$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft File: X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft (raw, json) Hash identifier: wDy9Q3dV7RTufPchbTqgvAHU/vfEN7TNTHraLTr35Ac= Subject key identifier: 87:11:BB:3C:4E:92:15:2F:64:2A:46:DD:3C:4F:25:D6:95:D5:B3:BC Authority key identifier: 5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3 Certificate issuer: /CN=A91C5413/serialNumber=5F9999CDA64A2A1A662E54E61A1D5798C688CCC3 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft Manifest number: 07ED Signing time: Sun 04 May 2025 22:03:05 +0000 Manifest this update: Sun 04 May 2025 22:03:05 +0000 Manifest next update: Sun 11 May 2025 22:03:05 +0000 Files and hashes: 1: X5mZzaZKKhpmLlTmGh1XmMaIzMM.crl (hash: ktkHrIoQE7FgtkLfcsi6RUPjaBdP3+LmONlIuxnt6yY=) 2: 5C925054E06811EF895B471EC4F9AE02.roa (hash: WJ6jshg1hMuefWZWAvCq9BHL/JR2w7ml13fnTUu4Jz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.crl rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 22:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5413, serialNumber=5F9999CDA64A2A1A662E54E61A1D5798C688CCC3 Validity Not Before: May 4 22:03:05 2025 GMT Not After : May 11 22:03:05 2025 GMT Subject: CN=6817e419-5e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0a:cc:8f:ff:9b:26:d1:25:7b:04:0b:d4:d2: 3f:dc:c1:2d:25:bb:8a:af:ec:44:b7:01:95:62:de: e9:d0:6d:76:8a:e4:4b:15:25:b8:14:90:54:55:7a: d5:4c:ea:0f:48:a8:de:d6:e2:c5:e9:40:a8:70:97: 11:7d:68:4c:42:ac:d4:97:26:20:46:c8:d7:b1:8c: 86:af:4f:b1:04:60:c4:af:ca:4a:cb:f7:d4:4c:03: 91:23:6e:1b:61:ed:99:fc:5b:7e:cb:03:43:45:24: 56:c6:98:7b:f5:c3:63:2d:20:5b:36:fd:76:2c:11: 29:0d:ca:8d:6f:c1:de:f0:56:92:35:5b:73:a7:b0: 52:82:fc:f3:37:f0:4c:07:0d:d6:f1:27:8e:e5:15: 14:6e:a9:dd:6d:2c:12:59:7f:a0:89:19:4b:a8:7d: f6:25:e7:91:c0:86:aa:a2:ea:ed:2c:c1:5b:f3:2c: a7:1f:27:6b:50:8c:8e:44:78:ff:36:1a:bb:7d:d8: 43:43:ac:32:74:e5:a1:a6:8c:81:c2:6a:7d:7c:85: ba:13:96:70:32:0f:ce:ce:cb:02:01:4b:54:5b:60: 15:a0:9d:56:a5:d2:9b:fb:03:36:59:78:70:50:4f: 16:61:a7:9c:27:78:f4:1c:c8:89:34:39:62:e9:e3: fd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:11:BB:3C:4E:92:15:2F:64:2A:46:DD:3C:4F:25:D6:95:D5:B3:BC X509v3 Authority Key Identifier: keyid:5F:99:99:CD:A6:4A:2A:1A:66:2E:54:E6:1A:1D:57:98:C6:88:CC:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5mZzaZKKhpmLlTmGh1XmMaIzMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/X5mZzaZKKhpmLlTmGh1XmMaIzMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d3:4a:bc:d4:8a:c5:ff:a4:cd:53:03:5e:27:b1:4d:9f:1c: c5:15:d3:cb:79:17:fd:3d:be:b6:1e:98:9d:49:6f:88:70:32: 18:a2:76:72:dc:19:bb:66:e4:e1:65:d0:39:a4:b3:16:0d:f2: 2f:bb:bf:83:22:ca:da:40:d7:9f:d9:d3:a1:9f:d0:36:10:b3: 4f:4e:ca:9e:8b:97:b4:22:38:04:12:93:7e:45:9a:75:c3:2d: cf:6c:68:fd:ad:00:a5:53:ca:31:66:9c:2a:fe:92:58:61:84: 10:b5:e0:3f:9b:a1:10:43:1e:5a:ea:77:19:3e:a2:cd:b0:5d: 88:aa:38:1c:8c:3b:9f:13:4e:94:3b:67:36:2d:2c:ae:60:bf: 21:67:2d:2f:9f:d1:d3:d9:9f:9c:94:63:6f:db:65:46:e2:8e: 4d:44:5a:97:87:71:6c:e9:51:b7:1a:c7:41:40:70:77:a3:95: 2c:7a:65:e8:63:4b:78:e8:a9:bb:63:82:78:69:9a:3a:d5:90: 90:e0:2c:f1:a9:18:73:17:70:d7:52:85:87:72:aa:ad:20:4b: b2:ea:12:03:88:28:90:ad:c7:cf:18:9c:7a:b8:62:40:a0:a9: f3:3b:c7:64:8b:f8:80:25:76:2f:ed:a1:17:26:c1:e0:91:cf: f3:96:15:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTQxMzExMC8GA1UEBRMoNUY5OTk5Q0RBNjRBMkExQTY2MkU1NEU2MUExRDU3OThD Njg4Q0NDMzAeFw0yNTA1MDQyMjAzMDVaFw0yNTA1MTEyMjAzMDVaMBgxFjAUBgNV BAMTDTY4MTdlNDE5LTVlNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDACsyP/5sm0SV7BAvU0j/cwS0lu4qv7ES3AZVi3unQbXaK5EsVJbgUkFRVetVM 6g9IqN7W4sXpQKhwlxF9aExCrNSXJiBGyNexjIavT7EEYMSvykrL99RMA5Ejbhth 7Zn8W37LA0NFJFbGmHv1w2MtIFs2/XYsESkNyo1vwd7wVpI1W3OnsFKC/PM38EwH DdbxJ47lFRRuqd1tLBJZf6CJGUuoffYl55HAhqqi6u0swVvzLKcfJ2tQjI5EeP82 Grt92ENDrDJ05aGmjIHCan18hboTlnAyD87OywIBS1RbYBWgnVal0pv7AzZZeHBQ TxZhp5wnePQcyIk0OWLp4/39AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhxG7PE6S FS9kKkbdPE8l1pXVs7wwHwYDVR0jBBgwFoAUX5mZzaZKKhpmLlTmGh1XmMaIzMMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NDEzL0RGOTlBMUU4N0JF ODExRUI5QTA5MjM0MkM0RjlBRTAyL1g1bVp6YVpLS2hwbUxsVG1HaDFYbU1hSXpN TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWDVtWnphWktLaHBtTGxUbUdoMVhtTWFJek1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1 NDEzL0RGOTlBMUU4N0JFODExRUI5QTA5MjM0MkM0RjlBRTAyL1g1bVp6YVpLS2hw bUxsVG1HaDFYbU1hSXpNTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB3TSrzUisX/pM1TA14nsU2fHMUV08t5F/09vrYemJ1Jb4hwMhiidnLc Gbtm5OFl0DmksxYN8i+7v4MiytpA15/Z06Gf0DYQs09Oyp6Ll7QiOAQSk35FmnXD Lc9saP2tAKVTyjFmnCr+klhhhBC14D+boRBDHlrqdxk+os2wXYiqOByMO58TTpQ7 ZzYtLK5gvyFnLS+f0dPZn5yUY2/bZUbijk1EWpeHcWzpUbcax0FAcHejlSx6Zehj S3joqbtjgnhpmjrVkJDgLPGpGHMXcNdShYdyqq0gS7LqEgOIKJCtx88YnHq4YkCg qfM7x2SL+IAldi/toRcmweCRz/OWFQs= -----END CERTIFICATE-----Generated at Mon May 5 05:18:52 2025 by rpki-client