$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: G2b5xyOX6SwmAFeHLmzjEmEM01jR1HsIJ+eulh5lBiI= Subject key identifier: B6:06:7D:7C:2B:A4:CA:1B:E5:A6:35:D2:22:CE:32:19:2E:9A:36:93 Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: 4B Signing time: Sat 31 May 2025 06:52:30 +0000 Manifest this update: Sat 31 May 2025 06:52:30 +0000 Manifest next update: Sat 07 Jun 2025 06:52:30 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: uN0oBMA85a9ZWNL75VtkculcEKDYq30RxFQN1xsER2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Validity Not Before: May 31 06:52:30 2025 GMT Not After : Jun 7 06:52:30 2025 GMT Subject: CN=683aa72e-ff44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dc:18:5f:0d:6e:01:11:40:d1:03:bb:1e:38: be:9f:53:78:a8:4d:0d:41:53:99:51:f3:df:e4:96: 43:76:22:08:f8:c1:58:5f:e4:7a:e0:ce:b7:f7:81: 64:63:69:5a:2b:1f:ec:80:f7:ee:12:a3:8a:7e:84: 65:dd:7e:0e:b3:0d:7c:c5:43:49:83:71:60:c7:ad: a1:b7:40:cd:49:eb:c2:85:79:dc:1f:2e:e5:19:00: df:e3:26:d9:e0:76:ef:6d:ea:23:05:c9:db:60:3a: 3e:a6:52:be:ff:81:a3:99:89:f8:44:b3:3e:35:dc: 14:d5:71:c2:ff:83:63:e6:69:3f:2e:e2:83:d7:dd: c2:0e:af:9d:31:b2:de:fc:61:1b:47:84:9e:13:b0: a0:01:6e:6d:9a:71:86:8b:9b:6b:9d:a6:06:af:3b: 92:88:88:9f:70:49:d5:ef:4d:73:60:a8:7e:4d:7d: 40:13:1d:e5:0e:dd:b8:94:33:76:02:ee:2b:68:26: a5:83:7a:fa:3e:55:5d:55:28:a3:5c:74:c1:fc:46: 5d:66:03:66:d3:39:98:04:f6:43:50:13:57:9b:5b: d1:31:34:95:44:4f:78:eb:3d:b8:3f:7a:c0:fd:f9: 3a:df:9a:a8:45:b3:0c:e6:f9:6b:6b:d6:ed:e9:ad: c3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:06:7D:7C:2B:A4:CA:1B:E5:A6:35:D2:22:CE:32:19:2E:9A:36:93 X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:41:04:66:15:db:f0:0b:c3:58:4d:30:f9:90:e0:c9:91:ff: 47:92:fc:a3:43:7e:38:8d:c7:40:6f:b2:19:1d:94:c0:77:a5: f9:6f:8f:26:36:cb:80:bc:46:66:de:00:c9:31:ce:1b:bf:d9: fe:dd:65:fb:20:b4:67:2e:dd:c1:87:e7:50:db:78:b8:67:0c: 7d:5d:f2:af:31:26:42:db:2e:5a:e9:0a:19:5d:44:28:c9:15: 94:66:82:20:e2:12:40:22:1d:ad:e5:40:42:d5:b9:54:c6:42: 73:10:90:e1:89:6f:07:2c:a1:57:1b:76:76:17:c3:95:89:75: 4e:13:b6:de:6e:0c:7b:9d:21:b9:1b:32:18:20:ca:08:40:c1: e1:cb:c0:bf:ef:fd:7d:76:87:48:b9:e6:f9:8f:fe:49:af:bf: 8b:2b:36:88:1c:eb:1a:8a:b0:0e:70:64:d5:7c:53:cb:4d:93: 78:84:f5:1d:83:9e:26:b8:24:82:ca:9d:80:eb:ff:ac:ba:78: 7a:d1:42:94:02:ed:1c:70:93:c1:7c:2f:81:12:9a:60:89:9f: 56:d2:3a:3a:67:e1:a3:6a:cd:1e:9b:8c:2e:7f:22:52:52:4b: 05:54:8a:1f:d1:40:d4:e7:40:a4:0b:19:6f:bc:46:9a:6e:07: b4:a1:c1:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD REJGNTExMC8GA1UEBRMoQzQyOTA5NUNCMkI5NzdCMDY3MTkxMTkzQjQzQjlCMkY1 RTE5Q0FFODAeFw0yNTA1MzEwNjUyMzBaFw0yNTA2MDcwNjUyMzBaMBgxFjAUBgNV BAMTDTY4M2FhNzJlLWZmNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc3BhfDW4BEUDRA7seOL6fU3ioTQ1BU5lR89/klkN2Igj4wVhf5Hrgzrf3gWRj aVorH+yA9+4So4p+hGXdfg6zDXzFQ0mDcWDHraG3QM1J68KFedwfLuUZAN/jJtng du9t6iMFydtgOj6mUr7/gaOZifhEsz413BTVccL/g2PmaT8u4oPX3cIOr50xst78 YRtHhJ4TsKABbm2acYaLm2udpgavO5KIiJ9wSdXvTXNgqH5NfUATHeUO3biUM3YC 7itoJqWDevo+VV1VKKNcdMH8Rl1mA2bTOZgE9kNQE1ebW9ExNJVET3jrPbg/esD9 +TrfmqhFswzm+Wtr1u3prcNrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtgZ9fCuk yhvlpjXSIs4yGS6aNpMwHwYDVR0jBBgwFoAUxCkJXLK5d7BnGRGTtDubL14Zyugw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQkY1LzY2NTlGNTFFQ0I1 MTExRUY5MDQwMEQxN0M0RjlBRTAyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveENrSlhMSzVkN0JuR1JHVHREdWJMMTRaeXVnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE QkY1LzY2NTlGNTFFQ0I1MTExRUY5MDQwMEQxN0M0RjlBRTAyL3hDa0pYTEs1ZDdC bkdSR1R0RHViTDE0Wnl1Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFBBBGYV2/ALw1hNMPmQ4MmR/0eS/KNDfjiNx0BvshkdlMB3pflvjyY2 y4C8RmbeAMkxzhu/2f7dZfsgtGcu3cGH51DbeLhnDH1d8q8xJkLbLlrpChldRCjJ FZRmgiDiEkAiHa3lQELVuVTGQnMQkOGJbwcsoVcbdnYXw5WJdU4Ttt5uDHudIbkb MhggyghAweHLwL/v/X12h0i55vmP/kmvv4srNogc6xqKsA5wZNV8U8tNk3iE9R2D nia4JILKnYDr/6y6eHrRQpQC7Rxwk8F8L4ESmmCJn1bSOjpn4aNqzR6bjC5/IlJS SwVUih/RQNTnQKQLGW+8RppuB7ShwUQ= -----END CERTIFICATE-----Generated at Sat May 31 16:29:38 2025 by rpki-client