$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft File: xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json) Hash identifier: /3JTGeIVe6ZZIbx0s5t7sdq711xJHBgEiuhUdTiBGX0= Subject key identifier: 70:2B:B5:4A:51:A3:58:01:57:9C:2B:46:5F:63:74:E5:F5:08:A6:8D Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 Certificate issuer: /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Certificate serial: 2BA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft Manifest number: 2BA8 Signing time: Sat 31 May 2025 15:31:12 +0000 Manifest this update: Sat 31 May 2025 15:31:12 +0000 Manifest next update: Sat 07 Jun 2025 15:31:12 +0000 Files and hashes: 1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: tgDMnSyWMn1eAOCwzBlBHvja+Lup8JPmkiFX0CqA5SU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11176 (0x2ba8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13 Validity Not Before: May 31 15:31:12 2025 GMT Not After : Jun 7 15:31:12 2025 GMT Subject: CN=683b20c0-3a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:4a:89:04:1f:ff:50:6a:87:c2:dd:6d:f0: 06:d0:00:81:c6:8f:aa:4b:db:44:11:f1:b6:47:81: d4:e8:72:c4:b7:21:33:2d:a1:08:d3:ea:82:b4:2a: 31:b5:0c:5d:5c:61:7c:4c:57:7a:4d:08:ef:99:90: fd:1b:20:c2:28:9d:1a:f9:9d:22:6d:b2:f3:13:99: df:bd:b4:bf:1f:33:04:75:f3:67:ba:d7:0e:c8:14: 9e:1f:14:dc:cf:13:e6:78:de:a3:3b:db:36:09:aa: 35:8f:bf:eb:42:f9:f4:40:22:7b:b9:90:ab:b5:09: 09:ad:26:b6:04:f1:ee:00:71:1e:16:cf:e0:c4:1b: 1b:a2:65:95:6a:db:87:dd:01:cf:61:90:a4:85:c6: d7:7e:75:41:e1:1e:7e:65:eb:55:47:3a:57:fb:e7: 67:e9:02:d1:6c:a7:f4:52:b7:7d:25:cb:dc:98:cb: a9:16:83:ee:0b:cd:a5:24:74:a3:17:59:64:8a:79: 61:d0:51:bd:72:af:78:44:35:03:b6:c6:4f:e6:7e: 03:62:c1:f1:b5:fb:ef:69:0c:20:d7:4e:68:4f:56: 1e:dc:13:ef:ee:87:25:1d:56:74:45:2d:6f:6b:33: 5b:3e:1f:63:61:be:37:aa:f1:e1:e7:e2:0c:69:e4: a8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2B:B5:4A:51:A3:58:01:57:9C:2B:46:5F:63:74:E5:F5:08:A6:8D X509v3 Authority Key Identifier: keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:56:2b:f3:75:13:af:cc:bc:d8:3d:dd:74:36:e7:66:4e:6f: e5:87:d4:c7:5e:2f:37:02:3f:56:f2:b5:d6:99:51:7f:75:85: 0f:b7:e4:ee:65:2b:df:c1:32:24:50:b3:d6:8b:99:86:f4:44: e8:61:91:b6:d3:f9:27:ed:4e:5a:dc:0e:e5:40:b4:f4:07:2c: f6:39:b7:cd:ed:5f:49:bb:0c:52:de:d0:21:17:e1:9e:d4:4b: 1b:e0:b1:fb:64:ab:7e:58:e4:59:eb:b8:23:f1:e5:3a:19:bf: 10:b3:9e:8c:f5:9c:7f:ed:ca:a7:b2:46:9f:4a:eb:d6:d3:e9: 78:d4:b7:f4:00:c3:5d:2f:a0:63:b0:cf:4b:13:6c:1b:18:19: 38:e9:bf:20:08:3e:40:40:38:1e:7f:e0:29:6f:de:9d:34:d1: d6:08:c8:fd:df:e4:69:f2:73:59:2a:12:e7:4e:cf:8a:00:c0: 84:9a:d2:7e:97:51:71:45:4e:2a:fa:ff:e3:88:f7:ee:ee:41: 3b:0d:ac:8e:bb:cf:31:ac:0e:74:b9:fd:6d:9f:93:d5:13:b4: 33:d6:c6:00:7a:b5:d6:b0:79:f9:af:f3:81:6f:52:aa:f6:80: fe:97:91:3e:07:fa:ef:47:8f:36:01:ac:e5:21:cb:22:2f:96: a8:0d:51:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzQjAxMTAvBgNVBAUTKEM2NTU4RjhGQzBEOEQwNDI5RUQ3ODdFQUY5NjdCRUZD N0EwOURDMTMwHhcNMjUwNTMxMTUzMTEyWhcNMjUwNjA3MTUzMTEyWjAYMRYwFAYD VQQDEw02ODNiMjBjMC0zYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4pKiQQf/1Bqh8LdbfAG0ACBxo+qS9tEEfG2R4HU6HLEtyEzLaEI0+qCtCox tQxdXGF8TFd6TQjvmZD9GyDCKJ0a+Z0ibbLzE5nfvbS/HzMEdfNnutcOyBSeHxTc zxPmeN6jO9s2Cao1j7/rQvn0QCJ7uZCrtQkJrSa2BPHuAHEeFs/gxBsbomWVatuH 3QHPYZCkhcbXfnVB4R5+ZetVRzpX++dn6QLRbKf0Urd9JcvcmMupFoPuC82lJHSj F1lkinlh0FG9cq94RDUDtsZP5n4DYsHxtfvvaQwg105oT1Ye3BPv7oclHVZ0RS1v azNbPh9jYb43qvHh5+IMaeSoHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHArtUpR o1gBV5wrRl9jdOX1CKaNMB8GA1UdIwQYMBaAFMZVj4/A2NBCnteH6vlnvvx6CdwT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC80ODQ2MDRCMkRC QzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBFS2UxNGZxLVdlLV9Ib0oz Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsV1BqOERZMEVLZTE0ZnEtV2UtX0hvSjNCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNCMC80ODQ2MDRCMkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBF S2UxNGZxLVdlLV9Ib0ozQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGVivzdROvzLzYPd10NudmTm/lh9THXi83Aj9W8rXWmVF/dYUPt+Tu ZSvfwTIkULPWi5mG9EToYZG20/kn7U5a3A7lQLT0Byz2ObfN7V9JuwxS3tAhF+Ge 1Esb4LH7ZKt+WORZ67gj8eU6Gb8Qs56M9Zx/7cqnskafSuvW0+l41Lf0AMNdL6Bj sM9LE2wbGBk46b8gCD5AQDgef+Apb96dNNHWCMj93+Rp8nNZKhLnTs+KAMCEmtJ+ l1FxRU4q+v/jiPfu7kE7DayOu88xrA50uf1tn5PVE7Qz1sYAerXWsHn5r/OBb1Kq 9oD+l5E+B/rvR482AazlIcsiL5aoDVHG -----END CERTIFICATE-----Generated at Sat May 31 17:37:44 2025 by rpki-client