$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft File: x5ESx8WsNlgyIdH5RnUZbCE26r4.mft (raw, json) Hash identifier: RgEc828BLNA1FN/4toGWx1p2imQcpGOEL3TR2ohRIIk= Subject key identifier: 1F:5C:BC:B9:94:C9:8D:CD:CF:19:02:1C:9D:6D:D2:BC:74:DC:BF:FD Authority key identifier: C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE Certificate issuer: /CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Certificate serial: 072D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft Manifest number: 0722 Signing time: Wed 14 May 2025 21:55:35 +0000 Manifest this update: Wed 14 May 2025 21:55:34 +0000 Manifest next update: Wed 21 May 2025 21:55:34 +0000 Files and hashes: 1: x5ESx8WsNlgyIdH5RnUZbCE26r4.crl (hash: YLcLVAI+jTzjx5r1JpZx8X2gi2jWFN9StON0MU9/LQ4=) 2: 2E7B4F0CD45811EF908AFE44C4F9AE02.roa (hash: S3+8DNkqu1goqREjsGkO1YtrwS4ggwnIUbsG5DF2wXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1837 (0x72d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB9, serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Validity Not Before: May 14 21:55:34 2025 GMT Not After : May 21 21:55:34 2025 GMT Subject: CN=68251157-bb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:29:e5:f1:58:ef:8c:a6:79:68:12:94:29:85: f6:ce:a7:26:3b:14:ca:50:49:b5:f1:3b:d9:1b:76: 71:c4:0a:b6:8b:32:10:e6:27:df:c1:c4:d0:f7:15: fe:05:59:e1:85:f2:24:74:8e:6f:c4:13:4c:57:12: d2:bf:eb:c5:c3:b0:22:5c:13:7c:4b:45:aa:05:41: 52:8b:c5:b0:57:4d:5d:08:63:58:46:36:c7:1c:e1: b2:82:3c:93:1f:55:b4:af:a5:58:00:ba:ad:84:94: ab:96:dc:c6:f6:28:3f:bc:dc:5a:62:a4:d6:5a:09: 84:c0:18:06:d1:3f:5e:9a:45:bd:19:42:ac:ae:17: 31:44:d8:63:e1:8b:0f:4c:81:f7:ab:a4:9e:ab:9d: b2:e3:99:6d:94:13:6d:fe:e2:94:cb:2e:99:63:20: ef:47:42:55:a6:93:dc:b5:c2:11:8f:5a:b9:c0:4b: 54:a1:99:ff:a7:35:aa:66:a4:6d:4f:d0:8c:28:a9: d2:62:81:c4:2b:04:ad:2a:7e:a9:fd:4e:19:67:e7: 16:03:93:37:7d:f6:d5:42:60:68:19:a5:3f:b7:92: b1:08:20:07:36:ca:39:23:f7:7f:8d:1f:ea:7f:49: 40:43:07:a4:f8:56:4b:a8:02:f2:dc:d2:3c:b2:a1: 05:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5C:BC:B9:94:C9:8D:CD:CF:19:02:1C:9D:6D:D2:BC:74:DC:BF:FD X509v3 Authority Key Identifier: keyid:C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ba:7c:41:d8:ba:49:4b:aa:a5:ad:3c:cf:bd:96:c8:c1:19: 44:4a:3c:76:04:6d:30:76:75:1f:a8:36:24:2c:bf:9b:0f:a8: 43:1d:73:fd:1c:d6:00:fb:46:27:aa:b5:ff:a2:23:70:1d:df: 13:0b:82:b5:94:25:2c:3e:5d:2e:fb:84:a7:2e:4f:36:8f:c0: a2:32:c5:9d:b6:36:4a:bc:f2:93:f8:b3:b3:a0:52:81:93:23: e0:5d:3d:e6:75:fb:96:bb:94:da:a2:ff:25:6e:03:09:95:b9: bb:bd:e8:d5:ad:54:96:4f:23:d5:de:7b:2a:d4:ae:f3:16:2c: 53:c5:68:7c:58:ee:b4:03:ae:cc:20:ef:4d:2e:72:65:12:2c: a3:d2:9d:5d:70:7d:48:12:d8:3e:ab:9f:bb:4c:79:2b:a7:de: 2c:88:23:9f:29:1c:32:72:19:41:d7:03:42:10:af:01:0c:47: 76:f8:ed:44:84:cb:af:89:dc:75:0a:01:42:d2:2a:bb:6a:bc: 21:12:4d:91:62:98:6e:f1:92:a9:36:3d:fe:4d:3b:05:8b:a4: d0:5f:44:e3:93:d4:0f:f3:c0:fa:68:8a:91:5f:1e:ec:33:e8: 4e:1d:57:60:45:2f:67:f0:78:d9:97:a9:19:44:d4:3e:ce:49: 95:75:6c:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjkxMTAvBgNVBAUTKEM3OTExMkM3QzVBQzM2NTgzMjIxRDFGOTQ2NzUxOTZD MjEzNkVBQkUwHhcNMjUwNTE0MjE1NTM0WhcNMjUwNTIxMjE1NTM0WjAYMRYwFAYD VQQDEw02ODI1MTE1Ny1iYjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCnl8VjvjKZ5aBKUKYX2zqcmOxTKUEm18TvZG3ZxxAq2izIQ5iffwcTQ9xX+ BVnhhfIkdI5vxBNMVxLSv+vFw7AiXBN8S0WqBUFSi8WwV01dCGNYRjbHHOGygjyT H1W0r6VYALqthJSrltzG9ig/vNxaYqTWWgmEwBgG0T9emkW9GUKsrhcxRNhj4YsP TIH3q6Seq52y45ltlBNt/uKUyy6ZYyDvR0JVppPctcIRj1q5wEtUoZn/pzWqZqRt T9CMKKnSYoHEKwStKn6p/U4ZZ+cWA5M3ffbVQmBoGaU/t5KxCCAHNso5I/d/jR/q f0lAQwek+FZLqALy3NI8sqEFSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9cvLmU yY3NzxkCHJ1t0rx03L/9MB8GA1UdIwQYMBaAFMeREsfFrDZYMiHR+UZ1GWwhNuq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCOS82QkRFQUE3RTM5 MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05sZ3lJZEg1Um5VWmJDRTI2 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1RVN4OFdzTmxneUlkSDVSblVaYkNFMjZyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCOS82QkRFQUE3RTM5MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05s Z3lJZEg1Um5VWmJDRTI2cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPunxB2LpJS6qlrTzPvZbIwRlESjx2BG0wdnUfqDYkLL+bD6hDHXP9 HNYA+0YnqrX/oiNwHd8TC4K1lCUsPl0u+4SnLk82j8CiMsWdtjZKvPKT+LOzoFKB kyPgXT3mdfuWu5Taov8lbgMJlbm7vejVrVSWTyPV3nsq1K7zFixTxWh8WO60A67M IO9NLnJlEiyj0p1dcH1IEtg+q5+7THkrp94siCOfKRwychlB1wNCEK8BDEd2+O1E hMuvidx1CgFC0iq7arwhEk2RYphu8ZKpNj3+TTsFi6TQX0Tjk9QP88D6aIqRXx7s M+hOHVdgRS9n8HjZl6kZRNQ+zkmVdWx7 -----END CERTIFICATE-----Generated at Thu May 15 00:30:34 2025 by rpki-client