$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json) Hash identifier: 6Da9lWhT2UtiGHwIMgdTUTXH3YTjex3kxqPY1On3kU8= Subject key identifier: 8C:0A:F7:73:DF:6B:AD:08:F5:C0:D9:9E:F2:BB:D6:F6:F9:C2:28:5D Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Certificate serial: 2B95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft Manifest number: 2B95 Signing time: Thu 24 Apr 2025 15:33:02 +0000 Manifest this update: Thu 24 Apr 2025 15:33:01 +0000 Manifest next update: Thu 01 May 2025 15:33:01 +0000 Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: m73QxDEUIQF44QYOzs5UBpC1kfXf8Eyi902idPt3gtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11157 (0x2b95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Validity Not Before: Apr 24 15:33:01 2025 GMT Not After : May 1 15:33:01 2025 GMT Subject: CN=680a59ae-10a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:d6:85:4b:3d:eb:06:6a:4b:61:ef:20:d5: 66:97:e8:b1:c1:40:b8:94:bc:50:6b:c3:58:fa:0a: c6:e3:cb:8a:e8:f0:b4:c8:6f:78:89:4b:0c:39:a5: 99:c3:5a:68:8d:12:32:0e:8d:cd:a2:9e:ed:18:99: 60:f1:3a:50:76:02:1d:bf:79:4b:5f:ef:ec:a1:97: 35:be:a7:d0:d0:0c:87:95:4b:82:b8:18:92:ba:91: 48:02:e0:ce:22:2b:53:cd:c1:81:84:97:eb:6b:a1: 52:8b:f6:39:eb:06:26:f7:6b:0a:7d:f5:37:8c:22: 47:3c:3e:1d:39:4d:56:0a:88:78:64:76:bd:ea:62: 8f:b8:d1:c5:c7:1e:1a:9d:30:8d:03:8a:ba:d9:58: f6:8d:7d:49:b5:32:dc:c9:67:28:82:c4:e8:3e:5a: 97:f5:bf:8e:d3:f9:aa:8a:a8:75:9f:10:03:fa:ae: 81:a4:18:aa:17:a0:e5:7c:7c:a6:9e:48:55:6c:87: 59:3a:d1:83:5b:4d:42:e3:03:7b:4e:3a:19:f1:f1: b0:5d:85:88:08:9f:e3:da:d3:46:fb:78:71:a6:1e: 2e:4a:f9:8c:b0:a1:d0:60:73:9d:4c:1d:a6:df:63: bb:59:69:be:52:77:dc:75:ce:e3:d0:66:40:33:6a: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0A:F7:73:DF:6B:AD:08:F5:C0:D9:9E:F2:BB:D6:F6:F9:C2:28:5D X509v3 Authority Key Identifier: keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:0f:fc:13:ba:e7:11:81:18:23:2f:51:8e:a6:e8:6e:c5:fc: e2:f6:fd:58:60:72:65:c1:71:b0:2b:2e:ca:06:5b:bf:15:89: c2:41:eb:1f:c1:dc:89:fc:98:9d:ea:1f:b4:8a:55:2a:73:b6: fa:c0:f5:94:67:1a:b5:b2:45:2c:2d:aa:bf:f6:a2:b4:a8:ad: 28:2c:6c:2d:92:0d:e8:e5:2f:a0:3c:33:e8:4c:71:49:ac:c2: 9b:57:a7:8b:be:e0:bb:24:47:ed:e2:b1:ac:cf:7e:ad:5d:b6: 1d:58:77:f6:84:81:a3:d2:68:d0:b2:49:1c:eb:2b:e8:7d:08: 72:bb:ef:cc:c8:bf:b4:56:04:4c:d5:dd:e6:8c:6b:a6:b1:a5: 8c:76:08:26:4c:ff:4b:9a:73:4d:b7:1c:65:8e:1e:8f:bf:95: 22:f4:89:95:83:40:21:28:e2:4a:8f:b1:f6:be:e8:4a:f8:f1: 04:4e:9d:0c:26:43:bc:32:6b:9f:c0:2b:9c:67:cc:55:c5:a1: e8:33:c0:9a:d8:87:b4:12:6f:d5:b9:f6:7a:03:81:88:78:33: ee:57:99:27:03:d0:fe:d8:9f:8e:a5:16:fd:a1:88:a7:18:dc: c0:f8:f7:a8:a2:b6:a8:eb:58:a4:29:c5:f1:8f:6b:2b:af:c7: d9:88:33:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEM2NTU4RjhGQzBEOEQwNDI5RUQ3ODdFQUY5NjdCRUZD N0EwOURDMTMwHhcNMjUwNDI0MTUzMzAxWhcNMjUwNTAxMTUzMzAxWjAYMRYwFAYD VQQDEw02ODBhNTlhZS0xMGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbHWhUs96wZqS2HvINVml+ixwUC4lLxQa8NY+grG48uK6PC0yG94iUsMOaWZ w1pojRIyDo3Nop7tGJlg8TpQdgIdv3lLX+/soZc1vqfQ0AyHlUuCuBiSupFIAuDO IitTzcGBhJfra6FSi/Y56wYm92sKffU3jCJHPD4dOU1WCoh4ZHa96mKPuNHFxx4a nTCNA4q62Vj2jX1JtTLcyWcogsToPlqX9b+O0/mqiqh1nxAD+q6BpBiqF6DlfHym nkhVbIdZOtGDW01C4wN7TjoZ8fGwXYWICJ/j2tNG+3hxph4uSvmMsKHQYHOdTB2m 32O7WWm+Unfcdc7j0GZAM2rrjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwK93Pf a60I9cDZnvK71vb5wihdMB8GA1UdIwQYMBaAFMZVj4/A2NBCnteH6vlnvvx6CdwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC80ODQ2MDRCMkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBFS2UxNGZxLVdlLV9Ib0oz Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsV1BqOERZMEVLZTE0ZnEtV2UtX0hvSjNCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC80ODQ2MDRCMkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBF S2UxNGZxLVdlLV9Ib0ozQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0D/wTuucRgRgjL1GOpuhuxfzi9v1YYHJlwXGwKy7KBlu/FYnCQesf wdyJ/Jid6h+0ilUqc7b6wPWUZxq1skUsLaq/9qK0qK0oLGwtkg3o5S+gPDPoTHFJ rMKbV6eLvuC7JEft4rGsz36tXbYdWHf2hIGj0mjQskkc6yvofQhyu+/MyL+0VgRM 1d3mjGumsaWMdggmTP9LmnNNtxxljh6Pv5Ui9ImVg0AhKOJKj7H2vuhK+PEETp0M JkO8MmufwCucZ8xVxaHoM8Ca2Ie0Em/VufZ6A4GIeDPuV5knA9D+2J+OpRb9oYin GNzA+Peoorao61ikKcXxj2srr8fZiDOM -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:42 2025 by rpki-client