$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft File: 5CHll4Srb9cADNFZcQHsNg3ZQGY.mft (raw, json) Hash identifier: SEwZtMw4YG1DtM5wCN0n/AZ86++UXi36agzWAPSxVas= Subject key identifier: 19:16:67:97:B4:0E:3B:EE:2C:68:B6:0C:29:84:84:49:90:0E:CE:0D Authority key identifier: E4:21:E5:97:84:AB:6F:D7:00:0C:D1:59:71:01:EC:36:0D:D9:40:66 Certificate issuer: /CN=A91A1E1C/serialNumber=E421E59784AB6FD7000CD1597101EC360DD94066 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft Manifest number: 6C Signing time: Thu 15 May 2025 06:14:22 +0000 Manifest this update: Thu 15 May 2025 06:14:21 +0000 Manifest next update: Thu 22 May 2025 06:14:21 +0000 Files and hashes: 1: 5CHll4Srb9cADNFZcQHsNg3ZQGY.crl (hash: Zoj3WYBWKhTFIda+LHUgA8kYcFj7zQF0ZEVp/m6Zn6g=) 2: 5BC18D6C9A6C11EF8C656668C4F9AE02.roa (hash: 1ljn9MSckdlGvWQ7HkpY2v8ly/0oxPt9z/n6V7MEeDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.crl rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E1C, serialNumber=E421E59784AB6FD7000CD1597101EC360DD94066 Validity Not Before: May 15 06:14:21 2025 GMT Not After : May 22 06:14:21 2025 GMT Subject: CN=6825863d-c39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ee:66:5a:2c:e5:3c:79:f5:99:d7:da:57:d9: 39:07:e2:52:3c:cb:c0:01:6b:7b:85:f3:af:f8:09: bc:22:45:8d:f6:1e:7c:7f:77:02:21:61:cb:e7:38: 4a:5b:29:91:fc:93:d4:91:79:4a:97:e6:fa:f3:45: 1f:c4:a2:9c:ac:3c:15:f5:1d:57:52:5c:84:d3:ea: 76:93:02:57:b1:f2:d5:df:41:f2:82:a9:90:63:18: ab:37:be:31:48:fd:c1:aa:8b:76:a8:7d:41:3e:2d: 56:37:8f:f0:35:67:10:7d:ef:44:54:23:f5:3c:2a: a8:6e:4c:10:dd:54:ae:cd:b0:26:9b:20:65:98:f2: 29:5e:11:70:c9:1f:d2:87:e9:d1:22:d4:f0:58:5c: c8:fa:f4:d6:f3:ce:41:60:cd:a1:15:1b:92:cb:c3: c1:5f:db:80:01:56:5a:12:9f:ae:fb:53:6f:e4:75: 4b:fb:c0:0d:11:3b:4c:a4:af:56:04:63:64:d3:85: 07:f4:2b:64:91:b7:2d:3d:14:b8:46:6c:6c:0c:d5: 26:6f:dd:80:c3:b1:0e:f5:71:93:79:c0:a1:50:17: d7:e5:ca:d8:63:be:94:e8:2d:b0:48:4b:2d:4a:11: 90:57:3c:23:59:4c:4e:d6:6e:50:40:d6:ed:86:0f: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:16:67:97:B4:0E:3B:EE:2C:68:B6:0C:29:84:84:49:90:0E:CE:0D X509v3 Authority Key Identifier: keyid:E4:21:E5:97:84:AB:6F:D7:00:0C:D1:59:71:01:EC:36:0D:D9:40:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0f:a5:66:26:0a:f1:78:b0:b9:c9:1f:42:f9:42:b5:50:7f: dd:65:19:5f:b1:fd:52:ef:ad:3d:6a:2e:31:a3:28:47:19:6a: 6c:b5:97:ba:4e:6b:7f:67:2e:f5:1e:54:00:e5:8e:96:a1:1f: 6f:62:75:cd:27:e6:4a:32:2d:f0:28:73:ef:a0:8a:b8:14:f6: 5a:52:51:1d:e5:86:0d:79:70:4b:49:e0:c9:e6:89:21:02:6f: 5c:45:54:aa:1c:75:cf:9b:b2:ae:9d:d2:86:aa:0b:35:62:ca: 9d:18:f8:43:5f:28:77:28:e0:0d:c4:42:6f:15:74:be:0e:f6: ea:0b:aa:41:be:e5:cb:12:ba:36:3b:d9:a2:8e:22:42:ef:96: 51:4c:e8:b1:d2:c5:36:c9:97:fb:86:7a:2e:4e:b2:ca:1b:5c: 50:6e:cc:26:b9:b7:50:a4:62:47:a5:04:5c:d4:9f:db:f9:a0: ee:68:e9:45:64:4a:27:36:88:0e:3b:c4:48:36:a4:9e:5f:7d: 5b:ae:ba:be:07:86:dd:bc:0c:91:e1:fe:58:a1:42:c2:5f:bc: 0b:69:54:cd:dc:a3:98:98:28:b5:ea:ea:83:c6:4b:e3:5f:72: a2:2c:17:66:23:3e:cb:d4:78:64:b2:d8:94:bf:66:14:f9:af: 3a:fd:03:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MUUxQzExMC8GA1UEBRMoRTQyMUU1OTc4NEFCNkZENzAwMENEMTU5NzEwMUVDMzYw REQ5NDA2NjAeFw0yNTA1MTUwNjE0MjFaFw0yNTA1MjIwNjE0MjFaMBgxFjAUBgNV BAMTDTY4MjU4NjNkLWMzOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC67mZaLOU8efWZ19pX2TkH4lI8y8ABa3uF86/4CbwiRY32Hnx/dwIhYcvnOEpb KZH8k9SReUqX5vrzRR/EopysPBX1HVdSXITT6naTAlex8tXfQfKCqZBjGKs3vjFI /cGqi3aofUE+LVY3j/A1ZxB970RUI/U8KqhuTBDdVK7NsCabIGWY8ileEXDJH9KH 6dEi1PBYXMj69NbzzkFgzaEVG5LLw8Ff24ABVloSn677U2/kdUv7wA0RO0ykr1YE Y2TThQf0K2SRty09FLhGbGwM1SZv3YDDsQ71cZN5wKFQF9flythjvpToLbBISy1K EZBXPCNZTE7WblBA1u2GD5rFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGRZnl7QO O+4saLYMKYSESZAOzg0wHwYDVR0jBBgwFoAU5CHll4Srb9cADNFZcQHsNg3ZQGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExRTFDLzI1MjIyRDgwOTIw MDExRUY5RTBDM0Q2QkM0RjlBRTAyLzVDSGxsNFNyYjljQURORlpjUUhzTmczWlFH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNUNIbGw0U3JiOWNBRE5GWmNRSHNOZzNaUUdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx RTFDLzI1MjIyRDgwOTIwMDExRUY5RTBDM0Q2QkM0RjlBRTAyLzVDSGxsNFNyYjlj QURORlpjUUhzTmczWlFHWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC0PpWYmCvF4sLnJH0L5QrVQf91lGV+x/VLvrT1qLjGjKEcZamy1l7pO a39nLvUeVADljpahH29idc0n5koyLfAoc++girgU9lpSUR3lhg15cEtJ4MnmiSEC b1xFVKocdc+bsq6d0oaqCzViyp0Y+ENfKHco4A3EQm8VdL4O9uoLqkG+5csSujY7 2aKOIkLvllFM6LHSxTbJl/uGei5OssobXFBuzCa5t1CkYkelBFzUn9v5oO5o6UVk Sic2iA47xEg2pJ5ffVuuur4Hht28DJHh/lihQsJfvAtpVM3co5iYKLXq6oPGS+Nf cqIsF2YjPsvUeGSy2JS/ZhT5rzr9A58= -----END CERTIFICATE-----Generated at Fri May 16 18:01:32 2025 by rpki-client