$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft File: o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json) Hash identifier: +xqQw9MEdC11yMZCBAwEPE9ydZAUB8zzYyaEedcsPFE= Subject key identifier: C5:11:BE:F2:48:7B:81:24:AA:3C:67:A8:41:04:5D:45:9A:98:DF:EE Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 Certificate issuer: /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft Manifest number: 75 Signing time: Sat 31 May 2025 06:20:59 +0000 Manifest this update: Sat 31 May 2025 06:20:58 +0000 Manifest next update: Sat 07 Jun 2025 06:20:58 +0000 Files and hashes: 1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: bygouSlR6HldB4v4siJR20gJQ9qlIcApHcagPBoJV/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Validity Not Before: May 31 06:20:58 2025 GMT Not After : Jun 7 06:20:58 2025 GMT Subject: CN=683a9fcb-ee03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:d0:17:86:2f:af:88:73:5b:83:04:0a:21: f1:01:77:56:89:0f:e7:e8:f3:23:3e:62:73:39:f2: 76:cc:7e:b6:18:9b:62:c1:77:f1:f1:dd:a7:b6:15: 4b:50:85:33:c7:d4:64:09:e7:80:a8:15:d8:ea:c4: c3:62:54:d2:68:ac:79:ec:f7:0f:f1:b0:68:c6:ff: 13:1a:38:d1:d7:6c:b1:e0:1d:dc:f0:c8:0b:5e:fb: 83:11:4a:3b:42:90:c5:d3:a6:f1:75:7f:d6:51:da: 36:05:42:d2:47:e8:62:d6:fa:05:c1:99:1d:61:50: 77:20:47:4d:cf:f6:8a:e0:5a:32:84:f0:2d:fc:dc: d9:84:5e:09:e2:e6:a7:55:8c:0d:9a:6e:66:a4:92: 2c:33:33:f5:78:f9:e6:cb:16:f8:ae:e6:76:bf:f7: d8:69:3c:75:23:ac:bd:47:a6:8e:bb:ae:92:54:d9: 5b:c1:4d:e3:0f:ff:4f:d9:c7:69:0e:66:f5:04:81: 7a:b4:01:b0:a8:ca:e1:23:6e:21:17:f3:68:5b:7c: 03:fc:6b:0e:d3:d8:d2:99:bd:16:eb:f7:f5:f5:2b: 58:ed:08:53:0c:8a:8b:2b:14:a6:82:54:fc:15:d7: 12:c2:60:2a:43:a2:18:2d:ab:6d:21:2d:41:8e:1e: 72:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:11:BE:F2:48:7B:81:24:AA:3C:67:A8:41:04:5D:45:9A:98:DF:EE X509v3 Authority Key Identifier: keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5d:a1:d1:32:2d:28:9d:6d:9c:f5:61:a6:db:db:40:31:98: a1:a4:2e:bc:02:39:95:65:2e:7b:ef:d0:1f:59:1a:a2:31:37: 35:ac:8a:f6:6a:06:a9:85:ba:7f:49:68:7a:6c:d4:69:53:8e: dd:31:f9:06:2c:6b:b9:31:5a:cc:33:d4:ab:66:e1:b4:da:7b: 3b:c1:14:0d:45:5c:ec:7d:6b:65:b7:73:cd:52:0f:e9:36:b7: a9:3a:5c:4d:ad:93:4e:28:cb:a4:7f:1a:97:92:ba:be:b5:7c: 93:c6:94:2d:2d:0d:4c:6f:b1:3a:f8:7f:16:0d:cb:b6:ac:f3: 9f:f1:38:40:d5:9c:97:60:e1:b3:43:d6:20:7c:53:c2:43:44: 91:a9:6d:8e:fc:36:fc:ff:70:7d:d9:f3:52:68:3d:83:4a:97: 4f:74:a2:b9:fc:f0:aa:ab:a0:5d:c9:49:47:f1:bb:cf:fd:ae: 78:6a:b5:e1:eb:21:b8:e5:dc:d5:0e:05:a6:6a:7a:12:60:51: 43:17:4f:05:77:ae:26:d9:4a:8e:28:bf:07:c6:4e:f4:f8:83: e8:27:17:00:3c:98:76:a3:82:94:30:46:67:55:66:29:78:48: 3d:50:0f:26:cb:15:80:de:44:11:f3:04:cb:d9:96:b1:b5:ec: ad:85:48:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MjdDNTExMC8GA1UEBRMoQTM5ODcxNDYyNkY4N0FDRUJFNUY2RkQwMUU1MDcwMTkx NUFBN0QxNTAeFw0yNTA1MzEwNjIwNThaFw0yNTA2MDcwNjIwNThaMBgxFjAUBgNV BAMTDTY4M2E5ZmNiLWVlMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuDNAXhi+viHNbgwQKIfEBd1aJD+fo8yM+YnM58nbMfrYYm2LBd/Hx3ae2FUtQ hTPH1GQJ54CoFdjqxMNiVNJorHns9w/xsGjG/xMaONHXbLHgHdzwyAte+4MRSjtC kMXTpvF1f9ZR2jYFQtJH6GLW+gXBmR1hUHcgR03P9orgWjKE8C383NmEXgni5qdV jA2abmakkiwzM/V4+ebLFviu5na/99hpPHUjrL1Hpo67rpJU2VvBTeMP/0/Zx2kO ZvUEgXq0AbCoyuEjbiEX82hbfAP8aw7T2NKZvRbr9/X1K1jtCFMMiosrFKaCVPwV 1xLCYCpDohgtq20hLUGOHnKRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxRG+8kh7 gSSqPGeoQQRdRZqY3+4wHwYDVR0jBBgwFoAUo5hxRib4es6+X2/QHlBwGRWqfRUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyN0M1L0Q5QUFCODJDOEFE OTExRUY5ODFDODI4M0M0RjlBRTAyL281aHhSaWI0ZXM2LVgyX1FIbEJ3R1JXcWZS VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzVoeFJpYjRlczYtWDJfUUhsQndHUldxZlJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy N0M1L0Q5QUFCODJDOEFEOTExRUY5ODFDODI4M0M0RjlBRTAyL281aHhSaWI0ZXM2 LVgyX1FIbEJ3R1JXcWZSVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH9dodEyLSidbZz1Yabb20AxmKGkLrwCOZVlLnvv0B9ZGqIxNzWsivZq BqmFun9JaHps1GlTjt0x+QYsa7kxWswz1Ktm4bTaezvBFA1FXOx9a2W3c81SD+k2 t6k6XE2tk04oy6R/GpeSur61fJPGlC0tDUxvsTr4fxYNy7as85/xOEDVnJdg4bND 1iB8U8JDRJGpbY78Nvz/cH3Z81JoPYNKl090orn88KqroF3JSUfxu8/9rnhqteHr Ibjl3NUOBaZqehJgUUMXTwV3ribZSo4ovwfGTvT4g+gnFwA8mHajgpQwRmdVZil4 SD1QDybLFYDeRBHzBMvZlrG17K2FSEg= -----END CERTIFICATE-----Generated at Sat May 31 17:04:57 2025 by rpki-client