$ rpki-client -vvf rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft File: mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft (raw, json) Hash identifier: ovoM/RDDgo33SwYCOWY6MQe2PPHA+VSxPkyo44b0uI8= Subject key identifier: CF:5B:3F:0F:41:0C:30:A4:FB:7C:DD:51:A2:42:27:ED:FB:42:08:0C Authority key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 Certificate issuer: /CN=A915F598/serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Certificate serial: 3463 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft Manifest number: 3462 Signing time: Fri 30 May 2025 15:25:38 +0000 Manifest this update: Fri 30 May 2025 15:25:38 +0000 Manifest next update: Fri 06 Jun 2025 15:25:38 +0000 Files and hashes: 1: mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl (hash: ntXa6USCI7iE3JOql7gb+q4Jn1WEJRWHeF2/UzcbUxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13411 (0x3463) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F598, serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Validity Not Before: May 30 15:25:38 2025 GMT Not After : Jun 6 15:25:38 2025 GMT Subject: CN=6839cdf2-26b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f6:96:3a:e9:8f:b6:f5:a5:8e:0a:04:54:85: 75:3f:af:04:f6:d6:e7:90:aa:2d:54:7d:49:45:20: 89:0c:69:8d:82:d7:f7:1d:7b:b3:82:96:50:13:df: 75:6c:16:84:2c:6d:17:85:ab:23:01:b0:67:8c:9a: 78:00:ad:66:85:ae:8c:88:e2:90:52:9c:97:13:04: 81:6b:77:68:c5:c3:8c:3f:73:be:38:07:7c:9e:80: ee:5b:c3:69:42:da:61:8c:7b:1d:ed:71:a7:ec:b7: 2a:01:c9:24:46:f6:d3:f4:00:8a:38:72:e7:b1:9f: 4c:70:cd:73:fa:6c:3d:2f:cc:12:9a:18:b8:74:1e: 92:21:f6:f2:0f:cc:6b:d0:a5:2e:05:f5:8e:90:14: 41:36:51:8e:15:9a:c9:50:7c:3f:0f:16:9d:21:e0: ec:5b:3a:2a:e6:42:b1:8d:c2:df:62:4e:f2:58:d0: cc:94:60:8e:96:da:a4:87:0c:b5:50:ff:1d:2b:e2: f5:67:a4:b2:4a:cf:c8:cf:5a:dd:90:c7:2b:8b:ae: e8:bb:89:20:29:b7:86:07:5f:b1:a7:48:51:c2:6c: e3:96:8f:ed:d4:de:86:a8:ca:78:cd:4a:31:49:4a: 82:fb:c1:0a:ef:0c:40:96:fe:df:f0:c4:0a:a7:53: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5B:3F:0F:41:0C:30:A4:FB:7C:DD:51:A2:42:27:ED:FB:42:08:0C X509v3 Authority Key Identifier: keyid:99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:62:10:de:ba:7c:6a:5e:c8:f7:01:cc:95:12:45:5a:df:f6: 2d:1f:19:9b:14:4f:37:e9:7c:5b:f7:4e:b8:b8:36:30:c1:06: 75:c6:8f:06:6a:ae:df:64:e1:96:0c:72:5d:10:41:ee:d6:5d: f2:0b:2c:3b:f0:73:6d:ec:28:d9:3e:2d:ad:3c:09:bc:9d:ea: 53:7b:34:58:1d:ea:1a:dd:da:14:c5:3b:aa:f1:9f:85:53:b1: 33:d7:7b:cf:b9:1c:57:e2:07:a3:6d:51:3e:4f:56:d5:f1:13: 37:fe:eb:92:ce:54:ca:4c:90:e7:77:69:bf:77:e5:62:23:e3: 19:dc:0a:3b:d5:f6:57:d7:d0:15:f4:11:af:99:9a:5d:74:97: 95:9c:d5:4d:aa:9b:b9:a8:02:48:1e:a5:83:4a:8b:38:4a:d4: 08:af:fd:3b:66:8b:98:8a:cc:9a:b6:ea:1f:80:54:b7:6f:7e: 31:e3:87:d7:92:f6:2e:55:56:17:37:28:60:45:fd:04:a0:fa: 0f:57:b6:37:b1:55:44:db:ae:c7:2b:1e:c3:01:c9:b3:24:67: e8:f7:c2:94:84:13:fd:1b:ec:87:51:97:e8:a2:d5:f5:48:c4: b1:0a:8d:6d:4e:a1:c7:88:59:af:1b:8c:d7:ed:e3:1f:21:47: 5d:6f:27:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY1OTgxMTAvBgNVBAUTKDk5NzZGQjcxNkQyRkEzOUJCRDQ3M0M2QjM0RjFGM0JE NjgxQTUzRTcwHhcNMjUwNTMwMTUyNTM4WhcNMjUwNjA2MTUyNTM4WjAYMRYwFAYD VQQDEw02ODM5Y2RmMi0yNmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/aWOumPtvWljgoEVIV1P68E9tbnkKotVH1JRSCJDGmNgtf3HXuzgpZQE991 bBaELG0XhasjAbBnjJp4AK1mha6MiOKQUpyXEwSBa3doxcOMP3O+OAd8noDuW8Np QtphjHsd7XGn7LcqAckkRvbT9ACKOHLnsZ9McM1z+mw9L8wSmhi4dB6SIfbyD8xr 0KUuBfWOkBRBNlGOFZrJUHw/DxadIeDsWzoq5kKxjcLfYk7yWNDMlGCOltqkhwy1 UP8dK+L1Z6SySs/Iz1rdkMcri67ou4kgKbeGB1+xp0hRwmzjlo/t1N6GqMp4zUox SUqC+8EK7wxAlv7f8MQKp1MbxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9bPw9B DDCk+3zdUaJCJ+37QggMMB8GA1UdIwQYMBaAFJl2+3FtL6ObvUc8azTx871oGlPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU5OC8zRTFEMUIyMjIz MzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81dTlSenhyTlBIenZXZ2FV LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21YYjdjVzB2bzV1OVJ6eHJOUEh6dldnYVUtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjU5OC8zRTFEMUIyMjIzMzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81 dTlSenhyTlBIenZXZ2FVLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2YhDeunxqXsj3AcyVEkVa3/YtHxmbFE836Xxb9064uDYwwQZ1xo8G aq7fZOGWDHJdEEHu1l3yCyw78HNt7CjZPi2tPAm8nepTezRYHeoa3doUxTuq8Z+F U7Ez13vPuRxX4gejbVE+T1bV8RM3/uuSzlTKTJDnd2m/d+ViI+MZ3Ao71fZX19AV 9BGvmZpddJeVnNVNqpu5qAJIHqWDSos4StQIr/07ZouYisyatuofgFS3b34x44fX kvYuVVYXNyhgRf0EoPoPV7Y3sVVE267HKx7DAcmzJGfo98KUhBP9G+yHUZfootX1 SMSxCo1tTqHHiFmvG4zX7eMfIUddbyep -----END CERTIFICATE-----Generated at Sat May 31 17:02:16 2025 by rpki-client