$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft File: cDXbQxmt4s_Ooig68PFrYgkCbao.mft (raw, json) Hash identifier: xoXa4F9M5Gs0SBYVwQXfqv126zhgcp3KIdPSKK77ERw= Subject key identifier: E0:06:54:2D:2E:2F:D1:FA:99:40:41:0B:2C:1B:38:8F:E8:9B:F3:93 Authority key identifier: 70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA Certificate issuer: /CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft Manifest number: 0631 Signing time: Fri 30 May 2025 22:53:26 +0000 Manifest this update: Fri 30 May 2025 22:53:25 +0000 Manifest next update: Fri 06 Jun 2025 22:53:25 +0000 Files and hashes: 1: cDXbQxmt4s_Ooig68PFrYgkCbao.crl (hash: ZLOQMpJLs7dlqo+Z4To5ZU3clMdUuDhQGAZvUM7f2cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F, serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA Validity Not Before: May 30 22:53:25 2025 GMT Not After : Jun 6 22:53:25 2025 GMT Subject: CN=683a36e5-17e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:38:3c:b8:63:c1:ba:78:7e:db:08:4d:fd:1c: 58:89:f7:9b:57:fd:38:2f:f9:ca:9d:fd:15:d1:1f: f8:2a:c4:f5:74:78:85:c6:32:51:36:1e:a7:bd:30: 37:d8:86:85:fe:f3:06:0a:d1:06:23:98:fe:2a:fa: c3:7b:fc:93:2c:24:2c:a0:e5:22:cb:b1:c3:e7:01: 6f:f8:eb:45:6b:83:45:9c:6f:4a:06:7d:2b:a0:0a: 5d:20:54:14:08:4b:0c:76:e4:ca:65:e0:f8:92:b6: 42:0f:31:41:eb:22:59:5f:c0:41:bd:66:07:19:5f: 93:1a:94:9a:90:43:94:99:9e:71:09:64:17:b7:ba: cb:9a:f9:20:43:b0:9e:02:71:27:cd:e2:30:4d:e2: b0:61:73:7b:07:6c:c7:66:a3:30:d2:a8:fa:f0:87: a8:3a:bb:f4:4a:87:78:6f:a7:6e:57:cd:57:ed:45: 60:b4:2d:56:80:76:b5:b2:fd:37:90:c4:42:70:ff: d6:e1:b2:da:56:bd:95:a7:eb:37:86:dd:e9:b0:28: f6:78:3d:85:d5:1c:c5:7b:2f:97:bf:4b:94:27:48: 66:ae:55:6d:53:8e:54:19:d3:8b:c5:4c:3e:34:11: 23:4d:c1:f5:3a:69:61:5c:b2:f8:b8:da:3c:b1:6c: ed:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:06:54:2D:2E:2F:D1:FA:99:40:41:0B:2C:1B:38:8F:E8:9B:F3:93 X509v3 Authority Key Identifier: keyid:70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:48:43:35:c9:21:47:47:69:05:66:68:b8:24:8f:fc:84:e9: 4b:43:3e:c1:f0:d0:2b:eb:41:f4:2c:b9:20:37:72:39:b2:7f: c0:67:4a:cb:e7:30:e8:37:b0:d4:85:ec:18:29:4d:1b:a0:6f: d8:da:43:49:6f:15:82:d6:7f:9a:e0:03:b2:04:c7:17:ff:b6: 18:e4:7d:d2:e9:83:ad:4c:34:05:6c:88:4e:4a:5a:62:ed:58: 6e:60:23:a4:1f:a3:15:37:7d:dd:4a:eb:73:30:7a:25:a8:1a: 61:ee:c2:3d:3c:58:25:8c:32:91:15:05:d5:40:07:83:db:31: 14:1a:09:89:3c:29:5d:1d:46:9e:a6:ff:a1:0c:e1:78:13:08: 57:74:44:f7:44:5e:7f:46:78:0d:88:fd:aa:8f:7c:ea:39:5a: 06:18:8f:05:a7:3f:df:17:10:ac:2f:3c:34:e1:71:6f:ee:f5: 23:ca:b6:d4:d9:42:97:bb:2e:0a:fd:85:00:d3:ae:d1:bb:db: 6f:fd:37:70:f6:c1:ee:92:36:58:26:99:f8:03:8f:14:a2:a4: 93:cb:1d:24:93:1f:70:05:62:ae:19:99:43:0c:aa:5b:ef:5a: dd:f9:5f:95:8d:57:67:ab:93:e3:d3:5e:28:a4:f0:43:4b:b4: 33:7d:4c:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDcwMzVEQjQzMTlBREUyQ0ZDRUEyMjgzQUYwRjE2QjYy MDkwMjZEQUEwHhcNMjUwNTMwMjI1MzI1WhcNMjUwNjA2MjI1MzI1WjAYMRYwFAYD VQQDEw02ODNhMzZlNS0xN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jg8uGPBunh+2whN/RxYifebV/04L/nKnf0V0R/4KsT1dHiFxjJRNh6nvTA3 2IaF/vMGCtEGI5j+KvrDe/yTLCQsoOUiy7HD5wFv+OtFa4NFnG9KBn0roApdIFQU CEsMduTKZeD4krZCDzFB6yJZX8BBvWYHGV+TGpSakEOUmZ5xCWQXt7rLmvkgQ7Ce AnEnzeIwTeKwYXN7B2zHZqMw0qj68IeoOrv0Sod4b6duV81X7UVgtC1WgHa1sv03 kMRCcP/W4bLaVr2Vp+s3ht3psCj2eD2F1RzFey+Xv0uUJ0hmrlVtU45UGdOLxUw+ NBEjTcH1OmlhXLL4uNo8sWztHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAGVC0u L9H6mUBBCywbOI/om/OTMB8GA1UdIwQYMBaAFHA120MZreLPzqIoOvDxa2IJAm2q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9CNEM3OUFGODkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRzX09vaWc2OFBGcllna0Ni YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NEWGJReG10NHNfT29pZzY4UEZyWWdrQ2Jhby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9CNEM3OUFGODkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRz X09vaWc2OFBGcllna0NiYW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGSEM1ySFHR2kFZmi4JI/8hOlLQz7B8NAr60H0LLkgN3I5sn/AZ0rL 5zDoN7DUhewYKU0boG/Y2kNJbxWC1n+a4AOyBMcX/7YY5H3S6YOtTDQFbIhOSlpi 7VhuYCOkH6MVN33dSutzMHolqBph7sI9PFgljDKRFQXVQAeD2zEUGgmJPCldHUae pv+hDOF4EwhXdET3RF5/RngNiP2qj3zqOVoGGI8Fpz/fFxCsLzw04XFv7vUjyrbU 2UKXuy4K/YUA067Ru9tv/Tdw9sHukjZYJpn4A48UoqSTyx0kkx9wBWKuGZlDDKpb 71rd+V+VjVdnq5Pj014opPBDS7QzfUzu -----END CERTIFICATE-----Generated at Sat May 31 17:06:24 2025 by rpki-client