$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft File: 5G6s3CFDhcFCA0Z05Gxo57vilSU.mft (raw, json) Hash identifier: 1i9CQ3tJQFuu6Ppmw0DmgQWUHvHmMrEjBxZAnY0OcKU= Subject key identifier: 12:08:E5:1B:69:1C:33:0D:8D:9B:5C:BF:6D:FD:DD:AF:77:90:78:B9 Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25 Certificate issuer: /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft Manifest number: E2 Signing time: Tue 01 Jul 2025 06:00:42 +0000 Manifest this update: Tue 01 Jul 2025 06:00:41 +0000 Manifest next update: Tue 08 Jul 2025 06:00:41 +0000 Files and hashes: 1: 5G6s3CFDhcFCA0Z05Gxo57vilSU.crl (hash: mQg8MOkM+ePWh3wVmc60S5Dbz5dvugjVGnMwA1lGxpI=) 2: 44B42A0EFDE511EEAD5A6432C4F9AE02.roa (hash: N/lCfyLCfQ6pGJZnFWlWQxmi4U70D1DfmNioR3drqK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91372E6, serialNumber=E46EACDC214385C142034674E46C68E7BBE29525 Validity Not Before: Jul 1 06:00:41 2025 GMT Not After : Jul 8 06:00:41 2025 GMT Subject: CN=68637989-1a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:dd:98:a8:f4:15:44:e3:9d:70:9f:bd:1e: 21:c7:1f:8a:e8:f3:38:9a:eb:be:fd:b3:24:d7:8d: 75:76:35:ea:be:cf:d1:a8:5f:14:9d:d8:cf:82:e8: 10:fa:d6:ee:b2:7e:c5:3a:9a:e3:6d:ef:ff:33:f3: 84:be:5b:35:34:41:e2:a2:07:9d:80:44:62:cd:6d: 6d:e4:56:ec:2e:01:d3:9f:9a:0f:ff:cc:96:1c:62: 57:99:b2:f6:87:90:6b:45:6f:6c:4e:70:5c:fa:44: 8e:e7:7c:20:85:7c:0e:64:26:da:fc:fa:74:fb:22: 92:41:43:db:b1:32:84:f8:d9:5f:8d:8f:2c:ea:0e: bf:db:6f:01:91:f4:f6:12:9e:2f:f5:e3:93:e0:e7: f7:4d:49:ed:a5:26:1f:56:a8:19:7e:1e:2d:b0:29: 2b:63:f2:00:ca:28:d8:26:79:24:4e:ba:64:b4:7f: 84:93:b8:63:c5:91:eb:06:46:53:87:73:30:dc:5d: 14:67:6d:b3:cb:e7:ea:0a:24:e3:3e:45:17:2d:2f: c1:5a:5b:2b:df:74:9e:33:d2:6c:b6:33:9c:9e:2a: b5:1f:f7:18:9b:ae:f8:f3:59:d5:52:ed:02:af:92: 47:6c:44:77:f3:15:d6:69:90:1c:c0:cc:1f:7a:19: b9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:08:E5:1B:69:1C:33:0D:8D:9B:5C:BF:6D:FD:DD:AF:77:90:78:B9 X509v3 Authority Key Identifier: keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:1a:4d:b8:35:c6:35:db:1a:0b:2a:c1:f1:63:44:d0:24:77: b8:94:e2:62:26:b8:f5:48:f7:0b:16:9a:a6:10:81:46:88:8a: c1:b6:4f:de:fe:56:7a:08:b3:f7:b8:65:e2:70:c6:2f:66:cb: b8:4c:54:7c:b9:b8:10:8c:0e:22:89:98:50:e9:b9:da:b4:11: 92:83:d5:14:a8:54:c3:6e:0f:84:34:f8:92:33:0e:b3:8f:a6: c3:47:e0:1a:59:da:d9:9d:40:10:66:57:58:da:8d:8b:ec:8c: 08:51:d9:84:cf:48:24:6b:ab:5f:ab:66:70:c3:61:01:ce:15: a1:2f:38:01:57:f0:5c:dd:3a:02:87:d6:15:ee:e1:c9:d1:51: c7:f5:52:b5:e2:35:e1:32:a7:5c:95:43:cd:0c:50:55:01:76: ab:7d:88:bc:9b:27:82:cb:dd:45:af:d5:9d:0e:4e:9e:aa:c7: ca:bf:cf:10:48:9f:91:77:bb:58:82:d3:88:6c:06:78:34:1d: e4:7b:02:6b:8c:47:8f:cc:9b:83:c7:c0:8d:48:2d:9f:01:be: 67:40:5a:e6:dc:ae:ae:e5:66:49:c9:1e:9f:d5:48:59:91:30: 11:dd:e9:f7:b1:d1:bb:f5:bb:05:ee:58:13:56:fe:bd:5c:f2: 3a:5e:f5:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcyRTYxMTAvBgNVBAUTKEU0NkVBQ0RDMjE0Mzg1QzE0MjAzNDY3NEU0NkM2OEU3 QkJFMjk1MjUwHhcNMjUwNzAxMDYwMDQxWhcNMjUwNzA4MDYwMDQxWjAYMRYwFAYD VQQDEw02ODYzNzk4OS0xYTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiHdmKj0FUTjnXCfvR4hxx+K6PM4muu+/bMk1411djXqvs/RqF8UndjPgugQ +tbusn7FOprjbe//M/OEvls1NEHiogedgERizW1t5FbsLgHTn5oP/8yWHGJXmbL2 h5BrRW9sTnBc+kSO53wghXwOZCba/Pp0+yKSQUPbsTKE+NlfjY8s6g6/228BkfT2 Ep4v9eOT4Of3TUntpSYfVqgZfh4tsCkrY/IAyijYJnkkTrpktH+Ek7hjxZHrBkZT h3Mw3F0UZ22zy+fqCiTjPkUXLS/BWlsr33SeM9JstjOcniq1H/cYm67481nVUu0C r5JHbER38xXWaZAcwMwfehm5bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBII5Rtp HDMNjZtcv2393a93kHi5MB8GA1UdIwQYMBaAFORurNwhQ4XBQgNGdORsaOe74pUl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzJFNi9GMzU5MDgyNEZE RTMxMUVFQUE3NzdEMTFDNEY5QUUwMi81RzZzM0NGRGhjRkNBMFowNUd4bzU3dmls U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNnMzQ0ZEaGNGQ0EwWjA1R3hvNTd2aWxTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzJFNi9GMzU5MDgyNEZERTMxMUVFQUE3NzdEMTFDNEY5QUUwMi81RzZzM0NGRGhj RkNBMFowNUd4bzU3dmlsU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiGk24NcY12xoLKsHxY0TQJHe4lOJiJrj1SPcLFpqmEIFGiIrBtk/e /lZ6CLP3uGXicMYvZsu4TFR8ubgQjA4iiZhQ6bnatBGSg9UUqFTDbg+ENPiSMw6z j6bDR+AaWdrZnUAQZldY2o2L7IwIUdmEz0gka6tfq2Zww2EBzhWhLzgBV/Bc3ToC h9YV7uHJ0VHH9VK14jXhMqdclUPNDFBVAXarfYi8myeCy91Fr9WdDk6eqsfKv88Q SJ+Rd7tYgtOIbAZ4NB3kewJrjEePzJuDx8CNSC2fAb5nQFrm3K6u5WZJyR6f1UhZ kTAR3en3sdG79bsF7lgTVv69XPI6XvX7 -----END CERTIFICATE-----Generated at Thu Jul 3 01:58:31 2025 by rpki-client