$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft File: XLz7z59AY6eYAiqPHiafvf6jb_g.mft (raw, json) Hash identifier: EalvOcMbdk87HI8xyvJLNjALtR4InF05N0RNSSLVBi0= Subject key identifier: B4:9A:1C:07:C9:34:1C:44:B8:EE:8E:DE:61:76:55:80:06:65:F7:6A Authority key identifier: 5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 Certificate issuer: /CN=A917F4F2/serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Certificate serial: 02ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft Manifest number: 02E9 Signing time: Sat 31 May 2025 01:30:32 +0000 Manifest this update: Sat 31 May 2025 01:30:31 +0000 Manifest next update: Sat 07 Jun 2025 01:30:31 +0000 Files and hashes: 1: XLz7z59AY6eYAiqPHiafvf6jb_g.crl (hash: AXYl5yeUeWqPARWgUemLkhzBbHQgvD0nJH31PIrnFeo=) 2: CA455C5CE0B311ECBC9BEA63C4F9AE02.roa (hash: +ZSBEXRcgClmiO74ln8lB46inGp0vsN6jKOzaxEdX6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 749 (0x2ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4F2, serialNumber=5CBCFBCF9F4063A798022A8F1E269FBDFEA36FF8 Validity Not Before: May 31 01:30:31 2025 GMT Not After : Jun 7 01:30:31 2025 GMT Subject: CN=683a5bb7-b41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0d:18:0f:4d:72:2a:3f:6f:d0:a5:b5:fc:b8: fb:40:0e:9d:35:97:5b:20:19:1e:cf:17:c0:7c:b4: 17:79:14:35:a2:5e:d9:3f:2d:14:6f:ba:0b:bb:b2: 49:09:65:a7:e5:43:15:ff:a2:a1:b5:b4:42:47:18: 73:4e:9b:37:32:7c:05:d0:df:12:a2:f6:d8:d2:b4: c3:e4:f7:d6:40:2f:7e:10:f8:97:ad:79:12:14:d3: e5:b0:42:f4:dc:31:20:78:32:7c:69:0b:fb:27:f0: 3d:89:5a:1d:2f:cd:35:9a:c7:7c:02:7f:a9:18:b5: 34:4d:7b:df:b5:8d:c2:5e:7a:8c:a4:d5:1d:70:a8: 2f:c4:d6:b1:cd:84:98:be:15:8b:fb:74:2e:d0:ae: bd:74:96:e2:9b:49:2b:72:0b:a0:73:ef:cc:c7:f7: 64:d4:99:1a:ac:c5:45:26:11:05:1a:61:ef:65:36: 30:e9:10:cd:69:55:b2:98:c7:60:52:a5:ec:3d:4c: ab:d6:99:16:39:41:f7:e7:6a:dc:e3:e5:a1:2c:d7: f9:4c:62:96:91:10:9e:13:80:7a:31:5a:73:97:b0: 6b:fc:ee:46:86:cb:9e:6d:5a:8b:9c:fe:4d:a4:fc: 78:14:3b:86:9e:9f:5e:f7:b0:c2:ef:39:80:7e:c6: a9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:9A:1C:07:C9:34:1C:44:B8:EE:8E:DE:61:76:55:80:06:65:F7:6A X509v3 Authority Key Identifier: keyid:5C:BC:FB:CF:9F:40:63:A7:98:02:2A:8F:1E:26:9F:BD:FE:A3:6F:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XLz7z59AY6eYAiqPHiafvf6jb_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4F2/34D55432E0AF11EC82902F6DC4F9AE02/XLz7z59AY6eYAiqPHiafvf6jb_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:9c:91:63:13:7d:a7:0e:b8:93:e7:89:40:35:67:07:95:5b: 0f:ef:5c:59:7a:30:5d:60:74:cb:f4:aa:ed:c1:fe:bc:2d:e0: c5:5f:c7:5c:69:9e:2f:af:ae:98:78:44:59:c7:93:ad:9c:9e: f8:3a:64:f8:df:0a:70:65:07:8d:06:d4:35:31:35:38:07:94: 1d:0a:79:73:d6:0c:e4:91:8a:bb:21:4d:57:c3:2a:79:c7:ee: d1:68:88:82:73:72:cb:8e:8b:d1:18:4c:fc:d4:1b:38:7b:59: ab:f8:ee:e6:9c:2d:24:fa:19:cf:20:57:e9:6e:d6:d1:a7:0b: f3:34:ff:89:94:4a:3d:b1:2f:03:ea:ee:38:43:00:ff:38:4c: 89:48:6e:a2:d6:7c:95:68:6e:98:89:60:76:e4:18:4d:27:2a: 4e:37:8e:7a:b2:b3:f2:18:c4:5a:03:3a:1c:78:db:88:4d:b2: e2:73:6d:9c:8c:1c:ae:1c:7e:1a:8c:11:4a:91:3d:d3:40:d3: 6a:ea:2a:52:1c:9f:fa:2b:f5:c0:69:c8:42:59:64:2a:15:f3: a8:a9:4b:97:71:64:c2:b9:ee:85:ab:89:cb:23:0d:f4:e7:bd: 4f:c8:44:e0:86:ab:4c:25:47:56:11:23:82:0e:73:9a:a1:3a: f5:82:31:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RjIxMTAvBgNVBAUTKDVDQkNGQkNGOUY0MDYzQTc5ODAyMkE4RjFFMjY5RkJE RkVBMzZGRjgwHhcNMjUwNTMxMDEzMDMxWhcNMjUwNjA3MDEzMDMxWjAYMRYwFAYD VQQDEw02ODNhNWJiNy1iNDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuA0YD01yKj9v0KW1/Lj7QA6dNZdbIBkezxfAfLQXeRQ1ol7ZPy0Ub7oLu7JJ CWWn5UMV/6KhtbRCRxhzTps3MnwF0N8SovbY0rTD5PfWQC9+EPiXrXkSFNPlsEL0 3DEgeDJ8aQv7J/A9iVodL801msd8An+pGLU0TXvftY3CXnqMpNUdcKgvxNaxzYSY vhWL+3Qu0K69dJbim0krcgugc+/Mx/dk1JkarMVFJhEFGmHvZTYw6RDNaVWymMdg UqXsPUyr1pkWOUH352rc4+WhLNf5TGKWkRCeE4B6MVpzl7Br/O5GhsuebVqLnP5N pPx4FDuGnp9e97DC7zmAfsapVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSaHAfJ NBxEuO6O3mF2VYAGZfdqMB8GA1UdIwQYMBaAFFy8+8+fQGOnmAIqjx4mn73+o2/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjRGMi8zNEQ1NTQzMkUw QUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2ZVlBaXFQSGlhZnZmNmpi X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hMejd6NTlBWTZlWUFpcVBIaWFmdmY2amJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjRGMi8zNEQ1NTQzMkUwQUYxMUVDODI5MDJGNkRDNEY5QUUwMi9YTHo3ejU5QVk2 ZVlBaXFQSGlhZnZmNmpiX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6nJFjE32nDriT54lANWcHlVsP71xZejBdYHTL9Krtwf68LeDFX8dc aZ4vr66YeERZx5OtnJ74OmT43wpwZQeNBtQ1MTU4B5QdCnlz1gzkkYq7IU1Xwyp5 x+7RaIiCc3LLjovRGEz81Bs4e1mr+O7mnC0k+hnPIFfpbtbRpwvzNP+JlEo9sS8D 6u44QwD/OEyJSG6i1nyVaG6YiWB25BhNJypON456srPyGMRaAzoceNuITbLic22c jByuHH4ajBFKkT3TQNNq6ipSHJ/6K/XAachCWWQqFfOoqUuXcWTCue6Fq4nLIw30 571PyETghqtMJUdWESOCDnOaoTr1gjEw -----END CERTIFICATE-----Generated at Sat May 31 15:55:06 2025 by rpki-client