$ rpki-client -vvf rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft File: 5HXUQnchUazw-uprObkBK9Ij05M.mft (raw, json) Hash identifier: 8d2GCUvVmA05orU2cti43I3JBZLq/7htMWqI8oqTuvM= Subject key identifier: 0F:D8:C3:98:29:9C:AE:29:28:B7:FB:28:5E:BA:70:18:25:B5:F7:B5 Authority key identifier: E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93 Certificate issuer: /CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft Manifest number: 0120 Signing time: Sat 31 May 2025 04:22:08 +0000 Manifest this update: Sat 31 May 2025 04:22:07 +0000 Manifest next update: Sat 07 Jun 2025 04:22:07 +0000 Files and hashes: 1: 5HXUQnchUazw-uprObkBK9Ij05M.crl (hash: HyS0/6boQ+vLPWbLsSjlA6WYumWCya5MUQkEA5MUKT8=) 2: 2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa (hash: KgQSXjT0/AcvVs+PHWWF/UPrCiIk9MVvntWwSCiQouc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912809D, serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393 Validity Not Before: May 31 04:22:07 2025 GMT Not After : Jun 7 04:22:07 2025 GMT Subject: CN=683a83f0-e2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2c:1d:c4:81:93:0b:2d:c5:92:4f:cf:4c:3c: fb:be:44:68:c0:11:4e:bf:17:2b:32:54:71:f9:33: 3a:60:e5:bc:7e:b8:2c:24:fe:64:43:8f:79:50:69: 57:43:38:40:7e:df:5d:6f:76:9d:c6:01:99:9e:ca: ad:30:23:f0:cd:51:92:b4:44:d8:e4:05:3f:64:3d: bc:c5:90:57:23:c6:4c:55:eb:d0:cd:88:0b:9e:8a: bd:d6:84:2e:13:bc:0b:7a:99:f4:3b:e2:79:a9:e7: 22:29:6e:84:bc:60:e2:67:80:b7:1c:18:1a:05:73: f6:c5:ad:24:94:61:f4:80:b3:ba:05:27:8c:39:9a: dd:00:6e:e6:ea:29:48:04:bc:99:b6:40:10:3a:f1: af:71:e2:7e:94:db:b9:e5:d9:3e:c0:aa:53:49:d4: 3c:eb:76:a0:56:1d:1b:e2:db:79:74:ae:d1:78:08: cd:e2:52:cc:72:f3:d4:32:4a:6a:fb:ff:01:0e:3a: d7:45:88:0b:d7:ff:aa:58:79:7e:d3:56:ef:c0:f7: 04:19:c2:e7:57:ef:b9:be:01:9d:50:30:19:da:8b: 48:68:12:7d:28:1b:32:7d:7b:df:bf:88:90:b8:c6: 48:3a:8f:47:a5:32:6a:0c:65:af:3e:f2:1d:ef:a2: 8b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D8:C3:98:29:9C:AE:29:28:B7:FB:28:5E:BA:70:18:25:B5:F7:B5 X509v3 Authority Key Identifier: keyid:E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:32:70:eb:11:6b:75:65:61:a3:9b:8a:77:3f:1c:f2:b8:f0: 61:79:eb:2d:75:4a:65:76:d8:70:5a:ab:40:88:a5:74:92:fa: a0:34:cd:a6:2c:7b:b3:0e:01:b9:ad:d4:ce:15:8a:f7:47:45: d1:b4:b1:3f:a1:5c:2f:db:f2:74:22:c5:5e:1d:1d:fd:4f:7f: 65:e8:dc:48:60:63:68:76:71:99:c1:ab:67:96:ab:b0:d7:2a: e1:d4:92:51:0a:d9:56:ec:b1:4d:c1:c9:37:bb:4d:bf:7f:3f: f0:ca:8a:2f:99:76:4e:a6:b6:b0:8b:0a:b9:0b:ae:5f:93:b3: 37:30:86:3d:f8:06:d7:93:57:9a:d2:53:0a:8c:29:3b:27:32: 80:45:ec:58:e1:71:df:34:5f:34:c6:11:bc:cc:67:ab:f0:6c: fe:4e:19:55:54:f2:05:23:dc:d6:69:16:d2:ec:24:1b:df:4c: 12:21:b8:83:31:52:73:40:8f:10:6b:17:09:30:58:ce:31:a0: 19:3a:6f:ba:01:81:9a:63:48:eb:7b:e0:21:f4:f1:6b:10:f2: c3:d6:36:16:94:f3:de:fd:1f:68:04:1d:33:db:d7:98:30:e3: b6:f4:10:32:0f:4a:88:65:b0:14:1a:e9:fe:30:2b:3a:20:73: c5:7c:b6:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwOUQxMTAvBgNVBAUTKEU0NzVENDQyNzcyMTUxQUNGMEZBRUE2QjM5QjkwMTJC RDIyM0QzOTMwHhcNMjUwNTMxMDQyMjA3WhcNMjUwNjA3MDQyMjA3WjAYMRYwFAYD VQQDEw02ODNhODNmMC1lMmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziwdxIGTCy3Fkk/PTDz7vkRowBFOvxcrMlRx+TM6YOW8frgsJP5kQ495UGlX QzhAft9db3adxgGZnsqtMCPwzVGStETY5AU/ZD28xZBXI8ZMVevQzYgLnoq91oQu E7wLepn0O+J5qeciKW6EvGDiZ4C3HBgaBXP2xa0klGH0gLO6BSeMOZrdAG7m6ilI BLyZtkAQOvGvceJ+lNu55dk+wKpTSdQ863agVh0b4tt5dK7ReAjN4lLMcvPUMkpq +/8BDjrXRYgL1/+qWHl+01bvwPcEGcLnV++5vgGdUDAZ2otIaBJ9KBsyfXvfv4iQ uMZIOo9HpTJqDGWvPvId76KLtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/Yw5gp nK4pKLf7KF66cBgltfe1MB8GA1UdIwQYMBaAFOR11EJ3IVGs8Prqazm5ASvSI9OT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA5RC8wMUZBQzk4QTg0 RjkxMUVFQTc1QzJGMzlDNEY5QUUwMi81SFhVUW5jaFVhenctdXByT2JrQks5SWow NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIWFVRbmNoVWF6dy11cHJPYmtCSzlJajA1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODA5RC8wMUZBQzk4QTg0RjkxMUVFQTc1QzJGMzlDNEY5QUUwMi81SFhVUW5jaFVh enctdXByT2JrQks5SWowNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlMnDrEWt1ZWGjm4p3PxzyuPBheestdUpldthwWqtAiKV0kvqgNM2m LHuzDgG5rdTOFYr3R0XRtLE/oVwv2/J0IsVeHR39T39l6NxIYGNodnGZwatnlquw 1yrh1JJRCtlW7LFNwck3u02/fz/wyoovmXZOprawiwq5C65fk7M3MIY9+AbXk1ea 0lMKjCk7JzKARexY4XHfNF80xhG8zGer8Gz+ThlVVPIFI9zWaRbS7CQb30wSIbiD MVJzQI8QaxcJMFjOMaAZOm+6AYGaY0jre+Ah9PFrEPLD1jYWlPPe/R9oBB0z29eY MOO29BAyD0qIZbAUGun+MCs6IHPFfLYs -----END CERTIFICATE-----Generated at Sat May 31 17:03:30 2025 by rpki-client