$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft File: xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft (raw, json) Hash identifier: Zt+dUHVLJqEX4794critVJVC2/yqAl4kchl/+FeWfYo= Subject key identifier: 77:51:53:F5:0E:12:57:01:05:D9:CF:95:94:B6:03:7B:B4:B8:41:67 Authority key identifier: C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05 Certificate issuer: /CN=A91A76AD/serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft Manifest number: FC Signing time: Thu 05 Jun 2025 04:32:25 +0000 Manifest this update: Thu 05 Jun 2025 04:32:24 +0000 Manifest next update: Thu 12 Jun 2025 04:32:24 +0000 Files and hashes: 1: xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl (hash: dDhXkBtlhaWBWRSY8ph/OQ9uCLwGyKVKDj8bxb2v5js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 04:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD, serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05 Validity Not Before: Jun 5 04:32:24 2025 GMT Not After : Jun 12 04:32:24 2025 GMT Subject: CN=68411dd9-1f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e0:fd:19:fb:27:de:30:2e:3a:94:e9:8e:0b: 4d:ec:91:a2:a6:ab:3f:f5:99:d7:b7:15:70:d0:33: 02:b1:af:b7:5b:74:b5:92:e7:2a:9c:6f:86:45:d0: 85:7e:77:4b:2d:42:ab:e8:39:ad:4c:76:3d:5a:16: 55:6f:fd:1f:ce:84:55:1f:0d:a7:e9:92:f1:f5:8c: 04:14:1d:da:dc:16:dc:cc:29:49:8b:c5:fb:d4:be: 08:67:dd:3c:ae:e7:89:69:1a:50:30:74:86:cc:de: 31:37:43:06:b8:40:87:b5:df:41:4b:5d:d6:45:f3: bd:d0:7b:73:bb:77:01:d5:31:11:5b:cc:42:a6:90: be:90:1c:a4:8d:01:d3:bb:c2:57:e4:68:4d:95:64: 03:40:24:1e:a3:09:bb:6e:0a:da:bb:40:e6:4e:0c: f6:65:b0:1c:52:57:36:11:c4:30:27:a4:0f:15:ba: 80:47:ce:7d:08:6b:32:22:f3:1a:ae:53:84:48:95: 7c:fc:d0:42:5a:14:3f:0d:39:e4:02:60:20:1f:77: ca:11:6a:3b:01:82:2b:c1:cf:70:d7:0b:14:93:b7: 9a:87:e9:72:03:aa:85:73:ca:d7:e5:ce:97:9f:29: 8f:2a:d0:97:d1:1d:6c:b1:32:ef:c7:30:07:93:88: e1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:51:53:F5:0E:12:57:01:05:D9:CF:95:94:B6:03:7B:B4:B8:41:67 X509v3 Authority Key Identifier: keyid:C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:d8:ca:d3:76:41:f8:73:82:c0:72:04:05:d5:22:a6:4a:ce: 7a:2e:bd:9c:49:28:60:08:f8:5a:6f:0e:cd:df:b1:f9:c2:44: 72:9e:d0:da:0b:13:8b:f3:1c:a1:41:a9:c4:07:a0:55:fc:0c: d8:55:e9:33:7c:2e:ee:06:5d:15:af:b1:90:ad:b9:95:4e:d9: 7a:fd:00:4f:aa:e8:af:c5:68:5f:12:88:46:9c:2a:fa:86:a1: e5:87:14:3e:14:f1:55:cf:ab:b2:6d:3d:7d:e9:cb:53:51:42: d2:0b:ea:58:5a:16:07:35:34:aa:c1:f1:54:50:ba:a0:e9:e1: e3:b6:1e:f5:a5:52:bf:a8:c2:a2:cd:cd:f6:68:e5:91:82:78: a1:bf:b9:c5:54:a5:af:13:78:de:09:2e:84:a7:4e:71:a4:b8: 77:92:3c:c5:83:66:1b:28:25:8c:f1:40:0f:bd:fb:d8:1b:30: 8a:6d:a6:42:5a:47:6b:b7:2e:50:9a:f5:24:f5:e6:b3:4f:de: 59:3e:30:72:df:5f:20:f7:f0:d7:c0:e4:86:69:f8:dd:10:97: 7f:fe:6c:48:0f:5b:7f:81:92:24:2b:8f:14:af:81:21:63:72: a9:e7:04:66:cb:2c:99:3d:54:32:12:e7:73:25:9e:6e:0c:f9: 51:d2:47:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc2QUQxMTAvBgNVBAUTKEM0QjYyNTAzRTZENjcwMkFDMjlEMDBCRjM1MEM4QjJD MTJFNzlGMDUwHhcNMjUwNjA1MDQzMjI0WhcNMjUwNjEyMDQzMjI0WjAYMRYwFAYD VQQDEw02ODQxMWRkOS0xZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+D9Gfsn3jAuOpTpjgtN7JGipqs/9ZnXtxVw0DMCsa+3W3S1kucqnG+GRdCF fndLLUKr6DmtTHY9WhZVb/0fzoRVHw2n6ZLx9YwEFB3a3BbczClJi8X71L4IZ908 rueJaRpQMHSGzN4xN0MGuECHtd9BS13WRfO90Htzu3cB1TERW8xCppC+kBykjQHT u8JX5GhNlWQDQCQeowm7bgrau0DmTgz2ZbAcUlc2EcQwJ6QPFbqAR859CGsyIvMa rlOESJV8/NBCWhQ/DTnkAmAgH3fKEWo7AYIrwc9w1wsUk7eah+lyA6qFc8rX5c6X nymPKtCX0R1ssTLvxzAHk4jhRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdRU/UO ElcBBdnPlZS2A3u0uEFnMB8GA1UdIwQYMBaAFMS2JQPm1nAqwp0AvzUMiywS558F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC8wN0Y1MkU0NkJF ODAxMUVFOTY3ODRENjJDNEY5QUUwMi94TFlsQS1iV2NDckNuUUNfTlF5TExCTG5u d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hMWWxBLWJXY0NyQ25RQ19OUXlMTEJMbm53VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzZBRC8wN0Y1MkU0NkJFODAxMUVFOTY3ODRENjJDNEY5QUUwMi94TFlsQS1iV2ND ckNuUUNfTlF5TExCTG5ud1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd2MrTdkH4c4LAcgQF1SKmSs56Lr2cSShgCPhabw7N37H5wkRyntDa CxOL8xyhQanEB6BV/AzYVekzfC7uBl0Vr7GQrbmVTtl6/QBPquivxWhfEohGnCr6 hqHlhxQ+FPFVz6uybT196ctTUULSC+pYWhYHNTSqwfFUULqg6eHjth71pVK/qMKi zc32aOWRgnihv7nFVKWvE3jeCS6Ep05xpLh3kjzFg2YbKCWM8UAPvfvYGzCKbaZC Wkdrty5QmvUk9eazT95ZPjBy318g9/DXwOSGafjdEJd//mxID1t/gZIkK48Ur4Eh Y3Kp5wRmyyyZPVQyEudzJZ5uDPlR0kcT -----END CERTIFICATE-----Generated at Fri Jun 6 17:15:20 2025 by rpki-client