$ rpki-client -vvf rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft File: 5HXUQnchUazw-uprObkBK9Ij05M.mft (raw, json) Hash identifier: GfLmkwo86d8saKs7c4aTIErXD92lzc2DkzlMUx0WZ1k= Subject key identifier: 31:3C:95:19:EC:72:3D:5B:67:56:11:13:03:34:00:CD:62:FD:4A:A4 Authority key identifier: E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93 Certificate issuer: /CN=A912809D/serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft Manifest number: 0128 Signing time: Sun 15 Jun 2025 03:49:13 +0000 Manifest this update: Sun 15 Jun 2025 03:49:12 +0000 Manifest next update: Sun 22 Jun 2025 03:49:12 +0000 Files and hashes: 1: 5HXUQnchUazw-uprObkBK9Ij05M.crl (hash: OdjbgQcPsXZ3N1OvNbOEa0lxLrkIQY5BhGTAVyxgI0Q=) 2: 2BBE96C284FC11EEAA5EAA5DC4F9AE02.roa (hash: KgQSXjT0/AcvVs+PHWWF/UPrCiIk9MVvntWwSCiQouc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912809D, serialNumber=E475D442772151ACF0FAEA6B39B9012BD223D393 Validity Not Before: Jun 15 03:49:12 2025 GMT Not After : Jun 22 03:49:12 2025 GMT Subject: CN=684e42b8-ac92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fe:03:08:ce:b2:5e:4a:00:2a:bf:2f:b5:6f: 10:c4:e1:52:99:e6:ac:c4:dd:24:5e:3c:8f:42:47: 33:6c:ec:49:12:c6:cb:69:b0:47:8c:25:38:e4:06: 1b:a5:72:75:2c:6d:cb:b8:c1:5a:a7:07:d1:e5:d2: 19:44:c1:6e:aa:c3:7f:81:47:9d:2a:56:97:f5:17: fe:7e:15:b6:de:5d:2b:84:0d:f5:4a:33:f5:90:ce: 39:62:d8:22:14:a9:59:14:cc:de:17:ab:a4:04:b3: 57:bd:e5:50:be:50:86:3a:5d:5a:bb:57:d8:9a:23: 49:4d:66:fc:76:e2:c4:48:14:a6:0b:ec:bd:aa:9d: 5f:17:21:da:6b:87:5c:4b:67:df:63:8e:73:70:94: 12:7b:32:ac:8b:a3:77:87:33:ff:aa:4d:80:4b:7e: 33:c8:9d:dc:6f:1a:23:f6:87:1a:7c:a9:23:0a:55: 58:c9:f4:02:0a:f3:c2:9b:e6:19:89:34:41:9c:6d: 9c:eb:e5:e1:fd:51:11:c7:7b:11:71:72:ae:57:af: 10:4b:84:b0:c2:a7:2d:47:49:d5:0b:4c:82:e2:81: 03:87:fc:6c:91:9a:26:d9:d0:1d:32:e4:ff:1a:a9: 4f:32:44:3a:16:5e:fc:e1:9e:40:f5:3d:f9:15:cc: d4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3C:95:19:EC:72:3D:5B:67:56:11:13:03:34:00:CD:62:FD:4A:A4 X509v3 Authority Key Identifier: keyid:E4:75:D4:42:77:21:51:AC:F0:FA:EA:6B:39:B9:01:2B:D2:23:D3:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HXUQnchUazw-uprObkBK9Ij05M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912809D/01FAC98A84F911EEA75C2F39C4F9AE02/5HXUQnchUazw-uprObkBK9Ij05M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f2:fa:0e:95:c3:4e:5a:91:62:d6:d4:02:cb:a8:59:8d:b9: 5f:c6:5d:d5:ae:45:9d:94:cd:4c:97:d2:2c:e5:34:8b:3f:10: 58:c7:b6:92:80:16:67:1e:f7:d1:f0:d6:b8:ae:1f:75:98:29: 76:1d:c3:08:23:0f:f6:1a:6e:0f:dd:d7:a7:4b:2b:b0:e1:cb: 48:84:62:6e:d5:06:71:91:e4:69:b0:dc:62:35:44:82:f0:6b: 2f:3d:e0:ab:35:46:31:7e:2b:1f:88:c6:d8:1c:17:51:27:80: 9a:b3:93:f0:2f:ea:50:68:ab:c3:26:36:94:68:7e:94:9d:96: da:2e:8c:31:08:2b:32:ec:93:e4:ff:84:a6:f8:e7:04:99:c9: fb:bd:c8:cc:f8:12:dd:a1:19:91:8f:b5:c7:c5:26:2c:6d:e7: 77:1d:5f:f3:2a:0a:2d:8d:54:5f:5e:0a:66:df:61:87:d7:3b: c1:42:6b:6f:f5:14:39:2a:5e:57:59:c7:c9:62:22:e7:44:64: 27:67:01:df:66:0a:e4:04:dd:73:69:13:aa:cd:47:5b:1a:b9: 60:f9:34:37:01:f6:67:e8:90:dc:1d:04:8d:1b:45:e9:59:2d: cc:6d:b4:78:ce:e0:e2:5d:ca:c5:9a:44:be:80:da:b2:ad:60: 96:36:17:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgwOUQxMTAvBgNVBAUTKEU0NzVENDQyNzcyMTUxQUNGMEZBRUE2QjM5QjkwMTJC RDIyM0QzOTMwHhcNMjUwNjE1MDM0OTEyWhcNMjUwNjIyMDM0OTEyWjAYMRYwFAYD VQQDEw02ODRlNDJiOC1hYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9f4DCM6yXkoAKr8vtW8QxOFSmeasxN0kXjyPQkczbOxJEsbLabBHjCU45AYb pXJ1LG3LuMFapwfR5dIZRMFuqsN/gUedKlaX9Rf+fhW23l0rhA31SjP1kM45Ytgi FKlZFMzeF6ukBLNXveVQvlCGOl1au1fYmiNJTWb8duLESBSmC+y9qp1fFyHaa4dc S2ffY45zcJQSezKsi6N3hzP/qk2AS34zyJ3cbxoj9ocafKkjClVYyfQCCvPCm+YZ iTRBnG2c6+Xh/VERx3sRcXKuV68QS4SwwqctR0nVC0yC4oEDh/xskZom2dAdMuT/ GqlPMkQ6Fl784Z5A9T35FczUfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDE8lRns cj1bZ1YREwM0AM1i/UqkMB8GA1UdIwQYMBaAFOR11EJ3IVGs8Prqazm5ASvSI9OT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA5RC8wMUZBQzk4QTg0 RjkxMUVFQTc1QzJGMzlDNEY5QUUwMi81SFhVUW5jaFVhenctdXByT2JrQks5SWow NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIWFVRbmNoVWF6dy11cHJPYmtCSzlJajA1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODA5RC8wMUZBQzk4QTg0RjkxMUVFQTc1QzJGMzlDNEY5QUUwMi81SFhVUW5jaFVh enctdXByT2JrQks5SWowNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq8voOlcNOWpFi1tQCy6hZjblfxl3VrkWdlM1Ml9Is5TSLPxBYx7aS gBZnHvfR8Na4rh91mCl2HcMIIw/2Gm4P3denSyuw4ctIhGJu1QZxkeRpsNxiNUSC 8GsvPeCrNUYxfisfiMbYHBdRJ4Cas5PwL+pQaKvDJjaUaH6UnZbaLowxCCsy7JPk /4Sm+OcEmcn7vcjM+BLdoRmRj7XHxSYsbed3HV/zKgotjVRfXgpm32GH1zvBQmtv 9RQ5Kl5XWcfJYiLnRGQnZwHfZgrkBN1zaROqzUdbGrlg+TQ3AfZn6JDcHQSNG0Xp WS3MbbR4zuDiXcrFmkS+gNqyrWCWNhe0 -----END CERTIFICATE-----Generated at Sun Jun 15 08:37:06 2025 by rpki-client