$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft File: xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json) Hash identifier: g/y3wX1Jq+3BYrr3kr1J/u8Kn+rUM+j3uS3QwB0HZ5M= Subject key identifier: 1E:AB:0C:7D:28:18:7F:CE:57:B2:F0:CA:34:CC:CB:06:AF:C3:CE:9B Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B Certificate issuer: /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Certificate serial: 3483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft Manifest number: 3483 Signing time: Sat 31 May 2025 15:08:53 +0000 Manifest this update: Sat 31 May 2025 15:08:53 +0000 Manifest next update: Sat 07 Jun 2025 15:08:53 +0000 Files and hashes: 1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: jNgQc8ia5iYpE0r3YqYNE5l/nnhkmtP0Jlm8IOCRCuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13443 (0x3483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B Validity Not Before: May 31 15:08:53 2025 GMT Not After : Jun 7 15:08:53 2025 GMT Subject: CN=683b1b85-1ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:b5:38:26:3d:34:ac:37:f6:5a:cc:bd:34: f2:7d:46:26:7f:38:83:94:a3:f4:2b:2b:47:ca:6a: ba:09:0d:f5:7d:d2:a3:2f:72:07:46:b5:25:b8:5f: a9:bd:34:78:fe:46:b1:2c:34:e7:f8:0b:30:20:ef: 6d:c0:f6:45:47:83:6d:89:04:24:08:f9:4b:84:18: 79:ba:f8:67:c6:41:93:96:22:2a:90:1f:4e:36:0c: 65:50:6a:43:20:d1:ef:5a:0c:16:d2:47:2b:37:99: f3:35:7e:62:bf:bb:42:96:14:f6:01:dc:9d:31:67: 5c:04:cd:f5:19:58:d9:cd:16:f9:e4:22:db:c4:00: 74:03:01:17:5a:47:28:17:2c:4b:06:87:a6:5f:08: 0e:e3:2b:51:47:20:7e:ae:21:4f:5a:32:a4:88:bd: 8f:c3:15:79:ad:21:3c:46:13:f6:3b:5c:a1:9a:52: a5:ae:8e:a3:57:01:11:f5:78:44:fa:ba:a8:2e:6a: e6:77:da:db:f9:8f:c3:b3:5f:d6:d4:c0:1f:d5:67: 2c:8b:98:09:59:2b:eb:ed:c7:99:d4:8a:f7:77:9b: 01:5f:12:94:86:00:76:b3:76:ee:e1:c2:05:dd:c2: 86:8a:54:37:34:87:b6:ca:39:55:e4:c9:52:07:96: c3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AB:0C:7D:28:18:7F:CE:57:B2:F0:CA:34:CC:CB:06:AF:C3:CE:9B X509v3 Authority Key Identifier: keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:87:f6:19:bb:4b:67:66:a5:dd:4c:be:e4:dd:c4:5b:66:13: 0c:22:f9:c4:8c:3e:49:2c:55:c9:2e:c7:8a:63:f1:3e:62:ed: 85:5f:94:9a:a2:bd:1f:6c:5b:33:a4:1a:7f:01:39:d4:4f:39: b3:33:43:70:27:1a:28:a4:df:15:f3:99:2c:f4:20:eb:b4:29: c2:ae:7b:20:e4:d1:e9:6a:f9:fe:67:46:41:32:f2:01:0b:ab: f8:e9:bc:80:1c:01:ea:c6:3c:2c:45:7f:75:4b:c1:a3:a6:a0: 49:da:7b:b7:3a:8e:d0:ba:06:b2:94:88:82:5c:14:7e:bb:d7: 44:37:56:bb:4e:a9:71:b2:2d:21:45:91:c3:6a:54:52:65:7a: a1:99:ba:2a:08:39:d2:b4:ca:be:05:77:91:11:19:85:dc:b2: 7e:86:f3:c4:04:df:71:53:0b:54:0b:71:3d:7b:01:dc:5d:33: 1b:87:ba:6f:b8:8e:d1:9b:6e:33:a7:01:fe:a3:e5:99:d5:58: fb:a0:41:d6:cf:37:1a:a0:13:5a:da:e0:4d:0e:62:ed:13:7c: f5:bf:b8:d7:f1:f9:78:89:73:8a:d4:cc:8a:39:f5:f2:a6:4f: 50:a8:42:1a:e1:d0:24:82:40:45:5c:5b:e1:84:34:a9:a3:85: 96:0f:34:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0 MzQ1NTM3M0IwHhcNMjUwNTMxMTUwODUzWhcNMjUwNjA3MTUwODUzWjAYMRYwFAYD VQQDEw02ODNiMWI4NS0xZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGO1OCY9NKw39lrMvTTyfUYmfziDlKP0KytHymq6CQ31fdKjL3IHRrUluF+p vTR4/kaxLDTn+AswIO9twPZFR4NtiQQkCPlLhBh5uvhnxkGTliIqkB9ONgxlUGpD INHvWgwW0kcrN5nzNX5iv7tClhT2AdydMWdcBM31GVjZzRb55CLbxAB0AwEXWkco FyxLBoemXwgO4ytRRyB+riFPWjKkiL2PwxV5rSE8RhP2O1yhmlKlro6jVwER9XhE +rqoLmrmd9rb+Y/Ds1/W1MAf1Wcsi5gJWSvr7ceZ1Ir3d5sBXxKUhgB2s3bu4cIF 3cKGilQ3NIe2yjlV5MlSB5bDwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6rDH0o GH/OV7LwyjTMywavw86bMB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu S0VmRzFYNTZpalZEUlZOenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMh/YZu0tnZqXdTL7k3cRbZhMMIvnEjD5JLFXJLseKY/E+Yu2FX5Sa or0fbFszpBp/ATnUTzmzM0NwJxoopN8V85ks9CDrtCnCrnsg5NHpavn+Z0ZBMvIB C6v46byAHAHqxjwsRX91S8GjpqBJ2nu3Oo7QugaylIiCXBR+u9dEN1a7Tqlxsi0h RZHDalRSZXqhmboqCDnStMq+BXeRERmF3LJ+hvPEBN9xUwtUC3E9ewHcXTMbh7pv uI7Rm24zpwH+o+WZ1Vj7oEHWzzcaoBNa2uBNDmLtE3z1v7jX8fl4iXOK1MyKOfXy pk9QqEIa4dAkgkBFXFvhhDSpo4WWDzSm -----END CERTIFICATE-----Generated at Sat May 31 16:52:13 2025 by rpki-client