$ rpki-client -vvf rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft File: MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft (raw, json) Hash identifier: M1xffmgiol7vbWGFTEzpdRq0OwO206IgbgbcjDMc4TE= Subject key identifier: 58:D2:37:99:9D:99:20:C8:B0:06:30:C9:9D:78:E1:9C:4A:F0:2C:1D Authority key identifier: 30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE Certificate issuer: /CN=A91D560D/serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE Certificate serial: 0B0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft Manifest number: 138C Signing time: Fri 30 May 2025 19:29:13 +0000 Manifest this update: Fri 30 May 2025 19:29:13 +0000 Manifest next update: Fri 06 Jun 2025 19:29:13 +0000 Files and hashes: 1: MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl (hash: 6O08inJ4GhnWpdHqSdB+k2655QXMsmCSAZMqf6qgopQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2827 (0xb0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D560D, serialNumber=30B5DE5E87862882F8FDA2B690C2F3070995F5FE Validity Not Before: May 30 19:29:13 2025 GMT Not After : Jun 6 19:29:13 2025 GMT Subject: CN=683a0709-b0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:e6:48:59:15:ce:e5:d1:7e:2e:9a:19:2f: c4:32:91:32:3c:0c:49:2d:ea:eb:b7:06:6c:6a:2a: 82:c4:b9:9c:a8:e1:0b:8a:9e:28:5a:72:5a:11:8b: a9:11:f4:24:02:91:de:d4:86:eb:36:89:69:8e:f8: d0:a4:c1:e6:a1:06:72:08:67:90:6b:80:af:a8:c2: 49:e7:4b:05:7e:a5:05:1d:7c:8e:e4:5a:36:a0:85: 63:20:a8:da:a3:0f:f0:d0:ef:09:a0:e9:20:b8:ef: b7:5d:64:85:cd:bf:58:83:28:3e:14:7c:94:a4:f9: 5a:7e:3c:58:66:e5:d8:27:d5:d9:69:e7:4c:65:63: d7:28:c8:f6:ad:de:5b:03:e3:8c:b1:cb:b5:ea:a3: 31:c7:48:9d:bf:10:11:db:72:7b:7c:e6:0e:67:c5: b9:b5:5a:8d:13:5e:01:77:df:26:c3:8d:d7:08:41: 8e:06:f6:4c:8e:70:5f:73:06:46:ea:aa:31:1e:e0: f8:15:2f:a4:c4:a5:ce:4f:95:80:f9:2e:ea:f4:fd: ac:e9:9b:23:f0:ba:32:f3:e0:43:7e:bc:a4:b0:47: 3c:10:bb:83:90:34:bf:67:7c:f6:0f:dc:f9:68:37: 6b:99:4d:14:f7:fb:ac:06:7f:c3:ea:85:9e:3b:fe: a9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D2:37:99:9D:99:20:C8:B0:06:30:C9:9D:78:E1:9C:4A:F0:2C:1D X509v3 Authority Key Identifier: keyid:30:B5:DE:5E:87:86:28:82:F8:FD:A2:B6:90:C2:F3:07:09:95:F5:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MLXeXoeGKIL4_aK2kMLzBwmV9f4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D560D/68C3F49A41EE11EA9CEA1F75C4F9AE02/MLXeXoeGKIL4_aK2kMLzBwmV9f4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b7:b3:9f:ff:18:08:c5:db:66:76:63:48:8d:2a:fd:ee:37: 5b:ac:f4:6a:d0:9b:cd:81:45:f9:f7:03:25:c7:71:7c:80:b8: 16:80:7e:12:78:dd:57:aa:44:2c:6e:6f:08:27:cd:e5:fb:ac: 71:c8:b1:2f:1d:69:cb:75:4f:48:e6:66:e8:68:80:0b:fa:f7: 4c:18:2f:f3:b6:7f:0f:7f:32:68:81:14:85:14:c4:2b:0e:c1: 3c:e2:6d:08:9a:a9:f9:7d:27:88:df:74:66:30:ea:29:85:4f: 49:4c:74:c4:0f:18:56:46:cc:bc:09:3c:92:26:2e:e4:81:ce: 9c:7e:15:a4:7f:a4:e1:e6:b4:69:d5:89:56:7c:c8:4d:e3:b2: 82:fa:31:de:23:82:01:d6:32:70:6a:eb:e7:36:8b:60:0f:fd: bf:ff:77:16:31:e3:14:e1:b9:a9:0d:1c:44:f7:2f:a8:f2:66: c6:fd:d8:fc:37:5d:08:da:81:6b:70:26:d6:75:fc:54:7a:84: 78:5e:f4:07:89:f3:7f:be:07:34:7b:cb:9d:94:b7:59:c5:91: e7:fb:52:d0:e5:70:14:35:e1:2f:e4:5e:ea:13:fb:5e:5d:7e: 30:2f:c0:a1:aa:ae:aa:df:f9:f3:44:e7:b6:b4:8c:42:67:2a: 60:66:ab:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2MEQxMTAvBgNVBAUTKDMwQjVERTVFODc4NjI4ODJGOEZEQTJCNjkwQzJGMzA3 MDk5NUY1RkUwHhcNMjUwNTMwMTkyOTEzWhcNMjUwNjA2MTkyOTEzWjAYMRYwFAYD VQQDEw02ODNhMDcwOS1iMGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaHmSFkVzuXRfi6aGS/EMpEyPAxJLerrtwZsaiqCxLmcqOELip4oWnJaEYup EfQkApHe1IbrNolpjvjQpMHmoQZyCGeQa4CvqMJJ50sFfqUFHXyO5Fo2oIVjIKja ow/w0O8JoOkguO+3XWSFzb9Ygyg+FHyUpPlafjxYZuXYJ9XZaedMZWPXKMj2rd5b A+OMscu16qMxx0idvxAR23J7fOYOZ8W5tVqNE14Bd98mw43XCEGOBvZMjnBfcwZG 6qoxHuD4FS+kxKXOT5WA+S7q9P2s6Zsj8Loy8+BDfryksEc8ELuDkDS/Z3z2D9z5 aDdrmU0U9/usBn/D6oWeO/6pNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjSN5md mSDIsAYwyZ144ZxK8CwdMB8GA1UdIwQYMBaAFDC13l6HhiiC+P2itpDC8wcJlfX+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwRC82OEMzRjQ5QTQx RUUxMUVBOUNFQTFGNzVDNEY5QUUwMi9NTFhlWG9lR0tJTDRfYUsya01MekJ3bVY5 ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01MWGVYb2VHS0lMNF9hSzJrTUx6QndtVjlmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTYwRC82OEMzRjQ5QTQxRUUxMUVBOUNFQTFGNzVDNEY5QUUwMi9NTFhlWG9lR0tJ TDRfYUsya01MekJ3bVY5ZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAat7Of/xgIxdtmdmNIjSr97jdbrPRq0JvNgUX59wMlx3F8gLgWgH4S eN1XqkQsbm8IJ83l+6xxyLEvHWnLdU9I5mboaIAL+vdMGC/ztn8PfzJogRSFFMQr DsE84m0Imqn5fSeI33RmMOophU9JTHTEDxhWRsy8CTySJi7kgc6cfhWkf6Th5rRp 1YlWfMhN47KC+jHeI4IB1jJwauvnNotgD/2//3cWMeMU4bmpDRxE9y+o8mbG/dj8 N10I2oFrcCbWdfxUeoR4XvQHifN/vgc0e8udlLdZxZHn+1LQ5XAUNeEv5F7qE/te XX4wL8Chqq6q3/nzROe2tIxCZypgZqu0 -----END CERTIFICATE-----Generated at Sat May 31 16:42:57 2025 by rpki-client