$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft File: xqIW5CMmizknfcEi8-Gq2GxtmkM.mft (raw, json) Hash identifier: CLTJZXw6v1oliQiac2CR4ftH5/ivlwsdoIaiQZtUTZ0= Subject key identifier: 8D:1D:DA:71:F8:D4:5A:F1:DA:55:9C:22:2D:0E:B8:E7:C8:11:99:4F Authority key identifier: C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 Certificate issuer: /CN=A9135FB6/serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft Manifest number: 60 Signing time: Sat 31 May 2025 06:39:22 +0000 Manifest this update: Sat 31 May 2025 06:39:22 +0000 Manifest next update: Sat 07 Jun 2025 06:39:22 +0000 Files and hashes: 1: xqIW5CMmizknfcEi8-Gq2GxtmkM.crl (hash: Q7XtnZxiYpbHYM2DLt05as1Nc3RDepYT6q+hKJ/GUug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135FB6, serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43 Validity Not Before: May 31 06:39:22 2025 GMT Not After : Jun 7 06:39:22 2025 GMT Subject: CN=683aa41a-8852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:c9:24:f4:18:9a:8b:cb:9c:fa:4f:13:22: 2d:62:38:9a:80:45:73:78:e5:ba:18:0a:50:04:59: d4:fe:ea:ac:01:31:14:8f:44:ce:73:3d:56:39:5c: 0a:00:aa:2b:3b:26:c3:73:6b:22:ed:0a:d7:f5:30: 36:c4:43:52:29:6f:78:ac:97:84:53:a3:15:8d:1f: 2c:34:a8:72:e9:ce:6d:fb:17:94:12:1a:06:ed:cb: a1:da:1a:db:6c:7a:2c:71:9b:6f:9d:c7:42:6f:d5: 7e:f7:e7:7d:08:a6:3a:17:a5:ba:5b:b6:2d:10:86: f0:df:df:ca:c5:b1:03:3e:b5:31:6f:9a:6e:3b:30: 9c:1c:f5:dd:3c:0c:cb:b6:d9:53:51:8f:7a:c9:6f: 0e:04:1a:9e:62:22:15:bb:ec:8a:4a:49:70:d8:0f: 44:bd:d6:bd:53:dd:e1:83:79:8d:bf:78:58:6f:b9: f5:71:bb:be:e9:91:f6:8a:cc:d0:2f:a8:84:30:ee: 73:0d:8d:b4:fb:30:37:f4:c9:79:cf:fc:e2:20:e2: c5:ab:a2:01:ed:ba:a2:66:63:2d:30:aa:dd:18:3e: 94:22:85:d6:cb:0f:7a:5d:68:c5:0f:00:77:dd:e5: 78:4c:da:21:5a:fb:fd:21:1d:b0:64:6e:2a:c7:de: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1D:DA:71:F8:D4:5A:F1:DA:55:9C:22:2D:0E:B8:E7:C8:11:99:4F X509v3 Authority Key Identifier: keyid:C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e3:e1:42:e9:8c:e6:55:4a:46:8d:ab:8c:16:40:2b:dc:6f: 49:b5:15:d0:39:ff:dd:3a:6d:f8:83:ec:54:30:c4:b9:0c:7a: 61:7d:4b:f3:e1:2a:53:03:15:16:dc:00:73:dc:7d:f6:52:d7: 0d:e5:e9:df:e4:b3:fd:9f:1a:b8:c2:71:c4:30:8a:59:5b:09: 71:c5:a3:60:2d:b8:27:af:ea:1c:9f:1f:ab:48:27:fc:87:4c: d1:0a:30:12:8e:97:43:07:d0:93:f1:34:a1:ab:f5:91:d8:4d: 9f:34:0f:f1:73:ee:95:f8:c7:7d:dc:33:7e:81:b5:d4:ce:ae: 1f:21:1a:42:19:2a:2d:d2:b2:15:23:27:4d:6b:da:e2:51:e0: 44:6e:d3:36:40:14:5f:62:59:79:49:6e:4c:65:2e:8d:f3:b8: 32:f6:f1:84:af:f2:b2:5c:39:5b:95:9e:28:d2:0b:52:9e:87: bd:1b:53:55:24:a2:e1:35:53:dc:00:98:34:ff:53:ec:5a:d0: 14:46:54:41:97:ac:ef:2b:d7:cd:65:ea:7e:32:9a:e3:1a:cd: 4e:f1:26:b8:73:70:4a:0d:e7:57:8c:ca:36:ec:8d:92:fd:11: f1:a1:b3:36:45:58:9f:22:cc:19:ff:30:cc:15:43:c2:6a:0a: 92:90:da:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUZCNjExMC8GA1UEBRMoQzZBMjE2RTQyMzI2OEIzOTI3N0RDMTIyRjNFMUFBRDg2 QzZEOUE0MzAeFw0yNTA1MzEwNjM5MjJaFw0yNTA2MDcwNjM5MjJaMBgxFjAUBgNV BAMTDTY4M2FhNDFhLTg4NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Y8kk9Biai8uc+k8TIi1iOJqARXN45boYClAEWdT+6qwBMRSPRM5zPVY5XAoA qis7JsNzayLtCtf1MDbEQ1Ipb3isl4RToxWNHyw0qHLpzm37F5QSGgbty6HaGtts eixxm2+dx0Jv1X73530IpjoXpbpbti0QhvDf38rFsQM+tTFvmm47MJwc9d08DMu2 2VNRj3rJbw4EGp5iIhW77IpKSXDYD0S91r1T3eGDeY2/eFhvufVxu77pkfaKzNAv qIQw7nMNjbT7MDf0yXnP/OIg4sWrogHtuqJmYy0wqt0YPpQihdbLD3pdaMUPAHfd 5XhM2iFa+/0hHbBkbirH3phrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjR3acfjU WvHaVZwiLQ6458gRmU8wHwYDVR0jBBgwFoAUxqIW5CMmizknfcEi8+Gq2GxtmkMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RkI2LzhFQzM1REU0QUM2 NDExRUZCNjg0MjY3QkM0RjlBRTAyL3hxSVc1Q01taXprbmZjRWk4LUdxMkd4dG1r TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveHFJVzVDTW1pemtuZmNFaTgtR3EyR3h0bWtNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RkI2LzhFQzM1REU0QUM2NDExRUZCNjg0MjY3QkM0RjlBRTAyL3hxSVc1Q01taXpr bmZjRWk4LUdxMkd4dG1rTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGfj4ULpjOZVSkaNq4wWQCvcb0m1FdA5/906bfiD7FQwxLkMemF9S/Ph KlMDFRbcAHPcffZS1w3l6d/ks/2fGrjCccQwillbCXHFo2AtuCev6hyfH6tIJ/yH TNEKMBKOl0MH0JPxNKGr9ZHYTZ80D/Fz7pX4x33cM36BtdTOrh8hGkIZKi3SshUj J01r2uJR4ERu0zZAFF9iWXlJbkxlLo3zuDL28YSv8rJcOVuVnijSC1Keh70bU1Uk ouE1U9wAmDT/U+xa0BRGVEGXrO8r181l6n4ymuMazU7xJrhzcEoN51eMyjbsjZL9 EfGhszZFWJ8izBn/MMwVQ8JqCpKQ2kM= -----END CERTIFICATE-----Generated at Sat May 31 17:40:58 2025 by rpki-client