$ rpki-client -vvf rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft File: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft (raw, json) Hash identifier: xXS1P8s+806TUqxEZOBjXVq+/VAMlQCDd6taQlufRC0= Subject key identifier: 2B:23:D3:F5:7E:56:82:D7:4E:0E:DC:BF:0E:5C:8E:BB:26:86:B2:4C Authority key identifier: C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 Certificate issuer: /CN=A91222FA/serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Certificate serial: 0542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft Manifest number: 053E Signing time: Wed 02 Jul 2025 23:46:30 +0000 Manifest this update: Wed 02 Jul 2025 23:46:29 +0000 Manifest next update: Wed 09 Jul 2025 23:46:29 +0000 Files and hashes: 1: x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl (hash: ZrZcP/RfkGdrg+zn3zuUWpfLj0eLhCbt+OP6Y03g97s=) 2: BFA10A96FA8911EB8122C53FC4F9AE02.roa (hash: 9X0FABgF4N/aMCwLf/2Sir07UctuAOlwN446kkP4Osg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1346 (0x542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222FA, serialNumber=C740DD4924C082341737E219E15AE68F7017DCB8 Validity Not Before: Jul 2 23:46:29 2025 GMT Not After : Jul 9 23:46:29 2025 GMT Subject: CN=6865c4d5-2ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e8:fa:31:cb:26:1b:f0:de:d0:d3:b7:a1:c8: c4:e8:fb:a0:54:1e:23:5f:87:f4:ca:48:4f:21:e6: 3e:8b:f0:43:56:91:e1:91:d6:92:7d:a3:55:7e:f3: 70:46:3f:47:76:4e:4a:37:79:01:5d:67:c7:57:83: 60:6a:41:67:4c:46:7d:7c:76:8a:bf:8a:79:9b:02: 59:2c:d3:ee:9f:83:39:27:5b:0d:c1:1a:37:ee:9b: 46:c4:3a:be:de:e6:84:73:83:2b:b7:41:25:8c:d5: 0b:44:a6:fb:e0:b4:2a:a8:8e:be:ef:54:9f:6b:a3: a2:c6:3c:8c:c6:8a:9c:22:a5:50:bb:a7:29:98:f4: 38:b8:ff:4d:6a:c4:c3:be:58:19:d4:c2:57:b0:69: 10:97:72:ea:fa:64:f3:53:a7:bf:3c:96:cb:17:c1: f2:a8:39:aa:0e:42:ac:e8:4d:21:2b:ed:e8:73:5e: 86:79:55:d8:ef:c0:36:8b:c4:0b:83:ad:c4:6d:68: b7:e6:cb:e7:65:3c:12:ee:f5:85:d5:f3:d7:01:f5: 56:68:ff:f3:99:c9:75:ea:2e:d4:22:40:3d:eb:e3: bb:cd:9a:34:b4:34:d8:f9:23:eb:57:fa:5a:2a:11: 7d:25:fa:35:23:bd:2f:22:2e:aa:6b:42:7f:35:cc: f5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:23:D3:F5:7E:56:82:D7:4E:0E:DC:BF:0E:5C:8E:BB:26:86:B2:4C X509v3 Authority Key Identifier: keyid:C7:40:DD:49:24:C0:82:34:17:37:E2:19:E1:5A:E6:8F:70:17:DC:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222FA/E80DAA2EFA8511EBB6682F37C4F9AE02/x0DdSSTAgjQXN-IZ4Vrmj3AX3Lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:51:3d:22:83:8d:5b:26:1f:c7:f9:43:fe:ff:0c:60:cb:f0: c4:72:b7:47:af:2d:ef:cb:9c:fd:e7:fc:d5:68:2b:9d:24:8a: 36:46:0e:67:1c:78:af:e2:7c:09:26:f2:63:18:7e:e0:e0:6c: e6:f4:22:b6:b9:e6:dd:dc:18:65:82:b3:a9:0a:0b:a8:64:8b: 61:b5:72:ee:5c:b8:1b:8e:0a:7e:e8:94:bd:7e:55:68:db:e8: 84:f1:60:67:6f:99:2d:8a:6a:6d:e7:2c:80:a5:66:bc:89:46: e4:4e:f6:48:e5:f9:8f:38:47:90:86:b2:d8:35:94:1b:31:46: 21:09:10:3e:01:e0:4a:03:fa:92:9d:a4:86:02:cd:2b:56:1e: a6:72:4b:09:dd:20:6b:72:6c:3d:f1:cb:9f:42:b3:e9:57:f7: 51:f4:6d:28:f4:47:25:bf:22:40:05:e2:ce:d9:2c:47:99:de: c1:40:f6:8a:a3:21:c4:dc:d6:7b:c2:41:79:8b:76:ba:03:30: c6:f4:7b:1c:99:40:8d:f2:cb:d2:38:19:bc:08:38:19:1b:16: 99:39:0c:8c:79:87:c0:5a:8a:cc:ac:75:aa:88:57:14:f0:a2: f4:fc:e1:ba:b8:58:45:ab:6e:ac:52:39:47:85:ba:79:17:a0: 55:eb:c1:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyRkExMTAvBgNVBAUTKEM3NDBERDQ5MjRDMDgyMzQxNzM3RTIxOUUxNUFFNjhG NzAxN0RDQjgwHhcNMjUwNzAyMjM0NjI5WhcNMjUwNzA5MjM0NjI5WjAYMRYwFAYD VQQDEw02ODY1YzRkNS0yYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uj6McsmG/De0NO3ocjE6PugVB4jX4f0ykhPIeY+i/BDVpHhkdaSfaNVfvNw Rj9Hdk5KN3kBXWfHV4NgakFnTEZ9fHaKv4p5mwJZLNPun4M5J1sNwRo37ptGxDq+ 3uaEc4Mrt0EljNULRKb74LQqqI6+71Sfa6OixjyMxoqcIqVQu6cpmPQ4uP9NasTD vlgZ1MJXsGkQl3Lq+mTzU6e/PJbLF8HyqDmqDkKs6E0hK+3oc16GeVXY78A2i8QL g63EbWi35svnZTwS7vWF1fPXAfVWaP/zmcl16i7UIkA96+O7zZo0tDTY+SPrV/pa KhF9Jfo1I70vIi6qa0J/Ncz1cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsj0/V+ VoLXTg7cvw5cjrsmhrJMMB8GA1UdIwQYMBaAFMdA3UkkwII0FzfiGeFa5o9wF9y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJGQS9FODBEQUEyRUZB ODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdqUVhOLUlaNFZybWozQVgz TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwRGRTU1RBZ2pRWE4tSVo0VnJtajNBWDNMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJGQS9FODBEQUEyRUZBODUxMUVCQjY2ODJGMzdDNEY5QUUwMi94MERkU1NUQWdq UVhOLUlaNFZybWozQVgzTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXUT0ig41bJh/H+UP+/wxgy/DEcrdHry3vy5z95/zVaCudJIo2Rg5n HHiv4nwJJvJjGH7g4Gzm9CK2uebd3BhlgrOpCguoZIthtXLuXLgbjgp+6JS9flVo 2+iE8WBnb5ktimpt5yyApWa8iUbkTvZI5fmPOEeQhrLYNZQbMUYhCRA+AeBKA/qS naSGAs0rVh6mcksJ3SBrcmw98cufQrPpV/dR9G0o9EclvyJABeLO2SxHmd7BQPaK oyHE3NZ7wkF5i3a6AzDG9HscmUCN8svSOBm8CDgZGxaZOQyMeYfAWorMrHWqiFcU 8KL0/OG6uFhFq26sUjlHhbp5F6BV68Fg -----END CERTIFICATE-----Generated at Thu Jul 3 02:53:09 2025 by rpki-client