$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft File: X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft (raw, json) Hash identifier: 7bt9YVuARSYnMuI3/uvjLlA2WZ+mn1FSF49qSMnZ254= Subject key identifier: 4A:DE:02:F2:69:CB:11:BB:B5:3A:97:DE:0D:9C:63:96:B6:79:B2:DE Authority key identifier: 5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3 Certificate issuer: /CN=A91C5413/serialNumber=5F9999CDA64A2A1A662E54E61A1D5798C688CCC3 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft Manifest number: 0814 Signing time: Fri 30 May 2025 22:34:01 +0000 Manifest this update: Fri 30 May 2025 22:34:00 +0000 Manifest next update: Fri 06 Jun 2025 22:34:00 +0000 Files and hashes: 1: X5mZzaZKKhpmLlTmGh1XmMaIzMM.crl (hash: ssmmh3pIsnKj1bY18FqHAi9jtOPKrNQcy8RXt2L+S/Q=) 2: 5C925054E06811EF895B471EC4F9AE02.roa (hash: WJ6jshg1hMuefWZWAvCq9BHL/JR2w7ml13fnTUu4Jz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.crl rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5413, serialNumber=5F9999CDA64A2A1A662E54E61A1D5798C688CCC3 Validity Not Before: May 30 22:34:00 2025 GMT Not After : Jun 6 22:34:00 2025 GMT Subject: CN=683a3259-cb03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:0b:d6:ff:ec:95:68:a0:a1:09:8d:7d:3e: 9e:aa:03:ad:03:41:d0:2d:db:c7:62:45:65:6b:ef: b2:0c:89:a8:eb:7d:8d:e8:62:f0:50:d5:a5:01:ec: e6:a6:cf:1e:b7:91:00:63:e2:89:27:e0:5a:9d:20: 3c:19:16:58:74:88:2f:52:e6:5e:60:88:64:d2:2f: 84:3d:b9:b2:8c:8b:2f:b7:09:47:8c:54:be:f6:5a: 65:6a:5d:00:38:64:4d:40:d5:32:e8:95:bf:af:2d: ea:17:5d:11:19:e1:51:7f:1e:71:d4:c0:50:62:5b: 38:79:7a:8b:a0:bf:2f:fa:5b:4f:2b:7f:65:04:74: b3:ce:45:ef:0c:4c:be:76:49:e4:d4:21:2e:94:ef: 2b:c4:b8:ae:1c:8b:b6:2a:f5:de:bd:94:c9:8b:d2: 5f:c3:ae:a3:b5:fe:19:c3:b6:c3:56:4e:43:50:e1: 8e:89:d0:b3:12:90:37:9a:80:23:13:7f:17:71:b6: 23:e6:95:54:4f:9a:97:02:74:bf:2b:d7:05:82:30: 94:a5:ae:25:4d:8a:a6:bd:79:e7:93:5a:4b:a4:9b: d3:e1:13:5e:56:50:be:7f:ef:04:da:83:26:5b:7f: fd:be:bc:fe:69:d3:65:56:02:85:8f:a5:0e:0c:cb: b5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DE:02:F2:69:CB:11:BB:B5:3A:97:DE:0D:9C:63:96:B6:79:B2:DE X509v3 Authority Key Identifier: keyid:5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0b:0d:81:ff:51:85:30:19:1a:e1:83:90:99:01:fd:76:cc: 5f:de:19:8d:08:80:09:91:5b:0b:c5:46:29:34:15:a1:55:0e: 5f:87:ca:3b:21:8a:62:05:f1:45:73:b8:41:12:b8:bb:26:c2: 6c:75:61:97:fc:ad:c8:b3:36:2b:d6:ef:c5:19:75:42:74:59: 25:d5:b8:f1:2c:23:d3:5c:8a:4f:90:f0:3f:ae:6b:08:a6:2e: 9f:86:e7:31:2a:f1:f9:25:49:b7:15:1e:dc:a4:59:45:e3:36: 40:da:e5:02:e1:9b:2a:24:13:28:69:1c:27:93:74:93:fb:a2: 43:02:76:3f:43:2e:88:7e:8c:4a:77:df:63:b8:33:26:3a:6c: a8:76:ae:4f:97:bd:2d:7c:ce:e3:eb:7b:13:d6:91:7d:2a:6c: 4f:be:34:97:59:4a:2c:e6:db:5a:77:e5:67:d9:aa:28:ce:f0: eb:d5:92:2c:89:f5:a1:8f:9d:58:55:66:66:28:a7:f1:a5:dd: 60:b0:3a:83:5f:b1:52:d1:6c:fe:e7:e6:db:46:0b:e7:fd:f9: 8c:fa:b6:77:8c:84:e1:50:34:93:e6:8b:fc:d9:4d:4d:04:f4: 58:bf:9b:3a:86:6e:8e:3d:14:53:53:77:80:e5:c0:13:67:dd: 2c:9b:c2:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTQxMzExMC8GA1UEBRMoNUY5OTk5Q0RBNjRBMkExQTY2MkU1NEU2MUExRDU3OThD Njg4Q0NDMzAeFw0yNTA1MzAyMjM0MDBaFw0yNTA2MDYyMjM0MDBaMBgxFjAUBgNV BAMTDTY4M2EzMjU5LWNiMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSngvW/+yVaKChCY19Pp6qA60DQdAt28diRWVr77IMiajrfY3oYvBQ1aUB7Oam zx63kQBj4okn4FqdIDwZFlh0iC9S5l5giGTSL4Q9ubKMiy+3CUeMVL72WmVqXQA4 ZE1A1TLolb+vLeoXXREZ4VF/HnHUwFBiWzh5eougvy/6W08rf2UEdLPORe8MTL52 SeTUIS6U7yvEuK4ci7Yq9d69lMmL0l/DrqO1/hnDtsNWTkNQ4Y6J0LMSkDeagCMT fxdxtiPmlVRPmpcCdL8r1wWCMJSlriVNiqa9eeeTWkukm9PhE15WUL5/7wTagyZb f/2+vP5p02VWAoWPpQ4My7XXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSt4C8mnL Ebu1OpfeDZxjlrZ5st4wHwYDVR0jBBgwFoAUX5mZzaZKKhpmLlTmGh1XmMaIzMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NDEzL0RGOTlBMUU4N0JF ODExRUI5QTA5MjM0MkM0RjlBRTAyL1g1bVp6YVpLS2hwbUxsVG1HaDFYbU1hSXpN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWDVtWnphWktLaHBtTGxUbUdoMVhtTWFJek1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 NDEzL0RGOTlBMUU4N0JFODExRUI5QTA5MjM0MkM0RjlBRTAyL1g1bVp6YVpLS2hw bUxsVG1HaDFYbU1hSXpNTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA8LDYH/UYUwGRrhg5CZAf12zF/eGY0IgAmRWwvFRik0FaFVDl+Hyjsh imIF8UVzuEESuLsmwmx1YZf8rcizNivW78UZdUJ0WSXVuPEsI9Ncik+Q8D+uawim Lp+G5zEq8fklSbcVHtykWUXjNkDa5QLhmyokEyhpHCeTdJP7okMCdj9DLoh+jEp3 32O4MyY6bKh2rk+XvS18zuPrexPWkX0qbE++NJdZSizm21p35WfZqijO8OvVkiyJ 9aGPnVhVZmYop/Gl3WCwOoNfsVLRbP7n5ttGC+f9+Yz6tneMhOFQNJPmi/zZTU0E 9Fi/mzqGbo49FFNTd4DlwBNn3Sybwso= -----END CERTIFICATE-----Generated at Sat May 31 14:41:32 2025 by rpki-client