$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json) Hash identifier: 9gPZaIkq5R9v8TV0zv3Cixlp9w3CDmX9v8pMsygh59w= Subject key identifier: 7B:6C:2D:86:23:4C:67:1C:8D:F0:C4:30:4B:CE:A8:63:14:F5:8F:BE Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft Manifest number: 013E Signing time: Sat 31 May 2025 04:00:16 +0000 Manifest this update: Sat 31 May 2025 04:00:16 +0000 Manifest next update: Sat 07 Jun 2025 04:00:16 +0000 Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: 8LJxSKvu86YWycfcAsZ4hUKM8U0IXk5zryCLzKpY2Yk=) 2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: fQ0Wv2YD60Yo4ln05PtaRg2v4/R5zwKrC/7wYHWQM3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1 Validity Not Before: May 31 04:00:16 2025 GMT Not After : Jun 7 04:00:16 2025 GMT Subject: CN=683a7ed0-3503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a9:81:07:cf:92:d5:49:99:e8:cd:46:86:4f: e1:ea:fe:03:2f:e7:3f:b6:8d:29:bf:12:3f:4a:9e: a4:ad:28:a3:21:60:0d:6a:c4:67:fa:bb:9e:4e:7e: 0b:1a:2f:c3:61:58:dc:b4:c0:25:b4:a7:ad:69:ff: 41:b4:84:3f:bf:15:94:cf:8c:13:0c:67:a8:a7:a6: e4:fd:e5:0a:6c:22:58:d0:ff:dc:71:be:cf:ff:55: 8a:55:b2:ad:da:ea:38:f2:bb:02:47:6d:83:f3:04: 5b:4d:e0:58:8f:57:5a:b5:1b:49:a3:9f:6a:c9:93: f3:b6:97:fd:d0:0f:1b:39:f3:d9:c7:77:6a:aa:62: 61:a5:af:dd:c8:2b:78:8a:2c:98:54:58:e4:d8:f2: 63:4d:90:d0:de:69:39:76:c4:c5:e8:5e:ef:a1:a9: 7c:05:42:43:0e:33:90:ed:99:63:5b:09:ce:15:f2: 8e:1d:00:94:84:cc:bf:ff:71:fa:8c:79:50:75:d8: b6:7d:d5:46:fe:dc:c3:8d:b5:02:5f:b6:af:f0:5c: 47:02:cc:61:0a:c1:d9:8b:69:be:6a:c0:08:cd:4d: 83:2c:39:e9:9f:92:ca:b7:dc:31:64:44:4c:e6:ef: 5b:d6:59:0b:e8:47:62:13:93:1e:e9:55:2a:c8:95: 4c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6C:2D:86:23:4C:67:1C:8D:F0:C4:30:4B:CE:A8:63:14:F5:8F:BE X509v3 Authority Key Identifier: keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:df:53:db:fa:74:72:00:42:d9:1a:ee:8d:9a:46:47:1e:9e: f7:0b:23:e4:4a:fa:e3:0f:e1:f7:9c:e8:b0:12:d3:7f:d9:c3: 21:e3:42:e8:d8:2c:0f:98:70:c5:56:d5:c7:13:8b:b6:b0:d6: 2a:95:63:0e:7e:d8:ae:b9:13:b2:19:35:ce:5d:41:ad:84:00: 60:7a:d8:91:cc:13:cc:12:53:df:f2:3f:04:08:dd:62:69:fa: 3e:bc:31:cc:28:e1:59:87:27:b1:7f:39:39:f3:e0:fe:07:f2: bb:40:3a:f2:3b:83:ef:45:ef:28:14:37:ec:f1:32:4c:20:59: e1:06:dd:cd:64:07:e7:1b:d7:7b:1e:42:c5:49:12:d4:f5:57: 89:fd:f5:a1:d5:3e:85:1a:84:65:bd:7a:06:00:22:f6:a0:5f: ee:c5:06:6c:68:ca:ae:51:b8:dd:57:84:54:7e:3a:54:ae:a2: 7c:b3:df:58:50:03:3c:ba:89:22:15:3b:be:81:1a:6c:ab:c1: 7e:f1:16:5f:65:fc:ad:69:0f:8f:22:e5:6e:20:aa:0c:1c:4e: e1:db:16:b8:69:73:a3:52:3f:ba:14:d8:00:4a:ce:3d:09:28: d0:c1:65:24:0d:16:32:37:c9:28:6d:a4:6f:e1:da:6a:e5:9b: 86:2b:80:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFNjkxMTAvBgNVBAUTKDVEMUU2ODFGMTQ0Qzg1RTcyNjc1MjQzQTgwNDdGODA5 QzYzNEM3QzEwHhcNMjUwNTMxMDQwMDE2WhcNMjUwNjA3MDQwMDE2WjAYMRYwFAYD VQQDEw02ODNhN2VkMC0zNTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qmBB8+S1UmZ6M1Ghk/h6v4DL+c/to0pvxI/Sp6krSijIWANasRn+rueTn4L Gi/DYVjctMAltKetaf9BtIQ/vxWUz4wTDGeop6bk/eUKbCJY0P/ccb7P/1WKVbKt 2uo48rsCR22D8wRbTeBYj1datRtJo59qyZPztpf90A8bOfPZx3dqqmJhpa/dyCt4 iiyYVFjk2PJjTZDQ3mk5dsTF6F7voal8BUJDDjOQ7ZljWwnOFfKOHQCUhMy//3H6 jHlQddi2fdVG/tzDjbUCX7av8FxHAsxhCsHZi2m+asAIzU2DLDnpn5LKt9wxZERM 5u9b1lkL6EdiE5Me6VUqyJVMlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtsLYYj TGccjfDEMEvOqGMU9Y++MB8GA1UdIwQYMBaAFF0eaB8UTIXnJnUkOoBH+AnGNMfB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkU2OS9EQ0ZDQjFDMDUz N0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhlY21kU1E2Z0VmNENjWTB4 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSNW9IeFJNaGVjbWRTUTZnRWY0Q2NZMHg4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkU2OS9EQ0ZDQjFDMDUzN0ExMUVFOTBENDBCNUNDNEY5QUUwMi9YUjVvSHhSTWhl Y21kU1E2Z0VmNENjWTB4OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB831Pb+nRyAELZGu6NmkZHHp73CyPkSvrjD+H3nOiwEtN/2cMh40Lo 2CwPmHDFVtXHE4u2sNYqlWMOftiuuROyGTXOXUGthABgetiRzBPMElPf8j8ECN1i afo+vDHMKOFZhyexfzk58+D+B/K7QDryO4PvRe8oFDfs8TJMIFnhBt3NZAfnG9d7 HkLFSRLU9VeJ/fWh1T6FGoRlvXoGACL2oF/uxQZsaMquUbjdV4RUfjpUrqJ8s99Y UAM8uokiFTu+gRpsq8F+8RZfZfytaQ+PIuVuIKoMHE7h2xa4aXOjUj+6FNgASs49 CSjQwWUkDRYyN8kobaRv4dpq5ZuGK4Ca -----END CERTIFICATE-----Generated at Sat May 31 16:47:51 2025 by rpki-client