$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json) Hash identifier: aUHrfjXONFi3r9UEs/bU3vkF53WMBW/vJmbpZp/r9RU= Subject key identifier: BB:5B:C8:DB:A6:A3:E4:76:7C:9A:A5:0C:E3:ED:D5:9E:08:B3:18:DC Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft Manifest number: 0120 Signing time: Thu 03 Jul 2025 05:05:42 +0000 Manifest this update: Thu 03 Jul 2025 05:05:42 +0000 Manifest next update: Thu 10 Jul 2025 05:05:42 +0000 Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: IN4s20dfquZNi5qZAdemP1LlZ23jsNOHQdlp4RPFdbI=) 2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: 7lH097TnqT2Frr0JL7F0/A/6TnFN0hBEwwqzvbNC3Tc=) 3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: iA4PiBqhCGu6j+QREktQJZZ0YDevgINmDR162rqZIpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Validity Not Before: Jul 3 05:05:42 2025 GMT Not After : Jul 10 05:05:42 2025 GMT Subject: CN=68660fa6-8237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1a:04:b0:8a:80:84:38:cb:e5:09:3e:7c:5f: 30:50:52:05:47:93:e4:cb:e2:56:ca:d6:09:14:95: 30:bd:75:dc:af:f2:e1:ce:8f:5d:c9:8a:b3:c0:ef: d2:bb:44:fe:d7:62:43:41:79:10:15:57:38:55:21: fd:49:c3:49:ac:13:c9:1f:da:79:d4:98:93:8d:21: 4f:07:ac:95:41:51:cc:e7:77:9c:22:4e:a4:99:32: 9a:60:e2:6b:08:a5:4c:08:1f:0a:92:c0:ee:0d:f0: 3b:9e:d2:10:8b:16:13:7f:f2:cb:ac:bc:b3:9a:08: a9:89:02:14:04:6f:89:92:2a:14:a0:20:ee:8f:cf: 80:a6:39:1f:93:2d:fe:12:52:85:31:26:90:07:01: da:d3:53:88:a7:38:6a:86:f1:45:a7:b6:c2:aa:5f: e0:2e:77:90:12:16:e4:a6:20:ea:ed:dc:34:13:61: fe:30:09:12:f2:ce:19:6a:7a:18:53:99:8c:a6:dd: 2b:96:92:a4:ab:dc:2f:30:f0:47:3a:d3:9e:92:b0: 4b:ab:a6:53:82:70:0d:74:2f:e8:93:b4:ec:63:7f: 79:b6:8c:8c:ca:80:ad:ef:e8:b7:9d:79:97:e6:7b: cf:22:42:f0:b9:f1:38:48:59:e2:16:d4:1e:0f:6d: 37:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5B:C8:DB:A6:A3:E4:76:7C:9A:A5:0C:E3:ED:D5:9E:08:B3:18:DC X509v3 Authority Key Identifier: keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:66:f7:35:de:90:83:c5:a3:52:19:34:64:d2:2b:aa:fc:dc: d6:19:e3:aa:8f:98:d6:f2:bb:60:78:e0:f9:39:31:4b:8b:ec: fc:a7:e9:1d:ea:e5:48:22:ab:82:a7:1c:e7:dd:b2:e6:a5:57: a0:d8:fc:3b:0e:2e:e1:74:21:f5:8c:db:3f:4b:d6:5a:cf:ba: a0:34:9f:45:13:64:bb:1c:1a:6a:a2:4b:a1:de:6b:55:ba:c5: e3:01:c2:9c:44:76:e0:13:dd:64:7c:ef:2e:a0:79:2e:1a:fb: 15:e9:f2:5e:66:d4:e7:bf:6c:48:57:10:de:0d:99:13:ae:7e: 6a:52:9a:4e:ef:04:52:5e:17:a1:5d:79:9b:71:a9:f1:37:da: 75:8c:19:29:d3:14:02:f6:eb:75:65:72:2c:04:7a:2d:bb:db: 24:42:4e:5d:71:c0:97:57:d8:e2:98:76:8e:b1:3c:88:be:ce: fc:23:9e:b4:c8:3e:07:32:f4:a7:9b:b0:f4:0a:cb:27:b3:07: 32:3e:8b:66:a2:59:a6:b3:cf:f3:1e:2d:1e:f7:9b:4f:21:f3: 28:ad:14:cf:db:0c:09:89:ea:ef:fe:62:13:51:63:e9:81:1d: f4:e7:d9:f1:e0:0e:c1:4c:ef:16:3c:e5:ac:6a:b8:03:15:47: 65:85:a8:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEIzOTkyRjBENDlCQUY2QTM2RkRBNjU4RTVCNDU5NDY5 NTIxRTVCNDQwHhcNMjUwNzAzMDUwNTQyWhcNMjUwNzEwMDUwNTQyWjAYMRYwFAYD VQQDEw02ODY2MGZhNi04MjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RoEsIqAhDjL5Qk+fF8wUFIFR5Pky+JWytYJFJUwvXXcr/Lhzo9dyYqzwO/S u0T+12JDQXkQFVc4VSH9ScNJrBPJH9p51JiTjSFPB6yVQVHM53ecIk6kmTKaYOJr CKVMCB8KksDuDfA7ntIQixYTf/LLrLyzmgipiQIUBG+JkioUoCDuj8+Apjkfky3+ ElKFMSaQBwHa01OIpzhqhvFFp7bCql/gLneQEhbkpiDq7dw0E2H+MAkS8s4ZanoY U5mMpt0rlpKkq9wvMPBHOtOekrBLq6ZTgnANdC/ok7TsY395toyMyoCt7+i3nXmX 5nvPIkLwufE4SFniFtQeD203WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtbyNum o+R2fJqlDOPt1Z4IsxjcMB8GA1UdIwQYMBaAFLOZLw1Juvajb9pljltFlGlSHltE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9ERDdFMDkxQ0I2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlxTnYybVdPVzBXVWFWSWVX MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3M1a3ZEVW02OXFOdjJtV09XMFdVYVZJZVcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9ERDdFMDkxQ0I2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlx TnYybVdPVzBXVWFWSWVXMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQZvc13pCDxaNSGTRk0iuq/NzWGeOqj5jW8rtgeOD5OTFLi+z8p+kd 6uVIIquCpxzn3bLmpVeg2Pw7Di7hdCH1jNs/S9Zaz7qgNJ9FE2S7HBpqokuh3mtV usXjAcKcRHbgE91kfO8uoHkuGvsV6fJeZtTnv2xIVxDeDZkTrn5qUppO7wRSXheh XXmbcanxN9p1jBkp0xQC9ut1ZXIsBHotu9skQk5dccCXV9jimHaOsTyIvs78I560 yD4HMvSnm7D0CssnswcyPotmolmms8/zHi0e95tPIfMorRTP2wwJierv/mITUWPp gR3059nx4A7BTO8WPOWsargDFUdlhajF -----END CERTIFICATE-----Generated at Thu Jul 3 19:50:03 2025 by rpki-client