$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft File: X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft (raw, json) Hash identifier: Saexh0ey/E0FglKLLyqM4Rf1Kd592WkiqcmFjoyA2KU= Subject key identifier: D6:E1:E9:67:86:85:D6:02:30:45:72:FA:92:24:5D:7F:59:8E:F3:84 Authority key identifier: 5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 Certificate issuer: /CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Certificate serial: 072F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft Manifest number: 0727 Signing time: Thu 24 Apr 2025 21:36:42 +0000 Manifest this update: Thu 24 Apr 2025 21:36:41 +0000 Manifest next update: Thu 01 May 2025 21:36:41 +0000 Files and hashes: 1: X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl (hash: 920zzUHJ68mnYVxIes1A6VzFikplKhHghr0BKabqGzA=) 2: 4D12DEAE2E9311EBB9FC5259C4F9AE02.roa (hash: Xm2gMwoiYfX+Fm5qNYBayNhfXFjCoBptj23LkxdkfKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1839 (0x72f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6B8E, serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Validity Not Before: Apr 24 21:36:41 2025 GMT Not After : May 1 21:36:41 2025 GMT Subject: CN=680aaeea-e0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:aa:17:b8:3e:87:7f:d8:91:d6:a1:86:c3:c1: 37:cd:5f:f7:d8:43:ec:56:f4:d2:1b:26:cb:0e:ca: b5:61:9e:a7:2c:9d:b5:a1:d9:3d:0d:0d:ee:eb:49: b2:d0:c4:11:fe:b4:6d:58:f0:fe:38:5c:be:aa:38: 21:b7:cc:7c:b0:75:62:dd:a7:9f:70:24:69:f6:de: 55:6f:95:14:7c:00:c5:95:4c:68:b7:a3:e9:d8:4f: e8:f6:16:bb:d4:1d:46:11:1c:15:42:3a:4d:cb:51: b0:47:78:03:41:46:18:77:57:50:27:e5:8f:2d:b8: 24:ac:d1:95:7b:43:85:6e:d4:cd:1d:bd:c5:7b:30: fc:09:a8:e5:26:2f:63:96:fd:82:6c:97:59:cf:83: 8c:e1:dc:9b:4a:2f:93:39:99:63:e2:cb:49:27:13: c2:19:52:d2:70:df:06:61:98:f1:72:fe:f8:81:19: 72:a3:5a:2f:d3:ba:71:f4:dc:38:62:64:3d:c2:6e: 02:ad:48:3a:e4:a7:e6:a2:f2:1c:2b:dc:f9:49:5a: dd:c9:e6:bc:d5:5e:ec:0f:3f:62:35:dc:08:9e:44: ae:5b:60:8a:98:84:e9:e8:d8:51:a9:9b:e9:6b:8e: 12:54:a7:06:6b:1b:30:7e:f1:8c:01:51:87:13:13: f6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E1:E9:67:86:85:D6:02:30:45:72:FA:92:24:5D:7F:59:8E:F3:84 X509v3 Authority Key Identifier: keyid:5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:c3:eb:1c:69:01:ff:ca:95:ca:5f:d1:6a:72:4c:1d:97:26: 1e:78:47:a9:cb:5b:d1:ef:2f:9b:d3:4c:b7:fe:4b:83:83:2a: ef:33:80:c3:02:da:6d:36:7b:42:12:e4:94:83:98:26:72:07: d5:bc:9a:22:cf:78:71:7d:eb:42:00:e8:f1:52:9a:fd:b5:91: 11:d7:66:82:e0:79:71:08:75:0b:08:a1:ec:af:34:c7:5d:7d: 69:88:ed:2f:77:1d:09:92:62:16:c3:7f:74:5c:0c:b4:66:72: 83:ef:54:ba:fd:8f:7c:84:8d:1c:bd:87:f5:de:3a:18:4e:f0: 73:bb:85:45:ee:f2:0b:e1:ab:95:09:86:b8:9f:ef:9d:b2:22: 2d:9b:b0:14:dc:30:da:de:be:95:f0:38:9c:0c:38:c8:62:af: fc:9c:20:5b:12:7c:78:7f:03:ff:c6:ea:2b:54:71:4f:c8:8d: e8:70:15:6e:f0:e0:88:cd:a4:51:f2:9c:20:fc:15:41:26:cb: c4:48:f7:63:ab:d1:c2:7b:76:30:23:74:bf:b2:46:64:82:61: 3a:a3:15:70:99:8a:c6:50:5e:16:bf:7a:d4:f6:bd:69:ba:1b: e7:cd:db:57:b7:a1:cd:2f:31:e7:67:4a:9d:c3:3f:4e:38:38: 85:51:d7:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCOEUxMTAvBgNVBAUTKDVGOTMzRDMwRjI0N0QwNDE5RkYwQkUwNjAzRTE2RDVD MjdDNDA0MDcwHhcNMjUwNDI0MjEzNjQxWhcNMjUwNTAxMjEzNjQxWjAYMRYwFAYD VQQDEw02ODBhYWVlYS1lMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+6oXuD6Hf9iR1qGGw8E3zV/32EPsVvTSGybLDsq1YZ6nLJ21odk9DQ3u60my 0MQR/rRtWPD+OFy+qjght8x8sHVi3aefcCRp9t5Vb5UUfADFlUxot6Pp2E/o9ha7 1B1GERwVQjpNy1GwR3gDQUYYd1dQJ+WPLbgkrNGVe0OFbtTNHb3FezD8CajlJi9j lv2CbJdZz4OM4dybSi+TOZlj4stJJxPCGVLScN8GYZjxcv74gRlyo1ov07px9Nw4 YmQ9wm4CrUg65KfmovIcK9z5SVrdyea81V7sDz9iNdwInkSuW2CKmITp6NhRqZvp a44SVKcGaxswfvGMAVGHExP2vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbh6WeG hdYCMEVy+pIkXX9ZjvOEMB8GA1UdIwQYMBaAFF+TPTDyR9BBn/C+BgPhbVwnxAQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkI4RS85N0E0NTFCNjJF OTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBFR2Y4TDRHQS1GdFhDZkVC QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1TTlNUEpIMEVHZjhMNEdBLUZ0WENmRUJBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkI4RS85N0E0NTFCNjJFOTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBF R2Y4TDRHQS1GdFhDZkVCQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcw+scaQH/ypXKX9FqckwdlyYeeEepy1vR7y+b00y3/kuDgyrvM4DD AtptNntCEuSUg5gmcgfVvJoiz3hxfetCAOjxUpr9tZER12aC4HlxCHULCKHsrzTH XX1piO0vdx0JkmIWw390XAy0ZnKD71S6/Y98hI0cvYf13joYTvBzu4VF7vIL4auV CYa4n++dsiItm7AU3DDa3r6V8DicDDjIYq/8nCBbEnx4fwP/xuorVHFPyI3ocBVu 8OCIzaRR8pwg/BVBJsvESPdjq9HCe3YwI3S/skZkgmE6oxVwmYrGUF4Wv3rU9r1p uhvnzdtXt6HNLzHnZ0qdwz9OODiFUdfy -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:50 2025 by rpki-client