$ rpki-client -vvf rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft File: c5FNFBChzT-FrR4bClD_P4vWDBA.mft (raw, json) Hash identifier: C24aRoZirhe4bP2LeryCbtLFVKawG7ZotRf1X9mse2o= Subject key identifier: 18:22:4D:DA:9A:8A:C3:26:73:10:BE:AF:10:07:7C:09:8C:7D:42:E4 Authority key identifier: 73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 Certificate issuer: /CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Certificate serial: 0354 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft Manifest number: 0350 Signing time: Sun 29 Jun 2025 00:32:41 +0000 Manifest this update: Sun 29 Jun 2025 00:32:41 +0000 Manifest next update: Sun 06 Jul 2025 00:32:41 +0000 Files and hashes: 1: c5FNFBChzT-FrR4bClD_P4vWDBA.crl (hash: gZ0+idDajKOAG1zlIQ/YIePkPrYtmHNKtcKhgp2t7E8=) 2: 591A8C06BE4D11EC8DADB22CC4F9AE02.roa (hash: Py8gHJNmqLpByr4I29rw6Mm8G9sMV9RnjA0oEGne9CY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 852 (0x354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91366F8, serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Validity Not Before: Jun 29 00:32:41 2025 GMT Not After : Jul 6 00:32:41 2025 GMT Subject: CN=686089a9-1fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:6b:81:9b:4c:0b:e4:0c:e6:91:67:e2:67: ad:5d:ec:c6:e6:56:bb:98:30:56:a8:a1:6f:ab:e9: f1:84:64:44:37:e2:14:fc:c0:f7:dd:6e:fb:86:c5: f6:78:ae:bc:a1:41:04:d8:41:57:2c:91:a5:4b:b4: fd:09:48:ee:93:31:d7:91:93:8d:2c:da:c1:74:ed: d4:6b:83:6a:18:06:dd:4c:eb:9a:3f:53:51:7b:11: 70:78:81:19:92:8c:3e:fb:5a:e6:5e:a7:16:28:42: ce:07:15:96:81:c5:92:57:d3:46:53:b6:10:95:ae: 59:b3:44:1f:d8:51:41:11:ce:d6:cf:5b:a5:1b:2e: 57:a7:77:f7:a4:d6:7d:fa:37:21:00:20:c7:1c:5a: 8a:72:1a:81:9b:8c:06:df:d4:a5:f0:ad:11:d9:3f: a6:34:ae:1a:37:fd:bd:96:0b:1e:8b:05:01:77:3e: 0c:ef:73:8c:51:c0:64:47:ee:3a:62:47:87:69:16: ee:d0:10:7b:3e:13:f4:87:d4:fa:8a:54:0e:6a:bf: 84:04:a6:1c:9b:ea:ce:34:06:b6:78:ba:9d:9a:9d: 7f:d6:88:4f:44:21:fa:be:ad:dc:e0:77:2e:e8:ea: cb:ee:7f:35:80:df:ab:d7:84:47:60:8e:2d:90:6f: c5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:22:4D:DA:9A:8A:C3:26:73:10:BE:AF:10:07:7C:09:8C:7D:42:E4 X509v3 Authority Key Identifier: keyid:73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:a7:e3:62:25:6d:75:a8:26:78:f8:05:44:9c:01:98:d9:42: 39:37:90:fd:65:14:0f:15:23:2f:c0:bc:61:ff:c4:6d:ae:db: 3c:58:ec:b6:d1:ce:8f:55:fa:99:c1:76:14:5b:58:69:72:cf: f6:6a:1e:c8:a8:ce:d0:5b:e5:e0:bc:ea:ae:ed:0c:a0:07:83: 52:6e:67:86:0a:db:db:75:98:75:c3:07:1a:9d:f9:ae:ff:d5: 66:0b:60:4c:60:08:c9:60:10:0f:b8:c0:d3:f8:1a:fa:85:b3: e1:69:c0:28:1d:90:56:ac:34:e3:08:f9:94:81:b2:08:6f:7f: d0:7e:53:fc:9f:9a:f8:39:61:ea:7a:85:1c:db:5f:6a:70:ad: 02:0a:c8:85:4e:b4:05:ea:7a:c2:ca:a0:5b:80:22:8b:f1:00: 98:00:0c:94:e3:10:00:4a:cf:76:1d:a5:aa:ef:de:33:c1:28: de:ff:d0:66:96:f0:f4:b4:6a:b7:b1:33:f2:54:98:c3:65:3a: 11:84:c0:22:d0:ed:a6:df:b5:33:7b:a9:5f:11:b3:8b:11:dd: a2:80:3d:94:9b:12:be:bd:33:7d:b5:d0:3e:ae:f2:85:d8:f9: f4:ae:43:86:9b:d6:47:42:bb:54:a1:36:da:2d:98:4a:78:52: 91:02:17:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2RjgxMTAvBgNVBAUTKDczOTE0RDE0MTBBMUNEM0Y4NUFEMUUxQjBBNTBGRjNG OEJENjBDMTAwHhcNMjUwNjI5MDAzMjQxWhcNMjUwNzA2MDAzMjQxWjAYMRYwFAYD VQQDEw02ODYwODlhOS0xZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0lrgZtMC+QM5pFn4metXezG5la7mDBWqKFvq+nxhGREN+IU/MD33W77hsX2 eK68oUEE2EFXLJGlS7T9CUjukzHXkZONLNrBdO3Ua4NqGAbdTOuaP1NRexFweIEZ kow++1rmXqcWKELOBxWWgcWSV9NGU7YQla5Zs0Qf2FFBEc7Wz1ulGy5Xp3f3pNZ9 +jchACDHHFqKchqBm4wG39Sl8K0R2T+mNK4aN/29lgseiwUBdz4M73OMUcBkR+46 YkeHaRbu0BB7PhP0h9T6ilQOar+EBKYcm+rONAa2eLqdmp1/1ohPRCH6vq3c4Hcu 6OrL7n81gN+r14RHYI4tkG/F1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgiTdqa isMmcxC+rxAHfAmMfULkMB8GA1UdIwQYMBaAFHORTRQQoc0/ha0eGwpQ/z+L1gwQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjZGOC9BNDI0Mzk3MEJF NEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpULUZyUjRiQ2xEX1A0dldE QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1Rk5GQkNoelQtRnJSNGJDbERfUDR2V0RCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjZGOC9BNDI0Mzk3MEJFNEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpU LUZyUjRiQ2xEX1A0dldEQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDap+NiJW11qCZ4+AVEnAGY2UI5N5D9ZRQPFSMvwLxh/8Rtrts8WOy2 0c6PVfqZwXYUW1hpcs/2ah7IqM7QW+XgvOqu7QygB4NSbmeGCtvbdZh1wwcanfmu /9VmC2BMYAjJYBAPuMDT+Br6hbPhacAoHZBWrDTjCPmUgbIIb3/QflP8n5r4OWHq eoUc219qcK0CCsiFTrQF6nrCyqBbgCKL8QCYAAyU4xAASs92HaWq794zwSje/9Bm lvD0tGq3sTPyVJjDZToRhMAi0O2m37Uze6lfEbOLEd2igD2UmxK+vTN9tdA+rvKF 2Pn0rkOGm9ZHQrtUoTbaLZhKeFKRAhcb -----END CERTIFICATE-----Generated at Tue Jul 1 00:44:09 2025 by rpki-client