$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft File: x5ESx8WsNlgyIdH5RnUZbCE26r4.mft (raw, json) Hash identifier: c4rIrHh/5I16Pa+GXBkloAo59GudPCL7SYTDrNxrxck= Subject key identifier: D4:02:74:4B:4F:79:10:7B:79:57:5F:CA:1D:6B:4E:6D:BE:CB:4F:2A Authority key identifier: C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE Certificate issuer: /CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Certificate serial: 0734 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft Manifest number: 0729 Signing time: Fri 30 May 2025 22:03:14 +0000 Manifest this update: Fri 30 May 2025 22:03:13 +0000 Manifest next update: Fri 06 Jun 2025 22:03:13 +0000 Files and hashes: 1: x5ESx8WsNlgyIdH5RnUZbCE26r4.crl (hash: xU611qrRghdjPJFha9Hvg7SkLZhP4S4eG32Ys+ljUd0=) 2: 2E7B4F0CD45811EF908AFE44C4F9AE02.roa (hash: S3+8DNkqu1goqREjsGkO1YtrwS4ggwnIUbsG5DF2wXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1844 (0x734) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB9, serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Validity Not Before: May 30 22:03:13 2025 GMT Not After : Jun 6 22:03:13 2025 GMT Subject: CN=683a2b21-1918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:12:f8:a9:8b:86:2f:6b:47:d2:6f:73:9c: 15:8e:40:83:ca:06:8f:90:31:52:c1:d9:e0:2a:93: 8c:52:79:f5:48:2c:4a:78:01:0a:dc:84:68:a5:34: 3a:3d:16:e2:c7:4c:98:e9:18:48:d3:65:8d:73:b3: 29:d3:e6:72:37:da:b7:37:fb:04:2b:19:7a:11:58: af:a3:5f:40:c1:b4:40:93:17:3f:b9:56:24:4d:f0: 31:10:88:e4:10:ff:f2:51:56:dc:29:a8:cf:ec:ab: e4:a8:42:45:cc:c2:96:cc:ba:61:00:91:72:85:5f: 0b:af:50:5e:ed:b9:cb:10:d8:6e:cd:47:dc:3b:55: 34:95:2f:f8:81:7e:50:e5:32:c2:65:84:27:2f:91: 99:e0:0a:72:5a:c7:e2:d7:27:e3:61:01:0a:bf:d8: 96:d5:09:ad:89:da:1b:e7:23:ff:2e:64:fe:cd:cf: e3:80:8d:ef:a7:6c:76:c7:3b:3c:97:d6:bd:a3:d6: 0a:aa:41:70:3a:0d:20:e6:6e:d8:30:c4:95:81:8a: 6a:a1:bb:2c:b7:fa:9e:d6:38:69:43:fe:fe:4a:39: e8:f5:a3:31:a4:f8:bf:c0:be:90:9c:de:c7:dc:d0: dd:62:6f:7f:e3:aa:53:61:57:7a:53:5e:e5:e6:96: ce:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:02:74:4B:4F:79:10:7B:79:57:5F:CA:1D:6B:4E:6D:BE:CB:4F:2A X509v3 Authority Key Identifier: keyid:C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9f:6f:8f:85:2f:5e:99:db:04:bf:5c:4e:5d:44:ea:cf:a9: 92:84:df:a1:45:17:8b:44:86:26:9e:d9:00:bd:8b:7a:3f:79: 18:9c:7e:49:bd:9c:0c:28:46:43:89:87:69:1e:0f:1a:1f:99: b2:d3:32:11:32:b6:f3:80:c8:d5:e3:43:bb:bf:33:84:7a:34: b9:93:7c:96:a3:5a:ea:07:fb:1e:f8:13:eb:67:36:5a:d1:f4: 4e:98:a6:69:0f:37:5f:53:21:d5:fe:b5:dc:3a:91:84:09:5f: 60:f0:24:3d:f4:e6:e6:2e:00:df:48:10:b4:e8:cb:93:09:09: 08:32:8c:a1:88:d7:1d:1f:02:7a:79:20:de:97:04:c9:4f:fd: db:7d:2b:a5:c2:8c:3c:9f:53:2c:87:c5:e4:0d:46:33:c7:7a: de:c2:a6:7a:27:17:1a:b7:48:3f:5b:63:1e:c8:2f:05:88:e8: d3:83:6d:7f:bd:19:40:ae:51:d8:a6:43:a4:55:b9:c3:12:08: b7:d7:dc:1f:fe:2c:3b:02:a4:9b:74:60:ce:9b:ac:34:0a:7a: d0:e0:a1:9a:80:1c:4d:e8:b1:aa:ee:95:79:c3:5a:62:e8:09: 8d:ea:a9:7d:46:bc:06:9d:ff:d4:a1:a8:a6:9b:9f:0b:6c:7e: f8:3d:0a:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjkxMTAvBgNVBAUTKEM3OTExMkM3QzVBQzM2NTgzMjIxRDFGOTQ2NzUxOTZD MjEzNkVBQkUwHhcNMjUwNTMwMjIwMzEzWhcNMjUwNjA2MjIwMzEzWjAYMRYwFAYD VQQDEw02ODNhMmIyMS0xOTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkeAS+KmLhi9rR9Jvc5wVjkCDygaPkDFSwdngKpOMUnn1SCxKeAEK3IRopTQ6 PRbix0yY6RhI02WNc7Mp0+ZyN9q3N/sEKxl6EVivo19AwbRAkxc/uVYkTfAxEIjk EP/yUVbcKajP7KvkqEJFzMKWzLphAJFyhV8Lr1Be7bnLENhuzUfcO1U0lS/4gX5Q 5TLCZYQnL5GZ4ApyWsfi1yfjYQEKv9iW1Qmtidob5yP/LmT+zc/jgI3vp2x2xzs8 l9a9o9YKqkFwOg0g5m7YMMSVgYpqobsst/qe1jhpQ/7+Sjno9aMxpPi/wL6QnN7H 3NDdYm9/46pTYVd6U17l5pbOVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQCdEtP eRB7eVdfyh1rTm2+y08qMB8GA1UdIwQYMBaAFMeREsfFrDZYMiHR+UZ1GWwhNuq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCOS82QkRFQUE3RTM5 MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05sZ3lJZEg1Um5VWmJDRTI2 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1RVN4OFdzTmxneUlkSDVSblVaYkNFMjZyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCOS82QkRFQUE3RTM5MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05s Z3lJZEg1Um5VWmJDRTI2cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcn2+PhS9emdsEv1xOXUTqz6mShN+hRReLRIYmntkAvYt6P3kYnH5J vZwMKEZDiYdpHg8aH5my0zIRMrbzgMjV40O7vzOEejS5k3yWo1rqB/se+BPrZzZa 0fROmKZpDzdfUyHV/rXcOpGECV9g8CQ99ObmLgDfSBC06MuTCQkIMoyhiNcdHwJ6 eSDelwTJT/3bfSulwow8n1Msh8XkDUYzx3rewqZ6Jxcat0g/W2MeyC8FiOjTg21/ vRlArlHYpkOkVbnDEgi319wf/iw7AqSbdGDOm6w0CnrQ4KGagBxN6LGq7pV5w1pi 6AmN6ql9RrwGnf/Uoaimm58LbH74PQqh -----END CERTIFICATE-----Generated at Sat May 31 17:34:23 2025 by rpki-client