$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft File: 5VpZVzhbbPjKDASB1i3f_asSwfQ.mft (raw, json) Hash identifier: B0G8ytNPeAwllPY/uuMeVNkUuD6fL6LU0/uQrMTIOXc= Subject key identifier: 30:8E:87:E8:6D:93:B1:B7:CA:30:E7:B8:C9:03:56:BE:77:24:8B:B9 Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 Certificate issuer: /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Certificate serial: 0927 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft Manifest number: 091F Signing time: Fri 04 Jul 2025 20:38:54 +0000 Manifest this update: Fri 04 Jul 2025 20:38:53 +0000 Manifest next update: Fri 11 Jul 2025 20:38:53 +0000 Files and hashes: 1: 5VpZVzhbbPjKDASB1i3f_asSwfQ.crl (hash: rRr/X97sL5Y0WPNF54UwizRz8Suuc6e9p6DhhyhTLq0=) 2: A1F46062A64611EAA24E1461C4F9AE02.roa (hash: WPQQ6V7efa7fb8nJuM/CRZGnnAAa2WyVzIIakNwqKYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2343 (0x927) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD090, serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Validity Not Before: Jul 4 20:38:53 2025 GMT Not After : Jul 11 20:38:53 2025 GMT Subject: CN=68683bde-47f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:a3:ee:f4:b0:e5:0b:35:91:ae:9d:17:f3: 85:71:1b:6d:34:78:75:8e:8d:a9:1b:0f:52:76:e8: a1:16:6c:eb:c2:fc:10:59:fa:cd:2d:7e:cc:ff:f9: 0f:2d:fd:bc:70:3a:c6:be:e3:bc:75:29:22:92:f8: 6e:13:22:ac:70:e8:0c:8c:5c:47:be:07:b0:ec:aa: a5:c0:69:b5:7c:f3:3e:4a:84:58:11:25:94:1c:7b: 10:a7:99:84:f9:ce:a0:12:c1:6a:bb:fe:fe:16:d7: 45:06:29:18:35:e9:b2:0f:c7:03:9f:a6:74:40:c4: 0f:0f:aa:f2:1d:45:74:f4:d8:a2:c8:68:6c:08:96: 53:53:e6:1e:0d:d3:9c:44:f8:b8:99:ef:91:9f:cb: 2f:fe:c9:b3:96:7d:8d:1d:0b:3f:5a:a2:04:49:c8: ba:05:29:37:bd:49:52:49:26:91:46:72:d6:97:e2: 01:9d:3d:43:19:35:75:ce:75:87:0e:08:a8:80:e1: e0:a5:0b:28:ff:44:6b:f2:db:dc:bc:44:14:7a:65: 49:6c:56:e0:20:35:10:b3:e5:31:f2:ab:1b:84:33: 14:46:82:49:d9:94:9d:0e:b6:a8:f7:cf:fe:a9:34: 10:d5:46:4c:31:ed:ba:1f:6a:b7:07:86:aa:45:98: 62:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8E:87:E8:6D:93:B1:B7:CA:30:E7:B8:C9:03:56:BE:77:24:8B:B9 X509v3 Authority Key Identifier: keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:8f:b7:75:75:07:ae:e1:c6:4f:23:2a:2e:c7:d4:90:7e:c4: d3:0e:a9:fb:0a:a6:46:c2:7b:94:d9:39:d9:15:9a:b6:bc:91: a5:7b:ed:87:d9:03:22:41:83:5e:0e:b0:84:cc:4b:73:34:47: 6d:10:87:ad:0b:21:eb:2c:74:8c:34:c1:61:9d:78:ac:91:27: 28:aa:64:7f:02:97:29:10:2d:af:0e:7b:90:17:e4:a1:57:58: dc:15:68:92:de:99:37:3b:a8:f9:49:d7:99:30:51:c5:27:41: 69:07:8d:55:b8:42:72:3f:c2:00:71:37:8f:d2:9e:95:a7:7c: 3a:60:83:1a:74:25:b9:71:f1:28:45:b3:dc:c3:23:cb:33:ea: 72:a6:ac:f1:ec:fc:42:3e:6c:6e:6a:e5:c1:2c:9a:1c:a0:bc: 53:6c:34:69:bc:ca:33:14:19:74:ae:ef:21:17:e0:02:08:e1: e6:8e:cc:2c:79:2a:39:60:29:1e:92:f4:88:37:0f:ec:f0:43: 7f:2f:71:2f:1c:06:7b:6f:51:0b:af:f3:9d:e3:9b:87:1b:68: d1:2a:0a:3d:fe:08:d7:10:e4:d6:37:52:1a:06:37:30:67:b4: db:2b:0a:57:e0:b5:96:d9:25:bc:f1:4d:0b:7d:b7:9c:2c:b4: 6f:75:04:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwOTAxMTAvBgNVBAUTKEU1NUE1OTU3Mzg1QjZDRjhDQTBDMDQ4MUQ2MkRERkZE QUIxMkMxRjQwHhcNMjUwNzA0MjAzODUzWhcNMjUwNzExMjAzODUzWjAYMRYwFAYD VQQDEw02ODY4M2JkZS00N2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArU6j7vSw5Qs1ka6dF/OFcRttNHh1jo2pGw9SduihFmzrwvwQWfrNLX7M//kP Lf28cDrGvuO8dSkikvhuEyKscOgMjFxHvgew7KqlwGm1fPM+SoRYESWUHHsQp5mE +c6gEsFqu/7+FtdFBikYNemyD8cDn6Z0QMQPD6ryHUV09NiiyGhsCJZTU+YeDdOc RPi4me+Rn8sv/smzln2NHQs/WqIESci6BSk3vUlSSSaRRnLWl+IBnT1DGTV1znWH DgiogOHgpQso/0Rr8tvcvEQUemVJbFbgIDUQs+Ux8qsbhDMURoJJ2ZSdDrao98/+ qTQQ1UZMMe26H2q3B4aqRZhiIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCOh+ht k7G3yjDnuMkDVr53JIu5MB8GA1UdIwQYMBaAFOVaWVc4W2z4ygwEgdYt3/2rEsH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDA5MC8yRENFMDQ4Q0E2 NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQaktEQVNCMWkzZl9hc1N3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWcFpWemhiYlBqS0RBU0IxaTNmX2FzU3dmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDA5MC8yRENFMDQ4Q0E2NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQ aktEQVNCMWkzZl9hc1N3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTj7d1dQeu4cZPIyoux9SQfsTTDqn7CqZGwnuU2TnZFZq2vJGle+2H 2QMiQYNeDrCEzEtzNEdtEIetCyHrLHSMNMFhnXiskScoqmR/ApcpEC2vDnuQF+Sh V1jcFWiS3pk3O6j5SdeZMFHFJ0FpB41VuEJyP8IAcTeP0p6Vp3w6YIMadCW5cfEo RbPcwyPLM+pypqzx7PxCPmxuauXBLJocoLxTbDRpvMozFBl0ru8hF+ACCOHmjsws eSo5YCkekvSINw/s8EN/L3EvHAZ7b1ELr/Od45uHG2jRKgo9/gjXEOTWN1IaBjcw Z7TbKwpX4LWW2SW88U0LfbecLLRvdQSH -----END CERTIFICATE-----Generated at Sat Jul 5 01:22:55 2025 by rpki-client