$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft File: X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft (raw, json) Hash identifier: IlijM8yB+Qzxr7jxqMfkKKcbTxe5VIGOUdnO4O3iLqE= Subject key identifier: 42:C4:F0:E2:EC:7F:A0:F5:90:E7:FB:5A:2A:8F:36:58:B3:5B:C9:ED Authority key identifier: 5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 Certificate issuer: /CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Certificate serial: 0753 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft Manifest number: 074A Signing time: Mon 30 Jun 2025 22:00:23 +0000 Manifest this update: Mon 30 Jun 2025 22:00:23 +0000 Manifest next update: Mon 07 Jul 2025 22:00:23 +0000 Files and hashes: 1: X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl (hash: +tsy2ma7M+E0zNueq8j/I4w332lzn57vKm3rDPIZffk=) 2: 4D12DEAE2E9311EBB9FC5259C4F9AE02.roa (hash: yHOOSYqrWigvtle0BTPOvzlE8XCxd97+PyV6RkU634Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1875 (0x753) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6B8E, serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Validity Not Before: Jun 30 22:00:23 2025 GMT Not After : Jul 7 22:00:23 2025 GMT Subject: CN=686308f7-9cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:30:c9:b3:10:f6:23:df:1b:5e:fc:86:0b:ad: 4b:44:46:8e:60:b7:36:d4:b8:65:07:ef:f0:8f:f2: 34:7a:06:3a:f3:d1:a7:71:ea:60:1a:8f:fd:d0:26: 17:40:e9:7a:cf:5a:a8:33:87:6c:90:57:b8:d0:00: 4d:70:ba:e9:09:83:12:5c:08:f3:ee:9e:28:2b:b6: 57:d3:dd:6f:48:8c:0c:c9:5c:6f:1f:59:a4:77:4e: e2:5e:62:48:cb:ea:f7:5f:dc:8a:b2:7b:28:0a:f5: 37:fc:1c:db:df:72:3a:22:91:ba:03:4c:9c:fe:ac: 7c:c0:12:43:20:62:da:4f:e7:bf:28:7f:be:11:a2: 3c:1e:42:36:32:d3:52:e1:3d:9c:3d:76:9e:e4:93: 36:bd:76:bf:c8:71:0f:31:c2:46:4f:a6:0d:de:0b: fb:ed:79:54:4b:3e:6e:b7:b9:ce:ee:e7:6f:b9:2a: 66:15:fe:84:7e:62:bc:e7:8a:86:c2:2b:5d:41:4d: ce:7d:cd:83:22:96:99:48:97:43:f9:b9:3f:c7:74: 25:14:97:cd:2d:58:1d:6c:b5:e3:56:5f:08:bd:f2: 9a:c4:45:7b:b3:f1:ec:b1:31:4b:05:d4:ec:6a:e2: 98:6d:31:5f:86:6f:33:19:27:65:fe:63:aa:9e:d7: 77:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C4:F0:E2:EC:7F:A0:F5:90:E7:FB:5A:2A:8F:36:58:B3:5B:C9:ED X509v3 Authority Key Identifier: keyid:5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:70:72:6d:5f:b4:2f:ee:fb:db:c6:b0:cd:0c:c4:b7:3a:8d: 33:75:0e:6c:37:09:ad:ce:70:72:05:dc:4f:af:ad:32:a0:61: 8d:d0:d9:57:5e:de:d6:f4:ed:04:a0:ff:f4:54:b9:f6:48:2a: 65:ee:b0:21:c9:d0:ff:b0:37:c0:40:1d:2c:88:15:92:35:ce: 6d:a8:dc:06:b0:fd:e1:9a:5b:63:7a:29:cf:9e:97:54:2d:d0: 35:f2:64:33:19:57:99:3b:6f:c7:b1:54:2f:5a:e3:98:69:49: 1e:dd:5c:da:c3:4e:3a:24:e6:7d:ae:b9:13:71:07:be:35:c5: 72:09:70:25:ef:67:95:0c:ba:2e:cf:a7:6b:05:8e:32:b3:04: 67:e6:1b:1f:35:47:a3:7a:67:b8:74:a9:0a:b7:ce:dc:3b:32: 78:80:c9:f0:3f:51:72:08:70:81:a5:6c:08:5a:39:2d:bf:13: 40:7d:c4:22:ad:c7:5b:f4:e0:7b:72:3a:87:f5:b3:a7:d5:0d: 63:e2:21:eb:27:cb:38:9e:44:71:42:46:7d:70:4c:34:b5:41: d0:3e:72:f1:64:be:27:78:24:ab:04:bd:ff:61:16:e1:9c:82: ab:8d:2d:e4:3d:a9:2b:20:94:98:10:91:99:2e:57:1c:65:b9: e2:15:0e:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCOEUxMTAvBgNVBAUTKDVGOTMzRDMwRjI0N0QwNDE5RkYwQkUwNjAzRTE2RDVD MjdDNDA0MDcwHhcNMjUwNjMwMjIwMDIzWhcNMjUwNzA3MjIwMDIzWjAYMRYwFAYD VQQDEw02ODYzMDhmNy05Y2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjDJsxD2I98bXvyGC61LREaOYLc21LhlB+/wj/I0egY689GncepgGo/90CYX QOl6z1qoM4dskFe40ABNcLrpCYMSXAjz7p4oK7ZX091vSIwMyVxvH1mkd07iXmJI y+r3X9yKsnsoCvU3/Bzb33I6IpG6A0yc/qx8wBJDIGLaT+e/KH++EaI8HkI2MtNS 4T2cPXae5JM2vXa/yHEPMcJGT6YN3gv77XlUSz5ut7nO7udvuSpmFf6EfmK854qG witdQU3Ofc2DIpaZSJdD+bk/x3QlFJfNLVgdbLXjVl8IvfKaxEV7s/HssTFLBdTs auKYbTFfhm8zGSdl/mOqntd3MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELE8OLs f6D1kOf7WiqPNlizW8ntMB8GA1UdIwQYMBaAFF+TPTDyR9BBn/C+BgPhbVwnxAQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkI4RS85N0E0NTFCNjJF OTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBFR2Y4TDRHQS1GdFhDZkVC QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1TTlNUEpIMEVHZjhMNEdBLUZ0WENmRUJBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkI4RS85N0E0NTFCNjJFOTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBF R2Y4TDRHQS1GdFhDZkVCQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOcHJtX7Qv7vvbxrDNDMS3Oo0zdQ5sNwmtznByBdxPr60yoGGN0NlX Xt7W9O0EoP/0VLn2SCpl7rAhydD/sDfAQB0siBWSNc5tqNwGsP3hmltjeinPnpdU LdA18mQzGVeZO2/HsVQvWuOYaUke3Vzaw046JOZ9rrkTcQe+NcVyCXAl72eVDLou z6drBY4yswRn5hsfNUejeme4dKkKt87cOzJ4gMnwP1FyCHCBpWwIWjktvxNAfcQi rcdb9OB7cjqH9bOn1Q1j4iHrJ8s4nkRxQkZ9cEw0tUHQPnLxZL4neCSrBL3/YRbh nIKrjS3kPakrIJSYEJGZLlccZbniFQ6A -----END CERTIFICATE-----Generated at Tue Jul 1 09:15:46 2025 by rpki-client