$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft File: X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json) Hash identifier: ZrpC923rhlSt8X/4C+Me2t8v1IypQ0ZXicCtw8b94Vk= Subject key identifier: BC:E7:6F:8A:11:AC:3D:B4:49:A9:CD:7E:42:CA:63:F9:B9:B9:4B:65 Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 Certificate issuer: /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Certificate serial: 04A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft Manifest number: 04A7 Signing time: Mon 12 May 2025 23:42:35 +0000 Manifest this update: Mon 12 May 2025 23:42:35 +0000 Manifest next update: Mon 19 May 2025 23:42:35 +0000 Files and hashes: 1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: aCWd1AEHeDbCNsTg6/BTXRVsg9ESTJdpPLx9m7vT+BU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8 Validity Not Before: May 12 23:42:35 2025 GMT Not After : May 19 23:42:35 2025 GMT Subject: CN=6822876b-9e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d5:2e:af:ed:0a:5a:0f:c0:42:3c:57:ba:1c: ab:83:ab:67:1c:87:b9:0b:08:06:87:5c:53:27:60: ff:83:cd:0a:4a:1b:00:53:80:34:d8:f9:26:7f:93: 10:e5:14:8f:4e:4a:7e:36:c8:b1:8f:07:8a:20:b0: 79:3c:70:62:2f:e4:3e:d3:fa:09:74:84:e0:13:63: cb:88:d8:c4:c2:d0:e9:0a:7b:18:33:0c:09:cc:5f: 6e:bb:85:c5:35:bd:eb:a1:ce:f4:d9:a1:69:bf:c5: f8:86:e0:b6:cc:ed:2d:bb:e9:d1:94:42:a7:4f:d9: 90:42:00:b2:04:45:63:f2:fb:61:a0:ea:46:19:70: e3:93:5c:89:00:9d:64:4a:20:ae:5c:58:91:b5:7b: 10:61:c5:71:6c:cc:a3:ef:97:29:cd:44:8c:a5:a3: e3:91:db:49:59:35:6d:b4:41:c6:7c:44:00:d9:1f: b2:88:6f:7c:53:32:6a:54:ca:95:44:ca:46:98:57: 9a:63:4b:48:95:5f:12:53:61:f8:b7:95:71:ce:80: 2b:b4:72:2e:05:5a:86:d3:16:ad:1d:f8:a8:3c:f8: c5:99:fa:37:74:b2:39:c7:f4:ca:3d:2f:41:65:8a: c6:a8:ed:2c:30:0b:cb:e2:01:5e:25:e0:9d:0b:37: 08:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E7:6F:8A:11:AC:3D:B4:49:A9:CD:7E:42:CA:63:F9:B9:B9:4B:65 X509v3 Authority Key Identifier: keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:8c:fc:af:52:d2:5c:b4:10:9c:89:a2:bb:d0:44:25:9f:f5: d2:77:de:33:9d:e7:df:97:ea:18:c8:c2:67:30:d9:8a:2c:6f: e9:75:64:c4:63:3e:06:85:f0:5c:87:fc:b1:da:e8:7d:36:d5: 1e:8e:63:f8:e5:1a:1a:97:69:72:12:29:94:9a:4c:3e:06:57: d2:ce:bc:77:e0:cc:69:42:a8:ae:41:f0:fa:98:c0:5f:12:d0: 3e:4d:e5:15:02:bf:6b:cc:86:99:8d:a4:72:15:c0:c1:34:6b: 48:f6:aa:e3:69:25:37:37:6b:80:d0:ca:b5:ea:51:c6:8f:ad: c8:5c:46:99:bd:bb:5a:1a:86:fb:4e:d7:34:6f:df:ec:4a:15: b9:39:ae:9b:7d:f4:3f:a6:6b:a3:d4:cc:99:ee:aa:2d:e5:90: 39:7d:8b:1b:84:97:33:c7:f9:a3:e8:6c:58:6b:dd:37:c6:ec: 69:ac:76:a1:f8:a0:a7:aa:80:3d:53:21:5e:34:51:ff:68:82: 06:91:bb:97:8d:3a:d1:6e:d7:78:1a:bb:8e:91:39:2b:c9:cd: 92:2d:7f:fb:16:3c:68:72:51:16:7e:f0:ce:ab:7b:49:a5:bc: fa:b9:36:12:32:4b:8f:59:8c:f1:42:84:75:cd:4a:45:d9:e9: fe:c3:9c:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ3MEYxMTAvBgNVBAUTKDVGN0RCNjUwQ0FDNDM0NTE3NkFDM0YwN0RFRkM5OTFB RDRGRURFQjgwHhcNMjUwNTEyMjM0MjM1WhcNMjUwNTE5MjM0MjM1WjAYMRYwFAYD VQQDEw02ODIyODc2Yi05ZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tUur+0KWg/AQjxXuhyrg6tnHIe5CwgGh1xTJ2D/g80KShsAU4A02Pkmf5MQ 5RSPTkp+NsixjweKILB5PHBiL+Q+0/oJdITgE2PLiNjEwtDpCnsYMwwJzF9uu4XF Nb3roc702aFpv8X4huC2zO0tu+nRlEKnT9mQQgCyBEVj8vthoOpGGXDjk1yJAJ1k SiCuXFiRtXsQYcVxbMyj75cpzUSMpaPjkdtJWTVttEHGfEQA2R+yiG98UzJqVMqV RMpGmFeaY0tIlV8SU2H4t5VxzoArtHIuBVqG0xatHfioPPjFmfo3dLI5x/TKPS9B ZYrGqO0sMAvL4gFeJeCdCzcIgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLznb4oR rD20SanNfkLKY/m5uUtlMB8GA1UdIwQYMBaAFF99tlDKxDRRdqw/B978mRrU/t64 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDcwRi9ENTVFQjVGMDJE MEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5GRjJyRDhIM3Z5Wkd0VC0z cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gzMjJVTXJFTkZGMnJEOEgzdnlaR3RULTNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDcwRi9ENTVFQjVGMDJEMEYxMUVDQUY3NkU2ODRDNEY5QUUwMi9YMzIyVU1yRU5G RjJyRDhIM3Z5Wkd0VC0zcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZjPyvUtJctBCciaK70EQln/XSd94zneffl+oYyMJnMNmKLG/pdWTE Yz4GhfBch/yx2uh9NtUejmP45Roal2lyEimUmkw+BlfSzrx34MxpQqiuQfD6mMBf EtA+TeUVAr9rzIaZjaRyFcDBNGtI9qrjaSU3N2uA0Mq16lHGj63IXEaZvbtaGob7 Ttc0b9/sShW5Oa6bffQ/pmuj1MyZ7qot5ZA5fYsbhJczx/mj6GxYa903xuxprHah +KCnqoA9UyFeNFH/aIIGkbuXjTrRbtd4GruOkTkryc2SLX/7FjxoclEWfvDOq3tJ pbz6uTYSMkuPWYzxQoR1zUpF2en+w5wp -----END CERTIFICATE-----Generated at Wed May 14 21:11:01 2025 by rpki-client