$ rpki-client -vvf rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft File: 5tR4mVLfAG9kzr8PNVcqW5bktzc.mft (raw, json) Hash identifier: f7CXa4TgRUAZTUg1P7/BU391Hju+kgZDmJtvZ+jjFT4= Subject key identifier: 8C:BD:19:CB:93:48:53:A3:5E:A1:5A:E8:98:B6:2B:8A:EF:AD:D3:59 Authority key identifier: E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37 Certificate issuer: /CN=A918E63A/serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737 Certificate serial: 07AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft Manifest number: 07AE Signing time: Wed 02 Jul 2025 21:27:55 +0000 Manifest this update: Wed 02 Jul 2025 21:27:55 +0000 Manifest next update: Wed 09 Jul 2025 21:27:55 +0000 Files and hashes: 1: 5tR4mVLfAG9kzr8PNVcqW5bktzc.crl (hash: h/Oz9djXzzK7F6MBQxdY2CJ1bOII8a3E8Ivlf+RAXZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1966 (0x7ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E63A, serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737 Validity Not Before: Jul 2 21:27:55 2025 GMT Not After : Jul 9 21:27:55 2025 GMT Subject: CN=6865a45b-4289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:e6:f8:e5:4d:6a:c4:ec:9b:ae:93:86:aa: b7:e7:c4:9a:2f:11:7a:1c:e9:32:5c:e2:68:25:9f: 46:60:23:10:4a:12:c5:75:5c:1e:83:a0:5a:97:9d: ed:51:41:40:83:d8:2b:44:14:cd:15:e2:c8:20:e4: fe:bf:88:c2:ec:b4:68:7c:3c:fe:5e:cf:5a:30:9e: fe:32:a1:7a:58:5b:06:03:c7:55:30:43:e1:34:81: 97:12:98:62:b1:36:6e:f5:77:3d:a1:70:02:ef:53: ac:ce:3d:b2:92:ec:7a:34:88:88:4d:2b:c9:8f:5b: 95:1e:19:a2:84:b4:aa:a9:9e:09:4f:e4:6a:6f:78: fa:35:e9:cd:72:7c:af:23:c2:56:05:53:e1:b2:55: 8d:91:12:53:6b:12:d2:47:35:cf:53:3a:b4:0e:e6: ce:ef:b6:48:e2:cc:51:2b:fc:d9:ec:ff:00:30:fb: 3a:e2:a6:a2:1d:fd:8a:7e:0f:80:e1:75:2d:b0:fb: 35:0e:f7:22:3a:2a:fd:98:5a:21:3c:c0:9c:4e:49: fa:a5:97:c7:57:cd:6e:df:f6:ad:64:ec:d2:33:14: 38:e6:f4:1a:23:e7:05:66:51:da:97:f1:c7:13:70: 09:b7:c8:aa:28:81:a9:f5:82:bd:b5:48:f2:77:65: 96:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BD:19:CB:93:48:53:A3:5E:A1:5A:E8:98:B6:2B:8A:EF:AD:D3:59 X509v3 Authority Key Identifier: keyid:E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:62:86:e9:2d:ed:05:16:12:8d:8e:80:0a:12:f2:08:11:80: 4d:de:c1:db:8e:7b:92:61:fd:2f:bb:da:ab:28:a2:cc:d3:19: 4c:19:af:05:09:b6:46:4a:5c:f8:43:4d:a8:e0:27:5f:0b:0e: 34:e5:dd:c5:b2:65:34:88:71:44:a5:1c:98:de:9e:1a:b0:e3: 1b:12:8c:01:78:b3:e9:19:25:7c:c2:d6:5d:21:45:55:a5:41: 22:ef:76:ed:c4:98:f6:ec:25:df:f6:e8:89:d4:04:9b:c9:bb: 42:fe:53:ef:04:a3:3b:95:fe:e7:41:48:56:40:e6:a8:09:02: c5:44:b9:3d:bd:60:69:2f:cb:10:e7:33:dc:1b:fd:94:ba:b8: 86:fc:7c:08:d3:0d:5e:f6:f8:db:a5:37:e9:79:f5:1b:8e:a9: df:5c:e9:f0:a7:16:d1:db:17:00:92:45:68:41:5e:86:ec:9e: 4f:4c:c4:31:8e:02:af:c1:2a:d0:ae:64:5b:ad:b0:aa:32:4c: 64:a4:0b:c6:c5:5d:cb:2a:3b:9c:37:ea:2f:52:55:56:7f:7d: ca:1f:93:69:f4:0b:43:07:c8:99:be:59:08:bd:8e:ab:48:53: 4a:1d:81:13:66:cd:13:2f:8b:5d:5c:9e:9e:12:94:4e:a7:04: b1:ec:2d:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU2M0ExMTAvBgNVBAUTKEU2RDQ3ODk5NTJERjAwNkY2NENFQkYwRjM1NTcyQTVC OTZFNEI3MzcwHhcNMjUwNzAyMjEyNzU1WhcNMjUwNzA5MjEyNzU1WjAYMRYwFAYD VQQDEw02ODY1YTQ1Yi00Mjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwR7m+OVNasTsm66Thqq358SaLxF6HOkyXOJoJZ9GYCMQShLFdVweg6Bal53t UUFAg9grRBTNFeLIIOT+v4jC7LRofDz+Xs9aMJ7+MqF6WFsGA8dVMEPhNIGXEphi sTZu9Xc9oXAC71Oszj2ykux6NIiITSvJj1uVHhmihLSqqZ4JT+Rqb3j6NenNcnyv I8JWBVPhslWNkRJTaxLSRzXPUzq0DubO77ZI4sxRK/zZ7P8AMPs64qaiHf2Kfg+A 4XUtsPs1DvciOir9mFohPMCcTkn6pZfHV81u3/atZOzSMxQ45vQaI+cFZlHal/HH E3AJt8iqKIGp9YK9tUjyd2WWAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIy9GcuT SFOjXqFa6Ji2K4rvrdNZMB8GA1UdIwQYMBaAFObUeJlS3wBvZM6/DzVXKluW5Lc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTYzQS8zN0Q3QTVBRTAz MkYxMUVCQjU4ODJFMEFDNEY5QUUwMi81dFI0bVZMZkFHOWt6cjhQTlZjcVc1Ymt0 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV0UjRtVkxmQUc5a3pyOFBOVmNxVzVia3R6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTYzQS8zN0Q3QTVBRTAzMkYxMUVCQjU4ODJFMEFDNEY5QUUwMi81dFI0bVZMZkFH OWt6cjhQTlZjcVc1Ymt0emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVYobpLe0FFhKNjoAKEvIIEYBN3sHbjnuSYf0vu9qrKKLM0xlMGa8F CbZGSlz4Q02o4CdfCw405d3FsmU0iHFEpRyY3p4asOMbEowBeLPpGSV8wtZdIUVV pUEi73btxJj27CXf9uiJ1ASbybtC/lPvBKM7lf7nQUhWQOaoCQLFRLk9vWBpL8sQ 5zPcG/2UuriG/HwI0w1e9vjbpTfpefUbjqnfXOnwpxbR2xcAkkVoQV6G7J5PTMQx jgKvwSrQrmRbrbCqMkxkpAvGxV3LKjucN+ovUlVWf33KH5Np9AtDB8iZvlkIvY6r SFNKHYETZs0TL4tdXJ6eEpROpwSx7C0o -----END CERTIFICATE-----Generated at Thu Jul 3 12:28:17 2025 by rpki-client