$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: jf5SBKRmaiCAHGeYOgkD/v0CMD4m6+4lnb/e0YN80XA= Subject key identifier: E3:9D:D4:9F:F9:DE:F6:4B:C8:3C:1A:A0:CA:D0:1B:30:63:5F:3C:A0 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: F7 Signing time: Sat 31 May 2025 04:49:25 +0000 Manifest this update: Sat 31 May 2025 04:49:25 +0000 Manifest next update: Sat 07 Jun 2025 04:49:25 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: W6FA5o310wKENUcH+7ifGc+Q3JbsJZs/f4Z7bkKSCb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: May 31 04:49:25 2025 GMT Not After : Jun 7 04:49:25 2025 GMT Subject: CN=683a8a55-01e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e8:18:2d:6b:7c:8e:d5:97:aa:58:63:8a:ff: e9:9f:98:aa:73:ec:a0:38:2c:d5:1d:83:c5:69:bb: 26:d3:05:7d:ec:67:95:0e:ee:51:c3:0e:cd:64:45: c9:65:82:7c:19:d2:61:40:a7:fd:50:9c:80:76:9f: c9:8d:34:e0:6e:c2:f7:34:75:3b:c3:35:76:35:60: 93:52:0d:5e:c8:09:ae:70:62:c4:19:98:a5:e7:84: a4:f0:a2:26:c7:1e:07:3c:24:ed:5c:18:9c:96:4e: 4e:8d:68:a3:54:a7:d3:79:04:1f:35:66:59:13:6b: 63:89:2f:a1:cf:00:00:a2:ee:60:d1:ae:79:6c:84: d9:73:06:9f:66:d3:73:a3:99:6c:74:85:6c:dd:83: ab:3a:00:a2:45:54:4a:b6:c1:01:9f:ba:e2:3d:de: e0:7d:06:c5:f6:25:50:4a:95:29:70:a8:3b:25:4c: 9a:4c:3d:66:c1:ef:96:d4:f9:38:2e:e1:3f:b7:1f: 79:ed:c2:88:9a:a4:46:12:30:2e:5e:22:fb:43:ce: ea:ca:67:b0:35:50:47:9a:92:e6:f6:4e:27:02:b0: 81:e9:c6:3d:f3:9f:ba:12:39:7a:21:9e:b1:3f:bc: ff:9c:fc:85:70:49:c3:96:77:05:5c:03:16:7f:8e: 4c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9D:D4:9F:F9:DE:F6:4B:C8:3C:1A:A0:CA:D0:1B:30:63:5F:3C:A0 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:16:d4:65:52:2e:2f:7b:5f:87:80:2e:e1:fa:e8:91:bd:5d: 91:91:e2:6f:ec:fa:17:9a:96:95:db:64:5e:c0:a0:6c:b1:86: a4:a9:98:88:e1:58:f5:05:f9:c4:bf:d9:4f:51:76:ef:40:5e: e6:38:15:6b:d3:fe:83:0b:ba:a2:a1:4f:6a:3a:16:df:4f:e1: dc:ae:18:09:03:6a:31:c2:33:bb:2b:56:33:1a:22:8c:68:8e: 12:47:2a:bf:67:4e:a4:23:b9:73:ef:06:17:eb:43:e9:b1:52: 10:88:a9:40:d1:38:c8:e2:1d:e5:06:2f:f7:20:73:8e:0e:91: 76:25:2f:6b:a1:c9:cb:8e:2e:0e:a0:a2:82:3e:f4:18:0a:86: 33:d2:c4:a0:0e:c5:97:3e:aa:ae:fe:38:c2:60:3d:8e:87:4e: bc:0f:c1:ae:06:8b:2a:7c:fe:69:35:6c:f6:f8:b0:57:3a:d6: 42:0b:d1:b1:08:06:90:3e:7b:13:3e:66:91:12:7d:b9:92:c7: e4:38:0b:f5:49:93:28:d5:f6:e5:6c:5d:d6:e4:72:c4:63:00: 56:24:c5:02:87:76:98:cc:26:93:ad:78:a2:63:69:64:40:01: 95:97:71:73:05:e5:64:15:36:b3:6f:27:23:d2:bc:49:a7:d7: ad:84:90:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjUwNTMxMDQ0OTI1WhcNMjUwNjA3MDQ0OTI1WjAYMRYwFAYD VQQDEw02ODNhOGE1NS0wMWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+gYLWt8jtWXqlhjiv/pn5iqc+ygOCzVHYPFabsm0wV97GeVDu5Rww7NZEXJ ZYJ8GdJhQKf9UJyAdp/JjTTgbsL3NHU7wzV2NWCTUg1eyAmucGLEGZil54Sk8KIm xx4HPCTtXBiclk5OjWijVKfTeQQfNWZZE2tjiS+hzwAAou5g0a55bITZcwafZtNz o5lsdIVs3YOrOgCiRVRKtsEBn7riPd7gfQbF9iVQSpUpcKg7JUyaTD1mwe+W1Pk4 LuE/tx957cKImqRGEjAuXiL7Q87qymewNVBHmpLm9k4nArCB6cY985+6Ejl6IZ6x P7z/nPyFcEnDlncFXAMWf45M7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOd1J/5 3vZLyDwaoMrQGzBjXzygMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsFtRlUi4ve1+HgC7h+uiRvV2RkeJv7PoXmpaV22RewKBssYakqZiI 4Vj1BfnEv9lPUXbvQF7mOBVr0/6DC7qioU9qOhbfT+HcrhgJA2oxwjO7K1YzGiKM aI4SRyq/Z06kI7lz7wYX60PpsVIQiKlA0TjI4h3lBi/3IHOODpF2JS9rocnLji4O oKKCPvQYCoYz0sSgDsWXPqqu/jjCYD2Oh068D8GuBosqfP5pNWz2+LBXOtZCC9Gx CAaQPnsTPmaREn25ksfkOAv1SZMo1fblbF3W5HLEYwBWJMUCh3aYzCaTrXiiY2lk QAGVl3FzBeVkFTazbycj0rxJp9ethJA1 -----END CERTIFICATE-----Generated at Sat May 31 17:23:34 2025 by rpki-client