$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft File: 5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json) Hash identifier: CnVfsBeP/cUvD6ZVHtEY+1gN69X4TKnq/82U6u0GOM8= Subject key identifier: 71:33:74:7E:44:F2:A0:F4:75:AD:9A:9F:E8:FA:B3:B5:DC:F7:82:1A Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 Certificate issuer: /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Certificate serial: 3495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft Manifest number: 3495 Signing time: Wed 02 Jul 2025 14:44:30 +0000 Manifest this update: Wed 02 Jul 2025 14:44:29 +0000 Manifest next update: Wed 09 Jul 2025 14:44:29 +0000 Files and hashes: 1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: wbV8BwcIgO5ucrboW66L8f7cAzIMSiKmy1CCknCOVKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13461 (0x3495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3 Validity Not Before: Jul 2 14:44:29 2025 GMT Not After : Jul 9 14:44:29 2025 GMT Subject: CN=686545cd-2da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:92:08:1f:5c:43:e8:02:1a:d0:60:66:21:9e: 79:cb:36:5a:c2:ee:a2:d4:b8:c9:a8:59:5a:6e:a6: 5f:4a:70:59:5b:a5:cf:36:3b:9b:c2:f0:d1:91:e1: 5f:13:78:e9:5c:56:5b:db:ee:c3:bf:56:58:af:e8: 4f:39:5a:ca:88:97:33:db:6f:02:c9:4f:8b:ef:0e: f6:e4:82:f4:b8:4c:63:e3:4a:a2:ab:bf:3e:c6:e2: 3e:a6:7f:35:a6:1d:63:f3:bf:c6:f5:ff:4e:b9:69: 4c:42:b6:6d:8e:a9:66:c0:d0:8e:81:cf:e6:a4:14: f8:27:6f:db:0d:0d:6c:94:67:2a:7a:fd:88:94:e9: 32:ca:29:8a:ce:9d:83:76:fa:16:7c:98:8f:d6:ad: 43:34:42:dd:05:fe:77:0d:7d:0e:2d:b8:36:59:18: 7a:ac:19:4b:29:07:e0:50:f3:0c:06:96:32:5e:a0: 39:89:73:52:1e:27:f4:f2:c4:0a:8e:aa:76:ed:70: a4:7e:9a:ce:a0:ce:10:de:e4:23:f2:e5:94:74:a4: 7e:47:fd:4a:64:ea:6c:66:ae:f7:e3:5f:c5:a4:94: 0b:18:f7:eb:57:1d:f8:3c:73:c4:fc:fa:3f:4f:bd: 75:bc:d0:50:59:23:75:4a:7b:c8:b3:08:83:ae:8f: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:33:74:7E:44:F2:A0:F4:75:AD:9A:9F:E8:FA:B3:B5:DC:F7:82:1A X509v3 Authority Key Identifier: keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:57:bc:e4:a6:cc:66:1b:77:51:ef:63:93:b0:fd:e3:7b:f8: 15:a4:ee:9f:6f:4b:1e:6d:64:7a:33:62:e8:84:7c:a2:9c:58: 07:8f:ad:ee:7b:7b:27:fa:5d:a4:f0:1d:36:ec:25:92:64:59: d7:a6:32:96:81:9b:fc:d9:9c:82:a9:c2:56:b5:ef:f5:4a:2c: d5:4d:81:04:c1:c7:c8:1e:2e:a5:31:5a:6b:6e:3e:5c:8e:49: 1d:71:df:ec:7e:03:a5:8d:9a:8f:70:00:9e:f3:31:b0:40:a1: bd:92:e3:6f:9a:b9:e4:b6:10:ea:c2:9e:1d:e6:51:6f:ab:9b: a6:bb:ab:97:82:9c:d2:df:1d:d8:3c:ec:48:2e:83:ec:ac:5e: 58:d2:ca:c4:0b:d3:8f:df:e2:d9:49:55:0d:81:5f:5a:5c:8f: 09:ed:4f:b1:f9:e4:21:6b:8f:0f:f3:cd:3d:cd:0e:7e:a7:fe: e4:cc:7c:a4:0a:79:c2:be:37:a3:64:c8:aa:77:01:fe:76:4f: f7:79:c9:58:23:cd:d7:f5:f4:80:6a:bb:44:f0:64:c3:b0:14: e2:00:31:ca:b7:93:f1:16:3e:b0:45:ef:a5:76:b9:19:f6:a1: 28:1f:78:83:8d:1e:7b:34:26:69:bd:52:90:3e:7e:a9:7f:ea: 3c:cb:24:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4RTAxMTAvBgNVBAUTKEU0QjNBRTNFRDIzMTdBMjNFMTlCRDdBMDMyQkVGQUVB RDUzNzI3RDMwHhcNMjUwNzAyMTQ0NDI5WhcNMjUwNzA5MTQ0NDI5WjAYMRYwFAYD VQQDEw02ODY1NDVjZC0yZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8JIIH1xD6AIa0GBmIZ55yzZawu6i1LjJqFlabqZfSnBZW6XPNjubwvDRkeFf E3jpXFZb2+7Dv1ZYr+hPOVrKiJcz228CyU+L7w725IL0uExj40qiq78+xuI+pn81 ph1j87/G9f9OuWlMQrZtjqlmwNCOgc/mpBT4J2/bDQ1slGcqev2IlOkyyimKzp2D dvoWfJiP1q1DNELdBf53DX0OLbg2WRh6rBlLKQfgUPMMBpYyXqA5iXNSHif08sQK jqp27XCkfprOoM4Q3uQj8uWUdKR+R/1KZOpsZq7341/FpJQLGPfrVx34PHPE/Po/ T711vNBQWSN1SnvIswiDro8nYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEzdH5E 8qD0da2an+j6s7Xc94IaMB8GA1UdIwQYMBaAFOSzrj7SMXoj4ZvXoDK++urVNyfT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThFMC9EQzFFRkI0QTFE OTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVpUGhtOWVnTXI3NjZ0VTNK OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMT3VQdEl4ZWlQaG05ZWdNcjc2NnRVM0o5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OThFMC9EQzFFRkI0QTFEOTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVp UGhtOWVnTXI3NjZ0VTNKOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdV7zkpsxmG3dR72OTsP3je/gVpO6fb0sebWR6M2LohHyinFgHj63u e3sn+l2k8B027CWSZFnXpjKWgZv82ZyCqcJWte/1SizVTYEEwcfIHi6lMVprbj5c jkkdcd/sfgOljZqPcACe8zGwQKG9kuNvmrnkthDqwp4d5lFvq5umu6uXgpzS3x3Y POxILoPsrF5Y0srEC9OP3+LZSVUNgV9aXI8J7U+x+eQha48P8809zQ5+p/7kzHyk CnnCvjejZMiqdwH+dk/3eclYI83X9fSAartE8GTDsBTiADHKt5PxFj6wRe+ldrkZ 9qEoH3iDjR57NCZpvVKQPn6pf+o8yyTr -----END CERTIFICATE-----Generated at Thu Jul 3 07:06:00 2025 by rpki-client