$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft File: XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json) Hash identifier: bswyKw9nX1Co9lxu8tygKXjkZ4o5UVS+xKLFel2gYGQ= Subject key identifier: C6:A2:8F:B1:72:48:A2:1A:C6:72:DE:CD:FB:95:7E:E4:FF:00:5A:1E Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Certificate serial: 12C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft Manifest number: 4792 Signing time: Sat 14 Jun 2025 14:20:53 +0000 Manifest this update: Sat 14 Jun 2025 14:20:52 +0000 Manifest next update: Sat 21 Jun 2025 14:20:52 +0000 Files and hashes: 1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: 9+btvC7VxzvEJ9rtKwl9siSqiOQOzajiARDtQR/rhfY=) 2: C5FA430E179711EDB9008D18C4F9AE02.roa (hash: GHnN7IPBztwTSkz/5T1Pzn2mpFjuZRSGTdYW2a+IpUM=) 3: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: idks1lefYLO6nPenvXoGS0zMdLXoYOwMfOiIKkDlkB8=) 4: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: gZAAhBS7lDX/ARKaEp+quX+YnSdkN0XwL2ShlYH1ilM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4805 (0x12c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD Validity Not Before: Jun 14 14:20:52 2025 GMT Not After : Jun 21 14:20:52 2025 GMT Subject: CN=684d8545-0ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:a4:9e:08:82:c8:de:66:0c:a1:48:6d:06: 36:f9:38:99:8b:d3:b7:b3:ef:cc:88:21:67:29:84: 1c:91:03:87:06:0a:81:6f:55:90:07:dc:83:38:94: 62:9b:68:c0:12:00:56:1a:66:b0:31:fd:19:b1:ee: fa:fb:a8:80:2c:00:90:4d:e2:5c:fb:23:e9:55:dc: 2d:2b:54:63:9b:d6:94:06:30:12:a2:68:39:40:3a: fb:53:01:1b:bf:33:d0:7d:4b:78:92:8f:3e:c0:a4: d7:1e:fa:42:01:99:98:f0:db:09:26:97:b0:d8:30: 71:ca:a6:68:0a:e0:a8:63:52:ae:fe:04:e2:e7:56: 92:0c:1d:94:4f:64:ef:53:92:d1:30:fb:69:73:e7: 33:8c:80:c8:7e:fd:b3:2e:99:5f:ca:8c:3a:18:a5: f2:32:e2:76:62:78:42:1d:14:01:70:26:cc:d9:f1: 3c:44:47:e6:ff:a5:17:59:d6:ac:ed:2e:b1:16:a7: c4:44:df:d6:72:4c:23:84:45:2e:a6:09:ef:e7:6d: a0:1c:74:0f:61:2a:68:b8:76:fc:cd:65:33:35:7e: 96:57:4f:fb:bd:50:a6:14:42:3b:19:bf:cf:39:57: 79:d1:9f:23:a0:b0:1a:60:9e:e5:22:18:b3:04:7f: 1a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A2:8F:B1:72:48:A2:1A:C6:72:DE:CD:FB:95:7E:E4:FF:00:5A:1E X509v3 Authority Key Identifier: keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:58:eb:f2:66:a3:e5:69:91:bf:b7:26:3c:e9:9f:57:29:8b: f3:78:c4:f8:22:8f:eb:49:56:87:89:0b:c1:68:eb:22:51:4c: c6:4b:45:97:97:c8:19:48:0f:13:87:03:b1:aa:2b:9c:8d:e2: b3:d4:14:b9:8b:4c:c2:d4:e1:f9:f8:43:f2:bc:7a:6d:4d:bd: 01:1f:d7:38:9e:a0:86:2f:f2:0c:43:6d:13:03:23:57:c4:56: 3d:7c:69:1f:33:82:29:74:8e:0a:4a:e4:fd:2b:86:cc:39:dd: 33:f8:cf:29:9d:c4:b3:0b:c4:a8:ee:a2:80:a8:ee:58:30:34: dc:d3:fe:d0:43:97:35:c3:a7:48:42:20:a3:aa:d2:a4:ce:37: b1:2b:f6:6e:f1:55:b8:42:7a:df:54:6c:8b:41:58:8e:9d:45: ea:5f:a8:f3:4f:ee:1a:6c:51:8e:2d:32:83:5b:d7:03:91:bc: 58:41:7c:17:0b:76:30:5a:e2:3f:64:74:c7:3f:96:49:22:ef: 5f:bf:02:fb:a8:4d:77:a8:47:f2:dd:11:45:e2:12:dd:9b:05: 5c:57:91:3c:95:9a:24:be:94:c2:0f:2c:a9:11:c9:81:df:da: 12:87:a0:aa:f6:d0:e3:10:fe:71:c3:de:9d:48:bc:39:44:74: cc:30:47:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDVFNTEwOUJFMzRCODFDMENCQkUwRTQzNTlBNzc4MUE0 NjI0QjlGQ0QwHhcNMjUwNjE0MTQyMDUyWhcNMjUwNjIxMTQyMDUyWjAYMRYwFAYD VQQDEw02ODRkODU0NS0wZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lmkngiCyN5mDKFIbQY2+TiZi9O3s+/MiCFnKYQckQOHBgqBb1WQB9yDOJRi m2jAEgBWGmawMf0Zse76+6iALACQTeJc+yPpVdwtK1Rjm9aUBjASomg5QDr7UwEb vzPQfUt4ko8+wKTXHvpCAZmY8NsJJpew2DBxyqZoCuCoY1Ku/gTi51aSDB2UT2Tv U5LRMPtpc+czjIDIfv2zLplfyow6GKXyMuJ2YnhCHRQBcCbM2fE8REfm/6UXWdas 7S6xFqfERN/WckwjhEUupgnv522gHHQPYSpouHb8zWUzNX6WV0/7vVCmFEI7Gb/P OVd50Z8joLAaYJ7lIhizBH8arwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaij7Fy SKIaxnLezfuVfuT/AFoeMB8GA1UdIwQYMBaAFF5RCb40uBwMu+DkNZp3gaRiS5/N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhBeTc0T1ExbW5lQnBHSkxu ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hsRUp2alM0SEF5NzRPUTFtbmVCcEdKTG44MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhB eTc0T1ExbW5lQnBHSkxuODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClWOvyZqPlaZG/tyY86Z9XKYvzeMT4Io/rSVaHiQvBaOsiUUzGS0WX l8gZSA8ThwOxqiucjeKz1BS5i0zC1OH5+EPyvHptTb0BH9c4nqCGL/IMQ20TAyNX xFY9fGkfM4IpdI4KSuT9K4bMOd0z+M8pncSzC8So7qKAqO5YMDTc0/7QQ5c1w6dI QiCjqtKkzjexK/Zu8VW4QnrfVGyLQViOnUXqX6jzT+4abFGOLTKDW9cDkbxYQXwX C3YwWuI/ZHTHP5ZJIu9fvwL7qE13qEfy3RFF4hLdmwVcV5E8lZokvpTCDyypEcmB 39oSh6Cq9tDjEP5xw96dSLw5RHTMMEfj -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:15 2025 by rpki-client