$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json) Hash identifier: ZgpnmD5akII+6zItWaTf9n+KIqfbqgLer2ez9gIj56E= Subject key identifier: E2:55:43:D8:2F:C0:42:F0:DC:D9:93:77:1B:85:D7:E3:31:18:A8:2D Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft Manifest number: 04C0 Signing time: Thu 03 Jul 2025 00:10:42 +0000 Manifest this update: Thu 03 Jul 2025 00:10:41 +0000 Manifest next update: Thu 10 Jul 2025 00:10:41 +0000 Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: FE0yg2wjLS/d4AndFskTWbR3FUasRctMTURk7kao6aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Validity Not Before: Jul 3 00:10:41 2025 GMT Not After : Jul 10 00:10:41 2025 GMT Subject: CN=6865ca81-d476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:de:7e:a2:51:07:63:d5:17:36:41:dd:13: 25:fe:48:ae:b9:5b:56:3d:34:76:be:43:b5:ff:60: 99:70:b3:2c:1c:a6:4b:f2:8e:71:f3:da:56:7c:0e: 98:e0:c4:f5:e3:9f:8c:d9:7f:40:81:71:db:2e:15: 19:9d:8c:dc:72:20:c6:73:c2:3d:9b:69:10:34:f7: b9:f4:94:29:83:91:4b:72:44:95:41:c9:87:67:e5: a5:93:f5:f9:ea:56:bd:0b:57:9c:aa:b2:e5:5a:15: b0:81:da:e1:b0:a2:34:12:70:65:05:81:c5:03:fc: 34:6a:e6:70:26:28:c2:f1:0d:51:7e:7c:e4:b0:53: fb:57:d8:3c:0a:e3:2d:06:c9:fb:0e:22:42:9e:0c: 53:13:2d:9e:3e:36:15:6e:74:dd:c1:cd:b0:98:12: 22:2e:0d:36:14:51:10:ee:d1:00:f5:73:69:e9:f6: 9a:49:19:56:67:fb:be:fa:73:bb:b0:26:09:bc:83: 88:11:13:e5:67:bc:e8:0a:95:27:f9:dc:42:b5:93: 2b:61:80:04:a0:c3:9b:7c:8d:7b:db:63:7b:09:d2: 48:e4:ce:29:60:ee:a5:25:0b:55:70:b8:90:17:90: 5f:1c:03:4e:67:01:fa:15:68:f8:f0:7a:93:72:0c: 3a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:55:43:D8:2F:C0:42:F0:DC:D9:93:77:1B:85:D7:E3:31:18:A8:2D X509v3 Authority Key Identifier: keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:94:e9:82:02:c9:d5:fc:72:33:c7:d0:d7:92:01:62:04:c0: 29:f8:74:f3:fe:53:52:55:e4:93:3f:5b:bf:35:eb:b1:b4:ec: 23:16:42:8a:3d:4d:a1:03:bb:6f:aa:8f:7d:fe:5d:da:79:98: 0e:59:16:d4:51:2c:0b:ce:6a:b5:3c:48:4a:88:eb:4f:e9:e4: 61:66:9e:8d:76:b8:cd:cc:a6:5b:c6:21:2b:07:5f:44:3a:9d: 3f:bc:67:83:c1:6c:f7:b7:c7:9f:5c:4a:19:ce:3d:38:e0:69: 68:f5:9a:34:2c:2e:71:f2:0f:f9:d5:e7:8f:70:f5:5a:b2:f7: 25:77:6a:62:a6:6c:65:05:3c:8f:df:33:34:69:de:21:34:e9: e3:46:e6:3c:46:d1:02:18:6a:48:00:24:6b:1b:18:87:ad:55: 66:ca:3b:35:d7:b7:36:df:3d:d1:5c:dc:d4:20:40:10:ef:6c: ae:ed:99:3d:97:6f:e9:98:c2:17:d4:17:93:be:94:7b:77:78: d5:3a:52:b1:cb:1d:27:76:56:a5:de:71:db:e6:6b:6d:1e:c9: 9f:b5:75:cb:03:c3:a9:fe:0f:3c:b1:1b:c1:3f:03:42:07:ef: f3:32:be:b5:11:d5:d3:d5:31:75:6f:55:b0:50:02:f9:f0:f9: a5:f0:d1:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MEYxMTAvBgNVBAUTKDVGN0RCNjUwQ0FDNDM0NTE3NkFDM0YwN0RFRkM5OTFB RDRGRURFQjgwHhcNMjUwNzAzMDAxMDQxWhcNMjUwNzEwMDAxMDQxWjAYMRYwFAYD VQQDEw02ODY1Y2E4MS1kNDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSfefqJRB2PVFzZB3RMl/kiuuVtWPTR2vkO1/2CZcLMsHKZL8o5x89pWfA6Y 4MT145+M2X9AgXHbLhUZnYzcciDGc8I9m2kQNPe59JQpg5FLckSVQcmHZ+Wlk/X5 6la9C1ecqrLlWhWwgdrhsKI0EnBlBYHFA/w0auZwJijC8Q1RfnzksFP7V9g8CuMt Bsn7DiJCngxTEy2ePjYVbnTdwc2wmBIiLg02FFEQ7tEA9XNp6faaSRlWZ/u++nO7 sCYJvIOIERPlZ7zoCpUn+dxCtZMrYYAEoMObfI1722N7CdJI5M4pYO6lJQtVcLiQ F5BfHANOZwH6FWj48HqTcgw6ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJVQ9gv wELw3NmTdxuF1+MxGKgtMB8GA1UdIwQYMBaAFF99tlDKxDRRdqw/B978mRrU/t64 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcwRi9ENTVFQjVGMDJE MEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5GRjJyRDhIM3Z5Wkd0VC0z cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gzMjJVTXJFTkZGMnJEOEgzdnlaR3RULTNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcwRi9ENTVFQjVGMDJEMEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5G RjJyRDhIM3Z5Wkd0VC0zcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtlOmCAsnV/HIzx9DXkgFiBMAp+HTz/lNSVeSTP1u/NeuxtOwjFkKK PU2hA7tvqo99/l3aeZgOWRbUUSwLzmq1PEhKiOtP6eRhZp6NdrjNzKZbxiErB19E Op0/vGeDwWz3t8efXEoZzj044Glo9Zo0LC5x8g/51eePcPVasvcld2pipmxlBTyP 3zM0ad4hNOnjRuY8RtECGGpIACRrGxiHrVVmyjs117c23z3RXNzUIEAQ72yu7Zk9 l2/pmMIX1BeTvpR7d3jVOlKxyx0ndlal3nHb5mttHsmftXXLA8Op/g88sRvBPwNC B+/zMr61EdXT1TF1b1WwUAL58Pml8NHT -----END CERTIFICATE-----Generated at Thu Jul 3 14:04:20 2025 by rpki-client