$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: VfhOs4IluiDyC3eUmtGPUxEl8tDhK4MG9Te+g3qtFf8= Subject key identifier: E6:6E:9C:B1:99:3A:1D:37:31:95:91:17:7C:E6:C7:41:58:FB:E0:E6 Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0B18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 1372 Signing time: Sat 02 Aug 2025 19:34:52 +0000 Manifest this update: Sat 02 Aug 2025 19:34:52 +0000 Manifest next update: Sat 09 Aug 2025 19:34:52 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: Jdz2sCC5xAC2DYpbu90VH1IMzr4QuXsM3wzK6Cm7oAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2840 (0xb18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Validity Not Before: Aug 2 19:34:52 2025 GMT Not After : Aug 9 19:34:52 2025 GMT Subject: CN=688e685c-a41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:15:2c:36:7c:b0:28:a1:70:df:64:45:78:bd: 05:5e:d8:ff:89:d2:1a:a7:a2:d7:14:26:c7:a0:8f: 6f:91:e2:06:fe:32:ff:e5:25:d9:d2:f2:b3:39:94: 21:7e:ec:3d:02:93:10:9c:40:4e:3b:f2:73:ba:c1: ec:f6:27:be:ae:e4:59:c3:48:5e:bb:08:cd:10:1f: fe:95:5a:7b:e7:7c:c1:56:48:a4:3b:9d:49:87:9e: 4d:62:c6:f0:75:d6:93:58:45:a4:d5:78:2b:a1:8d: 4a:65:f5:21:30:15:f6:f0:31:7c:95:c4:23:1d:e2: cc:91:30:31:48:b8:61:67:9d:25:16:0f:90:18:b9: f2:a6:e5:4f:6e:e2:90:63:a7:91:97:43:ee:b3:10: 15:01:44:8a:72:74:ef:69:4f:66:a6:8c:63:b5:a6: 2a:59:78:82:eb:e3:65:c0:f0:26:e9:7b:73:40:34: a6:72:e2:26:b7:18:c4:92:aa:d1:30:8e:e2:ef:e8: 82:d1:99:cf:92:20:bb:a7:9a:14:91:2c:24:53:42: 54:8c:09:4e:de:93:44:cb:45:57:ba:dc:bf:d1:e6: 16:0f:37:89:8d:21:f2:6f:42:f8:45:43:34:7f:f0: a7:04:c8:c4:ad:50:57:4b:5e:3a:27:df:bd:30:e7: a5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6E:9C:B1:99:3A:1D:37:31:95:91:17:7C:E6:C7:41:58:FB:E0:E6 X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c6:56:79:76:4d:d0:99:7b:97:0c:f2:79:bf:a0:ee:65:eb: 68:a1:0e:92:1e:e6:27:46:1b:9d:27:4b:78:9c:8e:87:49:bf: fe:05:69:09:57:b9:c8:25:3a:cf:32:2f:f4:9d:11:93:c6:a0: b9:fa:c4:27:55:83:43:b3:1e:9c:de:1e:fe:23:0d:f4:7a:77: 8d:95:38:59:8e:29:df:ab:cb:4f:43:c0:41:43:4a:d2:46:d2: b3:03:d9:16:71:22:cc:d2:4f:f9:40:d0:2b:c1:ce:c1:37:18: a5:93:19:e2:60:22:0d:12:ec:1a:96:ca:47:26:0b:e4:ee:95: 63:70:45:f7:80:c9:31:8f:57:16:d1:8d:62:cd:9e:24:e9:d7: cd:42:ca:87:26:ed:d7:89:4e:42:0a:fd:26:ac:68:ce:11:07: 95:ac:da:be:9f:3d:49:d8:15:87:b9:23:86:12:74:15:cc:18: c1:a6:83:b8:d4:dd:a7:74:a4:67:0f:0a:56:6a:1d:dd:37:82: 81:fe:c7:79:d4:33:15:fd:1b:11:9c:ce:07:3d:af:07:d5:00: 38:e7:73:24:68:19:2f:bf:c8:ca:7f:7b:3a:5c:71:00:5c:41: e5:c9:46:5b:78:25:9c:8d:4c:f8:df:b1:6a:bb:ad:cc:5a:52: 6e:e9:0c:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjUwODAyMTkzNDUyWhcNMjUwODA5MTkzNDUyWjAYMRYwFAYD VQQDEw02ODhlNjg1Yy1hNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhUsNnywKKFw32RFeL0FXtj/idIap6LXFCbHoI9vkeIG/jL/5SXZ0vKzOZQh fuw9ApMQnEBOO/JzusHs9ie+ruRZw0heuwjNEB/+lVp753zBVkikO51Jh55NYsbw ddaTWEWk1XgroY1KZfUhMBX28DF8lcQjHeLMkTAxSLhhZ50lFg+QGLnypuVPbuKQ Y6eRl0PusxAVAUSKcnTvaU9mpoxjtaYqWXiC6+NlwPAm6XtzQDSmcuImtxjEkqrR MI7i7+iC0ZnPkiC7p5oUkSwkU0JUjAlO3pNEy0VXuty/0eYWDzeJjSHyb0L4RUM0 f/CnBMjErVBXS146J9+9MOelxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZunLGZ Oh03MZWRF3zmx0FY++DmMB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDxlZ5dk3QmXuXDPJ5v6DuZetooQ6SHuYnRhudJ0t4nI6HSb/+BWkJ V7nIJTrPMi/0nRGTxqC5+sQnVYNDsx6c3h7+Iw30eneNlThZjinfq8tPQ8BBQ0rS RtKzA9kWcSLM0k/5QNArwc7BNxilkxniYCINEuwalspHJgvk7pVjcEX3gMkxj1cW 0Y1izZ4k6dfNQsqHJu3XiU5CCv0mrGjOEQeVrNq+nz1J2BWHuSOGEnQVzBjBpoO4 1N2ndKRnDwpWah3dN4KB/sd51DMV/RsRnM4HPa8H1QA453MkaBkvv8jKf3s6XHEA XEHlyUZbeCWcjUz437Fqu63MWlJu6Qzw -----END CERTIFICATE-----Generated at Mon Aug 4 14:58:28 2025 by rpki-client