$ rpki-client -vvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json) Hash identifier: O485tiOj63JzuqBKX1PyDmtElN8SZRxw96HM6dcOcMY= Subject key identifier: 55:D4:70:4A:67:1F:6A:A6:37:3F:71:E6:16:AF:84:3D:95:E1:A0:BC Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Certificate serial: 0B03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft Manifest number: 0AF3 Signing time: Wed 14 May 2025 19:32:26 +0000 Manifest this update: Wed 14 May 2025 19:32:25 +0000 Manifest next update: Wed 21 May 2025 19:32:25 +0000 Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: w/o2MFvbyNXFa+GSBMFrW3WRcz5a02c4dhsK1U/ekSY=) 2: 0F29204CB4B511EF86D6381EC4F9AE02.roa (hash: 2cXl/5f431sLYOEV9wOGgPMtNZFFmZ0haqZGiKbsEGE=) 3: 2E4BBE4EB4B511EF8A24821EC4F9AE02.roa (hash: UpMy5YvHwAoOrHu9/2m6YmhC+FBzuF02PJm6nhV30kU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2819 (0xb03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026 Validity Not Before: May 14 19:32:25 2025 GMT Not After : May 21 19:32:25 2025 GMT Subject: CN=6824efca-d1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:fc:7b:e8:c7:6f:c5:04:7e:6d:dc:33:c3: 87:fc:b3:8a:b5:68:3e:42:3c:1d:84:61:f8:ba:61: e5:80:c9:c0:5b:91:d4:a2:4e:75:49:6f:7f:f1:a0: 17:ba:ed:e4:8b:51:e5:a4:96:0f:63:fe:76:9e:a3: a1:86:62:d2:a0:bb:41:7d:ab:25:25:30:5f:95:ee: b9:ea:42:ef:5c:09:c4:21:e2:eb:26:5e:2f:fd:2d: 50:92:1f:c9:ae:e6:9d:09:58:1e:fb:ce:36:47:d3: 9e:9f:49:89:24:e0:3a:35:73:41:7e:4f:ce:4c:49: 77:a3:66:2d:a3:43:d3:bd:c2:1a:41:58:03:f1:ee: 97:10:f2:a0:48:ec:68:b3:51:e9:1e:e1:02:03:4c: d8:16:5d:3e:4d:5a:12:c0:f2:74:8a:ab:8c:99:55: f1:64:6a:1f:e0:10:93:db:51:aa:de:28:de:e7:66: 42:bd:26:d2:e1:cb:05:d0:08:44:4f:62:e7:5d:c3: 12:d1:e0:57:e3:21:cf:23:a5:44:00:12:ea:4a:19: e5:d0:1a:66:c5:f9:98:e7:59:46:dd:46:8d:90:7d: c0:5a:5b:e0:b8:c0:fb:c2:46:2b:ab:71:40:5b:21: 11:7f:d1:23:3f:db:8f:0c:dd:60:ff:3c:81:3f:ab: 84:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D4:70:4A:67:1F:6A:A6:37:3F:71:E6:16:AF:84:3D:95:E1:A0:BC X509v3 Authority Key Identifier: keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:76:41:24:fd:17:72:c6:07:e6:93:d4:f2:15:41:54:f6:81: f9:65:94:31:cc:70:f2:a1:53:08:55:d8:ca:a9:54:0a:78:60: 66:9c:dd:d6:91:a7:80:b3:d8:7f:10:e9:91:4c:ca:6b:e8:d1: e0:3d:e7:0e:8c:cf:74:3c:6e:a9:9a:3d:3d:d9:17:69:a8:04: 70:38:02:73:49:aa:1a:3e:92:93:5a:22:7f:82:5e:54:78:57: da:e6:e2:92:8b:6e:71:3e:d7:e9:46:b8:69:a3:9f:3e:1f:08: 89:ce:e3:66:91:28:0e:6c:11:72:e4:34:c7:be:5d:51:29:a9: 98:10:90:1b:94:e9:5a:eb:ca:a3:07:0a:53:f3:00:28:c6:15: da:45:e1:5b:77:8b:05:2d:53:17:a5:7f:24:63:1a:00:d2:e5: 75:29:e4:c9:a4:5c:e7:de:d1:e6:67:8e:8a:f3:f1:b3:ea:32: 79:28:b2:a0:5d:42:a3:a5:1a:47:eb:3c:42:74:ec:cf:46:cc: 80:ee:31:a4:b2:19:2c:77:04:54:fc:ec:69:5d:27:bd:93:29: 73:40:e4:4c:55:c8:b9:29:d8:7b:a2:a6:f4:d3:b7:5a:2f:21: 57:56:50:ef:a0:2f:62:f2:d6:96:d7:7b:5b:e8:46:38:e3:6a: d4:0b:15:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgxMzExMTAvBgNVBAUTKEM3OUJCRUFBNjYyNDFFRUNGMDFDMzAzMzVEQjE4RUYy QjNGNTYwMjYwHhcNMjUwNTE0MTkzMjI1WhcNMjUwNTIxMTkzMjI1WjAYMRYwFAYD VQQDEw02ODI0ZWZjYS1kMWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoW38e+jHb8UEfm3cM8OH/LOKtWg+QjwdhGH4umHlgMnAW5HUok51SW9/8aAX uu3ki1HlpJYPY/52nqOhhmLSoLtBfaslJTBfle656kLvXAnEIeLrJl4v/S1Qkh/J ruadCVge+842R9Oen0mJJOA6NXNBfk/OTEl3o2Yto0PTvcIaQVgD8e6XEPKgSOxo s1HpHuECA0zYFl0+TVoSwPJ0iquMmVXxZGof4BCT21Gq3ije52ZCvSbS4csF0AhE T2LnXcMS0eBX4yHPI6VEABLqShnl0BpmxfmY51lG3UaNkH3AWlvguMD7wkYrq3FA WyERf9EjP9uPDN1g/zyBP6uEtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXUcEpn H2qmNz9x5havhD2V4aC8MB8GA1UdIwQYMBaAFMebvqpmJB7s8BwwM12xjvKz9WAm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODEzMS85ODJBQjZFNjQ4 QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1endIREF6WGJHTzhyUDFZ Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1dS1xbVlrSHV6d0hEQXpYYkdPOHJQMVlDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODEzMS85ODJBQjZFNjQ4QjExMUVBOTZBMDZDN0VDNEY5QUUwMi94NXUtcW1Za0h1 endIREF6WGJHTzhyUDFZQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDdkEk/Rdyxgfmk9TyFUFU9oH5ZZQxzHDyoVMIVdjKqVQKeGBmnN3W kaeAs9h/EOmRTMpr6NHgPecOjM90PG6pmj092RdpqARwOAJzSaoaPpKTWiJ/gl5U eFfa5uKSi25xPtfpRrhpo58+HwiJzuNmkSgObBFy5DTHvl1RKamYEJAblOla68qj BwpT8wAoxhXaReFbd4sFLVMXpX8kYxoA0uV1KeTJpFzn3tHmZ46K8/Gz6jJ5KLKg XUKjpRpH6zxCdOzPRsyA7jGkshksdwRU/OxpXSe9kylzQORMVci5Kdh7oqb007da LyFXVlDvoC9i8taW13tb6EY442rUCxVE -----END CERTIFICATE-----Generated at Fri May 16 18:31:56 2025 by rpki-client