$ rpki-client -vvf rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft File: XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft (raw, json) Hash identifier: x2eKv9YzOchFHz3uoeuZKieTydlWS33obC2aasyRXto= Subject key identifier: 4F:4B:02:55:C5:A3:7E:4B:8A:96:9F:A4:56:2E:95:C1:02:60:06:AD Authority key identifier: 5C:F5:5B:88:A6:69:DC:7E:82:11:5F:80:60:69:F3:C9:3C:E6:5C:B5 Certificate issuer: /CN=A91D318A/serialNumber=5CF55B88A669DC7E82115F806069F3C93CE65CB5 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPVbiKZp3H6CEV-AYGnzyTzmXLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft Manifest number: 010A Signing time: Fri 25 Apr 2025 04:01:24 +0000 Manifest this update: Fri 25 Apr 2025 04:01:24 +0000 Manifest next update: Fri 02 May 2025 04:01:24 +0000 Files and hashes: 1: XPVbiKZp3H6CEV-AYGnzyTzmXLU.crl (hash: hsGsZmOv17Yp/Fuh5BEDcDLXyffp0XaP8ZYLWSI+XWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.crl rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPVbiKZp3H6CEV-AYGnzyTzmXLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D318A, serialNumber=5CF55B88A669DC7E82115F806069F3C93CE65CB5 Validity Not Before: Apr 25 04:01:24 2025 GMT Not After : May 2 04:01:24 2025 GMT Subject: CN=680b0914-15cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:e3:29:fa:ea:5e:cb:d8:76:75:47:d7:5a: a5:70:c3:11:6f:02:de:5d:6f:ac:ab:31:bc:a5:bc: 44:dc:22:1d:bc:86:41:93:f3:c3:29:c9:a0:c8:a7: ae:72:0c:1c:e6:26:57:54:d5:d7:c1:05:40:c0:6b: d1:bb:02:27:7a:62:f2:0e:fa:c3:12:21:fb:95:24: 3e:c0:7a:4b:f8:65:9e:21:f0:d8:64:00:99:0e:b2: 67:ee:5a:35:ba:11:cb:49:8e:09:ed:a1:17:c4:74: 9b:be:5e:71:49:82:a6:9b:f2:a9:56:37:d9:b2:b8: 22:f4:b4:a6:b9:b7:d6:98:1e:db:cb:83:40:ba:2d: d1:15:8f:ce:a9:c7:d6:b9:60:26:83:b3:71:0b:82: cb:a6:70:34:b0:b6:5b:61:42:f0:2d:f8:94:3f:32: 49:8a:83:c7:22:c1:fc:22:36:38:79:85:63:6f:ab: 45:43:98:a2:4c:68:ca:ae:f5:00:84:03:72:47:43: 40:80:fa:b6:8f:cf:98:5b:ad:58:b5:a8:15:b0:c2: 18:cd:f4:fd:6f:e6:2a:cd:42:c7:91:a1:1f:2f:14: 0d:5d:86:0c:76:b9:7a:e4:36:f6:1a:b1:7f:c7:00: a2:ea:72:0a:35:84:bb:04:26:f7:39:30:2a:56:7b: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4B:02:55:C5:A3:7E:4B:8A:96:9F:A4:56:2E:95:C1:02:60:06:AD X509v3 Authority Key Identifier: keyid:5C:F5:5B:88:A6:69:DC:7E:82:11:5F:80:60:69:F3:C9:3C:E6:5C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPVbiKZp3H6CEV-AYGnzyTzmXLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:39:8d:8e:cb:5c:3b:42:b8:17:91:92:d9:9a:61:54:8a:e7: f6:ec:bd:f0:b6:26:6d:82:50:36:7b:d5:5c:89:96:a5:c2:35: 0a:a0:0b:cf:27:5f:81:ac:bd:d3:d3:5f:35:ae:47:d2:a1:af: 8b:b3:78:fc:b1:ce:34:7a:2e:f2:6e:92:33:97:ec:3b:f5:4b: 13:71:f5:95:74:3c:58:0f:82:73:bf:af:f1:67:f7:d4:41:9e: 90:1f:71:51:06:ec:06:f5:9f:7d:89:2f:f1:fd:b1:85:ea:94: c5:08:8a:bb:91:df:40:f5:51:8a:1c:61:71:1d:77:48:26:1a: 3d:d9:42:38:79:18:c0:f4:54:da:b1:9d:34:d8:18:f5:27:f0: f2:72:45:79:e5:47:eb:50:48:bd:e8:ee:74:2e:0e:81:83:cf: 4a:ef:03:09:7e:b0:b6:d9:c6:ab:43:1e:da:ce:d4:a5:5a:83: 1b:db:70:c1:f8:e4:88:45:13:fa:4c:1e:6c:79:96:b1:84:ed: 4e:bc:b1:12:c5:c7:c2:74:7d:8a:4b:07:c7:5f:f4:d3:9d:6e: 51:21:75:02:87:55:91:43:ae:ac:8e:14:6b:4d:36:df:a7:27: f7:a4:61:f7:7b:2f:e4:fb:de:cb:cf:81:f6:fc:40:05:81:fc: 6d:c5:a5:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxOEExMTAvBgNVBAUTKDVDRjU1Qjg4QTY2OURDN0U4MjExNUY4MDYwNjlGM0M5 M0NFNjVDQjUwHhcNMjUwNDI1MDQwMTI0WhcNMjUwNTAyMDQwMTI0WjAYMRYwFAYD VQQDEw02ODBiMDkxNC0xNWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlzjKfrqXsvYdnVH11qlcMMRbwLeXW+sqzG8pbxE3CIdvIZBk/PDKcmgyKeu cgwc5iZXVNXXwQVAwGvRuwInemLyDvrDEiH7lSQ+wHpL+GWeIfDYZACZDrJn7lo1 uhHLSY4J7aEXxHSbvl5xSYKmm/KpVjfZsrgi9LSmubfWmB7by4NAui3RFY/OqcfW uWAmg7NxC4LLpnA0sLZbYULwLfiUPzJJioPHIsH8IjY4eYVjb6tFQ5iiTGjKrvUA hANyR0NAgPq2j8+YW61YtagVsMIYzfT9b+YqzULHkaEfLxQNXYYMdrl65Db2GrF/ xwCi6nIKNYS7BCb3OTAqVnuWcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9LAlXF o35LipafpFYulcECYAatMB8GA1UdIwQYMBaAFFz1W4imadx+ghFfgGBp88k85ly1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzE4QS9GNUI1Q0E4MDg3 RTYxMUVFOTdFNkM3NDZDNEY5QUUwMi9YUFZiaUtacDNINkNFVi1BWUduenlUem1Y TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hQVmJpS1pwM0g2Q0VWLUFZR256eVR6bVhMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzE4QS9GNUI1Q0E4MDg3RTYxMUVFOTdFNkM3NDZDNEY5QUUwMi9YUFZiaUtacDNI NkNFVi1BWUduenlUem1YTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXOY2Oy1w7QrgXkZLZmmFUiuf27L3wtiZtglA2e9VciZalwjUKoAvP J1+BrL3T0181rkfSoa+Ls3j8sc40ei7ybpIzl+w79UsTcfWVdDxYD4Jzv6/xZ/fU QZ6QH3FRBuwG9Z99iS/x/bGF6pTFCIq7kd9A9VGKHGFxHXdIJho92UI4eRjA9FTa sZ002Bj1J/DyckV55UfrUEi96O50Lg6Bg89K7wMJfrC22carQx7aztSlWoMb23DB +OSIRRP6TB5seZaxhO1OvLESxcfCdH2KSwfHX/TTnW5RIXUCh1WRQ66sjhRrTTbf pyf3pGH3ey/k+97Lz4H2/EAFgfxtxaUP -----END CERTIFICATE-----Generated at Sat Apr 26 05:22:20 2025 by rpki-client