$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: yZpeLPsIT9RD76c815m035yBaV7uvkFNnwNI2OFF0E4= Subject key identifier: 0B:BF:55:12:A5:CC:A0:ED:E4:D3:3D:3B:42:26:28:C9:79:B0:38:8D Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 0151 Signing time: Tue 01 Jul 2025 04:38:19 +0000 Manifest this update: Tue 01 Jul 2025 04:38:19 +0000 Manifest next update: Tue 08 Jul 2025 04:38:19 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: piuS0ZeqaHMgvjO4UQeFZnP2/RIwBdyrK7/d1W9Ans4=) 2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: AOPC9WbNcZUf3rw4IBXy2gFnwozs8jTrPTS3eOn6dJw=) 3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: SfS9ZnMJ4K7BL+m5tPbXXtGeAg5+tE+/js3vJ/6kex8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:38:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Jul 1 04:38:19 2025 GMT Not After : Jul 8 04:38:19 2025 GMT Subject: CN=6863663b-abca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e5:a4:d4:d8:9e:03:0c:eb:05:d8:5c:f4:d0: c1:a3:2d:30:f9:a5:bc:4b:30:08:88:40:45:60:2e: 1e:a9:bc:61:38:ca:5e:7d:01:f3:86:4f:b3:0c:43: 63:bf:36:ea:f4:c4:6f:01:42:21:83:b4:a0:1e:bc: 52:6f:98:f6:26:7b:49:08:1a:06:87:23:b3:08:c5: 5b:a6:75:a3:00:59:41:ac:f9:58:80:f7:72:d7:f7: 87:d6:c9:95:1e:e3:f5:6c:b3:27:5c:98:09:64:92: 53:ac:c5:b3:12:2f:f4:3b:a2:be:20:84:cb:9e:a5: 0b:c1:04:4d:f1:a5:84:e2:f5:41:4b:b2:4f:3c:3d: cc:8e:8c:92:3a:26:84:52:bb:79:25:ab:6a:f2:05: 21:52:53:53:1d:96:88:97:9c:9e:fc:7e:f7:8e:4c: 5a:0a:00:a5:e8:2d:a2:72:76:1b:38:31:51:8a:07: 8a:bf:2e:8a:d6:c6:40:00:45:e2:4e:d4:50:62:34: 3c:dd:96:a4:16:ec:91:1d:a8:67:e6:09:bb:12:3e: af:e8:1c:bf:0a:48:52:22:fa:06:92:3b:62:10:5b: 96:83:d1:f5:ae:61:2e:5d:5d:8f:76:ea:b9:30:52: d2:cc:89:28:05:dd:16:00:34:04:2c:ce:1b:13:44: b4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BF:55:12:A5:CC:A0:ED:E4:D3:3D:3B:42:26:28:C9:79:B0:38:8D X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:22:9e:e6:45:ea:ea:92:29:0a:5e:2a:2c:ae:1d:4f:6d:a6: 11:ab:2a:dc:f0:04:a4:0d:39:e2:ee:de:16:f1:93:a4:32:46: f1:ba:55:94:49:4e:7c:ae:81:7f:f7:5b:6c:6d:f0:ba:53:f9: 7a:bc:96:2c:c8:6a:d2:c0:db:ea:0a:48:10:a2:6e:7c:a9:51: ad:31:fc:82:21:f5:3e:ed:5c:59:40:a1:49:69:aa:33:42:8b: 38:5b:78:86:4a:99:95:1a:4f:11:9f:84:2a:8a:87:5e:9e:7a: 00:dd:20:33:ef:a9:55:87:c7:23:9e:54:a0:7f:ca:4e:5c:3c: 9d:56:24:95:14:7a:2b:cb:97:5e:bd:cd:7a:f0:0c:ad:12:ef: 59:f4:5c:2c:53:2e:2a:ce:08:b6:c1:16:41:e4:ff:9b:66:4f: c0:88:b7:d9:3c:f6:b1:27:e2:0d:b8:42:1e:e6:f5:58:1b:a8: 27:2c:15:78:b9:ff:ad:c9:2d:83:0e:54:51:99:7d:e2:fe:1c: de:a2:6f:36:94:87:f5:a8:59:47:e0:fe:98:39:fc:88:52:9e: e5:04:2a:ec:85:09:97:24:d6:7e:ca:17:c3:28:6e:e5:e1:5b: 48:3f:b0:d8:19:d0:9e:10:46:dd:84:73:24:86:88:3a:73:58: c5:16:9f:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjUwNzAxMDQzODE5WhcNMjUwNzA4MDQzODE5WjAYMRYwFAYD VQQDEw02ODYzNjYzYi1hYmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+Wk1NieAwzrBdhc9NDBoy0w+aW8SzAIiEBFYC4eqbxhOMpefQHzhk+zDENj vzbq9MRvAUIhg7SgHrxSb5j2JntJCBoGhyOzCMVbpnWjAFlBrPlYgPdy1/eH1smV HuP1bLMnXJgJZJJTrMWzEi/0O6K+IITLnqULwQRN8aWE4vVBS7JPPD3MjoySOiaE Urt5Jatq8gUhUlNTHZaIl5ye/H73jkxaCgCl6C2icnYbODFRigeKvy6K1sZAAEXi TtRQYjQ83ZakFuyRHahn5gm7Ej6v6By/CkhSIvoGkjtiEFuWg9H1rmEuXV2Pduq5 MFLSzIkoBd0WADQELM4bE0S09wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAu/VRKl zKDt5NM9O0ImKMl5sDiNMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfIp7mRerqkikKXiosrh1PbaYRqyrc8ASkDTni7t4W8ZOkMkbxulWU SU58roF/91tsbfC6U/l6vJYsyGrSwNvqCkgQom58qVGtMfyCIfU+7VxZQKFJaaoz Qos4W3iGSpmVGk8Rn4QqiodennoA3SAz76lVh8cjnlSgf8pOXDydViSVFHory5de vc168AytEu9Z9FwsUy4qzgi2wRZB5P+bZk/AiLfZPPaxJ+INuEIe5vVYG6gnLBV4 uf+tyS2DDlRRmX3i/hzeom82lIf1qFlH4P6YOfyIUp7lBCrshQmXJNZ+yhfDKG7l 4VtIP7DYGdCeEEbdhHMkhog6c1jFFp/p -----END CERTIFICATE-----Generated at Wed Jul 2 14:59:40 2025 by rpki-client