$ rpki-client -vvf rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft File: 5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft (raw, json) Hash identifier: /OMghGzki3zPOgUNQJ/27OoTfpcIFxqy1hTQV371tYw= Subject key identifier: CE:32:4E:13:9D:4B:C3:53:26:EC:E2:04:0D:E3:5C:EB:CE:5C:F1:3E Authority key identifier: E7:F8:C2:23:61:A9:EC:B7:61:EB:FB:01:E8:B9:77:C9:07:A4:F1:F4 Certificate issuer: /CN=A913F680/serialNumber=E7F8C22361A9ECB761EBFB01E8B977C907A4F1F4 Certificate serial: 03F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft Manifest number: 03F5 Signing time: Tue 01 Jul 2025 01:02:31 +0000 Manifest this update: Tue 01 Jul 2025 01:02:30 +0000 Manifest next update: Tue 08 Jul 2025 01:02:30 +0000 Files and hashes: 1: 5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.crl (hash: Jvaqi5L36maoXjlIfkEMyGFjb7gBCHTx2L2anjZt4YM=) 2: 019A77BC7F1811ECA6613535C4F9AE02.roa (hash: TYgGuCEN99XGmSfrnTADvpJpaIXgCSABomnSKWfx4Gw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.crl rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F680, serialNumber=E7F8C22361A9ECB761EBFB01E8B977C907A4F1F4 Validity Not Before: Jul 1 01:02:30 2025 GMT Not After : Jul 8 01:02:30 2025 GMT Subject: CN=686333a6-0634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:fd:63:56:55:01:7a:6d:78:84:b2:eb:15: 85:68:87:e0:cb:6d:f3:85:21:39:04:a5:a3:07:86: e8:98:25:d3:54:c0:91:e0:f3:99:89:bf:d7:d9:d9: af:41:f6:84:45:b2:ea:05:18:30:25:1b:36:df:ae: 16:32:22:6f:b5:ce:f5:02:00:5c:d0:c3:62:7b:59: df:62:9d:50:9a:1e:8b:15:2a:72:61:28:ae:85:46: 91:bf:49:b9:36:c7:b4:32:39:e3:20:1f:10:46:d4: 2f:dd:62:0c:46:d5:82:c7:ce:2e:ed:db:22:e6:8a: 32:9e:72:52:da:60:3d:4d:9f:31:ab:69:b9:df:b9: a0:7e:a5:71:30:1c:51:76:09:df:db:79:98:7f:11: 8f:c9:14:a0:b6:35:8b:db:76:0b:f7:5e:bf:46:12: 08:e1:3c:d2:60:41:38:d4:72:72:e0:fe:43:59:08: 52:c2:45:d5:f0:cc:03:cb:cf:25:9e:ee:b1:cb:75: 53:fc:78:7f:a3:12:9b:d3:88:cd:02:88:27:0a:35: ee:63:b9:60:50:50:1a:75:36:2d:25:86:57:66:72: 43:9c:28:78:64:76:af:34:e3:43:83:41:f1:ea:ba: 3e:d0:a0:f0:39:dc:89:e5:c3:1a:09:6d:7d:ab:68: ce:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:32:4E:13:9D:4B:C3:53:26:EC:E2:04:0D:E3:5C:EB:CE:5C:F1:3E X509v3 Authority Key Identifier: keyid:E7:F8:C2:23:61:A9:EC:B7:61:EB:FB:01:E8:B9:77:C9:07:A4:F1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F680/E1FBFA067F1311EC93FC5C5FC4F9AE02/5_jCI2Gp7Ldh6_sB6Ll3yQek8fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:50:5b:78:6c:55:2e:22:fe:37:54:59:41:bd:ff:c9:a1:2b: 7c:03:be:51:58:84:b7:1c:a7:23:1c:c1:dd:95:c6:2a:43:dd: 7c:d4:a2:5a:84:58:06:1c:69:09:ca:f6:59:0a:da:59:35:d5: 33:04:6c:12:5f:37:be:3e:f6:8b:fb:1a:fb:a4:58:36:64:e3: 4a:8f:a2:92:80:5d:68:27:e3:62:20:dc:bd:61:d5:29:9c:5e: 50:c0:48:41:3e:01:b5:ac:2e:9b:1d:06:1d:32:c5:3c:77:97: f7:8d:11:8b:48:8a:61:02:de:43:dd:ba:b4:51:c3:85:9c:9a: f5:2c:11:28:23:1e:3b:2b:61:5c:13:66:07:cf:a4:06:39:6e: 28:b3:5a:79:c3:3a:a5:c7:fc:e4:3a:12:d2:b1:00:0c:95:97: 89:7a:46:66:2b:f9:b4:15:35:9f:aa:22:b3:e7:7c:78:56:f1: d0:87:21:00:db:5b:d7:b9:5f:95:59:95:bc:97:53:7c:b8:3b: 1a:2a:f2:78:fd:0c:74:53:b3:20:01:f0:6c:8d:63:bf:7a:ea: 6d:70:1d:4e:82:7e:a1:d2:b3:27:20:2a:8e:f8:68:92:62:bf: 9a:30:d5:57:cd:8e:03:69:0c:0a:85:cf:1d:57:a6:ae:1f:ec: 84:0d:65:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y2ODAxMTAvBgNVBAUTKEU3RjhDMjIzNjFBOUVDQjc2MUVCRkIwMUU4Qjk3N0M5 MDdBNEYxRjQwHhcNMjUwNzAxMDEwMjMwWhcNMjUwNzA4MDEwMjMwWjAYMRYwFAYD VQQDEw02ODYzMzNhNi0wNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0T9Y1ZVAXpteISy6xWFaIfgy23zhSE5BKWjB4bomCXTVMCR4POZib/X2dmv QfaERbLqBRgwJRs2364WMiJvtc71AgBc0MNie1nfYp1Qmh6LFSpyYSiuhUaRv0m5 Nse0MjnjIB8QRtQv3WIMRtWCx84u7dsi5ooynnJS2mA9TZ8xq2m537mgfqVxMBxR dgnf23mYfxGPyRSgtjWL23YL916/RhII4TzSYEE41HJy4P5DWQhSwkXV8MwDy88l nu6xy3VT/Hh/oxKb04jNAognCjXuY7lgUFAadTYtJYZXZnJDnCh4ZHavNONDg0Hx 6ro+0KDwOdyJ5cMaCW19q2jOmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4yThOd S8NTJuziBA3jXOvOXPE+MB8GA1UdIwQYMBaAFOf4wiNhqey3Yev7Aei5d8kHpPH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjY4MC9FMUZCRkEwNjdG MTMxMUVDOTNGQzVDNUZDNEY5QUUwMi81X2pDSTJHcDdMZGg2X3NCNkxsM3lRZWs4 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfakNJMkdwN0xkaDZfc0I2TGwzeVFlazhmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjY4MC9FMUZCRkEwNjdGMTMxMUVDOTNGQzVDNUZDNEY5QUUwMi81X2pDSTJHcDdM ZGg2X3NCNkxsM3lRZWs4ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAUFt4bFUuIv43VFlBvf/JoSt8A75RWIS3HKcjHMHdlcYqQ9181KJa hFgGHGkJyvZZCtpZNdUzBGwSXze+PvaL+xr7pFg2ZONKj6KSgF1oJ+NiINy9YdUp nF5QwEhBPgG1rC6bHQYdMsU8d5f3jRGLSIphAt5D3bq0UcOFnJr1LBEoIx47K2Fc E2YHz6QGOW4os1p5wzqlx/zkOhLSsQAMlZeJekZmK/m0FTWfqiKz53x4VvHQhyEA 21vXuV+VWZW8l1N8uDsaKvJ4/Qx0U7MgAfBsjWO/euptcB1Ogn6h0rMnICqO+GiS Yr+aMNVXzY4DaQwKhc8dV6auH+yEDWXc -----END CERTIFICATE-----Generated at Wed Jul 2 01:30:26 2025 by rpki-client