$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: igAVZGKqSEJzz1QWcIR3jtHDWHgL3udrYmtRVckQ8eA= Subject key identifier: CB:F4:65:04:1A:E7:5D:74:B6:AF:64:6A:64:D2:F0:AA:2B:59:3E:D1 Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: 3A Signing time: Fri 25 Apr 2025 06:30:25 +0000 Manifest this update: Fri 25 Apr 2025 06:30:25 +0000 Manifest next update: Fri 02 May 2025 06:30:25 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: jt3Kts/2tAHb2Io6sYGuB9OCh8OBa8KIq1LxLIttwMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Validity Not Before: Apr 25 06:30:25 2025 GMT Not After : May 2 06:30:25 2025 GMT Subject: CN=680b2c01-f1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:13:74:7e:ec:e9:a9:d6:12:3a:60:4b:be: a1:c2:bf:7d:b3:53:c6:14:1c:2a:77:1c:01:14:59: 13:66:dc:74:ae:2a:d9:35:35:13:2a:54:0b:4f:0c: 09:8a:32:f2:81:72:4b:9d:65:e5:2a:de:30:fe:81: f0:eb:08:9a:eb:8a:34:a4:d5:0a:fb:a0:e9:ae:5d: 40:5b:73:35:b0:71:58:9b:ef:cf:da:3a:f6:4f:19: ac:d6:78:cc:c7:84:93:59:6b:e9:0a:3a:22:d3:b0: 55:21:f9:0d:e2:be:8b:46:7e:72:96:68:1d:30:14: d8:96:aa:59:d9:20:f7:b9:80:2b:18:6b:d4:98:86: bf:76:01:fd:6a:91:8a:7d:cd:29:cb:a2:2a:8f:d5: b0:db:7d:88:07:bb:ac:e5:e1:89:bb:a3:ba:b3:4c: 48:b2:8a:1f:80:0e:14:b7:84:1a:3e:92:eb:8f:8a: 9c:13:02:15:7e:1e:03:c0:fb:9b:09:db:26:7e:40: f4:70:88:f3:44:12:4a:76:3f:c9:dd:56:33:72:e0: d3:3c:0d:8b:af:5f:d6:45:68:4a:ed:e9:5f:b1:ef: 2d:e9:8c:84:a0:f5:56:b0:72:b1:e6:ff:6b:1a:6d: a1:ea:80:37:11:05:93:13:8f:f8:dd:74:03:c5:86: b4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F4:65:04:1A:E7:5D:74:B6:AF:64:6A:64:D2:F0:AA:2B:59:3E:D1 X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:84:08:5c:24:97:73:e2:6f:26:2a:9f:72:d0:44:f8:56:11: 50:2a:74:0c:3c:ab:0a:c1:1d:31:f7:a5:99:23:aa:b5:e2:89: 34:26:01:89:96:84:16:5f:7b:6b:ff:79:18:d8:db:69:ac:94: a5:ee:e7:f7:78:62:88:b1:75:4a:ac:a5:ce:a6:26:04:29:3a: 04:0b:e0:4b:c0:4b:14:a3:b5:60:4d:c8:22:e6:fc:57:12:a8: c9:a0:e8:24:37:ed:83:5f:a6:d0:de:85:17:c9:01:09:89:93: c9:59:38:80:d1:da:8d:25:dc:e1:1a:5b:14:ce:f5:e1:44:8c: b1:4c:97:bd:a4:40:f2:bc:66:15:56:c9:06:4a:26:e4:f0:03: 51:ba:f7:b0:90:f9:f1:77:4c:69:7f:72:f5:55:ac:c7:fa:e8: c3:29:a5:eb:42:7a:9b:3f:be:5e:90:37:2f:c2:e9:ef:12:02: ce:ea:6a:48:ca:84:6d:f5:47:b4:f8:fb:06:82:8d:be:d2:77: a9:69:8c:8e:a1:3a:c6:d3:13:a2:23:4a:9e:59:35:cc:4a:01: eb:d0:79:3c:9e:75:c8:e7:a2:9c:7e:98:e9:b5:b1:08:2e:3b: f8:0f:35:4d:b2:15:83:3f:eb:45:af:cd:15:66:0c:a4:12:9a: c1:c0:8b:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REJGNTExMC8GA1UEBRMoQzQyOTA5NUNCMkI5NzdCMDY3MTkxMTkzQjQzQjlCMkY1 RTE5Q0FFODAeFw0yNTA0MjUwNjMwMjVaFw0yNTA1MDIwNjMwMjVaMBgxFjAUBgNV BAMTDTY4MGIyYzAxLWYxZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIFRN0fuzpqdYSOmBLvqHCv32zU8YUHCp3HAEUWRNm3HSuKtk1NRMqVAtPDAmK MvKBckudZeUq3jD+gfDrCJrrijSk1Qr7oOmuXUBbczWwcVib78/aOvZPGazWeMzH hJNZa+kKOiLTsFUh+Q3ivotGfnKWaB0wFNiWqlnZIPe5gCsYa9SYhr92Af1qkYp9 zSnLoiqP1bDbfYgHu6zl4Ym7o7qzTEiyih+ADhS3hBo+kuuPipwTAhV+HgPA+5sJ 2yZ+QPRwiPNEEkp2P8ndVjNy4NM8DYuvX9ZFaErt6V+x7y3pjISg9VawcrHm/2sa baHqgDcRBZMTj/jddAPFhrTZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy/RlBBrn XXS2r2RqZNLwqitZPtEwHwYDVR0jBBgwFoAUxCkJXLK5d7BnGRGTtDubL14Zyugw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQkY1LzY2NTlGNTFFQ0I1 MTExRUY5MDQwMEQxN0M0RjlBRTAyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveENrSlhMSzVkN0JuR1JHVHREdWJMMTRaeXVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QkY1LzY2NTlGNTFFQ0I1MTExRUY5MDQwMEQxN0M0RjlBRTAyL3hDa0pYTEs1ZDdC bkdSR1R0RHViTDE0Wnl1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFOECFwkl3PibyYqn3LQRPhWEVAqdAw8qwrBHTH3pZkjqrXiiTQmAYmW hBZfe2v/eRjY22mslKXu5/d4YoixdUqspc6mJgQpOgQL4EvASxSjtWBNyCLm/FcS qMmg6CQ37YNfptDehRfJAQmJk8lZOIDR2o0l3OEaWxTO9eFEjLFMl72kQPK8ZhVW yQZKJuTwA1G697CQ+fF3TGl/cvVVrMf66MMppetCeps/vl6QNy/C6e8SAs7qakjK hG31R7T4+waCjb7Sd6lpjI6hOsbTE6IjSp5ZNcxKAevQeTyedcjnopx+mOm1sQgu O/gPNU2yFYM/60WvzRVmDKQSmsHAi88= -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:00 2025 by rpki-client