$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft File: X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft (raw, json) Hash identifier: JJ6L6XAGlogyW9B89HniswlaF4X61mWL+NoxGA6t+Q4= Subject key identifier: D2:BA:FD:11:DF:A6:06:E7:6E:17:4F:D2:61:47:1A:19:55:7E:97:A7 Authority key identifier: 5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 Certificate issuer: /CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Certificate serial: 0740 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft Manifest number: 0738 Signing time: Fri 30 May 2025 21:58:02 +0000 Manifest this update: Fri 30 May 2025 21:58:01 +0000 Manifest next update: Fri 06 Jun 2025 21:58:01 +0000 Files and hashes: 1: X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl (hash: 7e1YNPXOgRL9Gg1KJrFuKk2n14hepRhk/doPg5FJcfk=) 2: 4D12DEAE2E9311EBB9FC5259C4F9AE02.roa (hash: Xm2gMwoiYfX+Fm5qNYBayNhfXFjCoBptj23LkxdkfKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1856 (0x740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6B8E, serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Validity Not Before: May 30 21:58:01 2025 GMT Not After : Jun 6 21:58:01 2025 GMT Subject: CN=683a29e9-70ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:90:3e:b5:e1:44:54:1b:62:d0:ab:59:9c:66: 99:e0:dd:0c:b3:8d:bf:4a:98:f0:0e:9e:7c:dc:55: 1b:15:41:7e:1e:6c:8e:07:82:96:d2:ad:67:af:89: 78:6d:70:8c:fd:2b:13:97:0e:da:2c:ba:79:69:7d: bd:23:46:53:c5:9a:2f:2b:1d:f8:76:74:7f:f8:35: 84:26:6c:49:74:05:e6:b8:15:c0:ca:44:a1:57:8e: 43:dc:3a:8e:e4:3f:c7:c2:c2:71:4c:a9:a6:8b:4d: 94:e3:d2:46:fe:e7:d6:3c:58:83:db:cf:b2:c0:55: d0:92:9e:87:de:95:75:a9:62:00:5b:41:8c:1e:5d: 0f:3c:1e:5a:41:88:38:73:ad:7a:30:22:63:3c:81: 36:e1:c0:20:f4:b3:c4:f2:1a:1d:03:4a:03:1c:9b: c3:f8:d2:20:3b:23:b3:a2:30:0d:6a:52:f0:d0:f6: b9:6d:04:39:4a:26:63:f7:a8:b1:71:ad:92:c9:78: 77:c3:73:14:c2:d2:47:e3:19:36:88:62:6b:f6:f1: 6a:30:dc:99:de:b0:ab:2c:be:77:b6:c7:11:43:4b: aa:03:58:c1:ac:60:52:88:2d:f3:91:5f:69:f4:cf: e2:e2:56:51:65:b4:26:68:54:b7:6b:d3:24:3b:35: 27:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BA:FD:11:DF:A6:06:E7:6E:17:4F:D2:61:47:1A:19:55:7E:97:A7 X509v3 Authority Key Identifier: keyid:5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d6:19:e5:f8:b8:31:06:e7:ea:a8:0c:67:56:3e:28:fc:3f: 24:10:1e:98:7d:90:3b:20:60:ac:99:8f:ef:61:5c:35:b7:d4: 1e:f4:ef:fa:90:05:c2:7d:7c:b5:db:89:bb:4d:c9:18:5e:d7: c8:9c:54:5f:f0:bc:63:67:5c:67:e3:32:9a:12:b0:22:e6:e2: e2:51:61:66:7c:ad:27:41:aa:3a:a6:13:29:7a:84:03:dc:55: d8:7a:19:2a:d0:47:a6:33:ec:25:ec:fa:34:a0:53:35:e8:0b: e1:9e:4e:29:3f:b3:13:1d:6d:bc:05:09:b2:9d:4f:7f:bf:0b: 4e:45:8c:93:ce:f7:5a:4c:cd:07:2f:dd:06:20:26:85:e5:45: d5:42:13:ba:68:39:f7:d6:ff:aa:83:6a:b9:ed:a9:fc:5f:fe: 87:3d:c3:48:32:0d:f7:f7:61:d2:a5:e3:fc:e3:b2:17:eb:4a: bd:a6:ce:3b:ea:2a:a7:1b:bf:c5:3c:af:1d:02:c4:cd:9b:01: 2e:09:f8:9f:03:d3:11:2b:e3:76:f1:3f:8b:fc:a0:6f:07:ef: bc:fd:0a:a0:27:0a:65:1b:16:22:00:d4:b5:c6:b4:12:34:26: cd:a9:29:b4:98:16:87:e3:89:21:c1:ab:4d:78:fb:f0:08:27: f2:f1:65:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCOEUxMTAvBgNVBAUTKDVGOTMzRDMwRjI0N0QwNDE5RkYwQkUwNjAzRTE2RDVD MjdDNDA0MDcwHhcNMjUwNTMwMjE1ODAxWhcNMjUwNjA2MjE1ODAxWjAYMRYwFAYD VQQDEw02ODNhMjllOS03MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpA+teFEVBti0KtZnGaZ4N0Ms42/SpjwDp583FUbFUF+HmyOB4KW0q1nr4l4 bXCM/SsTlw7aLLp5aX29I0ZTxZovKx34dnR/+DWEJmxJdAXmuBXAykShV45D3DqO 5D/HwsJxTKmmi02U49JG/ufWPFiD28+ywFXQkp6H3pV1qWIAW0GMHl0PPB5aQYg4 c616MCJjPIE24cAg9LPE8hodA0oDHJvD+NIgOyOzojANalLw0Pa5bQQ5SiZj96ix ca2SyXh3w3MUwtJH4xk2iGJr9vFqMNyZ3rCrLL53tscRQ0uqA1jBrGBSiC3zkV9p 9M/i4lZRZbQmaFS3a9MkOzUn9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNK6/RHf pgbnbhdP0mFHGhlVfpenMB8GA1UdIwQYMBaAFF+TPTDyR9BBn/C+BgPhbVwnxAQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkI4RS85N0E0NTFCNjJF OTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBFR2Y4TDRHQS1GdFhDZkVC QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1TTlNUEpIMEVHZjhMNEdBLUZ0WENmRUJBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkI4RS85N0E0NTFCNjJFOTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBF R2Y4TDRHQS1GdFhDZkVCQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO1hnl+LgxBufqqAxnVj4o/D8kEB6YfZA7IGCsmY/vYVw1t9Qe9O/6 kAXCfXy124m7TckYXtfInFRf8LxjZ1xn4zKaErAi5uLiUWFmfK0nQao6phMpeoQD 3FXYehkq0EemM+wl7Po0oFM16Avhnk4pP7MTHW28BQmynU9/vwtORYyTzvdaTM0H L90GICaF5UXVQhO6aDn31v+qg2q57an8X/6HPcNIMg3392HSpeP847IX60q9ps47 6iqnG7/FPK8dAsTNmwEuCfifA9MRK+N28T+L/KBvB++8/QqgJwplGxYiANS1xrQS NCbNqSm0mBaH44khwatNePvwCCfy8WWi -----END CERTIFICATE-----Generated at Sat May 31 14:58:05 2025 by rpki-client