$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft File: X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json) Hash identifier: g5v3EozDUu2d9dFFW+thNqoLlMYPf/jWJp/9SmLlKZA= Subject key identifier: 4A:8F:33:50:A0:0F:B0:B2:CD:27:FC:D5:51:CA:1A:1A:F5:75:20:EA Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE Certificate issuer: /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft Manifest number: 01B4 Signing time: Sat 31 May 2025 02:50:56 +0000 Manifest this update: Sat 31 May 2025 02:50:55 +0000 Manifest next update: Sat 07 Jun 2025 02:50:55 +0000 Files and hashes: 1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: r1pvkNVYKv8fl/pdDRkDhB2HSU5dGDWRfhjxmqJJRuY=) 2: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: 9FynllD8H+NI8HSEXg9Jjmq002CiTaGo7ZssucPUw/c=) 3: 6A9D79ECD6E311EE94842842C4F9AE02.roa (hash: pf/aq5LQ2SyN9nQK//wVXk1HeFtnOQFOhE/br9mZqh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A51B, serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE Validity Not Before: May 31 02:50:55 2025 GMT Not After : Jun 7 02:50:55 2025 GMT Subject: CN=683a6e90-ae7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6e:74:ac:91:c1:50:9e:93:67:87:d9:71:21: 78:c1:bc:f9:5c:8d:2e:9a:01:65:fa:71:86:2e:2c: 69:8f:49:49:26:a7:76:c0:34:10:2c:8e:cc:a0:1c: 88:21:cb:3c:74:42:da:c1:a6:0e:14:87:13:e5:4e: 6b:46:f8:8e:31:29:de:5a:c7:52:6b:c4:a1:e6:36: c0:b7:af:37:8b:64:13:3e:ec:70:8a:38:ee:7f:5a: 9e:a5:68:cf:e9:b4:ab:2f:0b:9b:d4:21:14:56:1f: ce:88:ec:0f:54:61:55:13:28:bd:19:aa:a2:74:03: 65:44:f2:41:fe:21:e9:ae:97:44:89:d2:68:77:61: 64:27:cf:04:e1:2f:8e:75:6a:e2:56:32:a9:93:e0: e3:e1:13:56:a3:88:1e:26:48:00:48:40:8b:50:6b: e7:67:21:52:12:02:ea:e9:f8:4e:ed:80:df:ad:4e: 3e:18:eb:c2:ea:bc:9d:5e:a4:cc:e5:3b:84:ef:7e: e9:4f:2d:5c:93:bc:5e:4d:4d:f7:7f:26:0f:cf:84: be:c4:cc:d8:ea:66:58:4e:0f:f9:d7:cc:48:e1:21: d5:19:9e:d8:94:22:bd:6a:ee:40:97:65:c4:b4:26: 10:2d:e0:fb:0c:29:29:33:68:9a:99:1d:01:92:e2: 5d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8F:33:50:A0:0F:B0:B2:CD:27:FC:D5:51:CA:1A:1A:F5:75:20:EA X509v3 Authority Key Identifier: keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cc:76:7e:58:d8:65:03:2c:88:da:ac:90:4d:53:d3:11:32: 07:97:75:45:2d:fb:38:20:04:5f:b8:ce:58:39:47:ba:8a:ff: 2a:ae:eb:64:02:0e:3b:24:0d:6a:af:74:39:e2:5f:a4:19:7c: 6a:47:af:f5:71:d4:c6:c9:98:8d:73:f1:dc:ac:1c:ec:c8:b3: 88:b7:6a:3f:99:85:b4:ae:cb:65:1e:31:74:7d:aa:b0:ab:ed: 35:e8:5d:83:fe:ce:72:8a:a8:46:87:b5:10:30:d0:39:93:7b: 1b:14:a6:ba:d8:58:55:d8:10:ef:49:6b:f6:39:49:3c:d0:d8: 5d:ac:68:dd:ae:db:05:59:19:ce:55:03:f8:0c:d2:b3:8d:91: 98:db:4c:fd:43:66:45:66:15:af:1b:a4:87:b0:12:7f:d6:a2: 7b:eb:b8:05:e9:9c:fb:cc:c5:1b:24:a4:c4:c6:e9:bc:19:a4: 25:e0:f5:b3:56:27:5c:e3:34:9f:6b:61:72:46:df:42:67:af: 84:86:e7:61:b1:ab:a7:aa:80:ab:72:e3:84:95:1a:2f:08:37: cc:2d:c9:be:fd:75:86:2c:16:44:1d:b6:16:2f:eb:71:ff:58: 1d:41:18:9e:b4:c9:6c:64:70:4e:c4:2f:3a:09:ea:1b:b4:ff: 5b:a4:07:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1MUIxMTAvBgNVBAUTKDVGRTA0Qzk1N0E2Q0JDNTQwQTM0RjQ1M0QxM0UzRjgw NTBDOEY0RUUwHhcNMjUwNTMxMDI1MDU1WhcNMjUwNjA3MDI1MDU1WjAYMRYwFAYD VQQDEw02ODNhNmU5MC1hZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4W50rJHBUJ6TZ4fZcSF4wbz5XI0umgFl+nGGLixpj0lJJqd2wDQQLI7MoByI Ics8dELawaYOFIcT5U5rRviOMSneWsdSa8Sh5jbAt683i2QTPuxwijjuf1qepWjP 6bSrLwub1CEUVh/OiOwPVGFVEyi9GaqidANlRPJB/iHprpdEidJod2FkJ88E4S+O dWriVjKpk+Dj4RNWo4geJkgASECLUGvnZyFSEgLq6fhO7YDfrU4+GOvC6rydXqTM 5TuE737pTy1ck7xeTU33fyYPz4S+xMzY6mZYTg/518xI4SHVGZ7YlCK9au5Al2XE tCYQLeD7DCkpM2iamR0BkuJdLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqPM1Cg D7CyzSf81VHKGhr1dSDqMB8GA1UdIwQYMBaAFF/gTJV6bLxUCjT0U9E+P4BQyPTu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTUxQi8wMENBOThGMkEx QTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZGUUtOUFJUMFQ0X2dGREk5 TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtQk1sWHBzdkZRS05QUlQwVDRfZ0ZESTlPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTUxQi8wMENBOThGMkExQTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZG UUtOUFJUMFQ0X2dGREk5TzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMzHZ+WNhlAyyI2qyQTVPTETIHl3VFLfs4IARfuM5YOUe6iv8qrutk Ag47JA1qr3Q54l+kGXxqR6/1cdTGyZiNc/HcrBzsyLOIt2o/mYW0rstlHjF0faqw q+016F2D/s5yiqhGh7UQMNA5k3sbFKa62FhV2BDvSWv2OUk80NhdrGjdrtsFWRnO VQP4DNKzjZGY20z9Q2ZFZhWvG6SHsBJ/1qJ767gF6Zz7zMUbJKTExum8GaQl4PWz Vidc4zSfa2FyRt9CZ6+EhudhsaunqoCrcuOElRovCDfMLcm+/XWGLBZEHbYWL+tx /1gdQRietMlsZHBOxC86CeobtP9bpAcL -----END CERTIFICATE-----Generated at Sat May 31 16:56:17 2025 by rpki-client