$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: xWO33sB+X3+t2N7RbOKoR8Kh9yKJgJ4CQKdRDMeCKWc= Subject key identifier: 16:61:E9:69:04:27:0B:D1:D5:BC:12:1E:75:4A:FD:D8:B7:4B:08:4B Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0372 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 0362 Signing time: Tue 01 Jul 2025 01:34:14 +0000 Manifest this update: Tue 01 Jul 2025 01:34:13 +0000 Manifest next update: Tue 08 Jul 2025 01:34:13 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: nTU4ZG62I/58J4kI78ECNLtngMdeefE7DY+EJo7ch7Q=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: OB3c0FOnO7U7Cy2O3WKkzCkZvRGF4Swy8zD33qNbalg=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: PCa5nWLR+HuKgmwdVX9BOmG2ZZvLJrtIyJd8CbPbXng=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Jul 1 01:34:13 2025 GMT Not After : Jul 8 01:34:13 2025 GMT Subject: CN=68633b15-f585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:33:25:1a:4e:70:1a:33:a3:fc:1e:4a:36: 03:c9:a2:58:e3:bc:a9:dd:69:a0:36:7e:d1:5a:e5: 5f:bc:ee:c6:8e:b0:7a:c9:d2:a4:c5:c6:59:65:e9: 2a:01:4c:f9:ba:3a:dd:3b:dd:b6:19:7d:13:e4:1e: eb:60:27:ca:fc:9a:99:b4:29:89:98:eb:ec:e9:8a: 61:c0:a9:bc:24:89:aa:8e:b3:14:ae:01:db:81:9b: 5e:49:3d:15:06:25:39:47:30:db:d5:9c:37:b4:a5: 1d:82:d7:2d:03:78:40:11:db:d6:40:2f:31:b9:40: b0:c1:6d:95:ed:5c:d3:7c:92:0b:36:d1:5c:18:7b: 03:92:37:61:e0:9e:d9:b2:2b:d5:ee:a0:80:ee:ae: f3:96:80:47:b8:39:1e:b9:b7:3e:41:33:32:1c:49: 4a:32:9c:a6:da:84:4b:8a:72:3d:68:47:6c:39:44: 4a:4d:fe:69:db:cf:2d:ba:76:fb:42:62:15:5c:78: 3d:6d:32:ec:e6:f7:48:37:ca:52:07:f3:58:71:ae: 9e:dc:80:7b:f1:8a:6b:df:8a:16:30:57:a3:52:c3: 88:49:2d:51:5f:d9:05:6f:5d:08:66:25:2e:b9:33: 57:e9:d0:61:c0:cc:9e:5d:ca:93:af:27:49:22:df: d7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:61:E9:69:04:27:0B:D1:D5:BC:12:1E:75:4A:FD:D8:B7:4B:08:4B X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:96:3b:ee:0c:da:8f:25:53:9a:2b:4a:44:61:22:48:60:12: d8:88:9c:1c:94:7b:94:ae:a2:44:5c:c2:50:93:9b:c9:38:69: 7b:a5:65:f2:df:32:89:8d:1e:79:97:c0:84:a8:76:dd:6e:30: e6:af:8a:62:18:50:8f:a5:ef:f5:4d:1d:9e:f7:06:6f:31:07: ab:11:42:e6:2c:e0:cd:96:50:6f:e7:14:0c:e3:df:64:89:52: 40:30:ae:e5:7a:e8:d4:4e:ec:ce:db:ef:81:82:4f:b3:c8:c3: 02:c5:8e:2a:ec:a9:90:f1:92:a2:93:2e:d3:45:a0:d1:8f:80: 7d:95:78:c4:b7:05:a7:04:b0:31:1d:01:07:02:2a:e3:09:2e: 77:18:54:35:58:de:45:31:c4:c4:f5:47:cf:cb:b1:a0:18:5c: 96:74:89:ea:b1:b0:52:d8:05:55:62:bb:2a:e8:c4:0a:5e:be: 49:77:a2:3d:80:5d:85:72:b4:17:ce:a3:61:c0:e0:97:60:cc: bc:4b:f2:88:e4:d1:91:96:c9:c6:05:41:ea:f4:bb:e9:00:15: a0:cd:7c:2c:90:60:ae:f3:72:b1:79:de:1d:95:5a:15:81:7b: fb:1d:63:83:cc:cf:3c:66:a9:e6:61:c2:ee:93:63:1d:d3:48: d8:f0:e1:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjUwNzAxMDEzNDEzWhcNMjUwNzA4MDEzNDEzWjAYMRYwFAYD VQQDEw02ODYzM2IxNS1mNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz88zJRpOcBozo/weSjYDyaJY47yp3WmgNn7RWuVfvO7GjrB6ydKkxcZZZekq AUz5ujrdO922GX0T5B7rYCfK/JqZtCmJmOvs6YphwKm8JImqjrMUrgHbgZteST0V BiU5RzDb1Zw3tKUdgtctA3hAEdvWQC8xuUCwwW2V7VzTfJILNtFcGHsDkjdh4J7Z sivV7qCA7q7zloBHuDkeubc+QTMyHElKMpym2oRLinI9aEdsOURKTf5p288tunb7 QmIVXHg9bTLs5vdIN8pSB/NYca6e3IB78Ypr34oWMFejUsOISS1RX9kFb10IZiUu uTNX6dBhwMyeXcqTrydJIt/XNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZh6WkE JwvR1bwSHnVK/di3SwhLMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRljvuDNqPJVOaK0pEYSJIYBLYiJwclHuUrqJEXMJQk5vJOGl7pWXy 3zKJjR55l8CEqHbdbjDmr4piGFCPpe/1TR2e9wZvMQerEULmLODNllBv5xQM499k iVJAMK7leujUTuzO2++Bgk+zyMMCxY4q7KmQ8ZKiky7TRaDRj4B9lXjEtwWnBLAx HQEHAirjCS53GFQ1WN5FMcTE9UfPy7GgGFyWdInqsbBS2AVVYrsq6MQKXr5Jd6I9 gF2FcrQXzqNhwOCXYMy8S/KI5NGRlsnGBUHq9LvpABWgzXwskGCu83Kxed4dlVoV gXv7HWODzM88ZqnmYcLuk2Md00jY8OEr -----END CERTIFICATE-----Generated at Tue Jul 1 21:18:43 2025 by rpki-client