$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json) Hash identifier: +Cp1RD3N2TqGEtJo8l3Jcegwc7k/1o+qISkz0SWZKxI= Subject key identifier: 28:1C:D4:2F:F6:AF:48:26:AD:2A:13:7E:93:CC:BD:A4:5E:8D:58:B6 Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Certificate serial: 04AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft Manifest number: 04AF Signing time: Sat 31 May 2025 00:05:37 +0000 Manifest this update: Sat 31 May 2025 00:05:36 +0000 Manifest next update: Sat 07 Jun 2025 00:05:36 +0000 Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: sQtRnCjX3nhRgyI61H3EVcf/kZs1v46JyhgJot4Np3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1199 (0x4af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Validity Not Before: May 31 00:05:36 2025 GMT Not After : Jun 7 00:05:36 2025 GMT Subject: CN=683a47d1-ebbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ff:14:61:a4:4a:86:64:5b:82:6e:ba:09:f1: 71:30:8e:3d:b9:d8:b3:22:4e:5c:04:62:4a:cf:38: 6d:b6:d5:60:d1:d2:9c:84:f0:66:20:49:e4:c7:bf: 8c:db:bc:79:a0:cc:9e:1f:f6:c5:02:ea:60:fc:c6: 3f:da:1f:ec:98:19:33:98:7e:dd:21:56:cd:66:86: fb:98:6c:76:35:2c:37:38:7a:bb:34:e7:be:fc:d7: 28:db:43:6f:73:7d:9e:33:28:b3:bd:27:f9:94:57: 27:da:42:a3:e1:31:a2:46:ed:25:51:5a:3b:40:0f: ac:4a:86:eb:39:c3:8e:16:8e:cc:2d:f3:00:b3:cf: 1c:0f:44:55:bc:7f:38:d9:7c:dc:b0:61:3e:64:e4: c5:97:70:60:54:8c:0c:57:e4:e4:e1:8c:42:8e:82: cf:31:a9:5e:f8:1b:59:d4:67:23:26:11:2e:2a:24: 8b:25:53:12:2c:42:2e:7d:d7:af:c1:16:ff:51:68: ea:d8:60:79:cc:ab:75:99:5c:a7:04:a3:c5:d9:8c: 96:a4:76:60:ac:b7:60:7c:39:45:90:ee:b9:c6:c9: f1:b1:14:6e:c0:6f:c0:8e:55:9a:3c:f9:01:76:74: 34:fb:92:64:3e:2a:b5:ce:b7:ed:b1:ab:2e:e7:59: 65:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1C:D4:2F:F6:AF:48:26:AD:2A:13:7E:93:CC:BD:A4:5E:8D:58:B6 X509v3 Authority Key Identifier: keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:dc:df:4f:4c:2a:48:7b:27:91:60:c0:5a:55:df:7b:67:1b: 22:55:97:14:1f:bc:c0:d8:e1:ce:a7:4f:33:bb:66:69:10:b5: 42:f6:85:41:b4:26:a5:66:70:bb:72:35:59:f1:e4:c7:d7:08: 7f:5e:8f:12:7e:19:8f:d5:3d:df:5b:25:d2:b0:48:4a:2a:d9: 70:11:c9:99:73:d0:72:3c:89:a1:5a:1a:6d:06:83:a0:5b:d5: 84:7b:e8:6d:6c:14:50:cb:c9:15:87:7b:86:fd:96:2c:15:13: 92:7d:30:bf:79:63:63:c5:26:00:c5:52:6b:ed:85:fe:42:e3: b3:68:21:d6:0b:e6:7a:88:6e:f4:7b:1b:e0:f1:ae:7c:ed:aa: 96:46:89:3a:f7:45:cc:85:94:2e:15:99:e1:60:70:e8:c4:54: 64:01:22:2b:ee:c6:20:3a:53:36:d5:8f:d9:aa:2a:4d:ee:ce: ce:19:0c:8e:0d:c2:bd:6c:b5:48:8d:8a:08:67:1a:42:a9:1d: 76:b1:4c:8d:52:69:c6:12:a7:23:d9:a6:17:66:81:7a:af:0e: 58:fa:92:9f:eb:c8:b5:70:17:85:ff:9b:c8:16:bc:fd:80:02: db:24:51:8f:2f:71:e1:1f:db:ad:9d:2c:20:77:9d:67:cf:39: 77:da:1e:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MEYxMTAvBgNVBAUTKDVGN0RCNjUwQ0FDNDM0NTE3NkFDM0YwN0RFRkM5OTFB RDRGRURFQjgwHhcNMjUwNTMxMDAwNTM2WhcNMjUwNjA3MDAwNTM2WjAYMRYwFAYD VQQDEw02ODNhNDdkMS1lYmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzf8UYaRKhmRbgm66CfFxMI49udizIk5cBGJKzzhtttVg0dKchPBmIEnkx7+M 27x5oMyeH/bFAupg/MY/2h/smBkzmH7dIVbNZob7mGx2NSw3OHq7NOe+/Nco20Nv c32eMyizvSf5lFcn2kKj4TGiRu0lUVo7QA+sSobrOcOOFo7MLfMAs88cD0RVvH84 2XzcsGE+ZOTFl3BgVIwMV+Tk4YxCjoLPMale+BtZ1GcjJhEuKiSLJVMSLEIufdev wRb/UWjq2GB5zKt1mVynBKPF2YyWpHZgrLdgfDlFkO65xsnxsRRuwG/AjlWaPPkB dnQ0+5JkPiq1zrftsasu51ll3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgc1C/2 r0gmrSoTfpPMvaRejVi2MB8GA1UdIwQYMBaAFF99tlDKxDRRdqw/B978mRrU/t64 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcwRi9ENTVFQjVGMDJE MEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5GRjJyRDhIM3Z5Wkd0VC0z cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gzMjJVTXJFTkZGMnJEOEgzdnlaR3RULTNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcwRi9ENTVFQjVGMDJEMEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5G RjJyRDhIM3Z5Wkd0VC0zcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy3N9PTCpIeyeRYMBaVd97ZxsiVZcUH7zA2OHOp08zu2ZpELVC9oVB tCalZnC7cjVZ8eTH1wh/Xo8SfhmP1T3fWyXSsEhKKtlwEcmZc9ByPImhWhptBoOg W9WEe+htbBRQy8kVh3uG/ZYsFROSfTC/eWNjxSYAxVJr7YX+QuOzaCHWC+Z6iG70 exvg8a587aqWRok690XMhZQuFZnhYHDoxFRkASIr7sYgOlM21Y/ZqipN7s7OGQyO DcK9bLVIjYoIZxpCqR12sUyNUmnGEqcj2aYXZoF6rw5Y+pKf68i1cBeF/5vIFrz9 gALbJFGPL3HhH9utnSwgd51nzzl32h4m -----END CERTIFICATE-----Generated at Sat May 31 17:23:34 2025 by rpki-client