$ rpki-client -vvf rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft File: XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft (raw, json) Hash identifier: bdOdyKnY0ejOw84ie/92BWmm1bNARE4ihi/pg7OnQd4= Subject key identifier: C7:80:8B:B4:F1:D2:DF:89:8E:BF:7B:F1:8A:B9:57:FE:02:18:F3:50 Authority key identifier: 5C:F5:5B:88:A6:69:DC:7E:82:11:5F:80:60:69:F3:C9:3C:E6:5C:B5 Certificate issuer: /CN=A91D318A/serialNumber=5CF55B88A669DC7E82115F806069F3C93CE65CB5 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPVbiKZp3H6CEV-AYGnzyTzmXLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft Manifest number: 0123 Signing time: Sun 15 Jun 2025 03:49:57 +0000 Manifest this update: Sun 15 Jun 2025 03:49:56 +0000 Manifest next update: Sun 22 Jun 2025 03:49:56 +0000 Files and hashes: 1: XPVbiKZp3H6CEV-AYGnzyTzmXLU.crl (hash: Y+r35b3tz4BN+mKlrh8Dwd7ujnOrQJxmTITQBlVm8IY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.crl rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPVbiKZp3H6CEV-AYGnzyTzmXLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D318A, serialNumber=5CF55B88A669DC7E82115F806069F3C93CE65CB5 Validity Not Before: Jun 15 03:49:56 2025 GMT Not After : Jun 22 03:49:56 2025 GMT Subject: CN=684e42e5-cac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:41:18:1c:84:7d:7c:ee:f1:5e:6c:3f:ee:fc: 38:89:46:02:72:00:b5:33:1d:c2:41:b9:3c:2d:5e: 8e:26:e8:ce:df:86:68:cf:54:e4:d1:20:58:78:ed: 70:23:ba:e4:e5:d9:44:64:4f:06:50:0f:97:6f:03: d5:9b:e8:90:f7:42:2f:c8:e3:5a:a8:18:7d:86:9a: e5:52:2b:ba:3f:f0:81:ed:90:7b:50:58:8b:21:b4: 00:46:a4:b8:e6:14:1c:67:f0:4e:c1:0c:55:52:6b: 60:18:c7:7d:a9:30:24:41:1c:20:6d:5d:fd:2c:b3: 7a:64:eb:e6:1a:5a:cd:49:91:51:49:9d:69:7f:5d: 35:22:34:05:e0:97:9d:12:9d:48:2c:92:e7:6c:18: 30:a7:49:3c:e5:2b:22:93:0d:db:a2:45:de:f5:bf: f7:2f:49:27:f9:15:30:c3:2e:69:98:c2:78:86:f4: 3e:af:68:a5:b4:7b:b0:14:ab:f9:53:54:de:21:c0: 84:6d:3b:3e:52:eb:30:4c:28:a9:b7:26:f2:2a:e1: a7:3f:43:ba:58:71:42:9d:41:86:27:61:98:e5:66: e5:e9:a5:00:de:67:95:61:03:7a:27:96:5c:88:d6: 6e:a8:cb:e6:74:2c:9b:ec:0e:99:6c:d9:e0:b4:3f: 8f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:80:8B:B4:F1:D2:DF:89:8E:BF:7B:F1:8A:B9:57:FE:02:18:F3:50 X509v3 Authority Key Identifier: keyid:5C:F5:5B:88:A6:69:DC:7E:82:11:5F:80:60:69:F3:C9:3C:E6:5C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XPVbiKZp3H6CEV-AYGnzyTzmXLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D318A/F5B5CA8087E611EE97E6C746C4F9AE02/XPVbiKZp3H6CEV-AYGnzyTzmXLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:9d:79:39:e6:eb:b4:f7:40:f8:9a:6f:c7:5d:c1:78:42:08: d5:c5:e0:5c:be:1f:80:5a:b0:b5:4f:05:92:61:11:d9:d4:67: b9:30:43:39:2d:0f:75:d5:8c:32:04:5f:ca:f8:33:cc:de:0e: 38:c0:04:0d:44:f1:2a:5b:ad:41:40:c1:40:b1:00:99:c4:fc: e5:c0:aa:7c:4f:76:9a:6c:48:17:78:2c:2c:26:02:cd:b9:02: 0b:f6:ed:6a:1a:2d:01:34:d4:ba:62:71:53:e5:ab:49:9d:44: e7:3b:ea:99:70:b8:e8:60:25:b5:44:ee:d7:49:b8:37:b5:f2: 87:6d:c6:58:8c:b7:b3:87:6b:d7:3c:c6:fd:b9:56:ef:b9:a9: c2:9b:ed:fd:49:9d:b1:95:f0:23:4b:1e:90:86:0f:7e:ba:87: 42:20:83:a9:e6:fb:ab:dc:ff:18:5d:fc:8d:d0:30:51:8b:c6: c8:ef:65:5b:fc:5f:6d:da:34:02:af:00:36:69:f2:ac:d0:7f: 63:00:73:0c:ae:7a:11:48:20:fe:ea:bd:5f:ae:4d:05:20:dc: b6:ae:fc:fc:d6:e0:f9:52:61:d4:4c:75:1d:43:38:7f:58:3d: 97:5e:47:a5:9b:cc:aa:82:07:68:f9:81:ea:c4:32:69:60:52: 3e:b4:56:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxOEExMTAvBgNVBAUTKDVDRjU1Qjg4QTY2OURDN0U4MjExNUY4MDYwNjlGM0M5 M0NFNjVDQjUwHhcNMjUwNjE1MDM0OTU2WhcNMjUwNjIyMDM0OTU2WjAYMRYwFAYD VQQDEw02ODRlNDJlNS1jYWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EEYHIR9fO7xXmw/7vw4iUYCcgC1Mx3CQbk8LV6OJujO34Zoz1Tk0SBYeO1w I7rk5dlEZE8GUA+XbwPVm+iQ90IvyONaqBh9hprlUiu6P/CB7ZB7UFiLIbQARqS4 5hQcZ/BOwQxVUmtgGMd9qTAkQRwgbV39LLN6ZOvmGlrNSZFRSZ1pf101IjQF4Jed Ep1ILJLnbBgwp0k85Ssikw3bokXe9b/3L0kn+RUwwy5pmMJ4hvQ+r2iltHuwFKv5 U1TeIcCEbTs+UuswTCiptybyKuGnP0O6WHFCnUGGJ2GY5Wbl6aUA3meVYQN6J5Zc iNZuqMvmdCyb7A6ZbNngtD+PQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeAi7Tx 0t+Jjr978Yq5V/4CGPNQMB8GA1UdIwQYMBaAFFz1W4imadx+ghFfgGBp88k85ly1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzE4QS9GNUI1Q0E4MDg3 RTYxMUVFOTdFNkM3NDZDNEY5QUUwMi9YUFZiaUtacDNINkNFVi1BWUduenlUem1Y TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hQVmJpS1pwM0g2Q0VWLUFZR256eVR6bVhMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzE4QS9GNUI1Q0E4MDg3RTYxMUVFOTdFNkM3NDZDNEY5QUUwMi9YUFZiaUtacDNI NkNFVi1BWUduenlUem1YTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjnXk55uu090D4mm/HXcF4QgjVxeBcvh+AWrC1TwWSYRHZ1Ge5MEM5 LQ911YwyBF/K+DPM3g44wAQNRPEqW61BQMFAsQCZxPzlwKp8T3aabEgXeCwsJgLN uQIL9u1qGi0BNNS6YnFT5atJnUTnO+qZcLjoYCW1RO7XSbg3tfKHbcZYjLezh2vX PMb9uVbvuanCm+39SZ2xlfAjSx6Qhg9+uodCIIOp5vur3P8YXfyN0DBRi8bI72Vb /F9t2jQCrwA2afKs0H9jAHMMrnoRSCD+6r1frk0FINy2rvz81uD5UmHUTHUdQzh/ WD2XXkelm8yqggdo+YHqxDJpYFI+tFan -----END CERTIFICATE-----Generated at Sun Jun 15 09:31:19 2025 by rpki-client