$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft File: 4x5nyg5b7bJI-Xplfe_2LshvUks.mft (raw, json) Hash identifier: GRUDtS/uBrXkotmag78BcaxmqIWyLWGgjJ5CCvl02PY= Subject key identifier: 07:BC:20:DD:4B:A2:EB:45:36:E2:9D:5D:29:60:46:14:99:6D:E1:26 Authority key identifier: E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B Certificate issuer: /CN=A91ED5D9/serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Certificate serial: 027E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft Manifest number: 027A Signing time: Sat 31 May 2025 01:52:08 +0000 Manifest this update: Sat 31 May 2025 01:52:08 +0000 Manifest next update: Sat 07 Jun 2025 01:52:08 +0000 Files and hashes: 1: 4x5nyg5b7bJI-Xplfe_2LshvUks.crl (hash: bhWzFI5V2bdzI0G8NFMfXXz5XMl0wqBuvsmWO7SLTYg=) 2: A3013D2A0CCB11ED97820077C4F9AE02.roa (hash: h+ue+R5DGdF0uaqUXBTnmoh/DYvzHxp90t2bN+4sANk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 638 (0x27e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED5D9, serialNumber=E31E67CA0E5BEDB248F97A657DEFF62EC86F524B Validity Not Before: May 31 01:52:08 2025 GMT Not After : Jun 7 01:52:08 2025 GMT Subject: CN=683a60c8-a5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1c:8f:e4:ab:06:dd:24:76:a2:a6:c6:ae:5e: f8:3d:30:e5:de:b1:4c:20:11:06:a9:2e:ae:46:df: 04:ec:10:2e:c8:49:96:f4:52:1e:cb:7a:84:b5:4b: 64:5a:34:8d:34:17:04:cb:3e:88:f2:fa:48:50:63: b6:9f:cf:15:f4:f1:ae:21:46:bb:97:37:54:5f:48: 89:75:01:b5:1b:c7:6f:bf:5c:c0:d7:a7:7b:bf:38: 31:db:36:cc:e4:0b:cd:91:8d:8f:91:08:70:3b:a0: 99:4d:10:fe:a3:39:a4:1d:92:0e:74:ba:74:fa:49: d8:46:cd:ee:e0:3f:29:87:c8:9e:24:45:24:78:56: 24:ba:96:8c:9b:e6:b7:06:d3:9b:92:6a:86:d6:12: af:de:71:eb:a6:38:73:b0:5c:0a:06:2e:94:65:a0: 1f:1b:51:8c:70:9b:1a:d9:03:a8:c5:6c:16:85:51: a7:32:9a:2c:85:92:dd:3a:f4:b7:0d:7d:41:05:b7: ae:a1:89:2b:66:f6:c8:3b:2f:90:36:e7:fb:39:d9: 95:8c:b7:81:b3:44:47:6f:3a:37:ee:4f:a2:2d:06: 72:a4:89:59:06:d8:08:47:55:33:4e:af:23:fe:70: b6:ed:90:81:2a:ce:b0:bc:73:53:92:05:31:18:3d: b2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BC:20:DD:4B:A2:EB:45:36:E2:9D:5D:29:60:46:14:99:6D:E1:26 X509v3 Authority Key Identifier: keyid:E3:1E:67:CA:0E:5B:ED:B2:48:F9:7A:65:7D:EF:F6:2E:C8:6F:52:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4x5nyg5b7bJI-Xplfe_2LshvUks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED5D9/89E87FE00CC811EDB33B1371C4F9AE02/4x5nyg5b7bJI-Xplfe_2LshvUks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:88:99:51:8c:13:64:58:4b:e2:ba:71:47:bb:ac:fc:9d:95: 2c:8c:2a:01:50:ab:71:83:37:33:97:aa:72:a7:5a:af:27:fa: be:d1:23:de:cb:b3:90:35:f0:b1:99:83:5b:75:51:78:be:40: 4b:27:ec:8a:21:d0:06:e8:a4:fe:1b:ce:2d:56:f0:ae:d6:b3: 17:bc:56:64:28:84:9b:09:c7:2b:ef:44:ff:de:29:8d:0e:a7: 94:b4:4f:28:bc:7e:e6:bb:93:15:6f:36:c0:97:c1:af:68:dc: c1:d5:1b:a2:d1:da:48:29:c2:a0:09:01:e1:ee:25:88:82:57: 9f:1e:00:a1:17:db:18:1a:1e:ae:ae:10:5a:85:f2:46:8f:5d: 6d:63:8b:d7:51:ca:38:aa:bf:47:35:3e:2c:9e:27:53:e5:3a: c8:dc:e0:7d:3b:b1:06:e4:cc:d6:d6:ff:67:6c:f3:28:e8:4c: c2:12:f3:30:ff:d2:be:d9:6e:08:85:92:42:bf:0e:f1:f6:e1: 56:8f:43:a9:a1:93:3b:e4:46:de:c1:e9:de:38:bb:43:ea:92: e8:a9:ee:96:19:99:f1:27:ab:2f:dd:e1:04:4a:d4:01:f8:88: 44:9d:94:55:6b:5a:bb:54:4c:46:8e:4e:a7:43:79:c6:5f:cc: 99:e3:26:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1RDkxMTAvBgNVBAUTKEUzMUU2N0NBMEU1QkVEQjI0OEY5N0E2NTdERUZGNjJF Qzg2RjUyNEIwHhcNMjUwNTMxMDE1MjA4WhcNMjUwNjA3MDE1MjA4WjAYMRYwFAYD VQQDEw02ODNhNjBjOC1hNWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxyP5KsG3SR2oqbGrl74PTDl3rFMIBEGqS6uRt8E7BAuyEmW9FIey3qEtUtk WjSNNBcEyz6I8vpIUGO2n88V9PGuIUa7lzdUX0iJdQG1G8dvv1zA16d7vzgx2zbM 5AvNkY2PkQhwO6CZTRD+ozmkHZIOdLp0+knYRs3u4D8ph8ieJEUkeFYkupaMm+a3 BtObkmqG1hKv3nHrpjhzsFwKBi6UZaAfG1GMcJsa2QOoxWwWhVGnMposhZLdOvS3 DX1BBbeuoYkrZvbIOy+QNuf7OdmVjLeBs0RHbzo37k+iLQZypIlZBtgIR1UzTq8j /nC27ZCBKs6wvHNTkgUxGD2yYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAe8IN1L outFNuKdXSlgRhSZbeEmMB8GA1UdIwQYMBaAFOMeZ8oOW+2ySPl6ZX3v9i7Ib1JL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDVEOS84OUU4N0ZFMDBD QzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1YjdiSkktWHBsZmVfMkxzaHZV a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR4NW55ZzViN2JKSS1YcGxmZV8yTHNodlVrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDVEOS84OUU4N0ZFMDBDQzgxMUVEQjMzQjEzNzFDNEY5QUUwMi80eDVueWc1Yjdi SkktWHBsZmVfMkxzaHZVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeiJlRjBNkWEviunFHu6z8nZUsjCoBUKtxgzczl6pyp1qvJ/q+0SPe y7OQNfCxmYNbdVF4vkBLJ+yKIdAG6KT+G84tVvCu1rMXvFZkKISbCccr70T/3imN DqeUtE8ovH7mu5MVbzbAl8GvaNzB1Rui0dpIKcKgCQHh7iWIglefHgChF9sYGh6u rhBahfJGj11tY4vXUco4qr9HNT4snidT5TrI3OB9O7EG5MzW1v9nbPMo6EzCEvMw /9K+2W4IhZJCvw7x9uFWj0OpoZM75EbeweneOLtD6pLoqe6WGZnxJ6sv3eEEStQB +IhEnZRVa1q7VExGjk6nQ3nGX8yZ4yby -----END CERTIFICATE-----Generated at Sat May 31 17:20:41 2025 by rpki-client