$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft File: MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json) Hash identifier: uJEQp7UWBx8IjJi8nRgFFNHbb64/L+tLMWUjs0FvyvY= Subject key identifier: 97:E9:BA:9E:2F:DC:D0:33:AD:04:26:20:41:20:4B:6F:14:64:D1:5A Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E Certificate issuer: /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft Manifest number: 93 Signing time: Sat 31 May 2025 05:58:53 +0000 Manifest this update: Sat 31 May 2025 05:58:52 +0000 Manifest next update: Sat 07 Jun 2025 05:58:52 +0000 Files and hashes: 1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: 5eYoST+ulanfg1i6NNGfUr3s7W4PXdFTuO/UCK5nN3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E Validity Not Before: May 31 05:58:52 2025 GMT Not After : Jun 7 05:58:52 2025 GMT Subject: CN=683a9a9d-2557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:8e:ed:96:a8:68:02:ec:2c:b5:7e:b2:f5: 9b:52:6a:0a:01:44:c3:40:e2:73:bf:99:d2:87:4b: bf:16:4b:63:80:4d:d5:a7:ab:40:d3:5e:b3:96:e2: 8a:e8:e0:dc:b2:0d:06:10:57:44:b1:f5:d8:6e:57: 5b:ce:fe:e6:19:4f:66:0a:5f:81:3a:ad:70:3e:38: 86:ac:30:43:84:64:cf:1f:23:7f:98:c4:68:7f:0c: 2d:7c:f2:fd:d6:63:44:db:65:c7:6d:35:e0:ff:f0: 32:cc:41:be:70:c4:fe:dc:87:38:1d:ca:1e:cc:62: 21:5c:24:16:ac:46:64:fd:d0:43:58:c1:9b:46:b2: b1:54:f5:84:c5:70:73:81:9b:e3:71:19:0b:ea:3c: bf:ba:d5:6f:fc:9c:7a:b8:61:c2:df:07:fc:e7:2c: 1e:fe:af:6d:da:6b:b9:fe:7a:54:bd:ee:38:6f:e0: 9e:b7:d2:a3:d8:61:2d:e6:dd:2b:44:3e:41:7e:d7: 4b:a6:73:84:e0:56:14:65:a7:0e:71:98:60:e3:0e: 71:7e:39:a6:ca:aa:d5:1b:3f:cc:1c:2e:cc:c3:36: e5:d6:33:97:14:c0:aa:16:e4:a4:f2:6b:b1:f5:9c: 51:69:a3:58:d8:e1:35:d0:71:a1:e7:c0:ca:a3:d8: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E9:BA:9E:2F:DC:D0:33:AD:04:26:20:41:20:4B:6F:14:64:D1:5A X509v3 Authority Key Identifier: keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:97:11:3e:c2:66:b8:0c:0d:a1:d9:a5:01:cd:0d:a0:62:d3: 26:79:b6:a6:18:fd:a6:d6:81:ed:d8:7c:2e:69:15:39:e4:1f: f2:61:a7:d8:ea:f5:32:63:15:e3:87:f9:25:e8:4e:3c:cb:db: 3b:e8:6c:37:b2:21:5d:72:c5:24:df:2e:20:cf:86:6f:a7:32: 3d:55:81:85:83:8f:23:4a:7e:22:36:43:f7:56:45:87:6d:ac: 4f:3e:53:aa:11:6b:83:91:fc:f8:d2:cf:d4:08:21:55:b8:f6: 78:1e:f1:f3:a3:b4:44:5f:78:04:52:40:e9:4c:c7:e6:03:0f: 32:bb:d2:72:6f:c1:cf:4b:e5:c1:1f:77:70:ae:3e:66:5c:82: bb:28:8c:7d:99:df:ae:32:1f:ae:b6:61:cc:87:13:94:1b:c1: a9:ba:9a:1c:e3:1c:bd:8a:c9:96:b4:ab:e9:a2:c7:bc:c8:31: d3:31:c8:d5:1c:b4:3e:c3:43:0b:e0:76:29:77:c7:84:f0:c5: d2:d4:b5:53:ab:8d:17:71:29:b6:c0:53:7d:ac:1a:75:c2:d1: 42:9d:45:a0:29:08:b2:7f:2d:40:16:f7:a8:17:05:fc:9b:8f: 6c:e7:1e:96:33:01:96:c2:31:40:a3:1b:08:a9:59:a8:0c:89: 47:a4:90:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgzRDMxMTAvBgNVBAUTKDMxN0E3MjdGRjYzRTI3QzI5Q0MwMUNCNjc5OTNFMkM2 MUYwODA0MUUwHhcNMjUwNTMxMDU1ODUyWhcNMjUwNjA3MDU1ODUyWjAYMRYwFAYD VQQDEw02ODNhOWE5ZC0yNTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoGO7ZaoaALsLLV+svWbUmoKAUTDQOJzv5nSh0u/FktjgE3Vp6tA016zluKK 6ODcsg0GEFdEsfXYbldbzv7mGU9mCl+BOq1wPjiGrDBDhGTPHyN/mMRofwwtfPL9 1mNE22XHbTXg//AyzEG+cMT+3Ic4HcoezGIhXCQWrEZk/dBDWMGbRrKxVPWExXBz gZvjcRkL6jy/utVv/Jx6uGHC3wf85ywe/q9t2mu5/npUve44b+Cet9Kj2GEt5t0r RD5BftdLpnOE4FYUZacOcZhg4w5xfjmmyqrVGz/MHC7Mwzbl1jOXFMCqFuSk8mux 9ZxRaaNY2OE10HGh58DKo9gawQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfpup4v 3NAzrQQmIEEgS28UZNFaMB8GA1UdIwQYMBaAFDF6cn/2PifCnMActnmT4sYfCAQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy85NTc2MDE2ODVF MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4S2N3QnkyZVpQaXhoOElC QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01YcHlmX1ktSjhLY3dCeTJlWlBpeGg4SUJCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODNEMy85NTc2MDE2ODVFMzYxMUVGQUM5MkQzMTRDNEY5QUUwMi9NWHB5Zl9ZLUo4 S2N3QnkyZVpQaXhoOElCQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0lxE+wma4DA2h2aUBzQ2gYtMmebamGP2m1oHt2HwuaRU55B/yYafY 6vUyYxXjh/kl6E48y9s76Gw3siFdcsUk3y4gz4ZvpzI9VYGFg48jSn4iNkP3VkWH baxPPlOqEWuDkfz40s/UCCFVuPZ4HvHzo7REX3gEUkDpTMfmAw8yu9Jyb8HPS+XB H3dwrj5mXIK7KIx9md+uMh+utmHMhxOUG8Gpupoc4xy9ismWtKvpose8yDHTMcjV HLQ+w0ML4HYpd8eE8MXS1LVTq40XcSm2wFN9rBp1wtFCnUWgKQiyfy1AFveoFwX8 m49s5x6WMwGWwjFAoxsIqVmoDIlHpJAn -----END CERTIFICATE-----Generated at Sat May 31 17:54:54 2025 by rpki-client