$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: eTQNwywkXZSBXsoiFPwCuV91QXczyCgweyqK5W27el0= Subject key identifier: 21:2B:B7:07:5D:95:95:9A:F5:DF:A5:7F:56:02:CD:67:9A:AB:DF:18 Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0A4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 0A41 Signing time: Fri 30 May 2025 19:55:48 +0000 Manifest this update: Fri 30 May 2025 19:55:48 +0000 Manifest next update: Fri 06 Jun 2025 19:55:48 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: hqLCA+3xqQjOXt7i1hedB1DQMv2YXtqXtqaX5cTa0v8=) 2: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: KPuYYAQ14XpM20WTZh+zfqEqRXqFeAhCtZEHNEUGMw8=) 3: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: sDoqH+F903pEZfTL5CZCahrin5P/dPEPc5OIr03Af9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2634 (0xa4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: May 30 19:55:48 2025 GMT Not After : Jun 6 19:55:48 2025 GMT Subject: CN=683a0d44-7c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:29:5d:b4:53:b0:32:89:be:cf:17:aa:25:e0: 27:da:f2:b2:68:14:27:dc:d1:f4:e2:62:e7:f4:7b: a7:89:df:01:a0:3b:a3:34:a4:58:4c:8b:ad:7a:ad: 0a:4e:3e:45:49:71:df:2d:32:10:de:13:44:a5:59: 9c:18:0b:a3:56:9d:c8:a9:a3:2e:43:63:43:3b:d5: 54:9c:c4:03:ed:7b:ab:f7:8d:32:b5:05:66:3d:67: 6a:09:f7:47:da:d4:ac:50:f5:51:e3:05:e0:6d:07: 92:df:97:0b:73:d2:61:71:ed:66:b3:19:af:a3:5f: 6c:e6:0b:df:51:ce:71:1d:7c:ad:17:bb:02:a6:53: 2b:e5:6d:2d:30:8e:7e:1e:0b:a5:99:f7:53:fb:e2: fd:c2:03:47:5a:e9:4a:d7:2c:e8:82:80:8a:29:76: 7e:24:af:41:ce:06:ef:cc:43:6d:98:96:c7:3f:f3: a9:21:8c:9b:4a:d3:2c:44:27:72:ea:2d:53:b8:5b: ef:10:b3:b6:cb:d5:7c:af:42:17:9a:98:eb:d2:8d: ed:5a:75:38:a6:30:b4:a7:72:fc:ef:7d:88:2a:d6: ff:72:52:3a:e7:f4:31:55:f8:b7:d7:b6:9e:b2:96: 33:85:94:c7:6d:41:e0:ac:d8:1a:ea:c2:49:2d:0f: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2B:B7:07:5D:95:95:9A:F5:DF:A5:7F:56:02:CD:67:9A:AB:DF:18 X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:19:37:a5:f8:7f:07:03:ea:c6:47:09:d8:3e:28:02:57:dc: bf:72:91:d2:47:f1:a8:44:53:dd:29:b2:ca:8d:e8:fe:b1:99: 4c:76:ee:93:63:d4:9d:5d:2d:2b:a2:ba:13:41:1b:c4:17:9d: 69:cb:d1:78:ff:c2:5e:e3:30:c0:7a:f9:51:bd:56:0c:84:69: 1c:87:2a:18:59:8d:62:9a:d9:f5:05:df:5e:84:8f:5a:3d:a7: f8:c1:5f:58:49:0f:97:c9:98:8b:cb:57:3e:7b:0a:a7:b7:f4: 05:6f:22:41:ea:7f:ee:eb:bb:c0:11:0f:55:9c:8b:ca:df:64: 84:41:d6:e6:d7:55:5c:8e:cd:5b:7c:17:01:a4:35:24:53:ec: 86:c4:e1:1b:ff:e9:38:71:a2:f6:e7:c4:93:b1:2e:8a:07:6a: 49:6b:28:8b:1e:e5:55:fd:5c:ac:97:63:54:1f:83:bf:dc:6c: e3:0d:32:84:55:8e:b8:16:d1:95:d6:8e:c4:70:4b:9a:41:30: d0:69:5f:f1:ba:e5:e2:39:1e:9b:76:98:c5:4b:c3:9c:8e:18: 7e:9e:43:09:4d:9c:4e:38:94:c1:4a:bc:20:68:fc:dd:4c:23: 93:1d:96:b4:86:ee:06:d7:db:62:ac:e4:7f:45:f4:c8:25:dc: b4:4e:b2:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjUwNTMwMTk1NTQ4WhcNMjUwNjA2MTk1NTQ4WjAYMRYwFAYD VQQDEw02ODNhMGQ0NC03YzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SldtFOwMom+zxeqJeAn2vKyaBQn3NH04mLn9Hunid8BoDujNKRYTIuteq0K Tj5FSXHfLTIQ3hNEpVmcGAujVp3IqaMuQ2NDO9VUnMQD7Xur940ytQVmPWdqCfdH 2tSsUPVR4wXgbQeS35cLc9Jhce1msxmvo19s5gvfUc5xHXytF7sCplMr5W0tMI5+ HgulmfdT++L9wgNHWulK1yzogoCKKXZ+JK9BzgbvzENtmJbHP/OpIYybStMsRCdy 6i1TuFvvELO2y9V8r0IXmpjr0o3tWnU4pjC0p3L8732IKtb/clI65/QxVfi317ae spYzhZTHbUHgrNga6sJJLQ8HAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCErtwdd lZWa9d+lf1YCzWeaq98YMB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnGTel+H8HA+rGRwnYPigCV9y/cpHSR/GoRFPdKbLKjej+sZlMdu6T Y9SdXS0roroTQRvEF51py9F4/8Je4zDAevlRvVYMhGkchyoYWY1imtn1Bd9ehI9a Paf4wV9YSQ+XyZiLy1c+ewqnt/QFbyJB6n/u67vAEQ9VnIvK32SEQdbm11Vcjs1b fBcBpDUkU+yGxOEb/+k4caL258STsS6KB2pJayiLHuVV/Vysl2NUH4O/3GzjDTKE VY64FtGV1o7EcEuaQTDQaV/xuuXiOR6bdpjFS8Ocjhh+nkMJTZxOOJTBSrwgaPzd TCOTHZa0hu4G19tirOR/RfTIJdy0TrJy -----END CERTIFICATE-----Generated at Sat May 31 17:42:33 2025 by rpki-client