$ rpki-client -vvf rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft File: xem-kywNTgcfsYgsriUoEEdzKVA.mft (raw, json) Hash identifier: 5wnmdh/SXKCdHsmnB0RTJAoq61foARw1q4om8wLxZHk= Subject key identifier: 3D:C4:F1:7F:BA:C5:43:BF:62:A1:7B:BF:C8:87:6D:18:B6:D0:AD:3C Authority key identifier: C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50 Certificate issuer: /CN=A9121AB0/serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft Manifest number: 01CA Signing time: Fri 11 Apr 2025 02:14:30 +0000 Manifest this update: Fri 11 Apr 2025 02:14:29 +0000 Manifest next update: Fri 18 Apr 2025 02:14:29 +0000 Files and hashes: 1: xem-kywNTgcfsYgsriUoEEdzKVA.crl (hash: OU0XOPFeNM1qTreN9TWD2bUeiECWL/z04EpOvtgpQOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.crl rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 02:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121AB0, serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950 Validity Not Before: Apr 11 02:14:29 2025 GMT Not After : Apr 18 02:14:29 2025 GMT Subject: CN=67f87b06-5b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5b:28:6e:ec:06:c4:09:ce:bf:12:4e:56:c7: 68:66:c7:3b:fa:67:c3:da:39:76:6f:7f:3e:27:3f: 3d:cc:73:99:06:7c:73:96:0b:b1:18:88:d1:28:91: 20:4b:4c:49:8b:4b:db:28:55:96:3a:45:ed:e3:6a: a8:e1:e9:85:43:40:dc:9b:14:7e:4c:ef:3e:17:b3: e9:8b:40:1d:2e:58:82:54:ed:2c:46:ca:00:78:08: 83:f2:1d:af:d0:4f:bc:6e:37:e4:b3:44:d7:b5:d4: 16:b1:be:ad:ca:27:9e:e5:d7:08:dd:c0:6e:6d:5f: f8:30:f5:91:cb:da:f9:76:fd:26:f2:48:d8:12:14: d2:5c:14:72:2c:83:45:cd:0d:71:cc:bf:05:de:53: 61:d2:b1:b2:b2:f8:2b:6d:64:a5:a4:10:de:0a:f2: c0:7a:54:fa:f8:7a:1e:e3:9b:13:6f:ad:4e:50:91: 4a:1a:56:e7:7c:55:a5:8d:60:7c:5d:03:7a:40:53: 2c:54:6e:c0:9f:06:a0:06:94:f2:9d:c3:42:ac:64: 98:f6:f5:82:3c:21:77:05:fc:f5:e0:43:e9:95:af: e6:78:89:1d:4a:38:36:2e:75:45:c7:96:72:86:b5: 1a:70:6c:83:c0:69:34:06:e7:f0:62:92:47:7c:4d: 8a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C4:F1:7F:BA:C5:43:BF:62:A1:7B:BF:C8:87:6D:18:B6:D0:AD:3C X509v3 Authority Key Identifier: keyid:C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e3:e0:36:36:bd:e9:97:97:18:cf:df:7b:ef:57:c1:b7:ce: 27:29:80:05:75:7e:c3:61:4a:3b:f3:87:c5:c0:a2:a2:48:be: cf:04:f4:5d:1e:24:a7:53:63:99:38:3f:e1:30:b6:9f:4c:1c: a0:da:9b:27:63:96:b2:30:b6:d8:93:a9:aa:26:70:1f:ab:36: cc:ac:4e:d8:ca:8d:e7:16:b1:0b:0b:f2:10:5b:08:eb:40:3e: 3c:c8:53:27:61:5d:3f:ab:19:b0:ce:b1:82:21:fe:2f:81:0d: d9:28:40:8f:6c:bd:66:7b:12:b1:4f:82:26:16:20:06:12:ce: 7c:a3:78:96:51:7e:04:44:8f:00:ca:d6:22:f6:36:77:ee:85: cc:0e:6d:d9:49:2d:c4:47:6b:af:8f:ef:51:04:55:12:50:e2: f8:5d:37:be:fa:74:5e:74:73:2b:b8:52:2f:36:e7:10:b3:44: af:da:a2:0a:c7:07:17:cd:59:15:39:f8:eb:19:41:09:ec:6b: 5e:04:09:47:dd:c4:b1:19:3e:06:42:4c:a6:72:cd:eb:84:33: 8e:a3:a2:c6:f3:98:8f:89:08:7a:c0:4e:d3:e9:80:17:d6:92: 7a:38:c0:5d:d2:74:14:c8:6f:ef:7d:81:e8:75:90:72:8b:ee: 72:d7:a9:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFBQjAxMTAvBgNVBAUTKEM1RTlCRTkzMkMwRDRFMDcxRkIxODgyQ0FFMjUyODEw NDc3MzI5NTAwHhcNMjUwNDExMDIxNDI5WhcNMjUwNDE4MDIxNDI5WjAYMRYwFAYD VQQDEw02N2Y4N2IwNi01Yjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1sobuwGxAnOvxJOVsdoZsc7+mfD2jl2b38+Jz89zHOZBnxzlguxGIjRKJEg S0xJi0vbKFWWOkXt42qo4emFQ0DcmxR+TO8+F7Ppi0AdLliCVO0sRsoAeAiD8h2v 0E+8bjfks0TXtdQWsb6tyiee5dcI3cBubV/4MPWRy9r5dv0m8kjYEhTSXBRyLINF zQ1xzL8F3lNh0rGysvgrbWSlpBDeCvLAelT6+Hoe45sTb61OUJFKGlbnfFWljWB8 XQN6QFMsVG7AnwagBpTyncNCrGSY9vWCPCF3Bfz14EPpla/meIkdSjg2LnVFx5Zy hrUacGyDwGk0BufwYpJHfE2K+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3E8X+6 xUO/YqF7v8iHbRi20K08MB8GA1UdIwQYMBaAFMXpvpMsDU4HH7GILK4lKBBHcylQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUFCMC8xRkY4ODgzMjVD QkUxMUVEQjFGMEMwNENDNEY5QUUwMi94ZW0ta3l3TlRnY2ZzWWdzcmlVb0VFZHpL VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hlbS1reXdOVGdjZnNZZ3NyaVVvRUVkektWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUFCMC8xRkY4ODgzMjVDQkUxMUVEQjFGMEMwNENDNEY5QUUwMi94ZW0ta3l3TlRn Y2ZzWWdzcmlVb0VFZHpLVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt4+A2Nr3pl5cYz99771fBt84nKYAFdX7DYUo784fFwKKiSL7PBPRd HiSnU2OZOD/hMLafTByg2psnY5ayMLbYk6mqJnAfqzbMrE7Yyo3nFrELC/IQWwjr QD48yFMnYV0/qxmwzrGCIf4vgQ3ZKECPbL1mexKxT4ImFiAGEs58o3iWUX4ERI8A ytYi9jZ37oXMDm3ZSS3ER2uvj+9RBFUSUOL4XTe++nRedHMruFIvNucQs0Sv2qIK xwcXzVkVOfjrGUEJ7GteBAlH3cSxGT4GQkymcs3rhDOOo6LG85iPiQh6wE7T6YAX 1pJ6OMBd0nQUyG/vfYHodZByi+5y16kH -----END CERTIFICATE-----Generated at Sun Apr 13 02:34:57 2025 by rpki-client