$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/cXudAIXI-pV0Egf6GRC-ILMeBR4.mft File: cXudAIXI-pV0Egf6GRC-ILMeBR4.mft (raw, json) Hash identifier: vbx+ySwp7f1nQDoX6nxGneGddrb8K3itP4P8v1Kbc4E= Subject key identifier: FD:F2:1D:1C:F5:5B:D9:69:F1:FB:8E:9D:CA:06:EA:05:63:1C:47:9E Authority key identifier: 71:7B:9D:00:85:C8:FA:95:74:12:07:FA:19:10:BE:20:B3:1E:05:1E Certificate issuer: /CN=A91BB6DE/serialNumber=717B9D0085C8FA95741207FA1910BE20B31E051E Certificate serial: 0615 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXudAIXI-pV0Egf6GRC-ILMeBR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/cXudAIXI-pV0Egf6GRC-ILMeBR4.mft Manifest number: 07A5 Signing time: Thu 24 Apr 2025 22:37:10 +0000 Manifest this update: Thu 24 Apr 2025 22:37:09 +0000 Manifest next update: Thu 01 May 2025 22:37:09 +0000 Files and hashes: 1: cXudAIXI-pV0Egf6GRC-ILMeBR4.crl (hash: 3qNhJ6knj+xxJxtu0lPR361PyDk/0Tb4a23ynvcgVAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/cXudAIXI-pV0Egf6GRC-ILMeBR4.crl rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/cXudAIXI-pV0Egf6GRC-ILMeBR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXudAIXI-pV0Egf6GRC-ILMeBR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1557 (0x615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB6DE, serialNumber=717B9D0085C8FA95741207FA1910BE20B31E051E Validity Not Before: Apr 24 22:37:09 2025 GMT Not After : May 1 22:37:09 2025 GMT Subject: CN=680abd15-90ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c0:ce:2b:e2:ba:b2:59:1c:84:6f:02:52:2a: 8c:20:55:19:cd:2d:c2:eb:22:28:bd:02:a7:2a:31: 06:42:a2:ac:83:2e:fb:1a:e5:e3:22:e3:1e:8c:41: 46:1a:44:8d:01:fb:59:05:4c:5b:a8:3f:48:17:07: 81:b2:ff:6c:7b:37:52:45:ba:f5:75:9a:f7:75:a8: 0f:e4:f3:5a:d4:cf:5b:39:39:99:a1:ca:ff:71:a5: 31:5c:a5:5e:7c:52:60:39:8a:36:4e:a8:13:c9:c1: 40:b0:77:2d:e4:1d:68:64:44:f7:7b:0a:ad:b0:d3: 5c:69:bc:e2:79:02:44:6e:b2:31:6b:a0:2a:11:33: dd:07:02:cb:ed:65:02:e1:90:5d:a7:90:72:14:5f: fa:9b:43:19:25:f0:f7:06:d9:c8:97:e7:c1:8f:a2: ed:8d:57:41:79:a8:01:c6:90:fc:97:59:67:b4:df: a9:8d:37:6d:07:a8:99:12:a7:7a:1c:f6:0f:74:46: 35:76:fe:2b:a2:38:b7:f6:7e:4a:c2:d5:c6:99:44: 56:93:a2:2c:44:22:f2:5f:de:4b:3d:47:c4:81:2e: 6c:07:ab:7a:a2:1a:6f:24:c9:29:8e:51:65:a6:70: 6e:2c:16:e2:3e:e5:33:ae:82:ec:0a:01:df:e0:7d: f7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F2:1D:1C:F5:5B:D9:69:F1:FB:8E:9D:CA:06:EA:05:63:1C:47:9E X509v3 Authority Key Identifier: keyid:71:7B:9D:00:85:C8:FA:95:74:12:07:FA:19:10:BE:20:B3:1E:05:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/cXudAIXI-pV0Egf6GRC-ILMeBR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXudAIXI-pV0Egf6GRC-ILMeBR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6DE/A53AB74C9C3811EB81BE1560C4F9AE02/cXudAIXI-pV0Egf6GRC-ILMeBR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:54:09:ce:07:25:53:aa:07:67:40:62:4e:cc:ed:7d:ef:00: 7f:3b:21:6f:6a:0c:02:1f:17:c4:da:62:b6:26:95:cc:3d:c7: 1d:99:48:f3:62:55:8d:db:77:b6:a7:28:75:45:89:8d:9c:df: 1b:fd:8b:bf:d9:ef:09:d3:eb:20:e6:ea:6c:f8:eb:a8:c9:1f: 44:fb:77:de:51:63:c2:29:c5:6f:aa:08:7b:08:47:dd:e7:3e: 38:55:d2:a9:61:32:26:d1:8e:94:7e:a8:14:b8:f6:15:0b:78: 23:b6:4c:4f:a2:f0:5d:0e:c1:e1:1b:87:49:53:d4:a5:d6:01: 55:6f:29:22:d5:80:ea:6c:dc:6e:d3:2d:b5:aa:76:01:24:ba: 42:39:47:8f:23:33:9e:22:33:93:22:f0:8d:9c:f9:ce:0d:dd: 60:fd:d8:97:11:cd:fe:88:ad:7a:b0:fb:5f:6b:52:bf:37:4b: 9b:b4:67:17:83:20:6e:4a:6b:33:23:32:93:75:e4:0d:95:ed: 15:50:1b:7b:85:de:e7:21:3e:5d:da:9e:7e:da:1f:68:1b:23: f3:e2:2d:6c:e3:6d:37:59:9d:f5:c8:e0:d3:48:d5:9b:3b:6f: 5d:8e:1d:59:5e:af:85:f6:e5:19:17:b3:dc:98:79:23:89:9a: 1d:ea:47:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2REUxMTAvBgNVBAUTKDcxN0I5RDAwODVDOEZBOTU3NDEyMDdGQTE5MTBCRTIw QjMxRTA1MUUwHhcNMjUwNDI0MjIzNzA5WhcNMjUwNTAxMjIzNzA5WjAYMRYwFAYD VQQDEw02ODBhYmQxNS05MGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8DOK+K6slkchG8CUiqMIFUZzS3C6yIovQKnKjEGQqKsgy77GuXjIuMejEFG GkSNAftZBUxbqD9IFweBsv9sezdSRbr1dZr3dagP5PNa1M9bOTmZocr/caUxXKVe fFJgOYo2TqgTycFAsHct5B1oZET3ewqtsNNcabzieQJEbrIxa6AqETPdBwLL7WUC 4ZBdp5ByFF/6m0MZJfD3BtnIl+fBj6LtjVdBeagBxpD8l1lntN+pjTdtB6iZEqd6 HPYPdEY1dv4roji39n5KwtXGmURWk6IsRCLyX95LPUfEgS5sB6t6ohpvJMkpjlFl pnBuLBbiPuUzroLsCgHf4H33LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3yHRz1 W9lp8fuOncoG6gVjHEeeMB8GA1UdIwQYMBaAFHF7nQCFyPqVdBIH+hkQviCzHgUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZERS9BNTNBQjc0QzlD MzgxMUVCODFCRTE1NjBDNEY5QUUwMi9jWHVkQUlYSS1wVjBFZ2Y2R1JDLUlMTWVC UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYdWRBSVhJLXBWMEVnZjZHUkMtSUxNZUJSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjZERS9BNTNBQjc0QzlDMzgxMUVCODFCRTE1NjBDNEY5QUUwMi9jWHVkQUlYSS1w VjBFZ2Y2R1JDLUlMTWVCUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOVAnOByVTqgdnQGJOzO197wB/OyFvagwCHxfE2mK2JpXMPccdmUjz YlWN23e2pyh1RYmNnN8b/Yu/2e8J0+sg5ups+OuoyR9E+3feUWPCKcVvqgh7CEfd 5z44VdKpYTIm0Y6UfqgUuPYVC3gjtkxPovBdDsHhG4dJU9Sl1gFVbyki1YDqbNxu 0y21qnYBJLpCOUePIzOeIjOTIvCNnPnODd1g/diXEc3+iK16sPtfa1K/N0ubtGcX gyBuSmszIzKTdeQNle0VUBt7hd7nIT5d2p5+2h9oGyPz4i1s4203WZ31yODTSNWb O29djh1ZXq+F9uUZF7PcmHkjiZod6kfh -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:43 2025 by rpki-client