$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json) Hash identifier: cSKEeKuCBZAabdu0wdtBrrhaB1SIIC7UnuxE42viSEw= Subject key identifier: E5:BF:D3:CE:BC:85:96:4C:69:AA:D7:08:B2:46:EA:88:32:15:A1:C1 Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft Manifest number: 0284 Signing time: Thu 03 Jul 2025 02:10:14 +0000 Manifest this update: Thu 03 Jul 2025 02:10:13 +0000 Manifest next update: Thu 10 Jul 2025 02:10:13 +0000 Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: pyBK4UCQTI1fwzBjn8Wk4VRwoxXiKL8QGyquw8KPkLo=) 2: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: YJknqh8T+qXW11AGQpkWixPSeb/oim2jtPvDZDC0Y5M=) 3: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: 0d7okG44VFnG4nuLf3zjFz92ZcS33/9Y18izFVAiNWk=) 4: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: pOsL4nJKiT9Wc01cD2wPZO+WlYtBX9ZtStyQuOwRJu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Validity Not Before: Jul 3 02:10:13 2025 GMT Not After : Jul 10 02:10:13 2025 GMT Subject: CN=6865e686-82a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:00:62:53:0e:c2:65:c2:15:50:e1:ae:5f:0d: a4:ef:d4:40:f0:81:1b:a9:0a:ea:77:62:23:43:30: 84:87:f0:07:34:70:08:3f:f3:eb:11:7a:2c:80:81: a8:95:26:53:a9:45:0d:d2:e2:f7:19:83:a2:77:96: 4b:67:e3:44:0c:6f:89:2d:e1:99:a5:0a:12:94:3f: d4:e4:ed:0f:20:bc:39:e8:52:2c:35:74:40:e5:0d: 29:d5:cb:2e:02:63:c8:f1:ad:29:8a:7c:2e:6d:83: 46:30:c4:25:22:47:93:de:f9:9c:37:4f:26:0e:a3: f9:d4:1c:74:08:3a:5a:b8:00:11:7f:cc:d9:4d:8e: a5:0a:4f:4b:af:25:89:a9:7c:79:53:a5:02:2d:9f: 0d:1f:e1:db:88:ee:ea:1a:a4:b5:fe:8b:ac:ef:c0: 26:b5:d8:78:1c:4d:9a:60:c0:15:7a:05:90:4e:b4: 2c:e9:b9:64:a4:7c:a9:47:04:f0:0a:af:af:ad:85: d4:c6:a3:59:27:89:9c:33:05:3c:e1:aa:00:bb:e6: 7b:d5:a3:6d:10:7a:73:10:3b:21:51:6f:c6:e8:9d: c4:61:52:67:98:ea:43:87:9a:79:a6:1f:6e:33:08: cf:13:90:57:9e:bc:79:da:7b:f9:da:14:ff:17:a8: 18:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BF:D3:CE:BC:85:96:4C:69:AA:D7:08:B2:46:EA:88:32:15:A1:C1 X509v3 Authority Key Identifier: keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e0:09:46:d1:23:ce:88:b5:3c:e9:95:71:9b:ec:10:99:a3: fd:ca:ab:ae:d7:67:1b:82:3f:a1:57:6d:89:d7:ce:c9:ec:34: 53:ec:2d:87:06:09:ea:bd:00:3d:41:5a:3c:dc:0e:46:7d:00: d8:d7:a6:e1:60:90:84:06:21:b8:93:24:bd:25:ba:31:16:66: 8c:63:47:f4:fc:1b:ec:05:76:20:84:b2:7f:30:2c:4b:da:03: 3a:28:9e:3e:31:b7:88:5c:01:95:8b:4e:c2:6c:2c:2d:65:20: d8:ca:50:56:69:27:f0:e5:3c:6b:ba:2c:75:f3:ef:2f:16:68: 57:18:14:83:09:04:df:f3:ed:65:f5:68:c6:d8:4d:51:44:09: c1:84:38:72:fa:7c:41:1b:bf:cf:a5:ab:6e:5d:f0:0e:b8:73: 83:db:f3:7b:a9:27:9f:81:dc:03:26:78:99:00:a9:95:fa:c4: ea:f7:fc:82:07:15:ea:e4:b8:82:e7:9f:23:11:9e:0a:fa:45: d8:b5:ee:ab:2b:69:89:da:de:2a:39:ca:d7:0b:22:82:00:ef: 5d:c3:96:5a:ff:d0:74:2e:f2:fe:c0:d4:7d:7a:d8:f0:69:4b: 71:cb:64:83:4e:db:c6:12:dc:47:47:c0:82:7e:fc:ba:84:4d: b5:08:fc:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx MkU1MTRGQjMwHhcNMjUwNzAzMDIxMDEzWhcNMjUwNzEwMDIxMDEzWjAYMRYwFAYD VQQDEw02ODY1ZTY4Ni04MmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgBiUw7CZcIVUOGuXw2k79RA8IEbqQrqd2IjQzCEh/AHNHAIP/PrEXosgIGo lSZTqUUN0uL3GYOid5ZLZ+NEDG+JLeGZpQoSlD/U5O0PILw56FIsNXRA5Q0p1csu AmPI8a0pinwubYNGMMQlIkeT3vmcN08mDqP51Bx0CDpauAARf8zZTY6lCk9LryWJ qXx5U6UCLZ8NH+HbiO7qGqS1/ous78Amtdh4HE2aYMAVegWQTrQs6blkpHypRwTw Cq+vrYXUxqNZJ4mcMwU84aoAu+Z71aNtEHpzEDshUW/G6J3EYVJnmOpDh5p5ph9u MwjPE5BXnrx52nv52hT/F6gY3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOW/0868 hZZMaarXCLJG6ogyFaHBMB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5 NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0FCMy8wNUVEOTRDRTE5NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4x czU3MFkxQlpIT01TNVJUN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc4AlG0SPOiLU86ZVxm+wQmaP9yquu12cbgj+hV22J187J7DRT7C2H BgnqvQA9QVo83A5GfQDY16bhYJCEBiG4kyS9JboxFmaMY0f0/BvsBXYghLJ/MCxL 2gM6KJ4+MbeIXAGVi07CbCwtZSDYylBWaSfw5Txruix18+8vFmhXGBSDCQTf8+1l 9WjG2E1RRAnBhDhy+nxBG7/PpatuXfAOuHOD2/N7qSefgdwDJniZAKmV+sTq9/yC BxXq5LiC558jEZ4K+kXYte6rK2mJ2t4qOcrXCyKCAO9dw5Za/9B0LvL+wNR9etjw aUtxy2SDTtvGEtxHR8CCfvy6hE21CPyZ -----END CERTIFICATE-----Generated at Thu Jul 3 05:55:42 2025 by rpki-client