$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft File: 5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json) Hash identifier: gtDSKCTzSEtCy1JtauH+rD9a27DqrF2WOlV/QzQJ3+A= Subject key identifier: 72:F2:61:CF:89:53:90:04:0D:78:FE:BF:B6:AD:84:3F:59:14:BE:2D Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Certificate serial: 34BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft Manifest number: 34A6 Signing time: Mon 30 Jun 2025 14:59:10 +0000 Manifest this update: Mon 30 Jun 2025 14:59:10 +0000 Manifest next update: Mon 07 Jul 2025 14:59:10 +0000 Files and hashes: 1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: cpBfcAvs/LGO2wEQ1k0cnbkrMN52KNGhBtap8uG5nS0=) 2: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: HW9R1Ep56SryGIz4W6P5CqXSgSxlXz4KavtGaF387a4=) 3: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: AqcTvl3JE8iQmp2mHhzhnxH+2xnTnNkhAQ8gJbtZg+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Validity Not Before: Jun 30 14:59:10 2025 GMT Not After : Jul 7 14:59:10 2025 GMT Subject: CN=6862a63e-c6d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:11:16:15:3d:dc:58:a4:e3:1d:6c:01:db: 72:4b:cf:56:2a:4c:cd:e2:8b:78:fa:0d:33:53:dc: a7:59:76:e0:31:97:28:39:f1:64:6c:88:9e:d5:99: 25:19:14:a2:a4:a5:82:b0:de:f5:1e:ce:ee:98:13: 6c:f0:bc:8c:f0:da:ea:c7:4d:1a:c1:f6:df:44:10: b6:44:3d:72:c3:e3:34:dd:e7:5e:a0:55:fd:0a:a9: 76:41:b4:41:95:3d:56:1e:35:91:c9:a8:c5:48:a7: 37:6b:bc:ea:d5:de:43:cc:4b:ad:e7:9d:31:4b:f2: 25:ce:e2:c6:46:8a:24:3a:c3:c7:33:a8:e9:94:86: f4:cd:c9:c2:dd:92:29:f8:8c:a9:2d:0a:89:4c:03: 44:fb:0a:51:91:5f:f8:13:b4:71:d8:ba:1c:49:ad: e1:83:df:aa:7d:76:7f:ee:c5:c1:f5:d2:e4:ae:5e: 40:e3:5a:62:92:e2:b7:ff:fd:a7:6e:96:c3:54:23: a0:00:bf:bf:02:3c:fc:fa:3a:ce:a5:da:1d:3b:fa: 03:af:06:1c:e6:81:6d:e6:bc:ba:73:1e:6e:04:8f: e0:bf:ac:42:b1:08:26:6e:8e:bd:f2:d1:74:da:44: fc:f8:49:ae:5e:dc:61:5e:53:91:d3:d3:ea:bf:ff: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F2:61:CF:89:53:90:04:0D:78:FE:BF:B6:AD:84:3F:59:14:BE:2D X509v3 Authority Key Identifier: keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:55:a7:15:91:fb:c2:e4:89:12:8c:0f:30:75:4f:7d:e6:28: c8:0f:2c:40:6a:04:09:cb:b1:e8:65:a4:9d:6a:57:47:3d:43: b1:cd:30:ef:ec:3e:66:64:19:0e:fb:c5:bf:8a:f9:61:f1:a3: 78:07:5f:5b:92:51:b0:b0:53:b9:27:5f:23:a8:49:f2:45:25: d4:55:41:85:c9:be:45:de:e1:74:22:58:80:1b:b3:50:c5:cc: 78:31:c1:c8:9f:35:84:b8:73:8b:88:30:cc:87:13:f8:14:2d: bf:80:fb:ba:82:a6:3a:0b:04:e9:0e:6a:f4:65:1c:3f:ff:1e: 7f:89:dd:3c:db:71:3c:63:35:38:88:e7:3a:b9:8f:d6:e1:88: 37:0e:ea:3b:e5:49:15:8d:b4:36:12:3f:f5:29:3b:90:21:c5: eb:c2:df:67:09:de:14:97:32:80:13:12:10:8e:c5:19:26:dd: 48:51:35:22:32:9a:6f:67:5c:50:92:87:4e:77:23:76:72:58: 84:5e:ef:8d:5a:02:3f:11:0c:2b:95:a9:24:03:da:dd:0c:d2: 8b:67:0d:e7:fe:8a:83:57:e1:50:18:b0:8f:cf:fe:14:0a:40: 7a:a3:74:d1:b3:22:9b:28:82:9d:ba:2c:c7:7b:7e:7a:ba:f3: f2:99:c7:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3RjkxMTAvBgNVBAUTKEU2QkY0NkU1MzBERjkyMjk4RkFDMDMyQUZCQzk4NDA5 QzQ0MzA0MzkwHhcNMjUwNjMwMTQ1OTEwWhcNMjUwNzA3MTQ1OTEwWjAYMRYwFAYD VQQDEw02ODYyYTYzZS1jNmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNARFhU93Fik4x1sAdtyS89WKkzN4ot4+g0zU9ynWXbgMZcoOfFkbIie1Zkl GRSipKWCsN71Hs7umBNs8LyM8Nrqx00awfbfRBC2RD1yw+M03edeoFX9Cql2QbRB lT1WHjWRyajFSKc3a7zq1d5DzEut550xS/IlzuLGRookOsPHM6jplIb0zcnC3ZIp +IypLQqJTANE+wpRkV/4E7Rx2LocSa3hg9+qfXZ/7sXB9dLkrl5A41pikuK3//2n bpbDVCOgAL+/Ajz8+jrOpdodO/oDrwYc5oFt5ry6cx5uBI/gv6xCsQgmbo698tF0 2kT8+EmuXtxhXlOR09Pqv/88UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLyYc+J U5AEDXj+v7athD9ZFL4tMB8GA1UdIwQYMBaAFOa/RuUw35Ipj6wDKvvJhAnEQwQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjdGOS82RUQyRUJBQTFE OUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtpbVByQU1xLThtRUNjUkRC RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyOUc1VERma2ltUHJBTXEtOG1FQ2NSREJEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjdGOS82RUQyRUJBQTFEOUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtp bVByQU1xLThtRUNjUkRCRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsVacVkfvC5IkSjA8wdU995ijIDyxAagQJy7HoZaSdaldHPUOxzTDv 7D5mZBkO+8W/ivlh8aN4B19bklGwsFO5J18jqEnyRSXUVUGFyb5F3uF0IliAG7NQ xcx4McHInzWEuHOLiDDMhxP4FC2/gPu6gqY6CwTpDmr0ZRw//x5/id0823E8YzU4 iOc6uY/W4Yg3Duo75UkVjbQ2Ej/1KTuQIcXrwt9nCd4UlzKAExIQjsUZJt1IUTUi MppvZ1xQkodOdyN2cliEXu+NWgI/EQwrlakkA9rdDNKLZw3n/oqDV+FQGLCPz/4U CkB6o3TRsyKbKIKduizHe356uvPymce8 -----END CERTIFICATE-----Generated at Tue Jul 1 05:02:04 2025 by rpki-client