$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft File: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json) Hash identifier: UDAs1vx/4ZhKY18wAgOAHIQUgMvhJkrcYUdwWXM3sLk= Subject key identifier: 79:B8:03:BC:47:29:3D:6C:DA:38:6F:AC:18:D0:CD:7D:1F:22:AB:5D Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Certificate serial: 068E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft Manifest number: 0685 Signing time: Fri 04 Jul 2025 22:42:59 +0000 Manifest this update: Fri 04 Jul 2025 22:42:58 +0000 Manifest next update: Fri 11 Jul 2025 22:42:58 +0000 Files and hashes: 1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: qAdRllvRzm9EeHQ8h/EF3Ysd8oWOmLVztmfru2LlX9k=) 2: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (hash: S4JJ7jAyBRSnbNqlDJcNsJ3iSBBNhU/Ff59dfcwJJB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Validity Not Before: Jul 4 22:42:58 2025 GMT Not After : Jul 11 22:42:58 2025 GMT Subject: CN=686858f2-7aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:53:a4:4b:63:e7:e3:17:e3:4b:87:d2:12:d4: c3:85:8a:41:98:bd:ab:00:83:af:db:6f:12:ef:e1: cd:95:73:77:75:99:59:f8:41:a5:37:2c:2b:cb:d0: 06:7d:cc:02:a5:a6:b2:df:9d:0e:a0:66:49:24:af: 88:4c:ea:b9:9b:90:b8:d5:73:d2:22:1b:a2:58:93: 6a:1b:c7:18:26:8a:3a:f6:4c:10:7d:25:8b:a3:a4: f3:85:e7:6a:f2:c2:e0:dc:ed:55:38:0b:c8:9f:25: 70:fd:f8:bd:f4:d5:4d:3b:c7:47:96:d6:c6:74:c1: 22:03:e1:06:30:49:8a:aa:d8:bd:63:b7:f8:c6:e9: 17:9c:68:c2:c3:8e:c3:47:d2:75:ef:ad:77:c4:6d: 6d:a1:09:54:62:6e:19:41:b5:7a:98:b2:fd:8e:ac: 4b:c3:07:3a:3b:d6:cd:2f:60:c5:92:d8:30:44:d2: 38:a6:0a:32:7c:33:04:44:1d:1f:13:93:ed:c0:26: 87:8b:87:8f:68:7f:b0:e5:2f:c6:5a:86:65:16:9c: 2c:71:38:dc:6e:8c:b5:f8:52:f3:1e:6e:54:c6:24: cc:ad:d9:67:7b:95:2d:3f:c4:f6:34:c0:5f:fd:14: 8b:73:d0:e0:11:37:f6:0b:26:a3:f5:64:a4:1d:43: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B8:03:BC:47:29:3D:6C:DA:38:6F:AC:18:D0:CD:7D:1F:22:AB:5D X509v3 Authority Key Identifier: keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:09:4e:de:9a:20:a4:8d:ce:8d:45:62:71:7b:4e:9b:d6:91: 12:f2:c9:4e:12:c3:40:e9:8e:7b:73:8d:25:e9:dd:b3:b8:cf: c2:01:82:e7:aa:34:0b:e6:09:69:30:52:6d:5b:58:2e:5e:15: 74:04:2a:fd:2d:00:2b:53:3b:28:65:17:3e:92:75:40:d1:31: ee:1a:2a:dc:47:6b:38:19:77:88:56:87:6b:e8:da:96:2e:80: 4f:2d:dd:a6:85:2d:0a:e4:dd:63:a1:8e:b8:52:d2:d7:b2:f7: 12:9c:6e:5a:c2:53:49:7d:65:f3:06:bc:ab:70:34:c1:a2:ee: d9:b7:84:b0:99:72:2a:cc:23:49:a1:bb:d1:a5:34:f3:fa:97: e0:73:25:62:d0:cf:3f:b9:13:4c:a7:ce:6a:10:66:c8:b5:f7: 61:85:1f:c8:d2:81:3a:01:ae:cd:b8:82:4f:2a:42:a3:94:22: 46:90:65:ed:85:b7:74:82:f7:4d:40:cc:de:f4:e6:5a:2b:e7: 18:c0:b2:89:67:ee:0e:e3:fa:24:84:70:1a:2b:98:2c:d6:3a: bc:67:2c:84:f7:cc:da:e9:67:98:cd:89:8a:5d:0a:d5:19:99: 5f:5e:69:a1:1e:1e:24:95:9f:ad:8a:6e:b8:f8:b7:e0:19:6b: a3:5d:5e:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxQTUxMTAvBgNVBAUTKEU1RTFDRkNBRTFGOUU2RjEyMUNBMTM1NTFCNDBGNjk4 OTg0QjlEOUQwHhcNMjUwNzA0MjI0MjU4WhcNMjUwNzExMjI0MjU4WjAYMRYwFAYD VQQDEw02ODY4NThmMi03YWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0lOkS2Pn4xfjS4fSEtTDhYpBmL2rAIOv228S7+HNlXN3dZlZ+EGlNywry9AG fcwCpaay350OoGZJJK+ITOq5m5C41XPSIhuiWJNqG8cYJoo69kwQfSWLo6Tzhedq 8sLg3O1VOAvInyVw/fi99NVNO8dHltbGdMEiA+EGMEmKqti9Y7f4xukXnGjCw47D R9J17613xG1toQlUYm4ZQbV6mLL9jqxLwwc6O9bNL2DFktgwRNI4pgoyfDMERB0f E5PtwCaHi4ePaH+w5S/GWoZlFpwscTjcboy1+FLzHm5UxiTMrdlne5UtP8T2NMBf /RSLc9DgETf2Cyaj9WSkHUNP4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHm4A7xH KT1s2jhvrBjQzX0fIqtdMB8GA1UdIwQYMBaAFOXhz8rh+ebxIcoTVRtA9piYS52d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDFBNS84NEI1RDYxQzdE NkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2RWh5aE5WRzBEMm1KaExu WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlSFB5dUg1NXZFaHloTlZHMEQybUpoTG5aMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDFBNS84NEI1RDYxQzdENkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2 RWh5aE5WRzBEMm1KaExuWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYCU7emiCkjc6NRWJxe06b1pES8slOEsNA6Y57c40l6d2zuM/CAYLn qjQL5glpMFJtW1guXhV0BCr9LQArUzsoZRc+knVA0THuGircR2s4GXeIVodr6NqW LoBPLd2mhS0K5N1joY64UtLXsvcSnG5awlNJfWXzBryrcDTBou7Zt4SwmXIqzCNJ obvRpTTz+pfgcyVi0M8/uRNMp85qEGbItfdhhR/I0oE6Aa7NuIJPKkKjlCJGkGXt hbd0gvdNQMze9OZaK+cYwLKJZ+4O4/okhHAaK5gs1jq8ZyyE98za6WeYzYmKXQrV GZlfXmmhHh4klZ+tim64+LfgGWujXV4D -----END CERTIFICATE-----Generated at Sat Jul 5 05:28:47 2025 by rpki-client