$ rpki-client -vvf rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft File: 5nG8sr6VpsiFJxIdiBXovPGKoeI.mft (raw, json) Hash identifier: g4CxxVr17ChWrdcA51d/s4ecwY5BcjOLBQ2LkJSgBSM= Subject key identifier: 99:9E:90:5D:27:B0:DE:C1:CA:B9:45:CD:68:EF:2A:C4:CD:DB:D3:94 Authority key identifier: E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2 Certificate issuer: /CN=A9124926/serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2 Certificate serial: 09DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft Manifest number: 09D3 Signing time: Wed 02 Jul 2025 20:10:19 +0000 Manifest this update: Wed 02 Jul 2025 20:10:19 +0000 Manifest next update: Wed 09 Jul 2025 20:10:19 +0000 Files and hashes: 1: 5nG8sr6VpsiFJxIdiBXovPGKoeI.crl (hash: soyinEF4/I277TCBRMxrJlPU19Aim7lk5TioT0+owX4=) 2: 209BA8B682DF11EAABBC5018C4F9AE02.roa (hash: BPcITeixSaXAriwkv0vsDzYrlqCAlvQdRZ4cRFHy1EA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2524 (0x9dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124926, serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2 Validity Not Before: Jul 2 20:10:19 2025 GMT Not After : Jul 9 20:10:19 2025 GMT Subject: CN=6865922b-128a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a5:e3:3e:bc:f3:8d:b7:d0:33:91:1f:93:88: d6:ff:df:52:8c:cf:dc:56:69:29:5b:4e:f4:5e:a6: e2:e2:de:57:e6:c7:f8:51:be:8a:b4:dc:40:b1:d3: b0:45:ea:50:7a:a7:a5:86:44:16:a3:af:c8:76:af: 8e:16:55:20:0f:90:3e:cb:42:b5:32:aa:8f:86:ae: 1f:14:a2:ec:48:3b:25:b1:12:22:6d:b6:e9:3c:a6: 67:bf:f7:b7:08:8c:20:e1:88:c2:e9:07:b9:7c:31: 31:4a:43:20:52:a5:ad:a3:54:bf:13:dc:a8:e1:37: 56:aa:51:da:ad:6e:dc:df:09:07:2d:83:ee:67:21: 53:12:ec:f3:2e:44:94:32:a3:92:07:c2:b6:7a:29: 01:ab:2f:d3:13:8c:c1:36:ce:1a:4c:79:b4:1b:44: 8f:ab:3f:13:ca:1e:70:ac:b9:af:f3:e5:d9:c9:0d: 74:c5:9e:45:29:43:2c:30:8a:af:53:7c:02:6f:57: bc:dd:e8:45:0c:34:b3:d7:2b:c9:ba:1a:03:fb:7e: cf:53:9b:2c:fa:eb:61:cf:d9:da:c8:35:8d:2a:28: f3:3a:94:61:a4:02:b2:7b:de:ab:b8:c8:83:5e:46: ea:4d:61:a5:0a:e3:97:1b:21:41:32:0c:7e:da:87: 29:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9E:90:5D:27:B0:DE:C1:CA:B9:45:CD:68:EF:2A:C4:CD:DB:D3:94 X509v3 Authority Key Identifier: keyid:E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:29:b6:c3:3d:71:e9:31:d1:fa:26:75:ad:d8:e5:08:9b:9b: e5:84:7e:53:8e:12:5c:9c:8b:cc:46:bd:b7:59:ed:1a:90:3e: b1:71:6c:fd:46:df:8a:ea:45:1e:61:08:61:0b:7b:99:5b:e8: 58:a8:b5:eb:d1:20:ed:ff:0e:d1:26:73:95:43:28:00:74:3b: 43:9b:af:11:4a:07:d2:78:e2:d9:13:4c:66:77:f2:0d:fd:62: b8:0e:87:0b:1f:4d:0d:f1:a2:e9:e5:49:36:33:ea:f2:a0:eb: 73:40:ff:bf:f7:61:b5:3e:aa:7d:c6:3f:f9:e5:1c:89:2a:7e: d1:28:43:a2:87:e4:b7:35:16:a6:c2:7f:8d:33:85:62:98:c8: c6:b8:18:53:37:55:28:50:75:c4:4b:ef:1e:0c:e4:33:a6:7b: c6:3d:ab:44:54:8b:f9:ad:11:f5:5b:52:a6:ea:b8:cc:bf:75: 71:42:4c:a2:e2:6b:6a:35:5d:7d:59:c3:a0:c9:62:ca:96:7a: ad:38:0a:0c:45:58:31:69:72:76:54:e6:3a:83:7d:98:e6:e6: 84:fd:6d:61:fb:dc:38:8a:b4:79:0e:d6:d8:66:0c:b1:98:8d: f2:0c:42:84:a2:7d:b1:66:c0:56:cc:18:d4:66:26:44:c1:c5: 1e:b7:01:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ5MjYxMTAvBgNVBAUTKEU2NzFCQ0IyQkU5NUE2Qzg4NTI3MTIxRDg4MTVFOEJD RjE4QUExRTIwHhcNMjUwNzAyMjAxMDE5WhcNMjUwNzA5MjAxMDE5WjAYMRYwFAYD VQQDEw02ODY1OTIyYi0xMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaXjPrzzjbfQM5Efk4jW/99SjM/cVmkpW070Xqbi4t5X5sf4Ub6KtNxAsdOw RepQeqelhkQWo6/Idq+OFlUgD5A+y0K1MqqPhq4fFKLsSDslsRIibbbpPKZnv/e3 CIwg4YjC6Qe5fDExSkMgUqWto1S/E9yo4TdWqlHarW7c3wkHLYPuZyFTEuzzLkSU MqOSB8K2eikBqy/TE4zBNs4aTHm0G0SPqz8Tyh5wrLmv8+XZyQ10xZ5FKUMsMIqv U3wCb1e83ehFDDSz1yvJuhoD+37PU5ss+uthz9nayDWNKijzOpRhpAKye96ruMiD XkbqTWGlCuOXGyFBMgx+2ocpcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmekF0n sN7ByrlFzWjvKsTN29OUMB8GA1UdIwQYMBaAFOZxvLK+labIhScSHYgV6LzxiqHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDkyNi9CMzg1NzhDNDgy RDkxMUVBQjlGQ0QyODVDNEY5QUUwMi81bkc4c3I2VnBzaUZKeElkaUJYb3ZQR0tv ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuRzhzcjZWcHNpRkp4SWRpQlhvdlBHS29lSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDkyNi9CMzg1NzhDNDgyRDkxMUVBQjlGQ0QyODVDNEY5QUUwMi81bkc4c3I2VnBz aUZKeElkaUJYb3ZQR0tvZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWKbbDPXHpMdH6JnWt2OUIm5vlhH5TjhJcnIvMRr23We0akD6xcWz9 Rt+K6kUeYQhhC3uZW+hYqLXr0SDt/w7RJnOVQygAdDtDm68RSgfSeOLZE0xmd/IN /WK4DocLH00N8aLp5Uk2M+ryoOtzQP+/92G1Pqp9xj/55RyJKn7RKEOih+S3NRam wn+NM4VimMjGuBhTN1UoUHXES+8eDOQzpnvGPatEVIv5rRH1W1Km6rjMv3VxQkyi 4mtqNV19WcOgyWLKlnqtOAoMRVgxaXJ2VOY6g32Y5uaE/W1h+9w4irR5DtbYZgyx mI3yDEKEon2xZsBWzBjUZiZEwcUetwH5 -----END CERTIFICATE-----Generated at Thu Jul 3 02:45:44 2025 by rpki-client