$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft File: XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json) Hash identifier: iHD/WffeUEgtXCT+9XOqKCrizqFIz5mepa/Mz2taoK8= Subject key identifier: 22:83:99:27:8C:57:0C:96:BB:47:47:2B:60:E7:4A:5F:55:17:F6:D6 Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC Certificate issuer: /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Certificate serial: 027E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft Manifest number: 027A Signing time: Sat 31 May 2025 01:52:22 +0000 Manifest this update: Sat 31 May 2025 01:52:22 +0000 Manifest next update: Sat 07 Jun 2025 01:52:22 +0000 Files and hashes: 1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: nfR39VG3qG7fHJoRk6RInarUE9zgEuoCPz2iu2PUlig=) 2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: 7VxNMjQG1zgfT4tsEQfcFuOpbFyf2w1++cKzRTPQB1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 638 (0x27e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC Validity Not Before: May 31 01:52:22 2025 GMT Not After : Jun 7 01:52:22 2025 GMT Subject: CN=683a60d6-d087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:af:03:8e:51:bd:b3:09:4f:1e:3e:f0:94:fe: e1:31:43:e4:76:2e:4c:8d:44:5e:32:3a:a6:fc:43: ef:a4:d4:eb:b4:f6:06:53:12:cc:55:9e:0b:56:4d: 04:12:b7:e5:b4:85:e3:50:52:af:04:26:4a:46:ba: 04:5c:ce:37:95:2d:f0:8a:63:75:fb:26:ef:29:cf: 94:de:43:bb:fa:81:ae:ab:6c:e5:7d:04:ba:b4:ce: 7e:a7:ce:a1:35:19:dc:f7:ae:27:0b:be:5b:50:02: b9:b5:e5:41:4e:ea:b6:27:9c:fa:3e:ac:fe:4a:cf: 8e:93:c0:33:fa:f4:12:b0:07:ba:17:9a:93:fd:1a: d3:68:d2:c0:78:93:d6:ac:f2:1d:71:d3:e2:ba:b5: 65:68:05:59:93:86:8f:cc:ef:72:4d:93:f2:6b:29: a4:b9:da:eb:64:09:8e:5c:76:de:fb:6a:49:3d:c8: 00:0e:3e:55:ba:2b:08:bb:6f:fa:3f:a9:8d:6a:ea: b1:63:2d:59:9a:c4:ee:8a:35:12:e2:04:6b:7f:96: 7d:19:2c:f1:49:f9:1b:9d:1d:14:91:9d:be:fc:3f: 9a:12:36:d0:20:3a:4c:d2:c2:e0:c4:71:73:85:90: 73:06:1c:86:5e:b2:8d:25:c4:88:2a:61:9f:74:d1: 82:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:83:99:27:8C:57:0C:96:BB:47:47:2B:60:E7:4A:5F:55:17:F6:D6 X509v3 Authority Key Identifier: keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:1c:92:a2:bc:9f:2a:72:37:b6:e5:74:48:08:91:9d:a2:e2: df:c3:28:3b:4a:c7:ae:a5:57:bf:12:0b:18:31:e8:f4:aa:6e: a1:df:83:44:d6:bf:92:88:a0:9e:e3:72:a7:a9:a0:d5:24:7b: 61:aa:81:21:f6:75:06:0c:57:cb:9b:8b:ac:28:7a:46:76:34: ab:d9:c0:80:4f:41:b6:82:23:f4:9d:0b:f5:1b:6c:3d:a2:20: 78:ca:00:7a:90:f9:5c:8a:0b:9f:57:08:20:01:b6:34:0b:96: d9:27:40:6c:62:88:72:36:74:49:e9:db:b0:d3:5b:48:da:d1: fd:fa:03:fa:15:81:25:d3:2d:b9:59:14:2d:b8:da:ea:6a:0f: 84:df:bd:4b:e6:48:57:b3:a9:a2:ee:41:6f:76:a7:c6:80:1b: 66:57:29:38:6a:e1:48:d2:de:ef:dd:95:7c:00:17:65:33:12: ab:01:33:2c:f6:0d:e4:fe:84:10:d8:d0:06:c3:53:a1:67:9a: 1e:27:b2:fc:08:5c:8d:d4:cb:49:e0:82:04:c6:e3:9d:3a:72: 76:f8:b5:19:46:b4:f6:1d:1a:20:57:51:0b:96:0e:1d:9e:bf: 6d:f3:71:c9:54:a7:61:9d:c7:cc:92:04:d3:39:df:1b:64:cb: 7e:22:d5:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1OUUxMTAvBgNVBAUTKDVFNzNFREQ5NkZGMjdBODg1RjYxMzU2RUE3N0IxRjU0 MzVDODRGQ0MwHhcNMjUwNTMxMDE1MjIyWhcNMjUwNjA3MDE1MjIyWjAYMRYwFAYD VQQDEw02ODNhNjBkNi1kMDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6a8DjlG9swlPHj7wlP7hMUPkdi5MjUReMjqm/EPvpNTrtPYGUxLMVZ4LVk0E ErfltIXjUFKvBCZKRroEXM43lS3wimN1+ybvKc+U3kO7+oGuq2zlfQS6tM5+p86h NRnc964nC75bUAK5teVBTuq2J5z6Pqz+Ss+Ok8Az+vQSsAe6F5qT/RrTaNLAeJPW rPIdcdPiurVlaAVZk4aPzO9yTZPyaymkudrrZAmOXHbe+2pJPcgADj5VuisIu2/6 P6mNauqxYy1ZmsTuijUS4gRrf5Z9GSzxSfkbnR0UkZ2+/D+aEjbQIDpM0sLgxHFz hZBzBhyGXrKNJcSIKmGfdNGC6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKDmSeM VwyWu0dHK2DnSl9VF/bWMB8GA1UdIwQYMBaAFF5z7dlv8nqIX2E1bqd7H1Q1yE/M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU5RS9DQjBFQTc3NjBD Q0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVvaGZZVFZ1cDNzZlZEWElU OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huUHQyV195ZW9oZllUVnVwM3NmVkRYSVQ4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzU5RS9DQjBFQTc3NjBDQ0IxMUVEOUU3MjIzNjlDNEY5QUUwMi9YblB0MldfeWVv aGZZVFZ1cDNzZlZEWElUOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4HJKivJ8qcje25XRICJGdouLfwyg7SseupVe/EgsYMej0qm6h34NE 1r+SiKCe43KnqaDVJHthqoEh9nUGDFfLm4usKHpGdjSr2cCAT0G2giP0nQv1G2w9 oiB4ygB6kPlcigufVwggAbY0C5bZJ0BsYohyNnRJ6duw01tI2tH9+gP6FYEl0y25 WRQtuNrqag+E371L5khXs6mi7kFvdqfGgBtmVyk4auFI0t7v3ZV8ABdlMxKrATMs 9g3k/oQQ2NAGw1OhZ5oeJ7L8CFyN1MtJ4IIExuOdOnJ2+LUZRrT2HRogV1ELlg4d nr9t83HJVKdhncfMkgTTOd8bZMt+ItWJ -----END CERTIFICATE-----Generated at Sat May 31 17:58:47 2025 by rpki-client