$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: gjyXP1GaqQRStqoQsTARYTW7PVBchCFaqOa5TX3rITI= Subject key identifier: 52:3C:35:C2:B3:FA:52:63:23:97:7D:E9:2E:FD:2E:FE:5C:17:9A:30 Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0B06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 133C Signing time: Sat 28 Jun 2025 19:04:06 +0000 Manifest this update: Sat 28 Jun 2025 19:04:05 +0000 Manifest next update: Sat 05 Jul 2025 19:04:05 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: vNCqcITDqgBnyY+tVFv1CmIfPjKoEKtmTbZ1BjhHEQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2822 (0xb06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Validity Not Before: Jun 28 19:04:05 2025 GMT Not After : Jul 5 19:04:05 2025 GMT Subject: CN=68603ca6-5128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:de:f2:b5:dd:62:9d:ed:bc:bd:1b:76:1c:ec: 02:e7:ca:93:80:26:8d:07:54:be:bf:da:f0:f7:59: 8f:ba:d5:7b:1b:12:e2:72:ff:3e:7c:f0:3d:fb:4d: 4c:ce:1e:b1:49:35:58:60:97:df:a7:00:b8:5b:59: 26:b8:df:e6:26:4d:fa:ee:b8:3a:ca:ad:d7:96:67: f1:bf:80:2e:32:f2:83:7c:61:f6:ae:37:a2:21:a1: 64:b1:14:61:ee:d0:b2:f9:5a:66:37:bb:94:de:18: 0c:38:6e:cd:90:fc:ec:d5:d3:37:ee:24:fa:eb:cd: 48:29:58:ae:1e:8c:b3:15:b6:53:61:5c:72:88:f3: d8:29:0e:8a:1a:5d:53:72:5e:f2:f1:ea:7b:f2:a1: 10:a4:c0:07:c2:da:50:d6:0c:50:e3:65:3d:c8:54: 58:32:4d:f9:4f:0b:ad:3f:a8:df:cc:87:a0:69:68: 4a:c3:f6:cf:bb:82:d9:26:64:c8:c2:57:0f:0e:45: d0:f9:9f:a7:cc:2e:e4:a4:e8:10:3f:5d:1d:c5:16: db:c8:88:ef:96:b1:d9:da:16:ca:0a:ab:86:6d:85: 74:62:e2:ff:b7:84:95:64:4c:5c:aa:25:f9:58:2a: 97:10:b6:f1:11:87:24:bb:18:ee:82:95:3c:e0:ce: 65:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3C:35:C2:B3:FA:52:63:23:97:7D:E9:2E:FD:2E:FE:5C:17:9A:30 X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:98:bd:31:ac:2d:29:4d:a1:32:89:ae:3a:81:fa:cf:c2:ec: e3:14:02:fb:61:df:2e:e7:9f:e8:2f:a0:64:9c:c6:04:0d:22: 9b:fd:0f:ef:bd:bd:6b:3e:61:62:d3:26:f1:9b:7d:ff:d9:07: b1:61:f8:cc:ad:25:d9:0f:9d:a7:bb:c6:8e:f7:5b:8e:26:d5: 74:31:21:c4:b3:b1:66:78:0d:79:61:ae:97:44:38:32:36:ba: f2:4f:fd:ae:52:1a:74:3a:74:74:5f:22:b7:d9:fc:b8:fe:9d: 6a:e7:b7:74:01:dc:90:09:ff:3b:0e:4f:52:db:5a:5e:99:27: a8:2c:f5:8a:02:25:13:a0:e7:1d:70:fa:b3:fc:56:a0:e4:46: 6b:96:54:0d:21:66:2a:6c:47:fc:a2:07:0c:8e:62:35:fc:92: a6:46:31:33:cc:26:29:52:42:86:83:47:43:e6:35:44:f3:70: 1f:8f:e2:18:9c:82:98:0f:45:f6:3e:0e:3d:76:84:03:8f:fa: b9:8e:4f:5b:c4:9e:a0:81:17:18:fa:dd:11:6e:ea:ea:29:6b: d8:39:a2:d2:a8:d2:01:b9:aa:4a:70:ba:61:16:07:0d:94:48: 02:99:ae:1e:be:e0:64:a4:c8:47:0c:8a:c6:dc:f8:2d:38:62: 18:ce:b8:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjUwNjI4MTkwNDA1WhcNMjUwNzA1MTkwNDA1WjAYMRYwFAYD VQQDEw02ODYwM2NhNi01MTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp97ytd1ine28vRt2HOwC58qTgCaNB1S+v9rw91mPutV7GxLicv8+fPA9+01M zh6xSTVYYJffpwC4W1kmuN/mJk367rg6yq3Xlmfxv4AuMvKDfGH2rjeiIaFksRRh 7tCy+VpmN7uU3hgMOG7NkPzs1dM37iT6681IKViuHoyzFbZTYVxyiPPYKQ6KGl1T cl7y8ep78qEQpMAHwtpQ1gxQ42U9yFRYMk35TwutP6jfzIegaWhKw/bPu4LZJmTI wlcPDkXQ+Z+nzC7kpOgQP10dxRbbyIjvlrHZ2hbKCquGbYV0YuL/t4SVZExcqiX5 WCqXELbxEYckuxjugpU84M5lGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFI8NcKz +lJjI5d96S79Lv5cF5owMB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEmL0xrC0pTaEyia46gfrPwuzjFAL7Yd8u55/oL6BknMYEDSKb/Q/v vb1rPmFi0ybxm33/2QexYfjMrSXZD52nu8aO91uOJtV0MSHEs7FmeA15Ya6XRDgy NrryT/2uUhp0OnR0XyK32fy4/p1q57d0AdyQCf87Dk9S21pemSeoLPWKAiUToOcd cPqz/Fag5EZrllQNIWYqbEf8ogcMjmI1/JKmRjEzzCYpUkKGg0dD5jVE83Afj+IY nIKYD0X2Pg49doQDj/q5jk9bxJ6ggRcY+t0RburqKWvYOaLSqNIBuapKcLphFgcN lEgCma4evuBkpMhHDIrG3PgtOGIYzrgW -----END CERTIFICATE-----Generated at Mon Jun 30 01:12:55 2025 by rpki-client