$ rpki-client -vvf rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft File: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft (raw, json) Hash identifier: KIdWF59y833SNxvhoOcJRVE6qRNAUfhCQ9uVwl7ct00= Subject key identifier: 87:D5:77:0A:43:00:8A:6D:05:22:9E:2C:61:38:63:46:C3:E7:23:9F Authority key identifier: 5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08 Certificate issuer: /CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08 Certificate serial: 0AE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft Manifest number: 0AE2 Signing time: Fri 30 May 2025 19:37:08 +0000 Manifest this update: Fri 30 May 2025 19:37:07 +0000 Manifest next update: Fri 06 Jun 2025 19:37:07 +0000 Files and hashes: 1: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl (hash: zzt3hvLj3y12K0XzQLiU3+9YFackwLM8I5HUEqRWB2A=) 2: 43272DE249AA11EABABC8610C4F9AE02.roa (hash: ArNuSAGS500F2Au8BkBemb4Fqw5PMgC4H5tbUjnLNK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2793 (0xae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A467D, serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08 Validity Not Before: May 30 19:37:07 2025 GMT Not After : Jun 6 19:37:07 2025 GMT Subject: CN=683a08e3-b882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c6:35:2c:5a:ba:74:d3:71:4e:e4:84:64:fb: c0:3d:05:80:34:11:8b:3d:c4:86:18:e3:d0:42:36: 7b:43:6c:c2:80:ce:62:2e:14:aa:c2:57:63:8d:61: 2c:1f:5f:b5:ef:23:f3:b6:4c:ca:92:79:aa:fe:14: 8e:78:cc:24:f6:ed:9a:44:1a:ab:3c:4a:c4:a9:ac: cb:c7:28:60:69:48:a6:b7:4b:b9:5f:50:21:0c:01: 1e:10:be:19:23:e4:e0:e5:07:e4:fd:f6:c6:98:6e: 19:6b:29:bc:df:8c:a5:ae:8a:1a:f0:77:a8:01:f6: e1:f8:70:8f:b0:0b:f2:aa:08:d5:0d:b4:10:9b:65: 48:b9:b2:99:cd:1c:38:07:0e:b2:a7:4f:f5:ea:18: b3:aa:eb:e1:a2:b4:c2:a7:83:b2:62:d8:b5:82:9f: cc:1a:d4:91:0a:54:0e:1a:a9:16:7c:44:92:70:f7: 73:a2:7f:26:e5:12:3f:b7:1c:be:ca:a3:91:65:b7: 64:64:8c:3f:39:cf:7d:4c:7e:07:0a:50:59:cf:39: 6f:3e:38:46:48:d8:97:73:62:78:a3:d3:24:77:ae: f6:e9:ec:6c:fb:9a:8a:31:21:88:ba:1d:b2:73:97: 1e:47:a0:26:57:f6:ea:b6:8b:22:8f:3f:f4:06:75: 6f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D5:77:0A:43:00:8A:6D:05:22:9E:2C:61:38:63:46:C3:E7:23:9F X509v3 Authority Key Identifier: keyid:5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:20:c7:07:ae:77:21:ce:52:15:37:4a:fa:8b:32:80:74:61: b2:5f:ef:1a:35:98:34:06:37:fb:03:37:0b:bd:f9:d0:dd:74: c8:30:8e:3b:8e:d0:98:d7:c4:1a:fc:16:bd:2f:ce:e7:0b:07: e8:a5:d0:f5:2f:8f:e6:b8:7d:7b:dd:c6:ea:94:c2:75:d1:b4: 58:3e:56:ef:69:55:0a:27:96:12:89:51:92:07:7e:5b:9f:f3: 66:23:02:0c:8c:72:33:28:15:f9:2a:59:0b:8b:ba:fa:91:53: f0:12:68:7b:66:ba:fa:40:15:1b:da:1e:a5:cf:cf:64:8c:e4: 0e:0f:ae:b9:27:d2:4a:fb:49:63:91:2b:41:a4:75:a3:10:15: 62:6c:d6:8a:27:33:55:83:2f:c5:9b:90:ec:2d:52:74:49:dc: 79:ef:4d:7d:85:04:cf:57:e0:4a:e4:ae:c2:45:ec:e6:8f:a5: 71:11:fa:8c:d2:dc:78:d0:cc:6d:36:86:c6:2f:d9:c1:b3:4e: 8a:27:86:f7:9d:f4:1b:c6:80:ad:a6:6e:b1:3e:45:66:f3:ad: 3f:c1:e7:9f:cf:1a:9d:e6:f1:9f:b8:94:2b:83:38:87:84:42: 1c:19:7c:ad:09:7e:e1:9a:51:80:4a:56:f0:eb:0c:aa:0d:67: e8:9f:30:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2N0QxMTAvBgNVBAUTKDVGMUM1MzRBRUVGRjRFMzgwQ0U1QTA5QTEwODRCRjhG NTcwOUVEMDgwHhcNMjUwNTMwMTkzNzA3WhcNMjUwNjA2MTkzNzA3WjAYMRYwFAYD VQQDEw02ODNhMDhlMy1iODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7cY1LFq6dNNxTuSEZPvAPQWANBGLPcSGGOPQQjZ7Q2zCgM5iLhSqwldjjWEs H1+17yPztkzKknmq/hSOeMwk9u2aRBqrPErEqazLxyhgaUimt0u5X1AhDAEeEL4Z I+Tg5Qfk/fbGmG4Zaym834ylrooa8HeoAfbh+HCPsAvyqgjVDbQQm2VIubKZzRw4 Bw6yp0/16hizquvhorTCp4OyYti1gp/MGtSRClQOGqkWfESScPdzon8m5RI/txy+ yqORZbdkZIw/Oc99TH4HClBZzzlvPjhGSNiXc2J4o9Mkd6726exs+5qKMSGIuh2y c5ceR6AmV/bqtosijz/0BnVvvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfVdwpD AIptBSKeLGE4Y0bD5yOfMB8GA1UdIwQYMBaAFF8cU0ru/044DOWgmhCEv49XCe0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY3RC84NDhFN0QxODQ5 QTkxMUVBQTZGREQzMEZDNEY5QUUwMi9YeHhUU3U3X1RqZ001YUNhRUlTX2oxY0o3 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4eFRTdTdfVGpnTTVhQ2FFSVNfajFjSjdRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY3RC84NDhFN0QxODQ5QTkxMUVBQTZGREQzMEZDNEY5QUUwMi9YeHhUU3U3X1Rq Z001YUNhRUlTX2oxY0o3UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfIMcHrnchzlIVN0r6izKAdGGyX+8aNZg0Bjf7AzcLvfnQ3XTIMI47 jtCY18Qa/Ba9L87nCwfopdD1L4/muH173cbqlMJ10bRYPlbvaVUKJ5YSiVGSB35b n/NmIwIMjHIzKBX5KlkLi7r6kVPwEmh7Zrr6QBUb2h6lz89kjOQOD665J9JK+0lj kStBpHWjEBVibNaKJzNVgy/Fm5DsLVJ0Sdx57019hQTPV+BK5K7CRezmj6VxEfqM 0tx40MxtNobGL9nBs06KJ4b3nfQbxoCtpm6xPkVm860/weefzxqd5vGfuJQrgziH hEIcGXytCX7hmlGASlbw6wyqDWfonzCc -----END CERTIFICATE-----Generated at Sat May 31 16:52:16 2025 by rpki-client