$ rpki-client -vvf rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft File: 5c6UvYXPCPR6j97JcE8dztA4Bow.mft (raw, json) Hash identifier: wj/vr6kLZZlXNX0EeuhDD0uP9w8DXBfwHY4b1ZqjxuA= Subject key identifier: C5:67:2D:2B:93:55:E6:E9:C3:3D:B8:BF:8A:9B:7F:1D:04:2D:CB:3E Authority key identifier: E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C Certificate issuer: /CN=A91517A0/serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft Manifest number: 78 Signing time: Tue 01 Jul 2025 07:30:44 +0000 Manifest this update: Tue 01 Jul 2025 07:30:44 +0000 Manifest next update: Tue 08 Jul 2025 07:30:44 +0000 Files and hashes: 1: 5c6UvYXPCPR6j97JcE8dztA4Bow.crl (hash: nPtFjRpyQjpXS6dF1CsK8JR6Z6lEpM3get1l4sE9zpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91517A0, serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C Validity Not Before: Jul 1 07:30:44 2025 GMT Not After : Jul 8 07:30:44 2025 GMT Subject: CN=68638ea4-fa20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:58:85:a3:12:d4:4c:ef:47:f4:6e:75:ce:6a: 3c:f8:4b:79:81:ba:c4:7b:a4:ed:77:b1:a5:7e:26: 23:2a:27:6a:18:10:72:d6:fa:20:02:35:cc:ca:3c: 65:2c:1d:0d:57:ae:61:90:95:d8:b0:6e:0f:87:7a: 2c:84:0a:76:32:43:9e:12:c8:5f:46:46:52:34:33: 35:aa:10:bf:4f:0d:33:37:3d:8c:76:52:08:8a:5a: 84:27:99:f1:cb:a2:76:7a:68:df:0d:3b:f4:4f:e7: 12:49:98:a6:80:88:a9:ac:fd:6f:60:fd:30:ef:ff: 33:71:d3:f8:15:79:01:e2:8d:44:29:66:91:4c:e8: 2c:ed:34:17:d7:ba:f4:24:75:ce:df:0b:39:f4:8e: fb:07:9a:07:82:10:b7:c0:77:d1:b9:1b:cf:ce:a5: 84:c6:09:9b:ef:c4:d3:11:79:af:b4:f9:e1:27:da: 0c:f4:f5:43:6e:e9:a2:4e:41:45:ad:5f:6d:25:45: 24:9f:e9:e3:50:3f:d6:79:e5:3f:d1:80:57:06:5f: 3c:95:38:0b:fa:dc:8e:a8:55:b8:44:18:6e:be:b7: 33:94:50:6d:13:8f:b7:dc:e0:a1:2d:08:52:ee:7b: 02:f3:3b:cc:10:af:26:64:8c:85:9e:58:77:aa:a2: cb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:67:2D:2B:93:55:E6:E9:C3:3D:B8:BF:8A:9B:7F:1D:04:2D:CB:3E X509v3 Authority Key Identifier: keyid:E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b1:17:e2:2e:79:0d:21:f7:c6:4d:1e:88:4a:eb:0a:97:5b: 0c:12:bc:bf:33:6c:c9:dd:ce:21:40:71:0a:b4:74:a9:99:46: d4:56:82:8d:cd:07:d4:8f:7e:2c:38:a2:ce:c8:76:e4:2d:ab: d2:e8:b5:af:c9:6e:44:ee:dc:75:31:7a:65:c2:54:a3:fd:29: 67:d3:f4:64:c0:d9:b3:63:67:06:d2:e8:f8:02:67:ea:3b:8a: 78:d5:b1:43:15:64:ec:55:ed:71:c2:fe:8c:e1:23:c9:a6:4a: 59:eb:a2:b4:5f:37:fd:e3:bf:11:98:dd:e2:60:45:15:fd:9a: 53:be:25:f1:df:d2:eb:25:4a:56:d1:23:5e:ac:b3:f3:6e:c5: 2b:e7:c9:69:d2:32:70:29:aa:b8:28:42:54:69:ed:3f:c7:6d: 9a:98:bd:c6:22:eb:a1:31:04:b6:00:47:92:37:46:2a:15:c7: 94:98:5d:60:38:22:8f:4a:bd:cd:45:ab:c8:0e:1e:78:3b:b5: 9e:c4:24:0d:30:5f:6c:f7:a0:8f:7e:ff:34:e6:8e:6b:cc:f3: 93:70:4c:69:7b:7a:34:95:4a:91:7c:80:19:46:63:3b:32:c7: dd:b5:ea:56:b1:ff:2b:95:c5:eb:44:a0:ad:34:45:15:13:5e: 5f:2e:8d:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTdBMDExMC8GA1UEBRMoRTVDRTk0QkQ4NUNGMDhGNDdBOEZERUM5NzA0RjFEQ0VE MDM4MDY4QzAeFw0yNTA3MDEwNzMwNDRaFw0yNTA3MDgwNzMwNDRaMBgxFjAUBgNV BAMTDTY4NjM4ZWE0LWZhMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlWIWjEtRM70f0bnXOajz4S3mBusR7pO13saV+JiMqJ2oYEHLW+iACNczKPGUs HQ1XrmGQldiwbg+HeiyECnYyQ54SyF9GRlI0MzWqEL9PDTM3PYx2UgiKWoQnmfHL onZ6aN8NO/RP5xJJmKaAiKms/W9g/TDv/zNx0/gVeQHijUQpZpFM6CztNBfXuvQk dc7fCzn0jvsHmgeCELfAd9G5G8/OpYTGCZvvxNMRea+0+eEn2gz09UNu6aJOQUWt X20lRSSf6eNQP9Z55T/RgFcGXzyVOAv63I6oVbhEGG6+tzOUUG0Tj7fc4KEtCFLu ewLzO8wQryZkjIWeWHeqosvBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxWctK5NV 5unDPbi/ipt/HQQtyz4wHwYDVR0jBBgwFoAU5c6UvYXPCPR6j97JcE8dztA4Boww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxN0EwLzk1NUZBNTUyOUY2 OTExRUZBNEZFQUY2NUM0RjlBRTAyLzVjNlV2WVhQQ1BSNmo5N0pjRThkenRBNEJv dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNWM2VXZZWFBDUFI2ajk3SmNFOGR6dEE0Qm93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx N0EwLzk1NUZBNTUyOUY2OTExRUZBNEZFQUY2NUM0RjlBRTAyLzVjNlV2WVhQQ1BS Nmo5N0pjRThkenRBNEJvdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGqxF+IueQ0h98ZNHohK6wqXWwwSvL8zbMndziFAcQq0dKmZRtRWgo3N B9SPfiw4os7IduQtq9Lota/JbkTu3HUxemXCVKP9KWfT9GTA2bNjZwbS6PgCZ+o7 injVsUMVZOxV7XHC/ozhI8mmSlnrorRfN/3jvxGY3eJgRRX9mlO+JfHf0uslSlbR I16ss/NuxSvnyWnSMnApqrgoQlRp7T/HbZqYvcYi66ExBLYAR5I3RioVx5SYXWA4 Io9Kvc1Fq8gOHng7tZ7EJA0wX2z3oI9+/zTmjmvM85NwTGl7ejSVSpF8gBlGYzsy x9216lax/yuVxetEoK00RRUTXl8ujaQ= -----END CERTIFICATE-----Generated at Thu Jul 3 07:13:30 2025 by rpki-client