$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft File: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft (raw, json) Hash identifier: Vqx9zIq55h9eG54sLdaGJuiPgQdoxL+IXDc0GhOxwGk= Subject key identifier: F1:4B:7E:CA:0D:00:F1:4F:96:6D:42:58:0E:BA:B0:07:6D:B6:6B:90 Authority key identifier: E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0 Certificate issuer: /CN=A917B633/serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft Manifest number: 89 Signing time: Thu 03 Jul 2025 06:43:51 +0000 Manifest this update: Thu 03 Jul 2025 06:43:50 +0000 Manifest next update: Thu 10 Jul 2025 06:43:50 +0000 Files and hashes: 1: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl (hash: csQ7V67dC+dLVEZUFHbsHoHig4bCfefDFO2IxDw2iUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633, serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0 Validity Not Before: Jul 3 06:43:50 2025 GMT Not After : Jul 10 06:43:50 2025 GMT Subject: CN=686626a7-f6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:2d:fd:28:d7:a0:33:03:f8:69:af:aa:17: 26:85:d2:4f:1c:7d:16:a6:6c:d7:30:8c:dc:c4:90: 16:2d:e9:dd:da:cc:a4:87:41:f1:d6:ae:4f:ad:0b: 89:9b:1c:44:05:99:e7:26:df:89:db:f8:dc:57:dd: b3:32:3e:92:db:5e:4b:47:05:c9:2b:90:40:a7:70: 8e:2c:f1:87:73:23:34:20:ca:16:2f:31:28:f2:4b: 83:39:57:cf:96:79:8f:5a:c1:e3:c3:55:bd:58:b1: 0d:a2:e7:6e:36:6d:d3:37:f4:ae:8a:53:8a:fd:2b: 90:6d:42:05:68:a9:44:2a:c1:49:b9:48:80:7e:3b: 6b:06:b3:00:23:19:d9:f8:54:c7:a1:fa:3d:51:a2: 22:44:66:60:51:7a:45:10:cc:cd:a8:f8:48:3d:f7: a9:bd:a9:e8:89:c7:5f:4c:b0:39:df:70:58:f6:78: 11:41:8b:c9:b2:e7:6f:14:80:38:a8:3c:d1:1d:de: a7:48:34:5e:84:f8:75:00:6f:d0:7f:86:19:9a:ee: 54:aa:3b:db:79:1b:4a:4d:3c:a7:d7:9d:78:b6:ac: 87:5f:08:8d:f0:e5:90:9c:e6:f9:37:1a:9c:65:d1: 2e:e1:c9:7b:47:5f:ab:e9:d7:ae:fd:34:d3:1a:e2: 57:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4B:7E:CA:0D:00:F1:4F:96:6D:42:58:0E:BA:B0:07:6D:B6:6B:90 X509v3 Authority Key Identifier: keyid:E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:eb:3a:90:c1:00:cd:22:8a:3b:d8:cd:31:4f:56:7f:6e:cf: 5a:a8:e5:ff:c2:ec:da:96:4e:37:9c:92:4e:3f:7c:dc:1d:b7: c1:3a:7c:ac:9f:35:ec:cc:60:24:62:0f:ac:67:e2:e6:ba:9f: 51:9b:d6:1d:9c:8d:21:39:39:03:71:8d:d1:c0:d3:b1:b0:ed: 40:87:9d:11:92:c6:9a:77:18:4b:91:fd:85:80:8d:d2:16:8a: 6b:0b:98:7a:69:ab:95:bf:67:64:a6:be:17:f6:8e:17:61:d4: 2d:06:25:71:12:06:47:a8:ce:0a:38:08:7e:e7:97:1c:b4:b3: 08:c9:2a:f5:53:ee:79:60:c1:a1:b1:83:a3:a7:f7:a4:94:38: 32:61:1d:5f:03:49:fc:24:16:5e:10:2e:45:b2:ed:87:88:36: ee:ed:18:01:cf:56:93:44:aa:92:b4:e8:9b:a4:f5:63:60:4f: f9:59:b5:6c:78:d8:e8:47:e2:d7:79:a5:b5:f7:19:24:19:b8: 2f:e3:ac:51:0f:7a:5d:fc:24:05:c8:c1:42:65:ca:1a:5e:cc: ea:3d:0b:1c:92:76:ac:f1:5f:20:61:85:4b:1f:97:04:6d:72: e6:90:19:a0:66:b7:48:ee:e6:24:9d:66:c3:ac:47:dd:80:5a: fe:8c:8f:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2MzMxMTAvBgNVBAUTKEU2MEUyMTQxRDcxREI5RkM4OUZBQkZCNUZEQUQwMzcy REZBMzM3RDAwHhcNMjUwNzAzMDY0MzUwWhcNMjUwNzEwMDY0MzUwWjAYMRYwFAYD VQQDEw02ODY2MjZhNy1mNmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+At/SjXoDMD+GmvqhcmhdJPHH0WpmzXMIzcxJAWLend2sykh0Hx1q5PrQuJ mxxEBZnnJt+J2/jcV92zMj6S215LRwXJK5BAp3COLPGHcyM0IMoWLzEo8kuDOVfP lnmPWsHjw1W9WLENouduNm3TN/SuilOK/SuQbUIFaKlEKsFJuUiAfjtrBrMAIxnZ +FTHofo9UaIiRGZgUXpFEMzNqPhIPfepvanoicdfTLA533BY9ngRQYvJsudvFIA4 qDzRHd6nSDRehPh1AG/Qf4YZmu5UqjvbeRtKTTyn1514tqyHXwiN8OWQnOb5Nxqc ZdEu4cl7R1+r6deu/TTTGuJXPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFLfsoN APFPlm1CWA66sAdttmuQMB8GA1UdIwQYMBaAFOYOIUHXHbn8ifq/tf2tA3LfozfQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjYzMy9EOTE2NUVCQTg2 RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi81ZzRoUWRjZHVmeUotci0xX2EwRGN0LWpO OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVnNGhRZGNkdWZ5Si1yLTFfYTBEY3Qtak45QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjYzMy9EOTE2NUVCQTg2RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi81ZzRoUWRjZHVm eUotci0xX2EwRGN0LWpOOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn6zqQwQDNIoo72M0xT1Z/bs9aqOX/wuzalk43nJJOP3zcHbfBOnys nzXszGAkYg+sZ+Lmup9Rm9YdnI0hOTkDcY3RwNOxsO1Ah50RksaadxhLkf2FgI3S FoprC5h6aauVv2dkpr4X9o4XYdQtBiVxEgZHqM4KOAh+55cctLMIySr1U+55YMGh sYOjp/eklDgyYR1fA0n8JBZeEC5Fsu2HiDbu7RgBz1aTRKqStOibpPVjYE/5WbVs eNjoR+LXeaW19xkkGbgv46xRD3pd/CQFyMFCZcoaXszqPQscknas8V8gYYVLH5cE bXLmkBmgZrdI7uYknWbDrEfdgFr+jI9/ -----END CERTIFICATE-----Generated at Thu Jul 3 10:22:07 2025 by rpki-client