$ rpki-client -vvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft File: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json) Hash identifier: y6j1YyXHLSuQuY5DKo5oNcFFX0eaQA6AhIJbUDxCRIk= Subject key identifier: 69:FD:07:4D:81:B5:23:52:6D:40:89:75:0D:55:EB:39:8E:AA:3E:69 Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 Certificate issuer: /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft Manifest number: 0158 Signing time: Sun 29 Jun 2025 03:11:27 +0000 Manifest this update: Sun 29 Jun 2025 03:11:26 +0000 Manifest next update: Sun 06 Jul 2025 03:11:26 +0000 Files and hashes: 1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: bXAKw650b5ZCI2jBa8yYtd33K024wLfxH3ExU84j/tI=) 2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: gAXQ6XOA3NODkbVV4z4rY8FPGvcx9W1CdIeenZ4k+xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Validity Not Before: Jun 29 03:11:26 2025 GMT Not After : Jul 6 03:11:26 2025 GMT Subject: CN=6860aede-89da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:8a:d2:33:fb:b8:e1:9e:e8:3e:53:4c:12: 1d:ac:d1:b6:38:06:69:6d:d0:1d:41:32:62:03:33: 60:a7:13:43:8e:e4:c2:c4:00:6d:59:3e:a0:b4:e9: 3c:5f:d3:e4:42:4a:dc:e4:f5:ef:4b:b6:3f:2b:ee: 3a:78:fa:42:83:4d:8b:58:dc:3f:ee:3e:23:12:15: 0b:9e:5f:2e:cf:95:f5:2a:c6:68:d9:93:33:06:6c: 61:d8:ff:a0:b1:da:2e:6f:85:1a:aa:41:0f:cc:59: d1:f4:83:7f:8a:0e:d3:57:d6:8c:91:e8:1b:0a:a4: 77:4c:68:f4:96:0c:3e:0d:b1:4e:ab:a2:39:5b:2f: 3c:21:8a:ee:e2:b7:15:a2:52:d8:be:52:db:bd:9b: d6:45:fa:6f:08:82:0a:a0:5b:1f:13:12:e7:ac:c0: 45:98:5a:c5:46:3e:b1:1d:9e:f8:b5:4f:df:b2:d2: 90:ed:b3:57:63:e0:f9:2f:c0:a9:a9:f1:c2:08:3d: 89:81:c4:18:99:93:fc:f6:bc:01:9d:0c:b7:2f:3a: 41:c4:80:28:40:66:84:29:08:fc:a7:66:11:15:ec: dd:63:3d:4e:32:f9:3f:ba:e4:73:f7:a8:68:36:45: 5d:03:8e:14:01:cf:c9:d1:60:ee:ee:a1:50:30:6b: 1c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FD:07:4D:81:B5:23:52:6D:40:89:75:0D:55:EB:39:8E:AA:3E:69 X509v3 Authority Key Identifier: keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:4b:31:32:d0:3f:a7:b9:a1:3c:ce:9b:9d:9b:7c:b1:97:55: 4c:38:0d:19:56:33:bb:e4:f0:dc:2f:7a:e2:a4:8c:71:67:3a: c1:1e:db:46:93:3a:cb:7a:35:90:32:e8:18:39:2e:0f:21:78: 85:0a:e7:11:9a:f0:91:df:b8:8e:4c:f7:c4:b6:4e:10:01:12: d7:2b:99:90:12:f2:95:04:37:12:29:05:29:02:39:04:c5:e9: 68:87:59:27:78:32:1a:89:08:76:72:91:6f:62:5b:c7:f1:7a: 27:58:bf:1a:1f:b5:46:af:cd:b8:de:1a:57:12:df:d1:ef:cd: d2:fd:a9:1e:f3:c4:e9:2d:b3:49:56:76:e5:f1:3c:0d:51:e2: a2:d1:91:d9:c3:91:cc:26:6c:c6:82:8d:42:63:bc:ea:56:95: 8b:a8:24:2f:61:6b:6d:a3:53:f2:90:e0:c9:fb:77:a1:1d:41: cc:48:bf:f8:c9:6d:68:d7:9c:4a:f7:02:b0:f6:bc:9f:b4:b6: 99:bd:3b:1a:39:b2:f3:9b:25:c7:d0:82:0a:4c:17:0e:8f:32: 66:ed:fa:bb:22:73:78:ea:9b:66:d3:e9:9b:ca:a4:2c:23:1f: 61:e5:78:2c:77:33:dd:e7:55:29:e2:7d:ff:e1:bf:14:16:99: 6c:e7:88:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2RTUxMTAvBgNVBAUTKDczOTg3RUNDRTc3RTQ0RUIzNjY1MUUwOThEMzM3NTBG QTg2NEU2NzYwHhcNMjUwNjI5MDMxMTI2WhcNMjUwNzA2MDMxMTI2WjAYMRYwFAYD VQQDEw02ODYwYWVkZS04OWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+KK0jP7uOGe6D5TTBIdrNG2OAZpbdAdQTJiAzNgpxNDjuTCxABtWT6gtOk8 X9PkQkrc5PXvS7Y/K+46ePpCg02LWNw/7j4jEhULnl8uz5X1KsZo2ZMzBmxh2P+g sdoub4UaqkEPzFnR9IN/ig7TV9aMkegbCqR3TGj0lgw+DbFOq6I5Wy88IYru4rcV olLYvlLbvZvWRfpvCIIKoFsfExLnrMBFmFrFRj6xHZ74tU/fstKQ7bNXY+D5L8Cp qfHCCD2JgcQYmZP89rwBnQy3LzpBxIAoQGaEKQj8p2YRFezdYz1OMvk/uuRz96ho NkVdA44UAc/J0WDu7qFQMGscyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGn9B02B tSNSbUCJdQ1V6zmOqj5pMB8GA1UdIwQYMBaAFHOYfsznfkTrNmUeCY0zdQ+oZOZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZFNS81MUY5ODM1QzQ2 RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJPczJaUjRKalROMUQ2aGs1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1aC16T2QtUk9zMlpSNEpqVE4xRDZoazVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZFNS81MUY5ODM1QzQ2RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJP czJaUjRKalROMUQ2aGs1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlSzEy0D+nuaE8zpudm3yxl1VMOA0ZVjO75PDcL3ripIxxZzrBHttG kzrLejWQMugYOS4PIXiFCucRmvCR37iOTPfEtk4QARLXK5mQEvKVBDcSKQUpAjkE xeloh1kneDIaiQh2cpFvYlvH8XonWL8aH7VGr8243hpXEt/R783S/ake88TpLbNJ Vnbl8TwNUeKi0ZHZw5HMJmzGgo1CY7zqVpWLqCQvYWtto1PykODJ+3ehHUHMSL/4 yW1o15xK9wKw9ryftLaZvTsaObLzmyXH0IIKTBcOjzJm7fq7InN46ptm0+mbyqQs Ix9h5XgsdzPd51Up4n3/4b8UFpls54gA -----END CERTIFICATE-----Generated at Tue Jul 1 03:52:09 2025 by rpki-client