$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json) Hash identifier: RAMHPzC7SOWgD8uPsmDOtoZ8U/ndgFI7VuSlmQLVnoE= Subject key identifier: 2E:21:86:8F:33:D7:A0:C0:52:9E:8C:B5:40:DF:3D:72:D5:EF:92:44 Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft Manifest number: 052D Signing time: Fri 30 May 2025 23:42:41 +0000 Manifest this update: Fri 30 May 2025 23:42:40 +0000 Manifest next update: Fri 06 Jun 2025 23:42:40 +0000 Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: l0LSBYkN2shvq29C6EnPLUYEn8YklsBpRbVa6cicKAQ=) 2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: 9X0FABgF4N/aMCwLf/2Sir07UctuAOlwN446kkP4Osg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Validity Not Before: May 30 23:42:40 2025 GMT Not After : Jun 6 23:42:40 2025 GMT Subject: CN=683a4271-3f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:53:d6:f5:97:83:b4:b8:bd:81:aa:34:52: 0d:e7:b7:07:04:60:79:bb:55:c1:ce:c3:fd:03:e4: 78:5f:f7:f7:e8:90:8b:07:1e:94:4a:6b:17:35:c5: 80:c3:61:b7:4a:59:5d:2e:7f:ed:da:94:69:7a:6d: b2:40:04:b8:d6:bd:71:1d:64:3d:65:97:67:ed:6b: d2:f3:37:f8:cc:b4:c5:fa:b5:01:d1:3b:2d:d3:da: 6d:b9:e6:df:3f:0a:a1:bf:64:3c:87:59:e5:7f:dd: 8b:27:a6:63:1e:48:9d:01:e5:e5:70:60:4a:79:75: c3:2d:fc:cf:df:aa:72:7d:85:7a:eb:48:2b:25:53: 4b:a0:b6:42:fe:ff:1b:8c:66:2b:75:b1:42:66:f3: 4b:e1:53:74:3a:1b:9d:9a:3b:63:ec:6c:7c:82:ed: 21:63:12:c2:30:59:4a:0d:73:15:41:d2:06:5e:fb: 8a:10:5a:dd:36:ef:82:9b:a5:fc:fa:05:f9:a2:45: c4:8f:a3:9c:b9:20:da:cb:d5:5a:30:7f:b7:ba:3b: c6:cc:cc:23:cd:b5:e1:0a:3e:be:12:cc:f3:77:c3: 94:6c:47:cb:25:e0:22:a2:53:4b:fb:a2:d9:2b:48: 15:4f:50:db:10:a7:e2:e8:79:b8:37:89:a3:3f:5d: 42:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:21:86:8F:33:D7:A0:C0:52:9E:8C:B5:40:DF:3D:72:D5:EF:92:44 X509v3 Authority Key Identifier: keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:49:ef:c0:2f:41:48:98:04:30:e9:ef:85:91:03:2e:58:69: 45:30:7e:96:3d:59:c7:2d:34:ee:cf:4b:5d:00:47:33:0a:cb: 3b:53:65:2a:72:53:75:fa:fa:08:de:29:82:c1:76:1e:b8:a1: 25:fb:75:26:60:64:05:01:fc:9b:35:ee:c0:f2:03:c8:9a:d8: 7f:d2:44:5b:eb:78:df:6f:d4:51:f1:7c:c8:02:61:01:d1:45: 82:2b:e6:c8:4a:05:68:f7:09:4c:ce:e9:e3:33:ab:c8:ae:3c: a5:dc:cd:9d:5c:6f:c3:d3:9a:7c:f5:c1:28:c0:b3:2c:9d:1e: e5:4d:c9:b3:4c:84:b3:56:ac:ef:0e:8c:49:af:fe:c5:b2:d0: c6:f3:85:dd:db:09:bd:de:ee:57:34:29:42:ee:95:1f:85:2e: 41:bb:54:1e:31:52:01:c3:1d:db:6f:27:ee:b1:f6:ae:6f:de: 56:67:61:92:81:17:fe:a4:09:39:d8:1b:aa:d1:17:0a:28:a7: 6f:ef:42:24:71:eb:e8:de:98:2a:9d:17:cf:bf:42:6d:be:35: ac:2f:6f:a4:71:77:98:34:3c:46:1e:72:fc:53:77:ec:e7:21: 0e:58:94:f9:a9:e9:43:12:92:c6:ab:dc:22:68:06:2a:78:a1: 21:59:18:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG NzAxN0RDQjgwHhcNMjUwNTMwMjM0MjQwWhcNMjUwNjA2MjM0MjQwWjAYMRYwFAYD VQQDEw02ODNhNDI3MS0zZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTlT1vWXg7S4vYGqNFIN57cHBGB5u1XBzsP9A+R4X/f36JCLBx6USmsXNcWA w2G3SlldLn/t2pRpem2yQAS41r1xHWQ9ZZdn7WvS8zf4zLTF+rUB0Tst09ptuebf Pwqhv2Q8h1nlf92LJ6ZjHkidAeXlcGBKeXXDLfzP36pyfYV660grJVNLoLZC/v8b jGYrdbFCZvNL4VN0Ohudmjtj7Gx8gu0hYxLCMFlKDXMVQdIGXvuKEFrdNu+Cm6X8 +gX5okXEj6OcuSDay9VaMH+3ujvGzMwjzbXhCj6+Eszzd8OUbEfLJeAiolNL+6LZ K0gVT1DbEKfi6Hm4N4mjP11CqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4hho8z 16DAUp6MtUDfPXLV75JEMB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJGQS9FODBEQUEyRUZBODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdq UVhOLUlaNFZybWozQVgzTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLSe/AL0FImAQw6e+FkQMuWGlFMH6WPVnHLTTuz0tdAEczCss7U2Uq clN1+voI3imCwXYeuKEl+3UmYGQFAfybNe7A8gPImth/0kRb63jfb9RR8XzIAmEB 0UWCK+bISgVo9wlMzunjM6vIrjyl3M2dXG/D05p89cEowLMsnR7lTcmzTISzVqzv DoxJr/7FstDG84Xd2wm93u5XNClC7pUfhS5Bu1QeMVIBwx3bbyfusfaub95WZ2GS gRf+pAk52Buq0RcKKKdv70Ikcevo3pgqnRfPv0JtvjWsL2+kcXeYNDxGHnL8U3fs 5yEOWJT5qelDEpLGq9wiaAYqeKEhWRjT -----END CERTIFICATE-----Generated at Sat May 31 17:36:01 2025 by rpki-client