$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft File: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft (raw, json) Hash identifier: oFQq6ydfJpQbtCOKyYyuTr0v+RH5iZXI5o/rPgax88o= Subject key identifier: 1C:F2:84:53:A2:00:AB:75:B6:5A:47:CA:4B:23:4A:C7:A5:FD:33:2F Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft Manifest number: 87 Signing time: Mon 21 Apr 2025 05:21:12 +0000 Manifest this update: Mon 21 Apr 2025 05:21:11 +0000 Manifest next update: Mon 28 Apr 2025 05:21:11 +0000 Files and hashes: 1: XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl (hash: tJ6d+wQMeLxTdG/E796kxcen0tv9enFikApLt0ZsEUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84 Validity Not Before: Apr 21 05:21:11 2025 GMT Not After : Apr 28 05:21:11 2025 GMT Subject: CN=6805d5c7-4099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:96:65:ba:a9:96:4e:de:71:44:d2:e9:81:aa: bb:9d:5d:d6:8e:04:89:73:e6:83:b1:79:52:dc:a4: 7a:d8:4b:71:d7:da:4c:5e:de:56:47:3d:1d:6f:23: 9d:b0:0c:01:e5:37:94:c7:7b:14:9c:02:fa:ec:2f: 0b:2b:23:45:29:b1:7e:23:5b:d9:0a:ed:73:58:fc: c7:ea:66:d1:ae:96:57:92:9f:0f:fd:fb:c7:6f:01: f7:52:72:d7:6a:4f:ec:a1:c9:df:26:8c:5d:d0:43: f0:9c:88:39:e8:3a:c8:31:fa:c8:f2:ef:21:65:a9: b6:66:ac:3a:7d:de:d0:47:53:2c:d6:96:88:ef:98: 61:f5:a2:f8:11:03:cb:a3:7d:30:43:be:af:8f:0a: 73:cd:3c:1d:e2:87:04:8b:71:84:3d:d2:84:34:b7: 2b:4a:f5:85:07:bd:41:f3:5b:cf:5e:ba:67:00:2b: 34:a9:7e:5d:d3:bd:1f:16:85:bb:b6:76:fe:4a:d3: 0d:22:b1:b4:d5:2e:5a:71:1a:7a:6c:bc:7e:24:5a: d4:cd:31:96:85:c5:8b:a8:66:c4:4d:a1:cd:8a:ef: 86:97:2f:c2:c5:aa:a2:e3:bd:ca:5b:0b:e3:1c:9b: 70:8f:a7:6b:8b:20:66:47:1c:a6:e7:f8:ca:3c:9e: f1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F2:84:53:A2:00:AB:75:B6:5A:47:CA:4B:23:4A:C7:A5:FD:33:2F X509v3 Authority Key Identifier: keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:99:59:9f:06:16:41:4b:59:e3:21:0f:5b:df:6a:44:24:34: 3a:45:4e:2f:48:50:db:bb:7d:69:54:6d:46:e3:85:31:07:e6: c2:df:4d:6f:8f:f8:45:7e:c6:7b:f8:78:6a:9c:3d:9d:57:0b: 1a:a7:c8:9e:f2:98:3e:ca:1a:46:6c:d1:63:05:c7:78:af:a4: 2e:e8:e2:47:c0:0e:ba:a7:01:ff:d1:ca:3c:1d:7e:43:f6:67: b2:a3:1f:94:db:ad:d0:03:d6:e7:64:bf:b7:eb:6e:92:51:7e: 36:3b:61:49:49:89:e6:f1:16:f6:bf:63:2e:72:dc:73:63:af: 3d:cc:c1:c3:a2:32:36:3d:a7:1c:9e:aa:fb:30:9f:f5:59:3a: f5:c9:6e:df:0a:a0:91:59:ba:15:45:41:8f:08:3a:81:7e:2a: fd:00:3e:22:ea:d8:d3:5d:f5:9d:69:60:05:55:4f:32:67:e4: c4:68:37:a0:2f:d7:31:86:0c:90:68:9a:3e:44:60:e3:22:ab: a1:cf:53:23:05:5d:db:04:c7:99:ac:51:74:ba:72:d3:9c:e2: 88:7f:6f:8a:c0:33:c9:4a:ee:95:e0:d8:b2:de:b0:23:6b:8a: 0e:1b:7b:10:d2:f0:86:42:16:cd:bc:ad:26:c3:71:51:7f:fa: 2a:90:f3:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDQkIxMTAvBgNVBAUTKDVDQUZFOEE4M0YwOTBBRTE0NkE0MDNBRkE1NTdDNUNG QUE4OENEODQwHhcNMjUwNDIxMDUyMTExWhcNMjUwNDI4MDUyMTExWjAYMRYwFAYD VQQDEw02ODA1ZDVjNy00MDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZZluqmWTt5xRNLpgaq7nV3WjgSJc+aDsXlS3KR62Etx19pMXt5WRz0dbyOd sAwB5TeUx3sUnAL67C8LKyNFKbF+I1vZCu1zWPzH6mbRrpZXkp8P/fvHbwH3UnLX ak/socnfJoxd0EPwnIg56DrIMfrI8u8hZam2Zqw6fd7QR1Ms1paI75hh9aL4EQPL o30wQ76vjwpzzTwd4ocEi3GEPdKENLcrSvWFB71B81vPXrpnACs0qX5d070fFoW7 tnb+StMNIrG01S5acRp6bLx+JFrUzTGWhcWLqGbETaHNiu+Gly/Cxaqi473KWwvj HJtwj6driyBmRxym5/jKPJ7x/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzyhFOi AKt1tlpHyksjSsel/TMvMB8GA1UdIwQYMBaAFFyv6Kg/CQrhRqQDr6VXxc+qiM2E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNCQi81Q0FDNjA0ODUz MEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1RkdwQU92cFZmRno2cUl6 WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLX29xRDhKQ3VGR3BBT3ZwVmZGejZxSXpZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNCQi81Q0FDNjA0ODUzMEYxMUVGOTlDODhEMEZDNEY5QUUwMi9YS19vcUQ4SkN1 RkdwQU92cFZmRno2cUl6WVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvmVmfBhZBS1njIQ9b32pEJDQ6RU4vSFDbu31pVG1G44UxB+bC301v j/hFfsZ7+HhqnD2dVwsap8ie8pg+yhpGbNFjBcd4r6Qu6OJHwA66pwH/0co8HX5D 9meyox+U263QA9bnZL+3626SUX42O2FJSYnm8Rb2v2MuctxzY689zMHDojI2Pacc nqr7MJ/1WTr1yW7fCqCRWboVRUGPCDqBfir9AD4i6tjTXfWdaWAFVU8yZ+TEaDeg L9cxhgyQaJo+RGDjIquhz1MjBV3bBMeZrFF0unLTnOKIf2+KwDPJSu6V4Niy3rAj a4oOG3sQ0vCGQhbNvK0mw3FRf/oqkPOH -----END CERTIFICATE-----Generated at Tue Apr 22 03:29:02 2025 by rpki-client