$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json) Hash identifier: Syr6+UwTaIVosO98NnYPbixfln9h6WREHxpDWiZ6BFM= Subject key identifier: DB:00:ED:14:28:E6:B6:1C:45:AB:8E:41:A2:B9:ED:F3:4E:1F:45:80 Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Certificate serial: 3482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft Manifest number: 3480 Signing time: Sat 31 May 2025 15:09:15 +0000 Manifest this update: Sat 31 May 2025 15:09:14 +0000 Manifest next update: Sat 07 Jun 2025 15:09:14 +0000 Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: rPkGXJpwQsDDSq7h/c5qjazMZlHFWPGxDfR5oPZb11I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13442 (0x3482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Validity Not Before: May 31 15:09:14 2025 GMT Not After : Jun 7 15:09:14 2025 GMT Subject: CN=683b1b9b-7f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:46:e0:8e:34:e3:23:b1:ba:df:a7:1f:82: bf:79:cb:5a:26:bf:92:40:68:2b:d1:8c:2b:49:c8: 46:9e:83:bf:06:b9:3a:5a:47:4e:1e:13:d6:c2:d1: f9:f1:e2:83:a9:5e:c3:15:a6:06:bb:72:34:02:82: 4a:16:ba:c0:98:af:c1:cd:cb:31:cb:d4:c3:d3:fc: af:23:3e:12:aa:22:df:e2:84:38:0b:32:ea:9b:ac: 9a:ac:97:14:59:c2:df:1d:5b:be:35:66:d8:a0:4c: bf:b0:e6:2c:40:c3:e4:0f:29:54:b9:20:8c:5d:22: ec:41:b1:32:73:76:b7:b3:47:b8:a0:cd:df:08:60: 21:84:38:70:62:fe:a6:b4:07:5e:d6:8a:bc:a1:2e: 4a:c2:e0:31:7f:76:50:f3:9b:be:7b:ed:6e:44:19: 13:7d:c0:ff:a7:e0:c1:43:91:45:fd:0c:69:59:fa: 74:ab:00:a6:20:a9:b2:ad:5a:74:4c:01:45:05:b7: a7:69:f3:c0:a7:49:99:a8:49:31:e6:c6:9f:48:2f: 2c:45:0b:a1:2a:cf:fd:0f:fe:ab:01:f3:60:0f:ca: fe:cf:be:ef:ce:bb:e1:48:07:3c:9f:f1:73:8c:e1: 9d:e9:06:ab:07:37:37:a4:b5:48:37:e6:d4:94:3b: 65:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:00:ED:14:28:E6:B6:1C:45:AB:8E:41:A2:B9:ED:F3:4E:1F:45:80 X509v3 Authority Key Identifier: keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2a:fe:e0:a8:dc:84:57:ee:a1:7f:f6:de:a9:25:ce:4d:46: c9:7a:ac:ab:dd:e1:39:88:db:72:0c:f1:f7:ff:e7:2f:9a:63: 79:84:fd:95:ba:1d:d4:ba:1f:b3:9c:f7:50:04:8e:93:24:d8: fa:b4:f4:e7:9a:65:eb:63:85:e0:16:60:fb:3d:bf:24:93:1f: ed:c6:3b:68:01:7b:c3:88:e3:6e:bf:85:1d:7a:68:38:75:ee: c5:8c:f5:ea:26:0d:2c:d4:38:9e:97:a2:03:5c:f7:1d:26:3e: 1f:18:74:72:fc:de:5f:ee:35:34:b5:c4:fe:95:d4:e7:91:99: 27:13:11:8a:df:a1:0a:ce:52:c0:36:06:d5:fa:8d:f3:14:60: a5:03:6c:17:77:de:a1:d2:2e:2e:45:cf:b8:9b:c8:42:02:95: f8:cf:bf:ce:a0:ac:44:50:d0:6e:5f:0c:b9:ed:d6:03:3f:c8: 52:97:9d:33:c5:5c:3b:19:63:6a:59:87:c3:a9:6f:06:2b:23: e4:96:7e:0c:a6:e4:00:f4:ce:ca:18:a5:d1:df:09:69:ab:21: cc:be:83:bf:70:c8:56:fa:f9:d2:af:27:b9:60:fe:d3:87:5f: 12:f6:24:4d:26:0d:62:dc:ff:bf:a2:05:55:24:e5:fe:56:88: f5:8d:9b:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE NUJEMENCQTUwHhcNMjUwNTMxMTUwOTE0WhcNMjUwNjA3MTUwOTE0WjAYMRYwFAYD VQQDEw02ODNiMWI5Yi03ZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPZG4I404yOxut+nH4K/ectaJr+SQGgr0YwrSchGnoO/Brk6WkdOHhPWwtH5 8eKDqV7DFaYGu3I0AoJKFrrAmK/Bzcsxy9TD0/yvIz4SqiLf4oQ4CzLqm6yarJcU WcLfHVu+NWbYoEy/sOYsQMPkDylUuSCMXSLsQbEyc3a3s0e4oM3fCGAhhDhwYv6m tAde1oq8oS5KwuAxf3ZQ85u+e+1uRBkTfcD/p+DBQ5FF/QxpWfp0qwCmIKmyrVp0 TAFFBbenafPAp0mZqEkx5safSC8sRQuhKs/9D/6rAfNgD8r+z77vzrvhSAc8n/Fz jOGd6QarBzc3pLVIN+bUlDtlDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsA7RQo 5rYcRauOQaK57fNOH0WAMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l eGFDU192NVY1QWZWdlF5NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaKv7gqNyEV+6hf/beqSXOTUbJeqyr3eE5iNtyDPH3/+cvmmN5hP2V uh3Uuh+znPdQBI6TJNj6tPTnmmXrY4XgFmD7Pb8kkx/txjtoAXvDiONuv4Udemg4 de7FjPXqJg0s1Diel6IDXPcdJj4fGHRy/N5f7jU0tcT+ldTnkZknExGK36EKzlLA NgbV+o3zFGClA2wXd96h0i4uRc+4m8hCApX4z7/OoKxEUNBuXwy57dYDP8hSl50z xVw7GWNqWYfDqW8GKyPkln4MpuQA9M7KGKXR3wlpqyHMvoO/cMhW+vnSrye5YP7T h18S9iRNJg1i3P+/ogVVJOX+Voj1jZtn -----END CERTIFICATE-----Generated at Sat May 31 17:01:15 2025 by rpki-client