$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft File: 5CHll4Srb9cADNFZcQHsNg3ZQGY.mft (raw, json) Hash identifier: BHPAXNPn4yX/BBTtkhgmzvBGhfjMPWuTHstcj7rey+4= Subject key identifier: 46:54:DD:C2:F1:D2:36:AB:9F:BC:63:FE:38:62:D0:55:9D:0C:A8:AD Authority key identifier: E4:21:E5:97:84:AB:6F:D7:00:0C:D1:59:71:01:EC:36:0D:D9:40:66 Certificate issuer: /CN=A91A1E1C/serialNumber=E421E59784AB6FD7000CD1597101EC360DD94066 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft Manifest number: 84 Signing time: Thu 03 Jul 2025 06:51:31 +0000 Manifest this update: Thu 03 Jul 2025 06:51:30 +0000 Manifest next update: Thu 10 Jul 2025 06:51:30 +0000 Files and hashes: 1: 5CHll4Srb9cADNFZcQHsNg3ZQGY.crl (hash: t4oNbcvHctFkaFwC0yeyWgbjjP9TwJNeHQGdHCzjV0k=) 2: 5BC18D6C9A6C11EF8C656668C4F9AE02.roa (hash: 1ljn9MSckdlGvWQ7HkpY2v8ly/0oxPt9z/n6V7MEeDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.crl rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E1C, serialNumber=E421E59784AB6FD7000CD1597101EC360DD94066 Validity Not Before: Jul 3 06:51:30 2025 GMT Not After : Jul 10 06:51:30 2025 GMT Subject: CN=68662872-9235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:25:c5:cf:db:74:ac:07:21:77:ba:b8:52:45: 5f:f9:bb:0c:52:9e:62:60:75:9a:db:8a:d7:97:b9: 6b:24:ac:95:30:0a:55:51:35:cd:4c:5c:12:bb:0e: d2:e7:1a:6b:96:7f:05:4a:ca:8b:ae:ed:c0:0a:ac: a0:2c:bb:6b:f9:c1:9b:f6:93:72:52:b9:95:e8:4b: c4:8d:fc:10:ad:bb:29:95:9a:f9:b0:29:17:81:f5: 65:23:ff:c9:3a:81:cd:90:bd:12:d1:0b:b2:12:4b: 6f:e0:7d:50:7c:20:0a:87:fd:b6:1c:2f:71:c0:f2: 0d:d8:c3:a8:ab:a5:98:97:d7:64:3e:05:6a:da:e5: 4b:a8:95:5e:1a:07:41:ff:f6:91:bf:0f:d5:b7:7c: d9:a2:07:ea:e4:47:4c:d2:8d:5c:27:90:4a:83:9e: 9b:17:70:20:cf:e6:65:e4:26:00:02:de:e2:75:e4: 87:cc:b8:27:a1:2f:b5:0b:9d:2f:6c:2e:eb:26:c4: d7:ef:26:f6:19:61:86:d9:1b:d3:a3:8b:f5:30:8d: a6:f4:39:09:87:75:eb:1f:2a:be:2c:5b:ff:57:9b: c1:c9:1d:30:ad:d6:67:f4:c8:b1:1f:8e:d4:56:4d: 41:b4:34:06:96:66:d3:5c:7d:1a:5b:ad:8f:74:98: d7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:54:DD:C2:F1:D2:36:AB:9F:BC:63:FE:38:62:D0:55:9D:0C:A8:AD X509v3 Authority Key Identifier: keyid:E4:21:E5:97:84:AB:6F:D7:00:0C:D1:59:71:01:EC:36:0D:D9:40:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:49:ba:28:54:00:89:26:7e:45:ef:59:90:78:0e:58:f3:0a: 84:32:c6:6b:c3:52:02:27:83:f9:5c:ce:89:44:9f:6d:67:1b: ac:b0:b3:e5:92:d4:aa:dd:20:bc:ff:6e:e4:d7:e3:cf:a6:fb: d3:8b:0a:de:dc:56:19:b9:69:69:d5:d6:89:fb:89:28:43:10: a2:64:6b:9a:56:2f:cb:3b:77:5a:d7:7d:5f:23:a2:8b:07:9a: f2:21:f2:bc:b1:9b:36:51:a4:c4:9b:0c:be:a2:1b:33:49:33: 78:b4:b2:f9:1f:57:28:03:2d:85:4c:40:5a:d6:86:a7:25:04: 7f:0b:9d:73:87:41:13:76:d9:88:e7:d9:d8:3e:50:dd:93:30: d9:18:8b:5c:a5:25:5d:97:5a:b8:9f:fb:68:bc:c2:a9:05:b8: fc:4e:bf:45:34:62:64:20:3b:46:62:64:0d:ac:54:b5:29:7c: 81:4c:d8:40:db:0a:b1:97:cc:a0:b2:f4:79:25:54:b7:48:35: 97:38:fd:37:e5:41:61:ac:18:4e:11:ea:1b:12:4b:6c:c1:a1: c8:15:26:bc:f3:a6:f5:86:23:d5:8e:34:1b:6e:34:40:4d:fc: 7e:4c:fb:a1:56:fe:b5:ec:db:32:2f:4f:33:7e:27:aa:90:48: 76:e9:43:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFMUMxMTAvBgNVBAUTKEU0MjFFNTk3ODRBQjZGRDcwMDBDRDE1OTcxMDFFQzM2 MEREOTQwNjYwHhcNMjUwNzAzMDY1MTMwWhcNMjUwNzEwMDY1MTMwWjAYMRYwFAYD VQQDEw02ODY2Mjg3Mi05MjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CXFz9t0rAchd7q4UkVf+bsMUp5iYHWa24rXl7lrJKyVMApVUTXNTFwSuw7S 5xprln8FSsqLru3ACqygLLtr+cGb9pNyUrmV6EvEjfwQrbsplZr5sCkXgfVlI//J OoHNkL0S0QuyEktv4H1QfCAKh/22HC9xwPIN2MOoq6WYl9dkPgVq2uVLqJVeGgdB //aRvw/Vt3zZogfq5EdM0o1cJ5BKg56bF3Agz+Zl5CYAAt7ideSHzLgnoS+1C50v bC7rJsTX7yb2GWGG2RvTo4v1MI2m9DkJh3XrHyq+LFv/V5vByR0wrdZn9MixH47U Vk1BtDQGlmbTXH0aW62PdJjXEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZU3cLx 0jarn7xj/jhi0FWdDKitMB8GA1UdIwQYMBaAFOQh5ZeEq2/XAAzRWXEB7DYN2UBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUUxQy8yNTIyMkQ4MDky MDAxMUVGOUUwQzNENkJDNEY5QUUwMi81Q0hsbDRTcmI5Y0FETkZaY1FIc05nM1pR R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDSGxsNFNyYjljQURORlpjUUhzTmczWlFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUUxQy8yNTIyMkQ4MDkyMDAxMUVGOUUwQzNENkJDNEY5QUUwMi81Q0hsbDRTcmI5 Y0FETkZaY1FIc05nM1pRR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHSbooVACJJn5F71mQeA5Y8wqEMsZrw1ICJ4P5XM6JRJ9tZxussLPl ktSq3SC8/27k1+PPpvvTiwre3FYZuWlp1daJ+4koQxCiZGuaVi/LO3da131fI6KL B5ryIfK8sZs2UaTEmwy+ohszSTN4tLL5H1coAy2FTEBa1oanJQR/C51zh0ETdtmI 59nYPlDdkzDZGItcpSVdl1q4n/tovMKpBbj8Tr9FNGJkIDtGYmQNrFS1KXyBTNhA 2wqxl8ygsvR5JVS3SDWXOP035UFhrBhOEeobEktswaHIFSa886b1hiPVjjQbbjRA Tfx+TPuhVv617NsyL08zfieqkEh26UN6 -----END CERTIFICATE-----Generated at Fri Jul 4 18:55:22 2025 by rpki-client