$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft File: xsPe6PYn19lovt8i_GEJRiUwF4M.mft (raw, json) Hash identifier: uAncWEsyK876ILdlw884ZWFZAjR1IIYP4h7CQC5u05I= Subject key identifier: 6C:5C:AE:C7:18:40:6C:4C:B5:FE:CD:E5:70:DC:09:DD:1A:55:41:DE Authority key identifier: C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 Certificate issuer: /CN=A9151258/serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Certificate serial: 3471 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft Manifest number: 3471 Signing time: Thu 24 Apr 2025 15:12:38 +0000 Manifest this update: Thu 24 Apr 2025 15:12:38 +0000 Manifest next update: Thu 01 May 2025 15:12:38 +0000 Files and hashes: 1: xsPe6PYn19lovt8i_GEJRiUwF4M.crl (hash: ejaJrjCsgnPf2cE/gmvYLbL/Gd47wdZe1X3dm1cKkzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13425 (0x3471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=C6C3DEE8F627D7D968BEDF22FC61094625301783 Validity Not Before: Apr 24 15:12:38 2025 GMT Not After : May 1 15:12:38 2025 GMT Subject: CN=680a54e6-9993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:41:64:2d:f2:67:3f:8b:81:b2:0c:15:65:e1: b8:15:10:95:0a:67:6c:aa:1d:d3:b6:c8:9f:d4:f0: 8e:28:b3:96:8c:d8:05:17:dc:3c:9c:7e:1d:d1:ab: 71:b4:e9:60:d6:fa:a8:f0:72:f4:97:8e:8a:37:5b: fd:ba:12:b5:b9:9f:a0:e1:02:07:c2:19:7f:b4:ec: fa:1e:41:15:7a:c3:68:14:91:b8:f3:1f:ad:09:d3: 88:45:ef:f7:4a:b5:33:f8:48:32:6f:57:95:5f:e8: f7:94:41:76:9c:ef:23:23:39:d1:39:f7:19:51:18: a4:9c:34:6c:2a:f8:10:eb:84:b7:25:d3:e5:85:39: a8:13:b9:41:27:37:f9:1d:21:26:2d:2d:91:ca:38: a3:6a:fc:c0:c1:e2:81:a5:b3:67:75:5c:d7:fb:dc: ab:3c:09:e9:e0:b0:97:d4:fa:1b:50:f1:cf:e6:6b: 4b:ef:7f:be:a4:dd:a8:a4:14:6f:48:c0:7b:fe:01: e5:f0:8e:0c:2a:7a:4a:97:eb:f8:cf:41:4f:10:c2: c5:aa:ff:b1:07:8c:82:66:64:16:79:59:ed:b1:21: 44:1f:3f:f4:40:66:cb:62:41:99:e7:ea:8d:cc:4d: 19:18:a5:47:58:3d:80:01:0f:19:26:48:f7:8f:ad: 88:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5C:AE:C7:18:40:6C:4C:B5:FE:CD:E5:70:DC:09:DD:1A:55:41:DE X509v3 Authority Key Identifier: keyid:C6:C3:DE:E8:F6:27:D7:D9:68:BE:DF:22:FC:61:09:46:25:30:17:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xsPe6PYn19lovt8i_GEJRiUwF4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/BB2DDCE21DA611E286D91D9E08B02CD2/xsPe6PYn19lovt8i_GEJRiUwF4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3b:ce:44:ee:94:8a:f0:c3:02:c1:09:1f:08:f9:ae:6f:6b: 09:d7:c2:0d:5c:d2:60:20:6e:3e:60:d1:54:5c:32:7a:72:00: 75:f5:a1:b4:8f:7e:93:67:78:ca:e6:1f:ed:a2:e8:a4:bf:29: 83:10:89:59:72:04:c6:d6:4b:de:74:4b:59:fa:b7:e2:c8:4b: 62:dc:f4:f7:f7:81:88:7f:89:ff:64:27:78:b5:fa:44:1b:21: f1:eb:c8:41:7c:b5:1b:af:ba:1d:ef:e4:37:a6:9b:36:4c:69: 55:5e:b4:e8:6e:36:86:48:31:ab:89:62:3a:8a:22:4b:5a:a0: a3:a1:18:23:38:f4:9b:e3:84:62:92:40:12:c7:6a:62:66:bc: 15:e6:d5:18:4a:d2:58:d7:b5:4b:c9:6f:7e:eb:3f:5c:a2:9c: d9:21:86:cd:0e:98:5e:ac:77:68:d4:c9:82:5c:ac:90:50:3f: 37:f9:af:c3:99:b1:95:bc:f2:f1:8e:b9:ec:e7:e9:29:3d:be: e3:8e:93:0a:b4:df:f2:ab:b3:ca:1f:6a:9e:5a:12:1e:7e:a8: 8d:d8:11:9a:d2:b0:5d:70:54:c8:5e:02:b4:dc:45:7b:04:fe: 25:ce:d6:dc:a7:b4:df:89:7b:f0:3f:3b:76:86:01:fc:9d:bc: 73:42:94:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEM2QzNERUU4RjYyN0Q3RDk2OEJFREYyMkZDNjEwOTQ2 MjUzMDE3ODMwHhcNMjUwNDI0MTUxMjM4WhcNMjUwNTAxMTUxMjM4WjAYMRYwFAYD VQQDEw02ODBhNTRlNi05OTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UFkLfJnP4uBsgwVZeG4FRCVCmdsqh3Ttsif1PCOKLOWjNgFF9w8nH4d0atx tOlg1vqo8HL0l46KN1v9uhK1uZ+g4QIHwhl/tOz6HkEVesNoFJG48x+tCdOIRe/3 SrUz+Egyb1eVX+j3lEF2nO8jIznROfcZURiknDRsKvgQ64S3JdPlhTmoE7lBJzf5 HSEmLS2RyjijavzAweKBpbNndVzX+9yrPAnp4LCX1PobUPHP5mtL73++pN2opBRv SMB7/gHl8I4MKnpKl+v4z0FPEMLFqv+xB4yCZmQWeVntsSFEHz/0QGbLYkGZ5+qN zE0ZGKVHWD2AAQ8ZJkj3j62IcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxcrscY QGxMtf7N5XDcCd0aVUHeMB8GA1UdIwQYMBaAFMbD3uj2J9fZaL7fIvxhCUYlMBeD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9CQjJERENFMjFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5bG92dDhpX0dFSlJpVXdG NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hzUGU2UFluMTlsb3Z0OGlfR0VKUmlVd0Y0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9CQjJERENFMjFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi94c1BlNlBZbjE5 bG92dDhpX0dFSlJpVXdGNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeO85E7pSK8MMCwQkfCPmub2sJ18INXNJgIG4+YNFUXDJ6cgB19aG0 j36TZ3jK5h/touikvymDEIlZcgTG1kvedEtZ+rfiyEti3PT394GIf4n/ZCd4tfpE GyHx68hBfLUbr7od7+Q3pps2TGlVXrTobjaGSDGriWI6iiJLWqCjoRgjOPSb44Ri kkASx2piZrwV5tUYStJY17VLyW9+6z9copzZIYbNDpherHdo1MmCXKyQUD83+a/D mbGVvPLxjrns5+kpPb7jjpMKtN/yq7PKH2qeWhIefqiN2BGa0rBdcFTIXgK03EV7 BP4lztbcp7TfiXvwPzt2hgH8nbxzQpRy -----END CERTIFICATE-----Generated at Sat Apr 26 17:22:12 2025 by rpki-client