$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: Khe61EP7uzEXhkUwjA9u1tVczkg4BOPn1KgNtUmCfFo= Subject key identifier: 89:59:50:5D:E6:34:CD:AA:6F:F4:96:87:70:BC:B9:54:1C:6D:47:93 Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0ADA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 12D8 Signing time: Fri 04 Apr 2025 19:34:00 +0000 Manifest this update: Fri 04 Apr 2025 19:34:00 +0000 Manifest next update: Fri 11 Apr 2025 19:34:00 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: awMQ4pOQRNptWfZz/cjCmZSZ4PnbL9Vv01VSozaqrIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2778 (0xada) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D Validity Not Before: Apr 4 19:34:00 2025 GMT Not After : Apr 11 19:34:00 2025 GMT Subject: CN=67f03428-cb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ef:e0:52:2b:7c:0c:46:10:b0:fa:94:dd:06: 79:14:7e:b8:d0:12:e3:e8:c9:d1:cf:7a:ef:80:30: 13:44:5a:38:d7:78:01:7a:b1:0f:52:80:09:0d:db: 3b:f5:30:05:64:fb:cc:22:2c:b4:91:30:ef:7a:81: 98:27:6f:31:32:b5:65:d8:61:ef:e7:44:80:e2:5f: 02:97:32:dc:d6:5a:78:5c:8d:1f:05:1c:6f:ce:50: dc:55:26:21:27:72:4d:43:d2:1f:ae:90:4f:db:66: bb:18:c8:a0:87:ba:8b:cd:e6:2b:fc:ce:9a:4f:ea: 9e:46:51:93:01:47:7e:2c:9f:e2:04:09:6c:61:90: 90:52:40:0b:54:34:6d:2f:f2:e6:9f:1e:26:0e:7e: b4:77:fb:3d:b9:46:8b:86:99:e9:fb:f3:28:ac:0d: bc:cf:a7:2c:3a:29:c6:a6:a1:90:4f:52:fa:32:c8: 4e:f2:c3:51:0b:53:eb:80:2a:37:40:b7:15:6e:f8: ba:d5:3b:67:ae:cd:ec:25:21:44:3b:f0:d6:54:fd: 40:4d:6f:e0:8d:52:15:04:a8:e6:fd:8d:17:5f:86: c8:27:57:3b:67:c3:28:8d:7e:05:14:77:3f:67:d1: b9:21:c7:d8:ab:51:10:3b:68:86:56:25:34:d6:b1: d8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:59:50:5D:E6:34:CD:AA:6F:F4:96:87:70:BC:B9:54:1C:6D:47:93 X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:21:f9:73:fb:73:f5:59:35:be:9b:4c:19:58:58:7f:28:54: e4:d3:41:a1:cf:7d:44:67:25:26:27:bb:f4:cb:ad:a1:5a:cd: 72:cd:5b:d7:d6:87:66:10:bf:50:32:ee:3f:f5:40:d6:ea:a1: 1e:ff:aa:2c:15:bd:5d:37:e3:de:2c:f8:83:57:af:9e:b9:68: e6:68:b3:51:6c:03:72:5a:71:8b:12:f6:c0:82:ad:ab:3d:6e: 06:bb:e7:ca:78:23:0a:0f:cc:1f:0f:eb:7a:f5:64:ca:08:ae: 7c:05:6e:0e:4a:15:6a:fa:3b:e1:91:63:99:ec:13:a0:70:69: 52:4e:cd:e8:97:8f:68:13:d7:db:69:81:2b:0d:7d:23:5d:65: e7:ca:02:05:24:f4:f0:19:04:51:aa:61:b1:d6:55:26:66:57: 41:88:fc:c4:2d:79:26:96:70:72:47:48:54:38:a5:49:34:b9: 58:7f:57:47:6e:da:c7:6f:9a:ac:c8:1c:c2:73:60:cf:7e:a3: 3a:a8:88:17:a1:88:0e:ab:a5:a7:5b:b7:34:d0:71:63:52:36: cc:f9:78:36:3e:27:d2:ab:0f:3e:ac:63:08:d6:c0:59:a6:91: 55:62:dd:9f:f2:51:19:a6:6c:d8:d6:2e:19:3d:ef:29:42:76: 47:62:b8:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjUwNDA0MTkzNDAwWhcNMjUwNDExMTkzNDAwWjAYMRYwFAYD VQQDEw02N2YwMzQyOC1jYjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyO/gUit8DEYQsPqU3QZ5FH640BLj6MnRz3rvgDATRFo413gBerEPUoAJDds7 9TAFZPvMIiy0kTDveoGYJ28xMrVl2GHv50SA4l8ClzLc1lp4XI0fBRxvzlDcVSYh J3JNQ9IfrpBP22a7GMigh7qLzeYr/M6aT+qeRlGTAUd+LJ/iBAlsYZCQUkALVDRt L/Lmnx4mDn60d/s9uUaLhpnp+/MorA28z6csOinGpqGQT1L6MshO8sNRC1PrgCo3 QLcVbvi61Ttnrs3sJSFEO/DWVP1ATW/gjVIVBKjm/Y0XX4bIJ1c7Z8MojX4FFHc/ Z9G5IcfYq1EQO2iGViU01rHY7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlZUF3m NM2qb/SWh3C8uVQcbUeTMB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmIflz+3P1WTW+m0wZWFh/KFTk00Ghz31EZyUmJ7v0y62hWs1yzVvX 1odmEL9QMu4/9UDW6qEe/6osFb1dN+PeLPiDV6+euWjmaLNRbANyWnGLEvbAgq2r PW4Gu+fKeCMKD8wfD+t69WTKCK58BW4OShVq+jvhkWOZ7BOgcGlSTs3ol49oE9fb aYErDX0jXWXnygIFJPTwGQRRqmGx1lUmZldBiPzELXkmlnByR0hUOKVJNLlYf1dH btrHb5qsyBzCc2DPfqM6qIgXoYgOq6WnW7c00HFjUjbM+Xg2PifSqw8+rGMI1sBZ ppFVYt2f8lEZpmzY1i4ZPe8pQnZHYrgx -----END CERTIFICATE-----Generated at Sat Apr 5 01:12:35 2025 by rpki-client