$ rpki-client -vvf rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft File: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft (raw, json) Hash identifier: sqex7DSGRuNGb1zf2+kUmjd77L5fPOEIB9+KpjALtig= Subject key identifier: BC:85:23:81:27:6F:7C:0D:70:62:54:68:C8:04:39:75:19:4F:EC:B5 Authority key identifier: E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73 Certificate issuer: /CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73 Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft Manifest number: 017F Signing time: Thu 03 Jul 2025 03:54:37 +0000 Manifest this update: Thu 03 Jul 2025 03:54:37 +0000 Manifest next update: Thu 10 Jul 2025 03:54:37 +0000 Files and hashes: 1: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl (hash: 2sQ55ClZIPgU8EwRrkjVqJ05ABIW0vY4HDKx8DAv0V8=) 2: F4C13F18066811F0B521BF2FC4F9AE02.roa (hash: epExzgPr36sDhlRxRH5MQNOpHIGT7+cJfb/YyVTxfcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913ABFE, serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73 Validity Not Before: Jul 3 03:54:37 2025 GMT Not After : Jul 10 03:54:37 2025 GMT Subject: CN=6865fefd-a725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:95:f2:b1:03:b7:43:e8:5d:bd:3f:0f:24:9a: ef:62:57:9d:05:5d:eb:6b:2d:a4:7a:5d:73:ae:ac: e8:98:af:0f:3b:51:36:02:ac:a5:07:30:22:e5:ef: a4:af:59:26:c0:cc:3a:97:92:10:c0:73:df:ea:3c: 89:93:29:33:17:ad:0a:a0:86:6f:c3:c0:9c:7b:f2: 28:88:41:83:33:9a:9e:20:5c:41:1f:14:77:e5:51: 0a:25:e2:50:1e:96:f9:f1:ce:e4:cf:a1:2e:07:b6: 5e:97:c0:33:cb:bb:bd:71:88:69:bd:48:a3:75:5c: 48:73:20:77:1a:6c:15:ce:0e:56:33:d1:6b:3b:1e: f0:37:10:83:f9:6b:e7:d7:47:39:f4:6a:e1:3d:c6: 0c:68:8b:e5:49:94:03:e5:ad:d5:7c:1a:60:e1:d3: 5e:49:c6:c7:c7:8c:31:80:b1:09:29:b1:40:ca:df: f7:13:14:f3:2f:49:59:3b:9b:a5:89:e4:a9:b4:6b: 6e:34:50:14:b5:c5:23:b5:4f:ce:da:45:e2:8c:cf: bb:27:c2:4c:50:c3:47:da:c6:3e:c3:81:a4:9d:ba: 07:f8:96:75:99:ad:f1:1f:53:e0:62:87:40:52:6c: fd:a0:c7:de:36:2e:60:ea:de:35:0e:d4:5c:18:54: d1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:85:23:81:27:6F:7C:0D:70:62:54:68:C8:04:39:75:19:4F:EC:B5 X509v3 Authority Key Identifier: keyid:E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:39:17:f6:77:b4:c1:c3:c5:f0:9f:e3:6f:39:2d:fa:9b:12: 0e:2b:22:50:f1:de:85:35:63:f1:8f:92:42:be:48:5f:ca:84: 1e:21:d4:1e:ef:04:79:56:e2:f6:39:ae:a0:0c:2b:90:4a:2a: 05:ca:7f:a1:d2:bb:6d:e8:9e:d1:32:4a:6b:08:2f:55:54:29: e7:9c:91:94:48:a5:8a:94:05:5f:d0:ee:ad:e4:fb:53:7a:89: 8e:70:c5:ad:44:bf:d1:42:65:18:f0:d8:a8:40:c8:a4:d8:60: 20:bd:94:fb:9e:ed:61:2a:cd:4b:90:aa:28:62:d3:a3:87:48: 8a:22:0f:c2:c7:3d:db:89:26:36:a1:fa:cb:98:94:85:3f:42: ea:3a:3d:f3:70:8a:81:07:1b:c4:f7:3c:16:3b:06:35:c5:91: 89:ee:2b:28:4c:2d:7a:2d:e2:c2:a6:25:cf:79:85:ae:72:f9: 27:e8:70:bc:c6:25:52:c2:97:24:78:c0:e6:c5:cb:f0:4c:6c: 86:01:df:ea:a0:56:76:04:ec:79:c0:0f:18:ff:2b:59:7e:ed: d8:a8:e5:3c:83:46:e8:40:51:b6:c8:a3:08:c9:e2:40:02:df: 4a:6e:8d:ad:a0:63:46:fe:74:36:43:10:2b:b4:7c:fc:f3:b0: 5e:4a:af:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FCRkUxMTAvBgNVBAUTKEU1ODhDNzNFNkNCNEZEQjM4Qjg0RUU0MEY4RjlCNjRD NTBCRTRCNzMwHhcNMjUwNzAzMDM1NDM3WhcNMjUwNzEwMDM1NDM3WjAYMRYwFAYD VQQDEw02ODY1ZmVmZC1hNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5XysQO3Q+hdvT8PJJrvYledBV3ray2kel1zrqzomK8PO1E2AqylBzAi5e+k r1kmwMw6l5IQwHPf6jyJkykzF60KoIZvw8Cce/IoiEGDM5qeIFxBHxR35VEKJeJQ Hpb58c7kz6EuB7Zel8Azy7u9cYhpvUijdVxIcyB3GmwVzg5WM9FrOx7wNxCD+Wvn 10c59GrhPcYMaIvlSZQD5a3VfBpg4dNeScbHx4wxgLEJKbFAyt/3ExTzL0lZO5ul ieSptGtuNFAUtcUjtU/O2kXijM+7J8JMUMNH2sY+w4GknboH+JZ1ma3xH1PgYodA Umz9oMfeNi5g6t41DtRcGFTR1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyFI4En b3wNcGJUaMgEOXUZT+y1MB8GA1UdIwQYMBaAFOWIxz5stP2zi4TuQPj5tkxQvktz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUJGRS9GMUQ1NTg3RTI1 RjExMUVFQjdCNDgwNThDNEY5QUUwMi81WWpIUG15MF9iT0xoTzVBLVBtMlRGQy1T M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZakhQbXkwX2JPTGhPNUEtUG0yVEZDLVMzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUJGRS9GMUQ1NTg3RTI1RjExMUVFQjdCNDgwNThDNEY5QUUwMi81WWpIUG15MF9i T0xoTzVBLVBtMlRGQy1TM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEORf2d7TBw8Xwn+NvOS36mxIOKyJQ8d6FNWPxj5JCvkhfyoQeIdQe 7wR5VuL2Oa6gDCuQSioFyn+h0rtt6J7RMkprCC9VVCnnnJGUSKWKlAVf0O6t5PtT eomOcMWtRL/RQmUY8NioQMik2GAgvZT7nu1hKs1LkKooYtOjh0iKIg/Cxz3biSY2 ofrLmJSFP0LqOj3zcIqBBxvE9zwWOwY1xZGJ7isoTC16LeLCpiXPeYWucvkn6HC8 xiVSwpckeMDmxcvwTGyGAd/qoFZ2BOx5wA8Y/ytZfu3YqOU8g0boQFG2yKMIyeJA At9Kbo2toGNG/nQ2QxArtHz887BeSq+r -----END CERTIFICATE-----Generated at Thu Jul 3 13:45:57 2025 by rpki-client