$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json) Hash identifier: CY3bAQU8HcA0zphj8Epm00OnZVgkNRQRKUFZSPkuZdg= Subject key identifier: 82:AC:60:41:BD:1A:5A:1A:BC:0D:FB:CF:8C:1D:C5:C6:72:87:59:1D Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft Manifest number: 6E Signing time: Sat 31 May 2025 06:58:57 +0000 Manifest this update: Sat 31 May 2025 06:58:56 +0000 Manifest next update: Sat 07 Jun 2025 06:58:56 +0000 Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: WqMM3pryUdM5CQpVzIJmFXvaaI+F0Ty0nUiI4aFoOB4=) 2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: Iqqm3XnZxAwHyLfxm5fiQ2PL3nIt3cAVFXF23TPN80A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: May 31 06:58:56 2025 GMT Not After : Jun 7 06:58:56 2025 GMT Subject: CN=683aa8b0-c410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ad:aa:70:14:0b:7d:e6:62:ae:9f:76:db:b7: d6:04:13:30:9c:12:e8:83:94:0e:42:4f:c4:bf:7a: 9a:3d:6d:81:ea:6d:2c:a5:b4:50:37:6e:36:aa:36: cd:d0:dd:9f:b0:ff:ff:0e:32:33:53:d7:44:d7:81: 46:2f:5e:f6:17:8c:6d:63:f0:1c:87:27:62:b8:8c: 9a:f0:71:b8:c0:b2:90:b8:50:8b:23:a6:1c:0f:57: 07:44:6d:e0:0e:ac:d1:f2:72:3c:81:68:19:83:65: 77:53:3c:c3:3a:19:70:de:a9:27:54:e7:8b:18:90: 5b:e7:4e:52:ab:c2:6f:85:13:7d:53:04:11:9a:48: df:b1:b3:f1:fb:b3:e7:10:b9:66:41:da:3b:3e:ae: c5:8e:77:9d:03:af:e5:ad:cd:4a:ec:00:3d:8f:f9: 7f:e1:b0:59:0f:f1:b3:5c:b2:7c:a7:84:08:4d:3e: 39:a6:88:b9:a9:46:58:1f:a8:78:25:0c:9d:29:bb: a6:77:9a:59:92:53:84:4e:fe:65:f9:96:b8:82:30: 8a:cf:4a:81:6e:ff:ce:e4:58:23:c7:96:a3:f7:2e: b3:04:c3:0f:e6:9a:ac:92:9c:b4:55:24:97:29:3d: df:c3:e8:0c:8c:48:75:cf:14:3a:93:6f:04:db:58: e8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AC:60:41:BD:1A:5A:1A:BC:0D:FB:CF:8C:1D:C5:C6:72:87:59:1D X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:9c:d8:e1:33:fe:d3:32:41:d4:90:f2:b5:9e:c0:34:32:28: 91:bd:a2:a5:05:79:2b:ca:6d:2f:e7:89:e2:85:29:f3:0c:16: eb:67:ec:30:4a:51:4a:95:4d:8c:92:2d:30:3e:02:8c:61:24: 05:b0:c8:2c:29:d2:96:b7:b9:f2:ed:6b:fa:54:5c:3d:f7:35: 50:1d:7e:46:91:d6:97:fb:bf:7a:e0:03:fb:52:01:fd:e4:6a: 33:d6:99:ed:05:d3:86:4c:2c:52:5c:84:bd:e4:c2:0e:d2:36: c5:b1:7c:15:ad:c3:95:2d:0c:54:d8:e7:46:70:72:fc:db:ff: 8b:71:ea:98:6d:7e:b4:91:f2:bb:55:3a:bc:b7:5d:c1:93:11: 20:2e:48:ff:d7:89:3f:dc:2e:e1:37:2a:08:e1:1b:da:4a:9d: ee:9d:3a:c8:ae:80:af:96:8d:88:86:33:7e:c8:f1:57:20:c6: 83:6b:ff:0c:01:3e:57:6d:cd:13:9d:ae:50:48:44:33:e0:8b: 2c:16:90:33:27:e1:fc:5f:56:f3:e2:8c:30:b9:de:58:81:d9: c7:e1:ba:b6:c7:0f:ed:e7:35:4c:d0:52:e2:31:c9:9a:89:a1: c6:4b:0a:56:5e:dd:41:52:ab:da:58:8d:46:4a:e3:fb:2d:7c: 0d:8d:92:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MTAyNTExMC8GA1UEBRMoNUYwMDRENTdFQjM2RjQyNjcyRTY2RjMwMDVGNjQ2OUI2 Mjg5MTcxQjAeFw0yNTA1MzEwNjU4NTZaFw0yNTA2MDcwNjU4NTZaMBgxFjAUBgNV BAMTDTY4M2FhOGIwLWM0MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQrapwFAt95mKun3bbt9YEEzCcEuiDlA5CT8S/epo9bYHqbSyltFA3bjaqNs3Q 3Z+w//8OMjNT10TXgUYvXvYXjG1j8ByHJ2K4jJrwcbjAspC4UIsjphwPVwdEbeAO rNHycjyBaBmDZXdTPMM6GXDeqSdU54sYkFvnTlKrwm+FE31TBBGaSN+xs/H7s+cQ uWZB2js+rsWOd50Dr+WtzUrsAD2P+X/hsFkP8bNcsnynhAhNPjmmiLmpRlgfqHgl DJ0pu6Z3mlmSU4RO/mX5lriCMIrPSoFu/87kWCPHlqP3LrMEww/mmqySnLRVJJcp Pd/D6AyMSHXPFDqTbwTbWOgvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgqxgQb0a Whq8DfvPjB3FxnKHWR0wHwYDVR0jBBgwFoAUXwBNV+s29CZy5m8wBfZGm2KJFxsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxMDI1Lzk1NkY2NjJDOUQ4 NDExRUY4MTdFMTQyMEM0RjlBRTAyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHdCTlYtczI5Q1p5NW04d0JmWkdtMktKRnhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMx MDI1Lzk1NkY2NjJDOUQ4NDExRUY4MTdFMTQyMEM0RjlBRTAyL1h3Qk5WLXMyOUNa eTVtOHdCZlpHbTJLSkZ4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAECc2OEz/tMyQdSQ8rWewDQyKJG9oqUFeSvKbS/nieKFKfMMFutn7DBK UUqVTYySLTA+AoxhJAWwyCwp0pa3ufLta/pUXD33NVAdfkaR1pf7v3rgA/tSAf3k ajPWme0F04ZMLFJchL3kwg7SNsWxfBWtw5UtDFTY50Zwcvzb/4tx6phtfrSR8rtV Ory3XcGTESAuSP/XiT/cLuE3KgjhG9pKne6dOsiugK+WjYiGM37I8VcgxoNr/wwB PldtzROdrlBIRDPgiywWkDMn4fxfVvPijDC53liB2cfhurbHD+3nNUzQUuIxyZqJ ocZLClZe3UFSq9pYjUZK4/stfA2Nkug= -----END CERTIFICATE-----Generated at Sat May 31 17:56:21 2025 by rpki-client