$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: t+w9a3cklI1B98SmUh8wvZF+1bk5LCn+Ek62yFaGaUk= Subject key identifier: 7E:0A:FF:6C:74:95:64:60:CB:2B:BB:A3:FA:71:A1:66:5C:B7:E8:B5 Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0AFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 1324 Signing time: Thu 12 Jun 2025 19:09:51 +0000 Manifest this update: Thu 12 Jun 2025 19:09:51 +0000 Manifest next update: Thu 19 Jun 2025 19:09:51 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: TX6n41t9WZ9gYWnAs8+A/Rw2GZlg+q2tMkwIka69TXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2814 (0xafe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Validity Not Before: Jun 12 19:09:51 2025 GMT Not After : Jun 19 19:09:51 2025 GMT Subject: CN=684b25ff-d106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:72:8f:cb:5b:a5:0e:d3:1f:c7:81:fb:29: 02:c5:6b:cb:81:43:fb:03:ba:45:42:da:96:d8:29: 8e:1d:ea:ab:48:89:e3:1b:d8:3c:3c:c2:01:11:ae: 7f:fb:82:33:07:ca:05:48:fc:e7:84:14:4f:12:aa: 39:a6:9d:ee:22:37:7b:36:0f:76:52:91:2a:77:5b: 1a:3f:c0:bd:6c:00:3a:13:e7:ce:d7:86:ac:ab:7c: 54:da:26:15:9d:fd:fd:cc:15:66:79:fc:26:dd:69: 45:12:53:32:72:d9:ea:3b:b5:2a:1e:45:a7:1c:c3: 04:7e:dc:be:d6:cf:bb:23:a2:46:4a:35:88:75:1c: 8e:47:40:7d:0a:4e:5b:10:b2:4d:90:00:a1:8a:69: 50:bd:61:4c:59:87:23:b3:1a:a5:27:dd:15:ca:6e: 24:90:73:98:b9:04:44:e0:9a:c6:ed:90:72:5a:f1: 63:07:bf:b6:6d:a0:f5:19:9d:a6:5b:aa:27:3a:7d: 3e:5c:22:1c:3e:2f:50:ae:15:21:0c:b4:c5:6b:2f: f3:e0:dc:7e:b2:c9:5b:78:ca:59:cf:e5:a0:be:92: 76:29:d4:fc:cc:b8:26:4b:f5:7a:ec:7e:3b:51:8a: 9a:a3:df:22:c0:3c:ed:68:40:ee:c3:4a:89:f9:4c: c4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0A:FF:6C:74:95:64:60:CB:2B:BB:A3:FA:71:A1:66:5C:B7:E8:B5 X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:88:b6:23:0c:de:fd:1c:61:43:2e:5e:05:13:f8:05:0f:ef: 86:7d:d2:c6:5e:e8:74:40:8d:c3:d8:6a:35:12:c4:b5:db:15: b7:73:f9:8c:1e:b9:70:ec:a1:6c:f2:79:76:d9:e5:69:de:d7: 69:bc:e9:20:b6:12:43:90:55:ba:43:b6:9e:96:49:d1:18:1f: 43:e8:37:0f:b8:9a:3b:e6:ae:50:dd:a2:5b:82:7d:4d:87:25: 25:b8:3f:f0:64:4b:1c:98:2e:31:90:c5:a9:76:20:5d:b5:66: b2:d2:ba:13:22:2a:34:1d:6c:12:21:18:a5:b3:86:6d:ef:b8: a6:3b:2b:e3:ea:2e:da:d8:c0:3b:06:ee:1c:1b:ef:e7:7e:ba: 26:1b:51:12:55:80:20:e8:90:18:fd:dd:93:87:ef:1e:f0:76: db:cc:91:da:c2:f8:30:a3:d7:90:26:4d:cf:98:09:71:00:2b: 5d:d5:f0:ff:9b:f7:d7:41:bc:27:d6:d5:d5:2f:10:ed:00:cc: 0e:d0:2f:ef:84:5c:5a:c9:0a:32:ec:72:54:3d:a0:17:3e:ae: 73:5e:ae:d2:59:56:df:e8:29:8f:16:bc:a1:c1:b6:4e:3e:aa: 4f:df:2b:75:e4:cf:34:4f:ee:4f:3c:d2:15:24:1e:46:4e:40: 57:95:f3:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjUwNjEyMTkwOTUxWhcNMjUwNjE5MTkwOTUxWjAYMRYwFAYD VQQDEw02ODRiMjVmZi1kMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKNyj8tbpQ7TH8eB+ykCxWvLgUP7A7pFQtqW2CmOHeqrSInjG9g8PMIBEa5/ +4IzB8oFSPznhBRPEqo5pp3uIjd7Ng92UpEqd1saP8C9bAA6E+fO14asq3xU2iYV nf39zBVmefwm3WlFElMyctnqO7UqHkWnHMMEfty+1s+7I6JGSjWIdRyOR0B9Ck5b ELJNkAChimlQvWFMWYcjsxqlJ90Vym4kkHOYuQRE4JrG7ZByWvFjB7+2baD1GZ2m W6onOn0+XCIcPi9QrhUhDLTFay/z4Nx+sslbeMpZz+WgvpJ2KdT8zLgmS/V67H47 UYqao98iwDztaEDuw0qJ+UzEuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4K/2x0 lWRgyyu7o/pxoWZct+i1MB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOiLYjDN79HGFDLl4FE/gFD++GfdLGXuh0QI3D2Go1EsS12xW3c/mM Hrlw7KFs8nl22eVp3tdpvOkgthJDkFW6Q7aelknRGB9D6DcPuJo75q5Q3aJbgn1N hyUluD/wZEscmC4xkMWpdiBdtWay0roTIio0HWwSIRils4Zt77imOyvj6i7a2MA7 Bu4cG+/nfromG1ESVYAg6JAY/d2Th+8e8HbbzJHawvgwo9eQJk3PmAlxACtd1fD/ m/fXQbwn1tXVLxDtAMwO0C/vhFxayQoy7HJUPaAXPq5zXq7SWVbf6CmPFryhwbZO PqpP3yt15M80T+5PPNIVJB5GTkBXlfPI -----END CERTIFICATE-----Generated at Sat Jun 14 18:38:14 2025 by rpki-client