$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft File: X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft (raw, json) Hash identifier: RoM8P3W1V+JfjL2uR5t4eZQ/0LMcCBkQTD+F/97GW/U= Subject key identifier: B5:91:4F:ED:A2:1A:ED:B1:77:3D:EB:A8:56:AD:22:85:C2:A7:08:DC Authority key identifier: 5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3 Certificate issuer: /CN=A91C5413/serialNumber=5F9999CDA64A2A1A662E54E61A1D5798C688CCC3 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft Manifest number: 07DA Signing time: Thu 24 Apr 2025 22:11:49 +0000 Manifest this update: Thu 24 Apr 2025 22:11:49 +0000 Manifest next update: Thu 01 May 2025 22:11:49 +0000 Files and hashes: 1: X5mZzaZKKhpmLlTmGh1XmMaIzMM.crl (hash: A9678gp433OrQcGct9x8JNcF2K/kddOVZQG0EmprR7k=) 2: 5C925054E06811EF895B471EC4F9AE02.roa (hash: 8CrFRNgJH37C5OagvUvXSdKLU66lJIBPcXhUUvO4gzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.crl rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5413, serialNumber=5F9999CDA64A2A1A662E54E61A1D5798C688CCC3 Validity Not Before: Apr 24 22:11:49 2025 GMT Not After : May 1 22:11:49 2025 GMT Subject: CN=680ab725-1a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:7c:78:9e:d9:56:0d:fa:9b:a7:ac:28:dd: ab:6b:f2:30:b2:94:c1:de:82:88:ef:0a:56:9b:22: fe:88:24:c0:7f:5a:38:d3:74:2c:7b:42:77:73:a0: 5d:6e:a3:b3:51:5a:78:e1:89:5d:83:38:03:9a:f7: 30:f0:d5:66:45:a4:63:db:cf:7d:ba:3b:2c:d3:98: cd:84:5b:5d:eb:43:b1:65:02:e0:41:86:04:3d:4c: 08:05:5f:be:e6:d6:72:6e:48:aa:88:1b:5c:cd:ba: 50:76:52:90:10:aa:72:4b:e8:48:1a:a2:86:3a:60: 9c:99:4d:ce:c5:f0:6b:35:43:f9:55:dd:00:0f:8a: a0:c0:e5:d5:92:b8:6e:b1:6c:51:de:ab:91:51:84: b6:63:1b:3d:aa:ac:20:2a:a6:9e:34:2e:23:13:82: 62:82:0f:28:ba:87:8a:1c:6c:03:1b:d9:c5:c0:d7: a8:c3:88:42:ab:fc:20:76:9c:fa:89:b0:eb:a3:df: fc:26:bc:cb:3f:4d:4f:97:2c:fa:aa:f2:de:29:64: a4:f8:6e:26:45:9e:45:03:b0:0c:1d:e8:cb:39:9f: 23:0c:76:f8:ce:9f:54:85:33:0e:7d:ec:b4:96:c0: da:2f:b1:28:f6:e6:18:f1:86:42:28:76:89:ee:67: 2c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:91:4F:ED:A2:1A:ED:B1:77:3D:EB:A8:56:AD:22:85:C2:A7:08:DC X509v3 Authority Key Identifier: keyid:5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:9c:55:f9:ee:e2:ea:aa:b2:13:22:9a:4c:35:89:64:d2:3a: 93:1b:f2:d8:d0:80:e6:74:03:93:2c:bb:4a:f0:75:5e:58:da: 4d:3a:31:17:d6:17:27:a7:3f:f5:0d:8a:b8:c0:18:a6:4c:a1: c1:55:f6:0b:03:13:81:4a:84:a6:c3:52:f4:17:70:d2:ff:7a: 7d:24:84:7d:7a:0b:03:e5:c7:bd:b8:f4:05:f9:ce:8b:97:fc: 81:e1:41:dd:ac:63:91:30:89:21:f3:a1:df:af:2f:d0:32:21: fb:75:08:67:be:f8:f2:04:cd:09:8b:30:ed:b2:4a:b4:70:93: c8:e3:a6:7f:9c:ab:73:cc:9d:90:0b:50:69:d8:94:c6:d7:1b: 94:69:d4:61:36:7f:ca:d5:41:7b:64:89:81:55:56:9a:66:76: 72:08:7b:1f:35:8e:8f:41:e6:9c:5e:a9:56:98:74:9a:85:a7: dd:f6:ad:6e:f7:0f:8f:09:ef:33:10:ac:09:0f:e5:81:6b:19: 3a:37:7a:6d:5a:90:fe:e1:ee:e0:49:95:a6:19:39:29:ed:1e: 55:b7:09:5b:0f:76:9b:2d:d7:41:be:46:96:90:32:40:28:f7: eb:7e:26:b3:82:29:fe:6e:8c:d2:c1:ee:ab:f9:84:4a:0d:8f: 0a:41:1e:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTQxMzExMC8GA1UEBRMoNUY5OTk5Q0RBNjRBMkExQTY2MkU1NEU2MUExRDU3OThD Njg4Q0NDMzAeFw0yNTA0MjQyMjExNDlaFw0yNTA1MDEyMjExNDlaMBgxFjAUBgNV BAMTDTY4MGFiNzI1LTFhMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnp3x4ntlWDfqbp6wo3atr8jCylMHegojvClabIv6IJMB/WjjTdCx7QndzoF1u o7NRWnjhiV2DOAOa9zDw1WZFpGPbz326OyzTmM2EW13rQ7FlAuBBhgQ9TAgFX77m 1nJuSKqIG1zNulB2UpAQqnJL6EgaooY6YJyZTc7F8Gs1Q/lV3QAPiqDA5dWSuG6x bFHeq5FRhLZjGz2qrCAqpp40LiMTgmKCDyi6h4ocbAMb2cXA16jDiEKr/CB2nPqJ sOuj3/wmvMs/TU+XLPqq8t4pZKT4biZFnkUDsAwd6Ms5nyMMdvjOn1SFMw597LSW wNovsSj25hjxhkIodonuZyxBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtZFP7aIa 7bF3PeuoVq0ihcKnCNwwHwYDVR0jBBgwFoAUX5mZzaZKKhpmLlTmGh1XmMaIzMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NDEzL0RGOTlBMUU4N0JF ODExRUI5QTA5MjM0MkM0RjlBRTAyL1g1bVp6YVpLS2hwbUxsVG1HaDFYbU1hSXpN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWDVtWnphWktLaHBtTGxUbUdoMVhtTWFJek1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 NDEzL0RGOTlBMUU4N0JFODExRUI5QTA5MjM0MkM0RjlBRTAyL1g1bVp6YVpLS2hw bUxsVG1HaDFYbU1hSXpNTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADacVfnu4uqqshMimkw1iWTSOpMb8tjQgOZ0A5Msu0rwdV5Y2k06MRfW FyenP/UNirjAGKZMocFV9gsDE4FKhKbDUvQXcNL/en0khH16CwPlx7249AX5zouX /IHhQd2sY5EwiSHzod+vL9AyIft1CGe++PIEzQmLMO2ySrRwk8jjpn+cq3PMnZAL UGnYlMbXG5Rp1GE2f8rVQXtkiYFVVppmdnIIex81jo9B5pxeqVaYdJqFp932rW73 D48J7zMQrAkP5YFrGTo3em1akP7h7uBJlaYZOSntHlW3CVsPdpst10G+RpaQMkAo 9+t+JrOCKf5ujNLB7qv5hEoNjwpBHp8= -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:12 2025 by rpki-client