$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft File: Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json) Hash identifier: any8nNojlipyI8QfAICkJJeIr8siXjrF3IHP9uOCqS8= Subject key identifier: 5C:F0:EA:08:6F:73:FB:FB:35:FB:2D:65:D6:45:C2:87:B7:CD:C4:D8 Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 Certificate issuer: /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft Manifest number: 0613 Signing time: Sat 31 May 2025 00:03:33 +0000 Manifest this update: Sat 31 May 2025 00:03:32 +0000 Manifest next update: Sat 07 Jun 2025 00:03:32 +0000 Files and hashes: 1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: PGJtnLy8zRyGjzgF3bmwMIYcGFsZUeEddbuegREz4IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Validity Not Before: May 31 00:03:32 2025 GMT Not After : Jun 7 00:03:32 2025 GMT Subject: CN=683a4755-5449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:de:59:a1:c9:df:d3:59:60:e0:9d:d9:3a: 46:f0:7d:66:d3:d3:29:15:6e:7c:c4:d7:d6:a6:4f: 1b:70:bd:7c:56:f4:f4:9f:1f:78:d3:7d:9e:2c:34: 54:a0:8a:67:ed:29:9c:76:7e:33:96:4f:74:5c:32: 86:a0:5b:0b:a1:57:d0:b2:c7:d6:2a:bb:a7:09:34: c7:da:e7:cb:9f:c5:8f:91:83:5d:95:1d:96:10:fb: b2:87:91:78:0c:23:4e:9d:ca:82:a3:0c:70:f1:3e: 8b:0c:22:6a:14:ab:8b:b1:8d:a0:b4:a3:6e:d3:fc: 86:ca:58:02:3f:e5:c6:59:86:dc:78:ac:7e:6c:39: 76:3e:23:5b:b3:82:65:f3:64:fb:60:ae:d4:36:ed: f1:de:99:22:a8:8e:ef:10:95:48:6a:f2:fa:1c:bb: aa:db:c1:ce:2f:ff:25:90:f0:9c:2e:75:64:29:6b: 56:7a:2b:29:94:51:1c:71:0b:01:5b:9b:90:26:cd: cd:60:f2:da:37:cc:32:a4:06:df:fb:aa:d3:65:f2: 91:79:8d:3d:28:73:e6:32:9b:d8:81:18:e2:9c:7d: 74:71:4a:80:48:20:0e:25:35:8d:20:8c:5a:b3:3f: dc:ef:38:e9:6d:7c:05:18:cb:60:8a:36:39:77:4f: 47:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F0:EA:08:6F:73:FB:FB:35:FB:2D:65:D6:45:C2:87:B7:CD:C4:D8 X509v3 Authority Key Identifier: keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:47:e7:cf:e0:f6:dc:25:a2:8e:e6:e4:57:81:9e:02:bb:34: 68:b2:43:13:17:ca:02:74:97:41:16:fc:9a:d7:8a:9a:c7:54: 91:81:e2:30:4f:2b:c3:ca:97:cd:f6:b2:44:d8:28:20:13:3b: ec:a5:7f:d5:35:7d:28:59:31:b3:de:3c:d8:ae:d6:3c:2d:04: 82:ec:30:d9:76:95:fd:17:59:55:68:fa:b6:d0:13:5e:27:52: fe:6e:10:42:af:15:c9:ea:cd:c5:74:7e:4b:87:06:75:65:71: de:55:b9:31:5e:f5:8f:d3:51:2e:31:c8:8c:02:78:42:2c:d8: 4e:d1:76:f3:10:09:70:0c:05:89:7a:af:20:42:69:cd:82:38: af:cf:5f:f6:d7:61:ff:ba:c4:83:5f:60:04:cf:94:f0:68:97: 6a:55:71:56:a3:4c:97:3e:78:4d:79:19:4c:be:fc:7e:d2:e0: 2e:69:88:70:c1:7a:c1:54:73:e2:e2:a2:9a:33:64:ff:bc:35: cf:74:13:9b:f8:ca:05:d7:c4:3b:64:26:36:c8:ce:03:ad:c0: 93:e9:16:1d:17:f6:6a:1f:85:d1:c3:99:3f:33:44:fd:41:94: 36:37:27:d6:ba:be:84:f0:a9:fe:4f:89:9a:70:d0:9b:0e:0c: 8c:2d:49:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKDBBQkZENzdBNjg2OTJFRkVCNDMyNDAwRkZEREREN0FF MUIyM0JDMjcwHhcNMjUwNTMxMDAwMzMyWhcNMjUwNjA3MDAwMzMyWjAYMRYwFAYD VQQDEw02ODNhNDc1NS01NDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOTeWaHJ39NZYOCd2TpG8H1m09MpFW58xNfWpk8bcL18VvT0nx94032eLDRU oIpn7Smcdn4zlk90XDKGoFsLoVfQssfWKrunCTTH2ufLn8WPkYNdlR2WEPuyh5F4 DCNOncqCowxw8T6LDCJqFKuLsY2gtKNu0/yGylgCP+XGWYbceKx+bDl2PiNbs4Jl 82T7YK7UNu3x3pkiqI7vEJVIavL6HLuq28HOL/8lkPCcLnVkKWtWeisplFEccQsB W5uQJs3NYPLaN8wypAbf+6rTZfKReY09KHPmMpvYgRjinH10cUqASCAOJTWNIIxa sz/c7zjpbXwFGMtgijY5d09HNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzw6ghv c/v7NfstZdZFwoe3zcTYMB8GA1UdIwQYMBaAFAq/13poaS7+tDJAD/3d164bI7wn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2NjBNa0FQX2QzWHJoc2p2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyX1hlbWhwTHY2ME1rQVBfZDNYcmhzanZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2 NjBNa0FQX2QzWHJoc2p2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJR+fP4PbcJaKO5uRXgZ4CuzRoskMTF8oCdJdBFvya14qax1SRgeIw TyvDypfN9rJE2CggEzvspX/VNX0oWTGz3jzYrtY8LQSC7DDZdpX9F1lVaPq20BNe J1L+bhBCrxXJ6s3FdH5LhwZ1ZXHeVbkxXvWP01EuMciMAnhCLNhO0XbzEAlwDAWJ eq8gQmnNgjivz1/212H/usSDX2AEz5TwaJdqVXFWo0yXPnhNeRlMvvx+0uAuaYhw wXrBVHPi4qKaM2T/vDXPdBOb+MoF18Q7ZCY2yM4DrcCT6RYdF/ZqH4XRw5k/M0T9 QZQ2NyfWur6E8Kn+T4macNCbDgyMLUmO -----END CERTIFICATE-----Generated at Sat May 31 17:06:28 2025 by rpki-client