$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft File: 5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json) Hash identifier: dEmTJpAQbBY7Ntu5mRhFQDZL1H8NK3TyaHqMquqWS1c= Subject key identifier: AD:5B:5C:60:85:C8:43:FC:B5:6F:AC:F6:F7:00:24:C3:BA:79:55:A9 Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32 Certificate issuer: /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft Manifest number: 89 Signing time: Sun 29 Jun 2025 05:33:36 +0000 Manifest this update: Sun 29 Jun 2025 05:33:34 +0000 Manifest next update: Sun 06 Jul 2025 05:33:34 +0000 Files and hashes: 1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: 8eDHLVoUmlb16ubhYbfpK1tBvaQY69kKa87ogLeefWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC, serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132 Validity Not Before: Jun 29 05:33:34 2025 GMT Not After : Jul 6 05:33:34 2025 GMT Subject: CN=6860d02f-62f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0a:27:f5:1a:19:d4:c2:de:43:9c:e6:f0:d5: 8b:13:0d:da:74:93:1f:54:21:17:50:47:87:ac:ec: 55:aa:12:4e:78:ca:2a:1e:9d:e7:72:4d:d8:7d:8b: 11:df:42:8a:44:50:a0:98:64:ce:00:31:44:ab:44: 48:e3:c9:f9:a6:60:7d:a9:39:73:fe:cf:c6:05:5e: 9a:10:7f:8a:22:ce:5a:76:2c:24:f0:ef:28:e0:d5: ac:7e:8d:91:97:81:5f:7a:4c:4b:f6:82:10:80:51: 7b:85:12:9c:9a:a0:bf:3b:09:f6:02:08:f4:ac:d6: b1:79:c4:1a:dd:f0:d2:3a:1d:20:1f:57:75:90:a6: 9d:d8:4f:b7:3a:28:b8:eb:00:fb:28:da:24:a2:28: 34:c1:10:79:99:96:f1:71:f5:bd:27:57:61:f0:01: 31:a6:3a:02:24:44:e2:60:fb:a8:e7:47:65:46:16: 2a:51:d5:60:9d:61:ce:7e:1f:c3:e3:5f:71:62:3a: 41:11:3f:6b:95:10:34:25:c7:02:03:42:23:f4:bb: 31:07:5d:6b:3d:c0:83:f5:24:b5:2e:90:5f:71:d5: a4:6b:0f:4e:4c:f4:b0:50:aa:64:93:f6:55:0c:dd: 82:c7:73:6d:44:81:30:7e:9d:53:d4:7a:b7:64:f8: 0e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5B:5C:60:85:C8:43:FC:B5:6F:AC:F6:F7:00:24:C3:BA:79:55:A9 X509v3 Authority Key Identifier: keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:1d:66:d4:65:69:71:35:a6:4b:68:f1:97:6e:b8:8a:ed:7a: 33:9c:e6:23:cc:54:09:47:3d:01:bb:99:c9:05:13:32:09:e2: 89:27:cf:46:a5:0c:4f:23:dc:80:6c:12:15:e6:06:ac:7b:73: 1b:2e:6e:98:a5:1a:39:6f:09:33:e2:65:a8:1b:e0:aa:67:50: 84:54:5c:e8:f9:27:38:78:64:e4:a2:73:de:98:53:7d:41:fd: 9b:34:70:8d:d6:a4:fd:0e:6f:7f:52:d8:09:99:b2:e7:de:f1: 7b:02:7d:c8:10:6a:c8:9c:b3:85:64:78:5b:1d:88:0f:18:ac: fc:fc:30:99:7a:08:10:30:bf:ff:1a:1a:22:09:e8:d0:e1:68: a0:d8:89:5e:f7:f6:90:6a:77:c3:76:60:2d:24:01:bf:85:90: 64:56:68:4c:d3:91:ba:16:73:04:5b:39:d9:32:86:b8:2e:14: 54:7e:d4:2e:0c:14:73:98:f8:11:7d:20:79:fc:3d:75:38:38: 78:b4:b7:dc:55:9f:00:a5:7a:81:65:e1:f4:60:49:e1:79:f1: 7e:e6:cb:a1:ba:d4:61:97:7e:9a:36:47:91:2e:10:29:40:37: 10:07:b7:de:c3:f2:27:c3:0e:43:05:5e:17:33:d4:62:20:69: 59:87:a0:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY2REMxMTAvBgNVBAUTKEU0MkU0MjAwMkE4Mzc4N0E2N0FGOENCOUE4NTFGOTM5 OTc0NkMxMzIwHhcNMjUwNjI5MDUzMzM0WhcNMjUwNzA2MDUzMzM0WjAYMRYwFAYD VQQDEw02ODYwZDAyZi02MmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3gon9RoZ1MLeQ5zm8NWLEw3adJMfVCEXUEeHrOxVqhJOeMoqHp3nck3YfYsR 30KKRFCgmGTOADFEq0RI48n5pmB9qTlz/s/GBV6aEH+KIs5adiwk8O8o4NWsfo2R l4FfekxL9oIQgFF7hRKcmqC/Own2Agj0rNaxecQa3fDSOh0gH1d1kKad2E+3Oii4 6wD7KNokoig0wRB5mZbxcfW9J1dh8AExpjoCJETiYPuo50dlRhYqUdVgnWHOfh/D 419xYjpBET9rlRA0JccCA0Ij9LsxB11rPcCD9SS1LpBfcdWkaw9OTPSwUKpkk/ZV DN2Cx3NtRIEwfp1T1Hq3ZPgOYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1bXGCF yEP8tW+s9vcAJMO6eVWpMB8GA1UdIwQYMBaAFOQuQgAqg3h6Z6+MuahR+TmXRsEy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjZEQy84MENFMjc4QTg0 NkIxMUVGOUM0MjREM0FDNEY5QUUwMi81QzVDQUNxRGVIcG5yNHk1cUZINU9aZEd3 VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDNUNBQ3FEZUhwbnI0eTVxRkg1T1pkR3dUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjZEQy84MENFMjc4QTg0NkIxMUVGOUM0MjREM0FDNEY5QUUwMi81QzVDQUNxRGVI cG5yNHk1cUZINU9aZEd3VEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxHWbUZWlxNaZLaPGXbriK7XoznOYjzFQJRz0Bu5nJBRMyCeKJJ89G pQxPI9yAbBIV5gase3MbLm6YpRo5bwkz4mWoG+CqZ1CEVFzo+Sc4eGTkonPemFN9 Qf2bNHCN1qT9Dm9/UtgJmbLn3vF7An3IEGrInLOFZHhbHYgPGKz8/DCZeggQML// GhoiCejQ4Wig2Ile9/aQanfDdmAtJAG/hZBkVmhM05G6FnMEWznZMoa4LhRUftQu DBRzmPgRfSB5/D11ODh4tLfcVZ8ApXqBZeH0YEnhefF+5suhutRhl36aNkeRLhAp QDcQB7few/Inww5DBV4XM9RiIGlZh6CM -----END CERTIFICATE-----Generated at Sun Jun 29 20:05:18 2025 by rpki-client