$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: eHp557sdseiqG0iZxWdas/rztduJ0UMmgilZQmDuPQ8= Subject key identifier: 65:74:5E:0C:4F:2F:A0:C2:99:2D:F7:47:32:07:3A:2B:51:34:C0:8D Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0B11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 135D Signing time: Sun 20 Jul 2025 19:25:54 +0000 Manifest this update: Sun 20 Jul 2025 19:25:54 +0000 Manifest next update: Sun 27 Jul 2025 19:25:54 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: it4MIcsHW0NhWuaJdubI7belzMvdm29nPO0k/XnXjTM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2833 (0xb11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Validity Not Before: Jul 20 19:25:54 2025 GMT Not After : Jul 27 19:25:54 2025 GMT Subject: CN=687d42c2-ba54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:77:43:b9:f9:67:eb:85:82:de:7b:d6:f7:eb: 7a:51:71:06:b5:b3:0b:99:f2:f4:70:d9:09:bc:1d: 5a:0f:11:84:e4:22:47:50:8b:13:63:2e:b1:ab:1f: 23:2b:9c:30:a8:cf:7a:93:d5:a7:c6:cf:36:c8:01: 3e:95:bc:d4:8c:df:5d:ef:7a:c6:66:bf:35:c3:f9: 3d:85:51:ff:a2:7d:dc:1a:53:8d:be:b0:61:75:4b: 61:92:c3:0e:39:f5:ec:10:0c:88:bc:21:aa:c4:f4: 43:5a:a7:2d:e4:b8:9f:5a:0e:fc:c1:cf:e5:f5:ac: e5:9f:38:47:a9:2c:2b:05:35:b6:0e:5e:8d:c0:ba: 50:9a:0a:91:5f:c3:cd:56:f3:42:21:96:02:40:80: 19:f4:07:53:44:c3:66:be:74:04:39:75:2e:fd:bb: 19:e2:15:26:bd:ea:fb:68:34:84:c9:13:0a:7b:f4: 38:24:33:24:e6:0a:b6:5a:c5:2d:b3:85:6e:70:79: 6b:91:e4:4b:a8:56:67:e5:d1:1a:86:c9:8f:61:cd: 9d:d4:f4:f6:b4:4a:38:b6:5c:2c:6b:b8:c9:d1:af: 17:fe:78:c1:38:d2:fc:1a:8a:c9:b3:94:5b:f1:0a: 45:f9:52:8a:56:db:9e:13:7f:00:4a:c0:a2:dc:24: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:74:5E:0C:4F:2F:A0:C2:99:2D:F7:47:32:07:3A:2B:51:34:C0:8D X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:13:87:d5:d1:33:70:a9:fe:f5:8f:1a:14:69:d4:a7:fe:9d: b3:be:d3:db:00:50:fe:7d:af:7f:94:e6:23:85:e6:a9:49:f7: e5:02:7a:7b:90:8d:71:e9:17:73:ab:b4:4c:c0:a7:10:d3:e4: 59:c0:b4:e1:cc:03:2b:93:09:53:66:58:ff:4a:58:20:38:2f: 00:b1:b4:9d:21:60:b4:9b:1e:8a:60:79:fc:6d:e0:93:93:83: 4f:43:69:96:23:58:76:29:63:5b:d4:f2:17:e7:bd:ac:74:ed: e3:52:b0:cc:c3:6a:20:46:bf:e8:1e:32:09:ff:40:c8:99:7d: 09:76:89:25:22:29:35:5c:2b:76:da:ab:37:e9:6b:27:98:98: a4:0b:86:2f:88:53:dd:83:87:83:02:d5:1d:3f:8f:4a:36:81: f4:d6:43:e7:f9:cd:34:26:cb:53:de:81:33:24:81:83:f0:53: 66:f3:94:5f:5b:e6:27:14:81:1f:53:3f:c3:cf:c1:fc:b1:59: e1:65:3d:82:b0:51:98:8b:8b:7e:7e:0f:c4:d1:a4:4a:8d:44: e2:ac:8b:35:a6:c2:39:79:2b:62:fe:34:3d:2b:ad:87:44:bc: 46:eb:ea:9c:d4:4e:58:86:7d:65:cf:24:e6:f5:93:e3:fc:88: 2d:55:a9:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjUwNzIwMTkyNTU0WhcNMjUwNzI3MTkyNTU0WjAYMRYwFAYD VQQDEw02ODdkNDJjMi1iYTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ndDufln64WC3nvW9+t6UXEGtbMLmfL0cNkJvB1aDxGE5CJHUIsTYy6xqx8j K5wwqM96k9Wnxs82yAE+lbzUjN9d73rGZr81w/k9hVH/on3cGlONvrBhdUthksMO OfXsEAyIvCGqxPRDWqct5LifWg78wc/l9azlnzhHqSwrBTW2Dl6NwLpQmgqRX8PN VvNCIZYCQIAZ9AdTRMNmvnQEOXUu/bsZ4hUmver7aDSEyRMKe/Q4JDMk5gq2WsUt s4VucHlrkeRLqFZn5dEahsmPYc2d1PT2tEo4tlwsa7jJ0a8X/njBONL8GorJs5Rb 8QpF+VKKVtueE38ASsCi3CRpsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGV0XgxP L6DCmS33RzIHOitRNMCNMB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAE4fV0TNwqf71jxoUadSn/p2zvtPbAFD+fa9/lOYjheapSfflAnp7 kI1x6Rdzq7RMwKcQ0+RZwLThzAMrkwlTZlj/SlggOC8AsbSdIWC0mx6KYHn8beCT k4NPQ2mWI1h2KWNb1PIX572sdO3jUrDMw2ogRr/oHjIJ/0DImX0JdoklIik1XCt2 2qs36WsnmJikC4YviFPdg4eDAtUdP49KNoH01kPn+c00JstT3oEzJIGD8FNm85Rf W+YnFIEfUz/Dz8H8sVnhZT2CsFGYi4t+fg/E0aRKjUTirIs1psI5eSti/jQ9K62H RLxG6+qc1E5Yhn1lzyTm9ZPj/IgtVanx -----END CERTIFICATE-----Generated at Mon Jul 21 06:49:21 2025 by rpki-client