$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json) Hash identifier: F0WBWcd8Irtry0alKLzOVtKsABAoc9KBSn6Q9v50T/o= Subject key identifier: 88:C9:55:3D:2E:DF:CB:F4:76:7A:26:4A:31:65:EE:62:02:99:9D:89 Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 Certificate issuer: /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Certificate serial: 349E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft Manifest number: 3498 Signing time: Mon 30 Jun 2025 14:56:39 +0000 Manifest this update: Mon 30 Jun 2025 14:56:38 +0000 Manifest next update: Mon 07 Jul 2025 14:56:38 +0000 Files and hashes: 1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: +pRTOD65D9FhztZ59NS+KErABK+CMrn3d0OK5cY47nc=) 2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: tieWSzu8lKOoBqQ293X6Mhk+ox3CzZ2+KgEe+KsaI+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:56:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13470 (0x349e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Validity Not Before: Jun 30 14:56:38 2025 GMT Not After : Jul 7 14:56:38 2025 GMT Subject: CN=6862a5a7-2be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:3f:be:dd:98:c2:be:9d:c6:31:1f:58:d1: 1a:5c:5d:24:c7:e5:4e:83:08:e0:a8:7a:f5:8a:8c: a4:28:10:d8:e3:96:37:76:6d:07:3a:fb:e7:69:14: f9:ed:c3:6e:0c:37:3e:af:85:e8:53:44:af:4a:37: 00:47:fc:92:95:41:dc:ad:cb:85:ab:35:47:24:a0: 8e:88:4c:17:43:ae:cd:12:ef:af:63:d4:7d:af:cb: 87:85:4c:54:d2:05:58:51:02:01:80:fb:16:ea:81: 94:c3:bd:e3:78:55:3b:42:a7:ea:79:4c:b6:9f:2f: 5a:2c:c2:12:2f:b5:95:0d:ba:ff:0f:80:f2:03:09: f5:c3:75:69:0d:9c:ce:69:e7:f2:bc:83:bd:2e:4c: 34:7d:a3:8c:5d:0e:34:89:0c:ba:b3:24:d3:a7:5b: c5:e7:7b:80:65:af:e8:08:29:d2:9a:33:d9:60:ef: 56:1b:cb:2c:53:a5:6a:4a:1e:23:11:de:66:81:01: 9b:43:fd:42:10:a2:6b:13:09:e0:cc:58:83:76:1f: b0:15:e8:b5:40:54:88:27:ad:7e:8e:e9:b6:64:bb: e8:0b:a5:40:2e:64:dc:78:32:99:46:2a:14:8c:a9: 4e:4f:f9:77:b4:01:33:6b:3b:3f:d9:70:40:30:06: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C9:55:3D:2E:DF:CB:F4:76:7A:26:4A:31:65:EE:62:02:99:9D:89 X509v3 Authority Key Identifier: keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:cc:57:b6:db:22:fd:82:ac:b7:35:cc:c1:20:68:8d:94:73: db:50:97:1e:00:0c:15:40:90:81:cf:92:5f:e6:24:c4:ae:48: c7:63:2b:1f:47:8f:63:22:a2:8e:67:61:b9:01:57:9b:e6:87: 5c:ad:c0:1e:d3:45:1d:ba:18:04:50:06:53:3c:5d:2c:fc:51: 44:6b:f2:21:de:d6:30:33:99:53:16:e1:3d:aa:43:ab:48:c7: 3c:d4:57:2c:23:05:d0:b0:82:1f:08:17:4d:8e:57:4c:5f:6d: 36:b3:b9:f2:eb:1c:85:1c:07:ba:38:f1:c5:15:8f:ea:60:06: c6:e5:e3:b0:df:b4:15:eb:8b:e4:30:50:f5:7b:7f:77:9c:0c: bb:36:2a:82:de:7b:7d:34:f9:bd:2e:15:0c:4c:a5:49:ed:a7: 52:88:f0:7d:39:eb:dc:17:e0:b9:42:7c:47:de:3b:2e:25:b6: 2a:00:6e:c1:86:26:eb:9e:64:f4:01:a8:38:66:cb:ba:15:1a: 0b:2d:04:fd:c8:5c:7a:de:1b:18:b5:b1:50:ee:18:ea:75:77: c9:f8:89:7e:db:0e:30:04:d5:4f:e7:f8:7e:c3:2a:34:ef:a8: cc:9d:9e:71:fa:01:05:8c:91:f0:08:f0:2b:44:b3:f1:74:c5: df:6d:48:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0N0ExMTAvBgNVBAUTKEU1MkQ3RjdGQkFBQzFGNzVBRkZBNzYyRURCM0YyODE2 MEJDRkJEMjUwHhcNMjUwNjMwMTQ1NjM4WhcNMjUwNzA3MTQ1NjM4WjAYMRYwFAYD VQQDEw02ODYyYTVhNy0yYmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg0/vt2Ywr6dxjEfWNEaXF0kx+VOgwjgqHr1ioykKBDY45Y3dm0HOvvnaRT5 7cNuDDc+r4XoU0SvSjcAR/ySlUHcrcuFqzVHJKCOiEwXQ67NEu+vY9R9r8uHhUxU 0gVYUQIBgPsW6oGUw73jeFU7QqfqeUy2ny9aLMISL7WVDbr/D4DyAwn1w3VpDZzO aefyvIO9Lkw0faOMXQ40iQy6syTTp1vF53uAZa/oCCnSmjPZYO9WG8ssU6VqSh4j Ed5mgQGbQ/1CEKJrEwngzFiDdh+wFei1QFSIJ61+jum2ZLvoC6VALmTceDKZRioU jKlOT/l3tAEzazs/2XBAMAZEXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjJVT0u 38v0dnomSjFl7mICmZ2JMB8GA1UdIwQYMBaAFOUtf3+6rB91r/p2Lts/KBYLz70l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ3QS80QUYyMjFEQTFE OTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gzV3Ytbll1Mno4b0ZndlB2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVTMV9mN3FzSDNXdi1uWXUyejhvRmd2UHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ3QS80QUYyMjFEQTFEOTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gz V3Ytbll1Mno4b0ZndlB2U1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvzFe22yL9gqy3NczBIGiNlHPbUJceAAwVQJCBz5Jf5iTErkjHYysf R49jIqKOZ2G5AVeb5odcrcAe00UduhgEUAZTPF0s/FFEa/Ih3tYwM5lTFuE9qkOr SMc81FcsIwXQsIIfCBdNjldMX202s7ny6xyFHAe6OPHFFY/qYAbG5eOw37QV64vk MFD1e393nAy7NiqC3nt9NPm9LhUMTKVJ7adSiPB9OevcF+C5QnxH3jsuJbYqAG7B hibrnmT0Aag4Zsu6FRoLLQT9yFx63hsYtbFQ7hjqdXfJ+Il+2w4wBNVP5/h+wyo0 76jMnZ5x+gEFjJHwCPArRLPxdMXfbUg6 -----END CERTIFICATE-----Generated at Tue Jul 1 03:46:27 2025 by rpki-client