$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft File: XpYNUYjwNveeqnlBVSzPRrh6vwc.mft (raw, json) Hash identifier: 1nal4tBSDrvxWRd7cntE5eAvsqe4KZCsRh5zpHPNOI4= Subject key identifier: 85:98:7F:81:6B:F3:83:E1:9B:6D:8A:42:CB:80:F7:F2:DD:EF:CB:28 Authority key identifier: 5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07 Certificate issuer: /CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft Manifest number: 6E Signing time: Fri 25 Apr 2025 05:51:43 +0000 Manifest this update: Fri 25 Apr 2025 05:51:42 +0000 Manifest next update: Fri 02 May 2025 05:51:42 +0000 Files and hashes: 1: XpYNUYjwNveeqnlBVSzPRrh6vwc.crl (hash: DTfj8wF9LXOVNtTA9VHWOPl1xzD3hpO0kxFgbIfx92E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B190F, serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07 Validity Not Before: Apr 25 05:51:42 2025 GMT Not After : May 2 05:51:42 2025 GMT Subject: CN=680b22ef-59fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:1f:94:55:e9:ad:1b:be:90:d5:c6:70:c8: 42:4a:03:c7:44:b9:f7:0c:e7:4a:84:d8:b3:3b:16: 3c:23:34:4b:e1:12:d0:1a:c2:d6:f1:a5:c9:34:73: 10:29:10:7e:6e:9c:4e:a9:0f:38:27:1e:bf:1d:2a: 0a:20:12:75:87:0b:eb:2f:8b:31:27:13:13:97:e2: ad:df:be:e9:cf:02:7a:cb:54:8e:5b:1a:60:d7:0a: c7:78:4f:5a:15:f9:5c:8b:10:ff:d3:6f:0e:3d:7c: ce:4d:e0:bd:43:2e:c4:ca:ea:e7:f3:33:4f:63:23: 89:7c:89:ea:9a:99:26:24:82:bc:cb:2b:2c:0e:9a: 7c:79:91:05:98:c6:83:b6:97:1b:9a:d4:ff:27:90: d8:14:91:bf:7c:0e:72:6a:0b:b3:70:67:0f:b3:ad: fc:47:67:ea:86:7c:75:b4:fc:65:35:1f:5c:27:23: 64:dc:a8:e4:b1:87:5e:6d:ae:cb:01:1e:2d:32:c5: ed:bd:3b:a0:ae:e5:1c:4a:a7:cd:7a:45:18:df:52: 95:ef:cd:dd:42:c9:24:57:8d:9b:c1:4b:b7:64:19: 3a:ef:c3:94:39:e3:b6:79:21:f4:3f:3a:4e:68:4e: 95:76:ed:3d:a6:e5:79:88:f6:4a:f3:14:49:81:22: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:98:7F:81:6B:F3:83:E1:9B:6D:8A:42:CB:80:F7:F2:DD:EF:CB:28 X509v3 Authority Key Identifier: keyid:5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:d4:f1:4d:d1:4f:11:94:f1:74:e9:8f:60:99:69:de:87:79: 21:cc:38:ab:e9:bb:65:5a:01:e0:2d:dd:94:e6:0e:79:06:af: b2:a4:21:dc:85:ca:01:ac:54:81:3b:38:ca:eb:1b:eb:b4:9e: 0a:33:e9:f6:8c:08:be:a3:ab:c4:83:03:99:2d:0c:4f:53:8b: fd:0f:fd:fb:87:00:ab:e2:28:07:f2:7e:ec:d5:98:f7:f8:91: 16:ba:19:fa:3a:ee:f1:77:b4:4a:3e:2a:c4:83:d8:41:59:b1: d4:58:53:f2:84:fb:b4:d8:24:b3:d9:9e:13:2a:08:b0:66:f2: e8:e5:19:12:8d:a5:d5:f9:c7:ba:ac:5b:a0:cc:6b:c2:9f:10: e3:bc:ab:45:90:05:f4:f7:48:5c:ee:62:01:6a:1f:02:ce:a2: 91:86:37:be:1d:b9:60:2b:29:b0:da:ba:ae:0c:0d:71:a8:bb: 3a:76:6c:f8:dd:a2:e2:ee:c2:ec:64:6b:d1:10:cc:b8:26:a5: 5c:29:d3:84:e6:db:48:bb:25:9a:b0:d7:c4:d3:39:a4:f3:0d: f2:05:81:fc:5c:5d:15:49:2c:cd:60:b9:e8:4e:a2:67:a8:5d: 27:a6:ef:c5:a0:d0:4d:f5:4e:fa:72:4c:db:7d:0d:77:26:cb: 75:5a:c7:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTkwRjExMC8GA1UEBRMoNUU5NjBENTE4OEYwMzZGNzlFQUE3OTQxNTUyQ0NGNDZC ODdBQkYwNzAeFw0yNTA0MjUwNTUxNDJaFw0yNTA1MDIwNTUxNDJaMBgxFjAUBgNV BAMTDTY4MGIyMmVmLTU5ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzfh+UVemtG76Q1cZwyEJKA8dEufcM50qE2LM7FjwjNEvhEtAawtbxpck0cxAp EH5unE6pDzgnHr8dKgogEnWHC+svizEnExOX4q3fvunPAnrLVI5bGmDXCsd4T1oV +VyLEP/Tbw49fM5N4L1DLsTK6ufzM09jI4l8ieqamSYkgrzLKywOmnx5kQWYxoO2 lxua1P8nkNgUkb98DnJqC7NwZw+zrfxHZ+qGfHW0/GU1H1wnI2TcqOSxh15trssB Hi0yxe29O6Cu5RxKp816RRjfUpXvzd1CySRXjZvBS7dkGTrvw5Q547Z5IfQ/Ok5o TpV27T2m5XmI9krzFEmBIhzxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhZh/gWvz g+GbbYpCy4D38t3vyygwHwYDVR0jBBgwFoAUXpYNUYjwNveeqnlBVSzPRrh6vwcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxOTBGL0M4NUJBMTJDN0JF QzExRUY5OTlGQkMxOUM0RjlBRTAyL1hwWU5VWWp3TnZlZXFubEJWU3pQUnJoNnZ3 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHBZTlVZandOdmVlcW5sQlZTelBScmg2dndjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx OTBGL0M4NUJBMTJDN0JFQzExRUY5OTlGQkMxOUM0RjlBRTAyL1hwWU5VWWp3TnZl ZXFubEJWU3pQUnJoNnZ3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMnU8U3RTxGU8XTpj2CZad6HeSHMOKvpu2VaAeAt3ZTmDnkGr7KkIdyF ygGsVIE7OMrrG+u0ngoz6faMCL6jq8SDA5ktDE9Ti/0P/fuHAKviKAfyfuzVmPf4 kRa6Gfo67vF3tEo+KsSD2EFZsdRYU/KE+7TYJLPZnhMqCLBm8ujlGRKNpdX5x7qs W6DMa8KfEOO8q0WQBfT3SFzuYgFqHwLOopGGN74duWArKbDauq4MDXGouzp2bPjd ouLuwuxka9EQzLgmpVwp04Tm20i7JZqw18TTOaTzDfIFgfxcXRVJLM1guehOomeo XSem78Wg0E31TvpyTNt9DXcmy3Vax0E= -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:54 2025 by rpki-client