$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft File: x5ESx8WsNlgyIdH5RnUZbCE26r4.mft (raw, json) Hash identifier: B7cw+k9HdEyh51IpWmecHpBDlG9jt+rUKxTs2OpEB6M= Subject key identifier: 07:1C:25:38:7A:4F:75:DB:10:18:EC:EA:13:07:FD:1D:8D:3A:C5:47 Authority key identifier: C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE Certificate issuer: /CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Certificate serial: 0723 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft Manifest number: 0718 Signing time: Thu 24 Apr 2025 21:42:01 +0000 Manifest this update: Thu 24 Apr 2025 21:42:01 +0000 Manifest next update: Thu 01 May 2025 21:42:01 +0000 Files and hashes: 1: x5ESx8WsNlgyIdH5RnUZbCE26r4.crl (hash: sYKodWQoBbj36aeuZaj8q2FXEXhGul4b9ihKOkvItC8=) 2: 2E7B4F0CD45811EF908AFE44C4F9AE02.roa (hash: S3+8DNkqu1goqREjsGkO1YtrwS4ggwnIUbsG5DF2wXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1827 (0x723) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB9, serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Validity Not Before: Apr 24 21:42:01 2025 GMT Not After : May 1 21:42:01 2025 GMT Subject: CN=680ab029-1de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:18:1f:24:9d:23:88:d0:8a:1b:f8:2e:c7: 70:5b:ac:5b:dd:36:03:1d:63:c5:2e:ac:b7:e1:00: 36:d5:1f:a1:3c:da:1c:9a:db:8f:2a:d5:9e:80:62: 8f:99:6b:e7:44:cf:43:f1:2b:b2:bc:90:93:7d:00: 66:a7:b7:00:b3:06:2a:da:78:8a:33:d4:41:f9:60: 97:d3:9a:2d:c9:98:9e:7d:b2:f6:92:09:83:6c:28: f3:3f:ab:b6:29:43:4f:b7:35:52:62:43:0c:39:19: b0:98:1e:98:cf:ef:ec:43:1e:d7:a2:ae:9b:85:40: cd:88:3e:98:1e:83:69:40:e9:9e:0f:a8:de:9f:4c: 5f:b0:97:2f:eb:c4:16:0e:e5:be:b5:54:f8:00:84: 8a:70:68:99:f1:b4:eb:74:74:31:ef:cf:3d:9b:bf: 5b:86:38:5d:4e:d8:df:d4:88:f2:6e:85:48:ee:18: b8:e1:0d:43:16:65:ee:aa:1d:44:55:75:f2:b4:29: 4b:c0:00:24:bf:81:45:52:4c:8e:40:37:9b:5c:8e: 0b:7e:f2:0a:03:83:85:31:2c:70:0b:9d:85:f6:90: 5c:eb:09:fc:47:67:37:20:35:c8:e1:6d:df:83:33: ec:08:53:49:98:f3:21:99:46:a1:0d:ce:d1:5f:2a: 55:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1C:25:38:7A:4F:75:DB:10:18:EC:EA:13:07:FD:1D:8D:3A:C5:47 X509v3 Authority Key Identifier: keyid:C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:78:0b:52:62:72:c5:34:8c:29:5a:d7:a4:db:fb:cb:c6:85: b6:87:af:d7:c7:03:93:b5:06:32:57:35:1b:87:70:31:14:37: b8:06:c3:d3:b3:1d:ba:46:97:a0:ab:ef:8e:53:12:a7:d1:db: 70:47:7c:d1:82:d7:b5:df:c6:8e:80:65:b9:dd:e2:25:d7:e4: 16:06:73:b1:3f:c1:47:c0:ea:dd:86:95:54:e3:da:65:df:0a: 5a:40:d6:c2:c0:82:63:09:29:ed:ca:8e:c6:21:6f:4c:e2:c1: 92:33:5a:f5:d5:81:4e:a9:50:00:89:29:8d:55:d5:1a:e6:37: fd:ca:ed:42:c1:42:fc:31:3d:93:37:9b:e7:cc:c9:2e:eb:f5: ef:e3:73:3d:04:0e:ae:31:c3:b8:29:83:0e:ec:1c:52:bc:15: af:9e:46:42:df:b4:f2:b5:63:cb:7f:a8:6b:59:44:0c:4b:48: f9:da:a8:52:cd:c4:59:9e:9f:e6:70:91:53:b1:8c:41:39:d7: 3b:1c:61:ff:15:aa:ea:2f:95:97:87:6c:76:83:c7:cc:d9:e0: 5f:ec:9e:0e:a2:d5:dd:37:14:c3:9a:0b:b4:2b:7f:d2:67:eb: 0b:27:7b:cc:a9:72:91:65:a3:2a:92:f9:9f:96:ce:a6:f8:8c: 0b:4f:25:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjkxMTAvBgNVBAUTKEM3OTExMkM3QzVBQzM2NTgzMjIxRDFGOTQ2NzUxOTZD MjEzNkVBQkUwHhcNMjUwNDI0MjE0MjAxWhcNMjUwNTAxMjE0MjAxWjAYMRYwFAYD VQQDEw02ODBhYjAyOS0xZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSwYHySdI4jQihv4LsdwW6xb3TYDHWPFLqy34QA21R+hPNocmtuPKtWegGKP mWvnRM9D8SuyvJCTfQBmp7cAswYq2niKM9RB+WCX05otyZiefbL2kgmDbCjzP6u2 KUNPtzVSYkMMORmwmB6Yz+/sQx7Xoq6bhUDNiD6YHoNpQOmeD6jen0xfsJcv68QW DuW+tVT4AISKcGiZ8bTrdHQx7889m79bhjhdTtjf1IjyboVI7hi44Q1DFmXuqh1E VXXytClLwAAkv4FFUkyOQDebXI4LfvIKA4OFMSxwC52F9pBc6wn8R2c3IDXI4W3f gzPsCFNJmPMhmUahDc7RXypV6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAccJTh6 T3XbEBjs6hMH/R2NOsVHMB8GA1UdIwQYMBaAFMeREsfFrDZYMiHR+UZ1GWwhNuq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCOS82QkRFQUE3RTM5 MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05sZ3lJZEg1Um5VWmJDRTI2 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1RVN4OFdzTmxneUlkSDVSblVaYkNFMjZyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCOS82QkRFQUE3RTM5MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05s Z3lJZEg1Um5VWmJDRTI2cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzeAtSYnLFNIwpWtek2/vLxoW2h6/XxwOTtQYyVzUbh3AxFDe4BsPT sx26Rpegq++OUxKn0dtwR3zRgte138aOgGW53eIl1+QWBnOxP8FHwOrdhpVU49pl 3wpaQNbCwIJjCSntyo7GIW9M4sGSM1r11YFOqVAAiSmNVdUa5jf9yu1CwUL8MT2T N5vnzMku6/Xv43M9BA6uMcO4KYMO7BxSvBWvnkZC37TytWPLf6hrWUQMS0j52qhS zcRZnp/mcJFTsYxBOdc7HGH/FarqL5WXh2x2g8fM2eBf7J4OotXdNxTDmgu0K3/S Z+sLJ3vMqXKRZaMqkvmfls6m+IwLTyUd -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:13 2025 by rpki-client