$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft File: MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json) Hash identifier: ZefDvU/WqJRyQ86/lW7VaqTjlAK3AYC0z/Ht7UYD6V8= Subject key identifier: 5B:C6:35:10:CC:67:96:00:C6:83:9D:30:BD:BB:EB:F9:52:30:3D:B8 Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E Certificate issuer: /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft Manifest number: 82 Signing time: Fri 25 Apr 2025 05:37:23 +0000 Manifest this update: Fri 25 Apr 2025 05:37:22 +0000 Manifest next update: Fri 02 May 2025 05:37:22 +0000 Files and hashes: 1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: Jrfc5sSi/h3Razy8hBAC7yC/J35hWRp3nN+WjnoE/CA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E Validity Not Before: Apr 25 05:37:22 2025 GMT Not After : May 2 05:37:22 2025 GMT Subject: CN=680b1f92-ac6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:1a:95:28:6a:d2:fa:b1:99:63:2c:2f:a2: 55:82:ed:16:7b:7f:6a:df:97:e1:8b:b9:38:2e:4b: 0b:ba:4b:4f:d6:b2:b2:ec:ef:69:5c:a8:21:b1:c9: 2e:0b:3d:fe:9d:dc:d3:bf:b3:23:1c:d6:05:bb:6f: b5:20:92:c5:ea:9a:eb:64:4b:38:2f:08:96:dc:56: a0:4b:06:3e:ec:59:0d:fb:13:fb:00:db:87:91:b9: e3:51:9e:1b:16:a8:bf:30:b7:67:0a:bc:28:80:28: f0:10:fb:c1:6e:b5:ad:6a:59:c2:68:a9:c8:7c:4d: a2:14:74:e3:fa:75:cb:e5:92:d4:1b:0d:9a:9f:c5: ab:1b:b9:ae:c6:33:d6:13:1d:79:99:ed:81:39:d6: 1f:8e:95:14:f4:5a:00:8d:4d:cd:20:c9:df:34:a2: 23:99:ed:c9:68:a6:82:43:1b:ad:d6:30:01:5c:16: ea:c7:37:6e:33:e3:27:ac:1b:02:ab:4f:57:c3:63: 40:f6:8f:72:8e:da:5c:00:9f:69:19:a5:0e:2b:38: 64:50:b5:64:f8:41:ff:d6:bc:f1:bb:cd:1f:dd:e9: 59:bf:a8:39:11:cc:37:8a:2d:73:f9:d9:73:e0:18: b0:4e:56:0d:d8:17:45:20:d9:24:9d:45:c5:45:a9: fc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C6:35:10:CC:67:96:00:C6:83:9D:30:BD:BB:EB:F9:52:30:3D:B8 X509v3 Authority Key Identifier: keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fd:ca:16:aa:83:06:80:e9:e8:07:29:87:17:08:c3:a3:8d: 03:8b:77:b0:62:e9:2a:bf:e6:2e:d5:a4:80:d2:d7:2b:6c:01: 64:5b:81:b9:90:a8:30:96:2c:90:07:81:7a:48:d4:bf:1b:d9: 6c:9b:4f:b0:1b:8c:5c:87:36:d2:c3:8c:57:7a:d4:31:74:64: 29:e1:5c:00:58:4a:dd:54:ba:85:c2:9a:8c:a3:65:90:12:e4: 0c:52:ae:c0:38:a1:c5:e8:02:35:46:fb:46:f5:de:2b:46:65: e4:75:bc:12:ca:bc:1e:a2:21:44:c0:c1:0e:d5:66:ab:51:4e: 38:36:7c:49:14:3e:36:5d:fd:3f:ba:77:dd:cb:fc:79:6a:3f: 40:0a:46:08:65:35:08:e6:3e:38:b7:c9:2a:b1:1c:33:b9:61: fe:20:28:c8:3b:35:13:db:fa:a2:56:5c:06:80:39:2b:dd:2f: e2:2b:56:a3:fe:bc:ea:ee:73:a7:f7:35:88:49:e7:23:a9:09: 12:dd:ca:09:84:73:38:de:d2:43:16:19:c5:ff:58:49:81:95: 45:7f:0d:50:e6:2a:d3:01:03:a5:91:9e:bd:ab:20:b6:d7:27: 93:b6:aa:a7:02:59:1c:bc:c9:e7:14:2d:58:a8:6c:a6:68:21: e1:48:d2:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgzRDMxMTAvBgNVBAUTKDMxN0E3MjdGRjYzRTI3QzI5Q0MwMUNCNjc5OTNFMkM2 MUYwODA0MUUwHhcNMjUwNDI1MDUzNzIyWhcNMjUwNTAyMDUzNzIyWjAYMRYwFAYD VQQDEw02ODBiMWY5Mi1hYzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsYalShq0vqxmWMsL6JVgu0We39q35fhi7k4LksLuktP1rKy7O9pXKghscku Cz3+ndzTv7MjHNYFu2+1IJLF6prrZEs4LwiW3FagSwY+7FkN+xP7ANuHkbnjUZ4b Fqi/MLdnCrwogCjwEPvBbrWtalnCaKnIfE2iFHTj+nXL5ZLUGw2an8WrG7muxjPW Ex15me2BOdYfjpUU9FoAjU3NIMnfNKIjme3JaKaCQxut1jABXBbqxzduM+MnrBsC q09Xw2NA9o9yjtpcAJ9pGaUOKzhkULVk+EH/1rzxu80f3elZv6g5Ecw3ii1z+dlz 4BiwTlYN2BdFINkknUXFRan8iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvGNRDM Z5YAxoOdML276/lSMD24MB8GA1UdIwQYMBaAFDF6cn/2PifCnMActnmT4sYfCAQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy85NTc2MDE2ODVF MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4S2N3QnkyZVpQaXhoOElC QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01YcHlmX1ktSjhLY3dCeTJlWlBpeGg4SUJCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODNEMy85NTc2MDE2ODVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4 S2N3QnkyZVpQaXhoOElCQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb/coWqoMGgOnoBymHFwjDo40Di3ewYukqv+Yu1aSA0tcrbAFkW4G5 kKgwliyQB4F6SNS/G9lsm0+wG4xchzbSw4xXetQxdGQp4VwAWErdVLqFwpqMo2WQ EuQMUq7AOKHF6AI1RvtG9d4rRmXkdbwSyrweoiFEwMEO1WarUU44NnxJFD42Xf0/ unfdy/x5aj9ACkYIZTUI5j44t8kqsRwzuWH+ICjIOzUT2/qiVlwGgDkr3S/iK1aj /rzq7nOn9zWISecjqQkS3coJhHM43tJDFhnF/1hJgZVFfw1Q5irTAQOlkZ69qyC2 1yeTtqqnAlkcvMnnFC1YqGymaCHhSNKv -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:50 2025 by rpki-client