$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: rpS0fDDJTrP2CmXtvXj2i6VcDk1qeOkZCi1bX7OivMg= Subject key identifier: 9B:11:26:F1:57:26:CF:34:99:86:2A:93:9F:BF:73:3D:B0:B5:2A:76 Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 01AE Signing time: Mon 02 Jun 2025 23:51:57 +0000 Manifest this update: Mon 02 Jun 2025 23:51:56 +0000 Manifest next update: Mon 09 Jun 2025 23:51:56 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: UOvDpRhh2U4pwXgSP50sEPC1Wt2VMhJgcvWvvypvT54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Jun 2 23:51:56 2025 GMT Not After : Jun 9 23:51:56 2025 GMT Subject: CN=683e391c-a36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:33:d1:c6:cc:0f:5a:d7:f1:20:8c:f6:dc: 95:b5:ee:28:77:8a:29:1b:cd:fb:81:29:c1:f4:4a: 1a:34:ce:a2:79:44:32:18:6d:28:36:3e:b4:59:44: 86:0a:c9:d1:f5:33:6c:3d:78:df:00:92:8f:c6:72: ed:91:c5:a5:ec:34:06:6c:21:32:41:3a:96:cb:52: 18:9f:c3:d6:bd:f1:b7:a6:02:23:cb:ea:94:79:9a: 55:4b:9e:0e:9c:0c:27:71:26:84:a3:25:47:53:e4: a4:d3:1f:ec:3c:36:59:e5:f4:4b:da:c8:52:99:5c: f9:a2:54:cb:d5:ae:f4:15:3d:65:e3:65:11:4d:56: 56:8a:38:0f:d6:00:6b:be:50:b4:0a:a0:55:ae:1a: 8e:20:a0:94:b6:31:99:c8:65:08:e0:fd:cd:da:ae: ad:a7:34:bb:0f:4d:95:76:be:ee:5b:83:22:1a:b4: 60:87:e2:62:57:56:0b:96:02:a0:77:46:fc:73:a6: af:ee:b8:12:b9:24:c6:16:4f:c0:80:80:8f:84:3c: 8d:ce:23:fe:3f:ae:29:8e:07:b0:4b:70:86:7d:86: 7e:a1:8e:d2:2e:06:8b:bc:02:f7:b7:35:a4:a3:38: d4:85:0e:4c:26:88:f4:42:67:3e:93:1c:30:fe:ed: d0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:11:26:F1:57:26:CF:34:99:86:2A:93:9F:BF:73:3D:B0:B5:2A:76 X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:4c:d6:6d:97:b0:ab:74:76:25:3c:97:21:a3:e9:9c:bb:e3: 65:28:0a:7b:ef:ba:c4:83:50:2d:36:7a:62:53:5c:3d:59:12: 6d:e8:12:ac:f0:86:c6:17:40:0c:80:ae:15:90:57:d9:42:2b: a9:59:8f:ad:80:f3:12:4c:2e:eb:15:38:cd:20:24:1b:35:32: d9:ec:bf:1a:db:17:8c:59:35:e4:48:a8:97:07:47:e4:5d:7c: d1:7a:42:b8:3e:eb:86:2b:f8:1e:39:7e:1b:d9:b9:8e:94:b8: 55:40:06:e1:a3:98:5b:4d:97:f1:b3:df:20:57:09:81:4c:93: c6:8a:1f:28:75:cf:5d:61:83:bc:2b:8b:df:51:bb:c4:96:1e: 4e:e1:64:a0:b5:a6:fc:e3:0a:b3:11:b9:0e:f1:3d:e4:83:e6: aa:4f:3f:da:a1:fa:f7:de:10:e2:69:9e:a1:e5:84:18:ee:7e: cf:e6:cf:8d:21:10:62:13:a6:19:7b:13:3d:2e:6b:b1:0f:8b: a8:2f:f0:22:30:f6:96:09:e6:83:a6:e1:b6:e7:25:21:43:ef: c3:20:90:69:3e:3d:d2:c0:f2:3e:e5:ff:36:47:27:c4:c1:40: 79:ec:bf:0b:ce:41:d8:74:d4:82:ae:a4:52:d5:7c:7a:e4:0c: ac:ee:c6:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjUwNjAyMjM1MTU2WhcNMjUwNjA5MjM1MTU2WjAYMRYwFAYD VQQDEw02ODNlMzkxYy1hMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy28z0cbMD1rX8SCM9tyVte4od4opG837gSnB9EoaNM6ieUQyGG0oNj60WUSG CsnR9TNsPXjfAJKPxnLtkcWl7DQGbCEyQTqWy1IYn8PWvfG3pgIjy+qUeZpVS54O nAwncSaEoyVHU+Sk0x/sPDZZ5fRL2shSmVz5olTL1a70FT1l42URTVZWijgP1gBr vlC0CqBVrhqOIKCUtjGZyGUI4P3N2q6tpzS7D02Vdr7uW4MiGrRgh+JiV1YLlgKg d0b8c6av7rgSuSTGFk/AgICPhDyNziP+P64pjgewS3CGfYZ+oY7SLgaLvAL3tzWk ozjUhQ5MJoj0Qmc+kxww/u3QlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsRJvFX Js80mYYqk5+/cz2wtSp2MB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxTNZtl7CrdHYlPJcho+mcu+NlKAp777rEg1AtNnpiU1w9WRJt6BKs 8IbGF0AMgK4VkFfZQiupWY+tgPMSTC7rFTjNICQbNTLZ7L8a2xeMWTXkSKiXB0fk XXzRekK4PuuGK/geOX4b2bmOlLhVQAbho5hbTZfxs98gVwmBTJPGih8odc9dYYO8 K4vfUbvElh5O4WSgtab84wqzEbkO8T3kg+aqTz/aofr33hDiaZ6h5YQY7n7P5s+N IRBiE6YZexM9LmuxD4uoL/AiMPaWCeaDpuG25yUhQ+/DIJBpPj3SwPI+5f82RyfE wUB57L8LzkHYdNSCrqRS1Xx65Ays7sYW -----END CERTIFICATE-----Generated at Wed Jun 4 00:16:35 2025 by rpki-client