$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft File: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json) Hash identifier: +W1Zr8NCM52ybSWbFOOsKiHLsiVXhAvPM2Ga4msuesc= Subject key identifier: D9:FD:7B:F4:29:83:76:66:B4:86:77:E9:8D:4B:A0:3F:0D:40:62:7B Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 05A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft Manifest number: 058F Signing time: Fri 30 May 2025 23:31:31 +0000 Manifest this update: Fri 30 May 2025 23:31:31 +0000 Manifest next update: Fri 06 Jun 2025 23:31:31 +0000 Files and hashes: 1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: pI5PtjiyGBwrAIGVW6UTzCNiBvkPYalod4OMW3e+Pmg=) 2: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: uDhOs7m4hROOvuYbsNmfelIHLedEW+qbRLJoRWnov7k=) 3: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: 2aWXQNNMXtNMfUOin6lgFHg66dnKR9UhJDXK2a/H1WM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1446 (0x5a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: May 30 23:31:31 2025 GMT Not After : Jun 6 23:31:31 2025 GMT Subject: CN=683a3fd3-a65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:8b:53:07:c6:f9:40:44:f1:17:8c:5a:14: a7:e4:1f:10:78:b8:f8:87:7e:2f:b2:bd:5e:89:f5: 90:07:35:f2:8a:34:e1:49:89:9d:1c:41:dc:30:a0: 6c:03:a3:6f:af:9a:46:c4:fe:bc:0c:88:0d:14:8d: 3a:cd:43:a0:11:39:47:75:65:c2:7e:98:73:48:ca: 3b:fb:4d:f0:a9:41:d5:27:b5:bb:41:46:11:db:53: 2b:8a:3e:80:ec:50:7c:70:15:95:29:92:a3:cf:b2: 2e:52:c2:97:03:ef:30:9f:d8:76:29:f4:3e:d2:50: 33:b9:1d:73:a8:47:7e:80:6b:07:02:71:50:23:90: 81:14:82:83:03:38:6d:a3:b4:10:b6:f6:50:a2:fb: c2:d1:4d:74:a6:c4:ec:37:58:b2:a5:a0:ac:13:bc: b0:6e:ce:aa:8c:3b:2e:41:1e:fa:d5:3f:cc:8f:bc: 84:30:9f:3c:6a:00:b7:5e:52:03:f5:ac:ac:74:42: ce:73:83:b7:c7:08:8f:23:6f:60:0e:7e:47:fc:9f: 82:4c:59:da:bf:bf:d7:4b:20:78:92:55:b2:3c:50: 1a:a2:60:ab:f1:bc:03:b5:51:12:1b:da:fd:eb:b6: 8d:6e:63:fe:13:38:b7:a7:8d:39:5f:ff:bc:df:38: 5a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FD:7B:F4:29:83:76:66:B4:86:77:E9:8D:4B:A0:3F:0D:40:62:7B X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:2c:08:ae:50:d0:ea:85:2d:94:f0:57:3c:df:b7:69:80:f7: b6:ab:b0:c1:45:10:ee:b3:94:cb:ef:b4:28:ee:5c:65:ce:49: 33:10:e3:88:84:c7:88:ab:b7:c7:55:9a:4c:b2:ff:47:04:5f: 18:7c:4a:3c:03:9f:10:1c:a6:9b:af:38:87:93:63:f7:12:4f: b6:13:5c:32:44:19:d3:40:3d:7c:e6:20:33:14:50:fc:45:a9: e1:d2:64:89:5c:c1:47:4d:39:96:cc:0f:87:2b:2d:48:84:b7: a5:cb:45:8d:db:4a:1f:76:07:a2:bc:61:53:d5:71:90:98:cc: be:7b:3c:b2:52:a2:ae:1a:7f:36:d2:7f:47:e8:43:ba:91:d6: 11:d0:96:2d:7e:e9:ab:ff:02:2b:68:7f:b2:f8:7d:10:0b:7f: 2e:89:4a:47:09:68:44:31:f5:77:b7:61:c7:c9:2a:3f:59:4b: 95:cf:ca:26:43:7b:41:21:2c:e0:17:cb:ea:28:dd:58:a4:fb: f6:ec:bb:7e:23:a6:cc:0c:47:92:7d:5d:aa:2f:28:0a:64:c4: 45:34:93:0b:a8:41:a0:07:07:36:fc:83:d6:a6:b3:03:68:a3: d5:aa:ec:21:71:2d:45:03:0f:d2:4c:7f:28:ca:a3:05:c3:e0: 38:74:da:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjUwNTMwMjMzMTMxWhcNMjUwNjA2MjMzMTMxWjAYMRYwFAYD VQQDEw02ODNhM2ZkMy1hNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumqLUwfG+UBE8ReMWhSn5B8QeLj4h34vsr1eifWQBzXyijThSYmdHEHcMKBs A6Nvr5pGxP68DIgNFI06zUOgETlHdWXCfphzSMo7+03wqUHVJ7W7QUYR21Mrij6A 7FB8cBWVKZKjz7IuUsKXA+8wn9h2KfQ+0lAzuR1zqEd+gGsHAnFQI5CBFIKDAzht o7QQtvZQovvC0U10psTsN1iypaCsE7ywbs6qjDsuQR761T/Mj7yEMJ88agC3XlID 9aysdELOc4O3xwiPI29gDn5H/J+CTFnav7/XSyB4klWyPFAaomCr8bwDtVESG9r9 67aNbmP+Ezi3p405X/+83zhaBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNn9e/Qp g3ZmtIZ36Y1LoD8NQGJ7MB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhCQy8wRTdENjRENkRGMEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9M Wk1JVTNNd0hkMEV3aC1sM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0LAiuUNDqhS2U8Fc837dpgPe2q7DBRRDus5TL77Qo7lxlzkkzEOOI hMeIq7fHVZpMsv9HBF8YfEo8A58QHKabrziHk2P3Ek+2E1wyRBnTQD185iAzFFD8 Ranh0mSJXMFHTTmWzA+HKy1IhLely0WN20ofdgeivGFT1XGQmMy+ezyyUqKuGn82 0n9H6EO6kdYR0JYtfumr/wIraH+y+H0QC38uiUpHCWhEMfV3t2HHySo/WUuVz8om Q3tBISzgF8vqKN1YpPv27Lt+I6bMDEeSfV2qLygKZMRFNJMLqEGgBwc2/IPWprMD aKPVquwhcS1FAw/STH8oyqMFw+A4dNpQ -----END CERTIFICATE-----Generated at Sat May 31 17:10:18 2025 by rpki-client