwZfnDnsiXKeiHRu3Fqhy/jKrKxXF9ZgI4faBQuc2QAHrZRacS QSjf19a3YLHiM2QNuYiPrSeuAKtJfzTJxkHGeJQq8P/Sj2/ij+Nam2dIbjx2VulF aWBSPEF3bWyPt8PuIZqXcGf2cbg9DaqxU5qrMtQT7Y7f+GVdvRC+ju8On9yEnup8 xJIsxIvSBJ89UHURf4m5FU4fMgnZusqZ8ijyQQhbKlWToWiL6sxEMEzQmSXef47F CVb2j9XM8LJD5BexDsvS7VgpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBiCXHqvu gEciL04PoMujSyZ2Z2owHwYDVR0jBBgwFoAUxqIW5CMmizknfcEi8+Gq2GxtmkMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RkI2LzhFQzM1REU0QUM2 NDExRUZCNjg0MjY3QkM0RjlBRTAyL3hxSVc1Q01taXprbmZjRWk4LUdxMkd4dG1r TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHFJVzVDTW1pemtuZmNFaTgtR3EyR3h0bWtNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RkI2LzhFQzM1REU0QUM2NDExRUZCNjg0MjY3QkM0RjlBRTAyL3hxSVc1Q01taXpr bmZjRWk4LUdxMkd4dG1rTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKt3J5hZQSqfJY7j0a7mUPkvfKkvhNeRTe59iEVX9DM3nn/Z9QcgmJUo GAAA+J8uzn+Y09uvCpgzYkLBxqvXJf1F+MTWwL2OP06q4cKD8JukqqhOlOZaITV0 RmunyJD8cHYx69ssHv0QiARoxQG14yJRqYyt9nm7LaEp3RANuKGNRXl+a1Z5Dy2d Me85R4m/9ORGFPYA9SR0rFap/C3NJCkP/ao70YpgPxHZkyo8mO8/3vE57V23TqEG xubpyxB5QMtJWjIBgt7MRvyGOW9Kwib8a3eEsAbHQ3oWD5b9wW1EvV0W1ainxaYA kSgIHQr+/pA9qXU/upY1xzXmCanhiA4= -----END CERTIFICATE-----Generated at Sat May 3 13:58:13 2025 by rpki-client