$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft File: 5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json) Hash identifier: p4HKDP7EAr1LJ7xRsvav9Pz+/O0P32GovIPty1Wi1Sk= Subject key identifier: 8C:BC:71:26:8F:AA:6E:32:3E:26:DB:D9:3A:30:F3:D5:29:F3:27:44 Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB Certificate issuer: /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Certificate serial: 03B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft Manifest number: 039B Signing time: Thu 03 Jul 2025 01:13:31 +0000 Manifest this update: Thu 03 Jul 2025 01:13:31 +0000 Manifest next update: Thu 10 Jul 2025 01:13:31 +0000 Files and hashes: 1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: axvGqo3NCjZkRKKJMh04f1QE0+zzaBM83sNI4xaPFxY=) 2: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: BfZYjuf+MTJqrBceGA5aBPWPAbWyAIIKEVtel+HzA+s=) 3: C8165660822F11EEABA7D533C4F9AE02.roa (hash: G6DqHnh4blUKVwDCX+3yAB5EHH1Zl+1SenKDUoryx8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Validity Not Before: Jul 3 01:13:31 2025 GMT Not After : Jul 10 01:13:31 2025 GMT Subject: CN=6865d93b-f87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:dc:f4:e0:ad:c8:8d:f1:94:81:c0:e0:88: 9d:06:a7:6c:c6:18:af:e4:49:41:41:35:67:cf:0c: d7:7a:da:2b:15:28:7c:80:dc:25:17:6d:53:6a:02: 2a:42:57:05:51:bf:15:44:4c:f1:69:8b:95:9d:be: 83:e1:38:3f:9e:e0:c5:72:1a:64:5d:8a:14:99:19: 76:c2:eb:26:6e:cd:1a:c7:e9:94:03:93:80:24:7a: 11:1e:53:15:db:6a:56:cb:00:cc:ae:63:dd:66:f1: b7:9d:cb:13:0b:d2:1e:81:34:99:96:d8:e5:ed:30: e4:11:96:3e:46:23:05:9f:6d:a4:69:a6:98:6e:af: 8b:62:2f:02:c2:bc:d1:b9:55:0c:76:1d:97:c0:68: 33:15:d2:f8:80:29:e8:72:bf:1f:d3:63:cd:20:5a: 97:49:03:e5:de:b2:9f:93:8b:d0:d6:0f:df:59:f1: 92:36:0b:fa:4a:86:d3:97:5c:07:1d:a3:af:c8:61: 1a:a9:0b:c7:1e:08:dc:c0:b1:0d:0f:17:b7:21:11: 9c:6c:51:c4:f8:3c:23:8d:87:12:f5:3e:77:cb:da: 56:5f:0a:05:7b:60:85:0d:eb:15:44:02:78:59:2e: 00:87:72:f9:ed:b1:79:4d:db:4f:de:5a:4d:1e:74: f9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BC:71:26:8F:AA:6E:32:3E:26:DB:D9:3A:30:F3:D5:29:F3:27:44 X509v3 Authority Key Identifier: keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:24:c8:02:e2:c2:fa:52:50:28:1a:c1:f4:dd:6b:5d:c9:4d: 47:0f:f1:ff:ff:f0:d3:98:c2:c5:e4:38:f5:52:e9:b4:d0:c4: c6:a9:23:ab:5a:1f:8c:9c:19:7d:b6:df:03:bf:22:b0:0c:c0: 00:69:51:fe:5e:41:17:6d:56:74:bd:f9:05:94:44:26:47:76: 33:f6:1a:3c:d0:d0:73:1b:3a:0b:db:dd:0d:5b:6e:65:c8:c4: 92:96:56:65:9d:06:b6:86:63:5c:01:bd:fe:15:98:c2:1e:b1: 3b:87:b9:7f:9f:46:cb:8e:22:b3:a9:df:16:f9:b6:71:92:e3: e4:b0:ef:10:e1:d0:6f:d2:0c:e2:35:2e:cf:eb:77:11:65:e5: 76:bb:af:1f:e8:ad:d5:b6:7d:3c:b7:e5:f5:4c:e3:c9:cd:b0: 86:a9:5e:6a:c2:f3:9c:73:9f:b1:a5:ce:5d:45:a9:45:d6:88: b8:b0:10:41:16:f4:50:e5:23:4b:49:33:34:c8:83:fe:49:be: 9c:53:8c:30:aa:42:6b:29:55:99:d9:05:8c:57:93:97:fc:b6: a2:b5:17:87:2d:e0:24:62:12:fc:d9:d7:80:0b:dd:0d:c2:81: 64:51:78:e0:1f:dc:d4:0d:6e:fb:f0:80:fe:74:6b:cb:49:0f: c4:f7:bb:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKEU2MjE0NjlDRDVBNTc4Rjk0N0FCNDdFQjBFQ0U4ODkz OUI4N0VCRkIwHhcNMjUwNzAzMDExMzMxWhcNMjUwNzEwMDExMzMxWjAYMRYwFAYD VQQDEw02ODY1ZDkzYi1mODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYXc9OCtyI3xlIHA4IidBqdsxhiv5ElBQTVnzwzXetorFSh8gNwlF21TagIq QlcFUb8VREzxaYuVnb6D4Tg/nuDFchpkXYoUmRl2wusmbs0ax+mUA5OAJHoRHlMV 22pWywDMrmPdZvG3ncsTC9IegTSZltjl7TDkEZY+RiMFn22kaaaYbq+LYi8CwrzR uVUMdh2XwGgzFdL4gCnocr8f02PNIFqXSQPl3rKfk4vQ1g/fWfGSNgv6SobTl1wH HaOvyGEaqQvHHgjcwLENDxe3IRGcbFHE+DwjjYcS9T53y9pWXwoFe2CFDesVRAJ4 WS4Ah3L57bF5TdtP3lpNHnT5HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIy8cSaP qm4yPibb2Tow89Up8ydEMB8GA1UdIwQYMBaAFOYhRpzVpXj5R6tH6w7OiJObh+v7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9EOEI2ODY5NkFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQbEhxMGZyRHM2SWs1dUg2 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpRkduTldsZVBsSHEwZnJEczZJazV1SDZfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9EOEI2ODY5NkFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQ bEhxMGZyRHM2SWs1dUg2X3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMJMgC4sL6UlAoGsH03WtdyU1HD/H///DTmMLF5Dj1Uum00MTGqSOr Wh+MnBl9tt8DvyKwDMAAaVH+XkEXbVZ0vfkFlEQmR3Yz9ho80NBzGzoL290NW25l yMSSllZlnQa2hmNcAb3+FZjCHrE7h7l/n0bLjiKzqd8W+bZxkuPksO8Q4dBv0gzi NS7P63cRZeV2u68f6K3Vtn08t+X1TOPJzbCGqV5qwvOcc5+xpc5dRalF1oi4sBBB FvRQ5SNLSTM0yIP+Sb6cU4wwqkJrKVWZ2QWMV5OX/LaitReHLeAkYhL82deAC90N woFkUXjgH9zUDW778ID+dGvLSQ/E97v7 -----END CERTIFICATE-----Generated at Thu Jul 3 02:49:29 2025 by rpki-client