$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft File: xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json) Hash identifier: I/MU20MFR+cVzJ8b/1jSbYS/MqmI6s8PWJnB529ZyPA= Subject key identifier: 98:B1:BE:50:35:B6:83:D3:B5:F9:2D:60:A3:7E:B3:23:A3:B4:B4:9D Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61 Certificate issuer: /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft Manifest number: 75 Signing time: Sun 13 Apr 2025 01:49:01 +0000 Manifest this update: Sun 13 Apr 2025 01:49:01 +0000 Manifest next update: Sun 20 Apr 2025 01:49:01 +0000 Files and hashes: 1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: WzIHIVLInoCl93zYRpjrS6rKgKPv6DOOBD1Rfx01ik4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 01:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361 Validity Not Before: Apr 13 01:49:01 2025 GMT Not After : Apr 20 01:49:01 2025 GMT Subject: CN=67fb180d-0ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:49:66:bd:66:1d:02:7a:03:b2:3a:36:a4: c1:e6:99:1a:a7:b9:43:c2:3e:07:f9:81:2c:99:98: 30:60:d1:40:32:fd:6f:44:28:70:f6:05:e0:c2:be: 13:2b:4e:ea:00:7c:8d:cc:89:e1:30:f3:da:f8:85: b7:ef:2b:9d:e1:e8:e5:86:d3:b9:19:a3:78:2b:d4: 5f:be:1a:48:cf:12:19:72:78:03:0c:d2:0c:08:d4: 51:99:9c:06:b4:da:9c:eb:4b:b9:e9:b5:92:2e:e6: c2:69:6b:34:06:ee:36:01:10:64:23:2a:43:02:ea: 58:c7:63:8f:17:c9:bd:9b:a6:7f:bb:2a:a3:90:a9: 2c:3a:9f:d8:8b:14:f9:a7:23:14:47:5a:e1:af:fc: d5:9a:b7:34:67:c4:df:2a:f5:da:6a:e3:02:24:02: bd:14:fb:29:4f:ef:c0:c9:5e:75:73:26:81:6d:3f: c2:8e:ad:5f:98:2c:bf:a2:68:89:d6:b2:cc:73:43: 0e:78:7e:ef:02:70:a7:34:56:b1:1f:78:ee:b7:73: 60:0e:80:8b:c6:5f:b5:af:ab:db:13:79:4f:7a:0f: 92:c1:e5:23:26:db:77:2e:ed:30:8e:33:77:c4:7d: 5e:51:ef:c2:a2:2d:72:73:26:e1:18:85:b8:65:9d: 1a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B1:BE:50:35:B6:83:D3:B5:F9:2D:60:A3:7E:B3:23:A3:B4:B4:9D X509v3 Authority Key Identifier: keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7a:9f:70:82:54:b4:75:7e:29:94:0a:5b:f7:a6:f1:2f:d9: 18:34:af:70:37:70:03:a7:18:38:59:7f:75:ab:6e:63:e2:98: c1:a0:ba:fe:8b:33:6f:7d:1c:14:18:84:a9:a7:2c:37:2b:0c: 9e:ec:3c:50:68:db:27:92:fc:56:5b:f1:c0:8a:85:71:c1:bd: 3b:42:7b:28:41:b4:f1:d6:e7:c9:14:79:18:45:38:77:c3:c0: cf:7a:35:92:28:06:46:33:4c:71:e1:bb:de:1b:ad:9e:c8:af: 0e:e5:b4:cf:24:d9:2a:05:5b:2c:2f:54:16:ef:e5:58:24:ce: f6:5d:98:fc:51:45:c6:db:11:b0:20:a8:20:7b:a6:ac:05:a3: 83:79:dd:53:3d:fe:8e:92:bf:b1:b1:69:4f:0b:6f:5e:f6:3a: 6b:ff:27:55:d0:67:57:b0:4a:3e:98:e4:b6:83:f2:2a:48:21: 59:14:fa:b3:5e:14:c5:05:d6:27:7c:4f:7a:e5:6e:c7:2d:ce: e1:3d:14:71:f9:44:11:c2:06:1e:04:0f:d4:b5:37:6b:cd:31: db:c2:59:97:3c:30:7a:f5:2d:18:71:2d:e6:7d:9a:f7:ca:be: 1e:6a:7b:fd:ff:80:a4:9a:dd:15:9a:b6:c5:e0:b6:8c:d4:34: 28:15:97:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEMxNDExMC8GA1UEBRMoQzYxNTcwMEQ3Qzg4OEJFNkJBNzUwQURFQ0Q5NEQ4ODY0 NjgyRTM2MTAeFw0yNTA0MTMwMTQ5MDFaFw0yNTA0MjAwMTQ5MDFaMBgxFjAUBgNV BAMTDTY3ZmIxODBkLTBhYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5EElmvWYdAnoDsjo2pMHmmRqnuUPCPgf5gSyZmDBg0UAy/W9EKHD2BeDCvhMr TuoAfI3MieEw89r4hbfvK53h6OWG07kZo3gr1F++GkjPEhlyeAMM0gwI1FGZnAa0 2pzrS7nptZIu5sJpazQG7jYBEGQjKkMC6ljHY48Xyb2bpn+7KqOQqSw6n9iLFPmn IxRHWuGv/NWatzRnxN8q9dpq4wIkAr0U+ylP78DJXnVzJoFtP8KOrV+YLL+iaInW ssxzQw54fu8CcKc0VrEfeO63c2AOgIvGX7Wvq9sTeU96D5LB5SMm23cu7TCOM3fE fV5R78KiLXJzJuEYhbhlnRrtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmLG+UDW2 g9O1+S1go36zI6O0tJ0wHwYDVR0jBBgwFoAUxhVwDXyIi+a6dQrezZTYhkaC42Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQzE0LzhGMzM5OTk2NkJG QjExRUY4NDYzMjYzNUM0RjlBRTAyL3hoVndEWHlJaS1hNmRRcmV6WlRZaGthQzQy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveGhWd0RYeUlpLWE2ZFFyZXpaVFloa2FDNDJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QzE0LzhGMzM5OTk2NkJGQjExRUY4NDYzMjYzNUM0RjlBRTAyL3hoVndEWHlJaS1h NmRRcmV6WlRZaGthQzQyRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF56n3CCVLR1fimUClv3pvEv2Rg0r3A3cAOnGDhZf3WrbmPimMGguv6L M299HBQYhKmnLDcrDJ7sPFBo2yeS/FZb8cCKhXHBvTtCeyhBtPHW58kUeRhFOHfD wM96NZIoBkYzTHHhu94brZ7Irw7ltM8k2SoFWywvVBbv5VgkzvZdmPxRRcbbEbAg qCB7pqwFo4N53VM9/o6Sv7GxaU8Lb172Omv/J1XQZ1ewSj6Y5LaD8ipIIVkU+rNe FMUF1id8T3rlbsctzuE9FHH5RBHCBh4ED9S1N2vNMdvCWZc8MHr1LRhxLeZ9mvfK vh5qe/3/gKSa3RWatsXgtozUNCgVl7o= -----END CERTIFICATE-----Generated at Sun Apr 13 06:02:28 2025 by rpki-client