$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft File: 5EL5lVmsG6h-4TSLL8evCiL_smE.mft (raw, json) Hash identifier: ecrXyEHnRpbjhhqY3PFBMfCXv/QaG49jj5LbI2CGYmg= Subject key identifier: AF:FD:6A:CD:FF:90:B1:DB:EC:35:51:B8:DA:1D:31:61:93:87:02:33 Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 Certificate issuer: /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Certificate serial: 2B02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft Manifest number: 2AF2 Signing time: Mon 30 Jun 2025 15:34:46 +0000 Manifest this update: Mon 30 Jun 2025 15:34:45 +0000 Manifest next update: Mon 07 Jul 2025 15:34:45 +0000 Files and hashes: 1: 5EL5lVmsG6h-4TSLL8evCiL_smE.crl (hash: UVUr01aB3HVd9lCq4ikHa23suy1aMJSgWOTOMBedGE0=) 2: 5452AC309B4911EB9952394CC4F9AE02.roa (hash: 3EBZNTlM2pSnC9HcQ0kJddDB9AhHcVhBduQrWy64qKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11010 (0x2b02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143336, serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261 Validity Not Before: Jun 30 15:34:45 2025 GMT Not After : Jul 7 15:34:45 2025 GMT Subject: CN=6862ae95-ec9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0e:eb:8a:de:41:22:e1:84:aa:a5:2f:22:12: f1:5d:68:1a:53:59:fc:8f:3f:af:ed:f4:99:57:08: 8b:9a:b2:66:82:a1:95:ec:13:5c:af:a5:93:17:a0: 44:5a:8d:73:e0:58:98:10:89:ec:5c:a3:99:8b:48: 5b:60:71:db:4f:40:f4:d5:21:28:45:a1:af:13:27: b4:58:17:41:28:82:9b:da:bd:06:ff:95:ea:3c:54: 7b:f3:4c:31:5c:90:d2:03:f9:24:80:d7:d1:c7:25: c9:0d:8d:ce:0f:ee:37:a7:7f:c8:23:19:5a:93:51: 0b:01:4f:2b:7a:f5:ae:96:fb:01:67:3a:9c:93:83: ba:33:bf:64:d9:e5:c2:84:ed:76:f3:24:4a:9c:95: c4:77:a2:69:6f:bf:b2:5e:e3:83:3c:51:b4:9f:4d: 7a:78:a9:8a:8d:4f:13:7a:81:02:1b:e6:d2:99:ad: 4c:2e:c2:46:14:c2:c8:4e:ef:aa:02:b8:62:f7:7f: bc:b7:db:60:fc:c3:7a:a0:5e:0c:e7:6a:b7:a2:fc: 07:ee:2b:23:19:e0:ba:17:cc:7e:db:cd:e8:a7:24: 0a:0c:fe:2a:92:75:da:0e:a8:64:34:c0:ec:18:23: f3:bc:94:6e:05:1c:9e:95:c5:a7:5c:70:e4:45:c0: a9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FD:6A:CD:FF:90:B1:DB:EC:35:51:B8:DA:1D:31:61:93:87:02:33 X509v3 Authority Key Identifier: keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:db:9b:5e:a2:07:87:d7:2e:40:77:5f:c1:a3:78:9c:0e:5d: 1a:9f:cd:a2:c4:1f:b4:14:24:1a:73:a6:c4:1d:c0:a8:85:24: 4a:f5:a4:80:dc:98:13:79:13:60:31:fd:30:16:06:e5:9b:3b: 94:88:c3:5c:04:46:99:dc:c7:9f:fa:bc:89:a2:31:30:5a:47: 48:5b:cf:7b:b0:f0:40:96:ba:3d:cc:27:61:f1:0d:88:8d:df: 43:47:ff:5c:97:f6:e6:42:9f:71:1d:4d:84:87:56:c2:ac:33: 27:e7:42:c5:6a:42:ec:96:d7:b5:e2:6b:64:9c:45:24:d0:e1: 13:ab:64:76:01:82:e7:29:45:19:83:a5:b1:64:88:a1:56:61: 0f:34:8b:10:89:96:23:5b:6c:cf:5d:29:76:5d:6b:99:58:c0: 38:4a:7b:b7:ca:ab:6d:dd:8d:9b:29:60:14:e4:8f:11:cc:dd: 49:2e:1f:f7:75:f6:7d:4c:10:76:7f:2f:2b:8c:e1:9d:4c:50: 4a:d9:72:c4:8c:d0:7a:ad:1e:08:79:b7:c3:48:ff:8f:87:48: e2:8e:ed:40:c4:f0:46:ea:7f:63:eb:1e:c2:4a:e6:e1:0e:09: 6b:13:86:4b:58:ee:77:4a:0d:be:14:da:5c:f8:ab:3a:f9:bd: 05:81:f2:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMzMzYxMTAvBgNVBAUTKEU0NDJGOTk1NTlBQzFCQTg3RUUxMzQ4QjJGQzdBRjBB MjJGRkIyNjEwHhcNMjUwNjMwMTUzNDQ1WhcNMjUwNzA3MTUzNDQ1WjAYMRYwFAYD VQQDEw02ODYyYWU5NS1lYzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvA7rit5BIuGEqqUvIhLxXWgaU1n8jz+v7fSZVwiLmrJmgqGV7BNcr6WTF6BE Wo1z4FiYEInsXKOZi0hbYHHbT0D01SEoRaGvEye0WBdBKIKb2r0G/5XqPFR780wx XJDSA/kkgNfRxyXJDY3OD+43p3/IIxlak1ELAU8revWulvsBZzqck4O6M79k2eXC hO128yRKnJXEd6Jpb7+yXuODPFG0n016eKmKjU8TeoECG+bSma1MLsJGFMLITu+q Arhi93+8t9tg/MN6oF4M52q3ovwH7isjGeC6F8x+283opyQKDP4qknXaDqhkNMDs GCPzvJRuBRyelcWnXHDkRcCpYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/9as3/ kLHb7DVRuNodMWGThwIzMB8GA1UdIwQYMBaAFORC+ZVZrBuofuE0iy/Hrwoi/7Jh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMzNi84RUU3RkMxRTA4 NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2aC00VFNMTDhldkNpTF9z bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFTDVsVm1zRzZoLTRUU0xMOGV2Q2lMX3NtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzMzNi84RUU3RkMxRTA4NTMxMUU0QjAyMzlFNjFDNEY5QUUwMi81RUw1bFZtc0c2 aC00VFNMTDhldkNpTF9zbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD25teogeH1y5Ad1/Bo3icDl0an82ixB+0FCQac6bEHcCohSRK9aSA 3JgTeRNgMf0wFgblmzuUiMNcBEaZ3Mef+ryJojEwWkdIW897sPBAlro9zCdh8Q2I jd9DR/9cl/bmQp9xHU2Eh1bCrDMn50LFakLslte14mtknEUk0OETq2R2AYLnKUUZ g6WxZIihVmEPNIsQiZYjW2zPXSl2XWuZWMA4Snu3yqtt3Y2bKWAU5I8RzN1JLh/3 dfZ9TBB2fy8rjOGdTFBK2XLEjNB6rR4IebfDSP+Ph0jiju1AxPBG6n9j6x7CSubh DglrE4ZLWO53Sg2+FNpc+Ks6+b0FgfIE -----END CERTIFICATE-----Generated at Tue Jul 1 08:15:13 2025 by rpki-client