$ rpki-client -vvf rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft File: xl_8-yz82bzWja6waX0xbPNbI_A.mft (raw, json) Hash identifier: vTqUK7tKB39m4c1lTT89zjDjvpK4ww2ywbyqpN+HDvs= Subject key identifier: B2:4B:5E:EA:98:00:1B:EC:AA:0A:FA:CF:9F:95:DA:C6:D3:94:B7:04 Authority key identifier: C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0 Certificate issuer: /CN=A91472E2/serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0 Certificate serial: 0290 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft Manifest number: 0285 Signing time: Sat 31 May 2025 01:51:42 +0000 Manifest this update: Sat 31 May 2025 01:51:42 +0000 Manifest next update: Sat 07 Jun 2025 01:51:42 +0000 Files and hashes: 1: xl_8-yz82bzWja6waX0xbPNbI_A.crl (hash: GAuPXBMfBxeYeF57Acr6TDnKXipfvvPhts7450cr7WQ=) 2: 216EE802F87A11EDAAE56C0DC4F9AE02.roa (hash: GNWLaVT5bvTFzhKfPjl/RaZJainXlieK9QJZ8Ys4PmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91472E2, serialNumber=C65FFCFB2CFCD9BCD68DAEB0697D316CF35B23F0 Validity Not Before: May 31 01:51:42 2025 GMT Not After : Jun 7 01:51:42 2025 GMT Subject: CN=683a60ae-1e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:d0:3c:7c:04:16:73:88:1f:b0:ab:38:91: b0:19:6f:c3:0a:dc:53:07:56:b8:2e:39:f1:4e:a4: 6f:d9:97:ec:a0:73:35:9b:25:d1:ea:1d:cd:76:ac: fe:91:ac:d2:dc:d6:a5:80:0e:bd:40:09:bd:0f:37: c0:55:57:5f:21:92:bf:eb:d3:0a:d6:a2:2c:0a:06: f9:24:08:a4:3d:c7:a8:0c:26:4c:c5:66:0a:dd:84: 00:9e:11:78:3d:ec:61:f9:f7:5f:4f:49:bc:ef:5e: d2:8f:41:f5:b0:b4:ee:0d:a9:43:99:93:77:3a:58: be:07:87:65:2a:f5:71:ae:4c:28:0b:42:97:50:25: 98:4b:da:2e:87:74:e2:d3:c5:d4:54:95:c8:5d:6b: 56:a0:95:ac:a2:0c:ba:f8:54:47:6d:d6:7c:39:d1: 47:05:1c:51:79:cc:cc:07:99:e9:3b:ae:17:52:9a: 8a:58:05:f8:ce:39:a8:95:36:e3:94:5f:6e:61:6d: 2b:17:6e:df:6c:c6:bb:04:99:e6:2b:52:a5:a2:02: 5c:f4:e2:f2:56:22:8c:d2:06:c2:31:37:b1:29:64: 44:93:df:69:7e:82:64:fc:2c:c5:38:2d:59:a7:a0: f0:ed:8c:18:a7:50:23:2c:98:9f:4c:99:23:52:07: 1d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4B:5E:EA:98:00:1B:EC:AA:0A:FA:CF:9F:95:DA:C6:D3:94:B7:04 X509v3 Authority Key Identifier: keyid:C6:5F:FC:FB:2C:FC:D9:BC:D6:8D:AE:B0:69:7D:31:6C:F3:5B:23:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xl_8-yz82bzWja6waX0xbPNbI_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91472E2/2F19535C0CB211ED95CEC95CC4F9AE02/xl_8-yz82bzWja6waX0xbPNbI_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:81:cc:1d:53:37:e0:81:80:1a:17:3c:66:2e:77:2c:db:be: 22:9b:2e:21:0c:ad:12:05:96:f5:58:36:40:69:00:b8:b3:99: aa:3b:1f:b6:41:c1:95:b7:04:98:bc:bd:10:0c:0d:2c:a3:4a: 70:ed:0e:a2:25:1a:71:c0:84:94:e6:c1:a7:3d:66:17:6f:c1: bd:2b:06:f4:74:14:aa:fa:c4:92:0d:ac:10:2a:80:f2:8a:43: 95:61:33:75:b6:ec:80:fe:91:83:2a:d1:9f:34:e5:35:e8:07: 39:c7:77:4e:9b:d0:2a:25:7f:b7:2a:fe:58:84:72:4b:24:44: 24:76:5b:eb:c9:a2:40:01:60:3d:be:02:3f:f6:f1:82:25:23: df:12:bd:91:be:87:29:0f:30:b6:46:f2:f0:e7:e0:15:dd:b3: 0e:4c:f0:02:ff:d2:70:c3:32:51:d2:56:1f:2a:75:20:c2:d0: 43:c4:0a:43:b8:33:8b:29:89:fe:be:23:8b:dc:b8:d4:b1:ce: fb:6f:aa:6e:3a:82:03:e7:3e:93:75:b8:7a:91:b1:eb:b0:af: e2:47:86:ea:c8:52:d9:44:00:b9:ab:5b:c3:b5:b8:63:2d:fc: 41:f1:84:e1:06:eb:57:e8:3c:8a:c1:43:eb:27:03:e9:1b:28: 56:44:b5:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyRTIxMTAvBgNVBAUTKEM2NUZGQ0ZCMkNGQ0Q5QkNENjhEQUVCMDY5N0QzMTZD RjM1QjIzRjAwHhcNMjUwNTMxMDE1MTQyWhcNMjUwNjA3MDE1MTQyWjAYMRYwFAYD VQQDEw02ODNhNjBhZS0xZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVPQPHwEFnOIH7CrOJGwGW/DCtxTB1a4LjnxTqRv2ZfsoHM1myXR6h3Ndqz+ kazS3NalgA69QAm9DzfAVVdfIZK/69MK1qIsCgb5JAikPceoDCZMxWYK3YQAnhF4 Pexh+fdfT0m8717Sj0H1sLTuDalDmZN3Oli+B4dlKvVxrkwoC0KXUCWYS9ouh3Ti 08XUVJXIXWtWoJWsogy6+FRHbdZ8OdFHBRxReczMB5npO64XUpqKWAX4zjmolTbj lF9uYW0rF27fbMa7BJnmK1KlogJc9OLyViKM0gbCMTexKWREk99pfoJk/CzFOC1Z p6Dw7YwYp1AjLJifTJkjUgcdNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJLXuqY ABvsqgr6z5+V2sbTlLcEMB8GA1UdIwQYMBaAFMZf/Pss/Nm81o2usGl9MWzzWyPw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzJFMi8yRjE5NTM1QzBD QjIxMUVEOTVDRUM5NUNDNEY5QUUwMi94bF84LXl6ODJieldqYTZ3YVgweGJQTmJJ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsXzgteXo4MmJ6V2phNndhWDB4YlBOYklfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzJFMi8yRjE5NTM1QzBDQjIxMUVEOTVDRUM5NUNDNEY5QUUwMi94bF84LXl6ODJi eldqYTZ3YVgweGJQTmJJX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJgcwdUzfggYAaFzxmLncs274imy4hDK0SBZb1WDZAaQC4s5mqOx+2 QcGVtwSYvL0QDA0so0pw7Q6iJRpxwISU5sGnPWYXb8G9Kwb0dBSq+sSSDawQKoDy ikOVYTN1tuyA/pGDKtGfNOU16Ac5x3dOm9AqJX+3Kv5YhHJLJEQkdlvryaJAAWA9 vgI/9vGCJSPfEr2RvocpDzC2RvLw5+AV3bMOTPAC/9JwwzJR0lYfKnUgwtBDxApD uDOLKYn+viOL3LjUsc77b6puOoID5z6Tdbh6kbHrsK/iR4bqyFLZRAC5q1vDtbhj LfxB8YThButX6DyKwUPrJwPpGyhWRLVG -----END CERTIFICATE-----Generated at Sat May 31 16:33:54 2025 by rpki-client