$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft File: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json) Hash identifier: pw7r5zz9QUbGEpqi7DkdhM7sffS82v99rpg3moiT+jM= Subject key identifier: 55:B0:02:4C:1C:35:0A:77:09:B2:EC:57:59:05:DC:90:87:ED:0C:1A Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft Manifest number: 0635 Signing time: Fri 30 May 2025 22:54:04 +0000 Manifest this update: Fri 30 May 2025 22:54:04 +0000 Manifest next update: Fri 06 Jun 2025 22:54:04 +0000 Files and hashes: 1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: lYWjZ8re0atRjVY1huwc0+Sjgm/NxnkmjGtTpQoL+1I=) 2: 6E1BCBC495BD11EB89199F37C4F9AE02.roa (hash: 6VtKNEIG9FeALH3s40nNCwARNeebdE67fF6D4UlnLsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B Validity Not Before: May 30 22:54:04 2025 GMT Not After : Jun 6 22:54:04 2025 GMT Subject: CN=683a370c-2244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:69:54:be:28:db:cb:57:8c:c5:b7:4b:ba: ac:23:e2:e8:f6:46:d9:39:d6:8e:86:96:2b:49:0b: 18:f7:de:34:9b:ba:fe:68:0a:b5:01:a2:30:aa:ca: 2a:45:1c:60:a3:d3:80:33:26:08:d3:fe:38:b1:a8: f5:fb:4c:b7:67:c9:1f:47:5e:3f:4c:8f:99:07:95: 9d:b5:1f:7c:4e:63:23:bc:d3:cb:79:c4:59:6a:6b: b2:db:7e:87:d7:c7:47:a2:e8:69:37:ee:5b:da:de: d3:cb:74:72:36:88:78:ee:ad:3f:ae:c1:87:a6:6d: 04:5b:a6:38:37:cb:7f:9b:d7:05:6e:29:3a:3f:80: ba:4f:2f:51:2a:c5:2b:ac:2d:85:10:fa:86:45:06: bf:1a:f3:35:3c:2a:5d:fa:e3:87:c4:a3:b5:5c:94: 4d:95:08:68:ff:31:42:ea:2b:f1:ed:21:64:23:74: 6e:29:91:85:69:bd:f4:1c:fe:df:b6:e8:f5:3d:40: 64:3e:bf:7a:47:83:2a:ce:39:61:db:45:55:8a:19: 6f:97:06:fa:51:51:f5:bc:62:23:f6:53:c4:ba:0c: 8b:30:c6:05:89:54:25:59:4f:bf:4c:cb:1f:e0:1b: b7:58:57:13:33:f8:73:3a:36:17:16:82:12:9b:49: 10:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B0:02:4C:1C:35:0A:77:09:B2:EC:57:59:05:DC:90:87:ED:0C:1A X509v3 Authority Key Identifier: keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:8c:cc:f2:aa:ae:88:ce:ea:98:62:4b:96:83:7e:e7:6e:78: 29:48:a0:35:c7:6d:d4:fc:1d:97:00:db:48:b7:ec:0c:21:ce: ee:9e:8e:b6:f8:8b:e9:11:3c:dd:f9:60:5f:42:b8:0d:2a:19: 3a:1f:3d:e8:de:a8:a2:ba:07:1a:53:ed:03:09:e9:27:6e:26: bb:62:e5:fa:61:d9:9d:51:ad:54:5b:f8:54:35:37:58:d1:f4: 87:4b:37:06:fe:f1:e0:77:d0:a6:5f:1a:3a:02:ce:56:09:9b: 9c:75:a9:38:8e:be:2a:a2:5e:dd:0b:2c:0d:47:a5:70:38:1e: d6:87:3c:ec:4d:3b:b5:d6:ba:0a:24:ba:ac:36:5a:db:16:c2: 83:a2:18:42:6d:a5:90:dc:04:86:6f:df:f6:92:be:bf:e2:cf: 1a:a9:19:53:4f:6a:2b:68:ff:d4:d0:f2:62:01:bf:74:07:5d: c5:59:bc:19:c9:7a:40:7b:ef:9c:c2:4e:7c:15:f0:df:fc:78: b0:ae:25:ec:56:1b:de:29:f4:24:c3:7e:69:0f:8f:87:5f:2e: 7e:94:d1:63:21:63:2d:3c:91:92:5c:cf:dd:0e:e1:d8:ba:7f: c0:74:73:ce:75:99:bd:41:f8:97:50:e3:d9:e4:49:ad:3d:75: f4:c8:ff:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJBNEUxMTAvBgNVBAUTKDdENzNFRjExNUIwMkM1RTAxMDIzODQ3QTkxQjBCMEYw NzhCNUYwMkIwHhcNMjUwNTMwMjI1NDA0WhcNMjUwNjA2MjI1NDA0WjAYMRYwFAYD VQQDEw02ODNhMzcwYy0yMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsudpVL4o28tXjMW3S7qsI+Lo9kbZOdaOhpYrSQsY9940m7r+aAq1AaIwqsoq RRxgo9OAMyYI0/44saj1+0y3Z8kfR14/TI+ZB5WdtR98TmMjvNPLecRZamuy236H 18dHouhpN+5b2t7Ty3RyNoh47q0/rsGHpm0EW6Y4N8t/m9cFbik6P4C6Ty9RKsUr rC2FEPqGRQa/GvM1PCpd+uOHxKO1XJRNlQho/zFC6ivx7SFkI3RuKZGFab30HP7f tuj1PUBkPr96R4Mqzjlh20VVihlvlwb6UVH1vGIj9lPEugyLMMYFiVQlWU+/TMsf 4Bu3WFcTM/hzOjYXFoISm0kQhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWwAkwc NQp3CbLsV1kF3JCH7QwaMB8GA1UdIwQYMBaAFH1z7xFbAsXgECOEepGwsPB4tfAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkE0RS9FM0UwODQ2NDk1 QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hlQVFJNFI2a2JDdzhIaTE4 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZYUHZFVnNDeGVBUUk0UjZrYkN3OEhpMThDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkE0RS9FM0UwODQ2NDk1QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hl QVFJNFI2a2JDdzhIaTE4Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEjMzyqq6IzuqYYkuWg37nbngpSKA1x23U/B2XANtIt+wMIc7uno62 +IvpETzd+WBfQrgNKhk6Hz3o3qiiugcaU+0DCeknbia7YuX6YdmdUa1UW/hUNTdY 0fSHSzcG/vHgd9CmXxo6As5WCZucdak4jr4qol7dCywNR6VwOB7WhzzsTTu11roK JLqsNlrbFsKDohhCbaWQ3ASGb9/2kr6/4s8aqRlTT2oraP/U0PJiAb90B13FWbwZ yXpAe++cwk58FfDf/HiwriXsVhveKfQkw35pD4+HXy5+lNFjIWMtPJGSXM/dDuHY un/AdHPOdZm9QfiXUOPZ5EmtPXX0yP/4 -----END CERTIFICATE-----Generated at Sat May 31 16:45:40 2025 by rpki-client