$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft File: c5C6Rl4CIu4xQH5VCebenj-pENs.mft (raw, json) Hash identifier: y/qGANEqBSRr+ZG+ZJV85CqYejJhM21c/OxOnAk1j4E= Subject key identifier: 97:4C:21:F5:AF:47:0C:7C:CA:84:9C:A3:62:89:B7:D9:DB:D8:67:2D Authority key identifier: 73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB Certificate issuer: /CN=A91CA6E6/serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft Manifest number: 0266 Signing time: Tue 01 Jul 2025 03:52:32 +0000 Manifest this update: Tue 01 Jul 2025 03:52:32 +0000 Manifest next update: Tue 08 Jul 2025 03:52:32 +0000 Files and hashes: 1: c5C6Rl4CIu4xQH5VCebenj-pENs.crl (hash: fVYtheF+X/w3yVElhgLl5cYofm1LCCbQeDxDpeOxstc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA6E6, serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB Validity Not Before: Jul 1 03:52:32 2025 GMT Not After : Jul 8 03:52:32 2025 GMT Subject: CN=68635b80-852f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:85:9c:50:4b:3a:91:20:d9:90:6c:77:a0:14: 12:a9:eb:fd:a9:a6:17:12:3f:fe:32:11:67:93:a5: 7a:a9:db:81:84:df:a1:f1:6c:20:5f:4f:b2:44:dd: 7d:21:85:2c:fd:f6:d7:26:49:2e:82:90:96:b3:fe: 08:7e:61:a1:94:48:63:b6:91:43:b8:67:3c:fb:fb: 36:6a:59:e4:79:6b:52:80:9e:2e:29:9d:c1:78:ea: 8f:15:25:e0:dd:a9:d7:6a:73:46:19:2b:d7:05:04: 00:00:9d:ea:70:5c:e2:8f:21:69:b0:ed:d8:0b:20: f6:a0:57:6a:37:79:08:c3:c8:24:fa:59:e5:ea:13: d8:4b:9c:4e:1e:00:32:c8:3f:b3:45:b1:94:bb:f6: ce:d6:bd:25:bf:47:68:24:13:93:f3:4f:7e:24:4b: f2:df:9f:d1:80:44:a3:80:fa:e2:be:5e:a2:2e:1c: 79:4a:3b:bb:e4:de:2a:9e:ba:c6:af:ca:4c:0e:b0: 3a:4b:96:33:99:da:3a:05:16:7c:74:cd:27:7e:87: 9f:32:9e:86:83:7a:32:18:1e:bc:9a:5c:88:69:5b: 3b:84:7d:7c:67:85:9b:8a:bb:e0:bf:50:fc:12:78: 9d:c8:c8:a5:ad:af:28:b7:c1:7f:45:6a:c4:ab:52: 05:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4C:21:F5:AF:47:0C:7C:CA:84:9C:A3:62:89:B7:D9:DB:D8:67:2D X509v3 Authority Key Identifier: keyid:73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:f5:76:71:ab:88:c8:37:64:50:d4:3b:b9:8b:c6:3b:f2:53: 05:94:25:3c:67:f8:af:87:ca:83:49:9e:5e:00:f2:51:b2:2f: d0:56:f8:f8:54:a9:37:b3:f7:9f:6f:60:4c:ae:39:24:fa:b6: 0a:ab:63:c6:28:51:6a:0b:81:36:97:0d:50:b6:cf:18:4b:03: 05:1c:e5:39:78:84:cc:52:60:a6:bd:d2:ae:7b:b6:62:55:cb: 4c:e8:27:73:0e:95:09:9d:47:ac:31:dc:f5:65:ee:07:11:6e: 49:07:9a:c0:e8:d4:f7:7e:45:c0:3b:09:4c:11:48:90:2c:c3: fb:bb:02:8d:a3:13:78:2f:f3:11:68:6c:86:83:c6:fc:43:02: 38:cf:a3:a7:74:56:c0:32:41:be:44:d3:e4:ec:d5:8a:6c:b0: 10:38:83:5b:7f:e8:4b:69:3c:7e:79:cc:3d:2e:c3:7d:0a:af: 14:b2:2a:18:1a:45:c6:da:8d:e6:21:b7:e1:fe:55:25:49:27: 77:6f:eb:bf:d2:7d:db:97:0e:7b:b6:0d:de:b9:3a:e8:11:2e: ad:8e:06:6d:b0:fa:d4:7f:0a:88:e7:b6:13:75:b1:c0:48:4f: ad:5f:e1:64:42:38:68:9f:8a:33:80:5c:9d:1b:9e:21:b6:12: e5:1d:c2:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E2RTYxMTAvBgNVBAUTKDczOTBCQTQ2NUUwMjIyRUUzMTQwN0U1NTA5RTZERTlF M0ZBOTEwREIwHhcNMjUwNzAxMDM1MjMyWhcNMjUwNzA4MDM1MjMyWjAYMRYwFAYD VQQDEw02ODYzNWI4MC04NTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIWcUEs6kSDZkGx3oBQSqev9qaYXEj/+MhFnk6V6qduBhN+h8WwgX0+yRN19 IYUs/fbXJkkugpCWs/4IfmGhlEhjtpFDuGc8+/s2alnkeWtSgJ4uKZ3BeOqPFSXg 3anXanNGGSvXBQQAAJ3qcFzijyFpsO3YCyD2oFdqN3kIw8gk+lnl6hPYS5xOHgAy yD+zRbGUu/bO1r0lv0doJBOT809+JEvy35/RgESjgPrivl6iLhx5Sju75N4qnrrG r8pMDrA6S5Yzmdo6BRZ8dM0nfoefMp6Gg3oyGB68mlyIaVs7hH18Z4Wbirvgv1D8 EnidyMilra8ot8F/RWrEq1IF6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdMIfWv Rwx8yoSco2KJt9nb2GctMB8GA1UdIwQYMBaAFHOQukZeAiLuMUB+VQnm3p4/qRDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTZFNi8zQjgzQUZFMEYw RDAxMUVEODA1MDc2NkFDNEY5QUUwMi9jNUM2Umw0Q0l1NHhRSDVWQ2ViZW5qLXBF TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1QzZSbDRDSXU0eFFINVZDZWJlbmotcEVOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTZFNi8zQjgzQUZFMEYwRDAxMUVEODA1MDc2NkFDNEY5QUUwMi9jNUM2Umw0Q0l1 NHhRSDVWQ2ViZW5qLXBFTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA29XZxq4jIN2RQ1Du5i8Y78lMFlCU8Z/ivh8qDSZ5eAPJRsi/QVvj4 VKk3s/efb2BMrjkk+rYKq2PGKFFqC4E2lw1Qts8YSwMFHOU5eITMUmCmvdKue7Zi VctM6CdzDpUJnUesMdz1Ze4HEW5JB5rA6NT3fkXAOwlMEUiQLMP7uwKNoxN4L/MR aGyGg8b8QwI4z6OndFbAMkG+RNPk7NWKbLAQOINbf+hLaTx+ecw9LsN9Cq8UsioY GkXG2o3mIbfh/lUlSSd3b+u/0n3blw57tg3euTroES6tjgZtsPrUfwqI57YTdbHA SE+tX+FkQjhon4ozgFydG54hthLlHcLK -----END CERTIFICATE-----Generated at Wed Jul 2 23:29:54 2025 by rpki-client