$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json) Hash identifier: zk7KAd+4Qo5ixGB4ViFBqA5Fx92nTLMqJPf1AoWEPIc= Subject key identifier: 13:7C:BA:88:13:B5:D3:1F:84:84:85:02:13:CE:EF:FB:ED:28:02:5E Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft Manifest number: 60 Signing time: Mon 05 May 2025 05:56:11 +0000 Manifest this update: Mon 05 May 2025 05:56:11 +0000 Manifest next update: Mon 12 May 2025 05:56:11 +0000 Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: dL/4NznXGd3O2b/A5A1S2uU+MRrXWM0QpLiYNyY2Xe8=) 2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: G7IWl5XTyAgfWE48sRsXaPS6r+SeXaYM6TeXGgT/8zE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: May 5 05:56:11 2025 GMT Not After : May 12 05:56:11 2025 GMT Subject: CN=681852fb-6f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:2a:fa:b6:9f:b7:05:9b:8c:e3:5a:64:29: d6:fe:e0:0b:eb:3b:71:53:b8:6f:1b:71:4c:c1:74: 76:ab:fd:a6:64:9b:64:13:89:f1:97:23:cc:5b:fb: 25:27:90:b5:4a:e4:ca:81:bd:4f:29:5a:86:6c:ec: 26:c2:33:24:4a:9f:c1:d9:c0:83:82:5c:fd:61:02: 18:b1:cb:ec:48:49:e3:25:95:d6:a7:78:9a:04:32: 72:bd:61:44:38:69:0e:9d:dc:47:ce:6a:09:31:8e: ff:d7:16:f6:a0:7e:a9:87:d3:67:8a:2a:d0:e3:ea: 9e:cf:7b:f0:2f:f8:8e:b9:f7:8b:61:fc:f0:24:68: fe:75:1a:e3:3a:ca:53:d7:27:e2:89:f4:b3:d8:8e: 46:56:8c:42:27:55:be:d7:9b:9e:94:9a:3e:50:80: 2f:b3:67:fe:93:94:f3:a2:ed:94:41:95:c8:93:a8: 5f:3d:84:67:eb:33:14:65:76:38:36:cf:87:6d:a0: f7:12:7e:69:73:32:2b:a3:9e:94:00:96:f7:b1:f9: d0:f8:bf:9d:23:f7:39:b3:d4:f0:e5:8d:de:83:3f: 05:81:4f:9f:2f:b8:42:1c:dc:9f:51:b5:14:ae:34: 62:e3:52:12:79:93:66:bd:fa:60:81:c8:2f:8b:8b: ef:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7C:BA:88:13:B5:D3:1F:84:84:85:02:13:CE:EF:FB:ED:28:02:5E X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:8b:0c:54:11:30:43:f6:34:5b:fd:e3:f4:1a:4f:46:64:d1: 30:ed:d9:60:cf:19:2f:48:03:87:b0:ac:d6:1e:fd:ae:6d:90: 23:78:fa:93:8d:3e:66:0c:73:00:b4:f1:55:de:99:d9:02:0a: 12:58:70:96:f9:2f:29:60:f3:a0:86:43:2e:cd:61:f6:7b:be: 30:c1:04:ad:79:32:df:8e:7a:63:b4:52:39:ba:e0:20:c4:de: 09:f5:75:49:5a:4e:86:60:d6:c2:22:f7:36:77:6c:37:fe:76: 09:6f:0a:4d:ae:32:cb:f8:f5:88:ad:ac:a7:df:c3:9e:0f:de: d5:14:c0:ca:51:cf:c4:ce:17:05:b5:f1:5f:ea:19:a2:df:50: 57:2a:37:1c:32:da:50:77:be:a8:c2:bc:73:cc:99:02:d3:47: 99:5d:85:76:25:88:10:a2:b3:63:13:a3:79:0d:96:35:a5:54: 9b:9d:63:fd:1e:2e:3c:bd:e6:7f:06:ef:68:48:c9:73:8a:ed: 64:73:98:61:66:96:08:8f:a1:6e:ee:19:dd:bf:10:78:8a:20: c1:89:83:08:2e:20:75:49:6f:0f:fa:36:da:1f:11:ff:38:51: f8:77:1f:9b:2b:50:cb:a9:51:23:db:ba:a6:7f:6d:b6:62:3d: 17:8f:30:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MTAyNTExMC8GA1UEBRMoNUYwMDRENTdFQjM2RjQyNjcyRTY2RjMwMDVGNjQ2OUI2 Mjg5MTcxQjAeFw0yNTA1MDUwNTU2MTFaFw0yNTA1MTIwNTU2MTFaMBgxFjAUBgNV BAMTDTY4MTg1MmZiLTZmNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDciir6tp+3BZuM41pkKdb+4AvrO3FTuG8bcUzBdHar/aZkm2QTifGXI8xb+yUn kLVK5MqBvU8pWoZs7CbCMyRKn8HZwIOCXP1hAhixy+xISeMlldaneJoEMnK9YUQ4 aQ6d3EfOagkxjv/XFvagfqmH02eKKtDj6p7Pe/Av+I6594th/PAkaP51GuM6ylPX J+KJ9LPYjkZWjEInVb7Xm56Umj5QgC+zZ/6TlPOi7ZRBlciTqF89hGfrMxRldjg2 z4dtoPcSfmlzMiujnpQAlvex+dD4v50j9zmz1PDljd6DPwWBT58vuEIc3J9RtRSu NGLjUhJ5k2a9+mCByC+Li++jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE3y6iBO1 0x+EhIUCE87v++0oAl4wHwYDVR0jBBgwFoAUXwBNV+s29CZy5m8wBfZGm2KJFxsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxMDI1Lzk1NkY2NjJDOUQ4 NDExRUY4MTdFMTQyMEM0RjlBRTAyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHdCTlYtczI5Q1p5NW04d0JmWkdtMktKRnhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMx MDI1Lzk1NkY2NjJDOUQ4NDExRUY4MTdFMTQyMEM0RjlBRTAyL1h3Qk5WLXMyOUNa eTVtOHdCZlpHbTJLSkZ4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJKLDFQRMEP2NFv94/QaT0Zk0TDt2WDPGS9IA4ewrNYe/a5tkCN4+pON PmYMcwC08VXemdkCChJYcJb5Lylg86CGQy7NYfZ7vjDBBK15Mt+OemO0Ujm64CDE 3gn1dUlaToZg1sIi9zZ3bDf+dglvCk2uMsv49YitrKffw54P3tUUwMpRz8TOFwW1 8V/qGaLfUFcqNxwy2lB3vqjCvHPMmQLTR5ldhXYliBCis2MTo3kNljWlVJudY/0e Ljy95n8G72hIyXOK7WRzmGFmlgiPoW7uGd2/EHiKIMGJgwguIHVJbw/6NtofEf84 Ufh3H5srUMupUSPbuqZ/bbZiPRePMI8= -----END CERTIFICATE-----Generated at Mon May 5 09:37:25 2025 by rpki-client