$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json) Hash identifier: BuudAqfWFHk5h8nmi2I8edh+qJ+mI+KrInMJOlQ/cys= Subject key identifier: 76:E3:1D:92:66:2F:13:F7:75:D3:04:CD:48:99:88:6A:EB:BF:DF:B1 Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Certificate serial: 09FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft Manifest number: 09F5 Signing time: Mon 30 Jun 2025 20:01:16 +0000 Manifest this update: Mon 30 Jun 2025 20:01:16 +0000 Manifest next update: Mon 07 Jul 2025 20:01:16 +0000 Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: 2wW80UfqEiscMh00UuW0bRd3R+Da/hwFHoZTXUjhjtI=) 2: EE675FC27BED11EABD4A3A27C4F9AE02.roa (hash: AgjaL53ax01ov0J7/NtNC0271FAg3f2kxQ+XWNRqNo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2558 (0x9fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Validity Not Before: Jun 30 20:01:16 2025 GMT Not After : Jul 7 20:01:16 2025 GMT Subject: CN=6862ed0c-5f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:24:5b:e0:4e:8a:f1:4b:60:02:a3:82:b0:29: 4f:10:7f:6c:03:17:4b:6a:4a:2b:95:f2:e0:5e:85: 16:18:d8:62:5e:24:8d:6f:7d:32:20:b4:79:ae:ca: 0a:0f:ec:6d:d8:e3:99:75:cd:ca:ac:65:60:45:07: 89:43:8c:0d:20:b3:68:d0:ca:ad:5b:2e:26:59:81: 79:9e:9a:a4:95:64:22:0b:5d:71:a8:d6:9c:9b:f5: cc:25:06:9c:45:dd:31:10:a0:49:6c:f6:e4:f3:ce: c5:df:72:60:cd:6b:d6:17:bd:5b:aa:63:39:14:67: 67:ac:37:f0:f8:cf:e9:29:44:64:8d:b1:9b:47:dc: 94:94:63:24:bb:2f:53:09:45:0e:81:59:4d:f9:bc: 39:42:f8:d6:dd:f1:c9:d8:57:9b:a7:ae:fe:ba:30: 7e:45:94:1a:ba:98:5c:aa:a2:1d:6f:8a:a8:6c:f1: 54:7e:c5:9d:d4:26:f5:59:ed:cc:56:58:a0:a3:65: f2:7b:0e:5e:35:23:df:6b:07:8d:72:08:e6:7e:16: 1e:f8:ae:55:cf:91:5f:88:2f:a0:f2:0e:68:23:aa: b5:fa:6e:af:d3:9d:8a:c4:80:7c:95:26:1e:14:d9: 12:03:af:05:19:ac:47:bb:75:3b:45:3b:9e:2c:0b: 75:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E3:1D:92:66:2F:13:F7:75:D3:04:CD:48:99:88:6A:EB:BF:DF:B1 X509v3 Authority Key Identifier: keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:9e:e5:78:c1:6d:8a:7b:cd:b9:1a:ab:09:94:71:9e:fe:08: c1:c7:8a:39:3c:8a:13:f1:14:19:53:b9:65:ab:c3:af:3b:48: de:96:41:22:e2:64:b6:d7:89:6f:9d:52:2c:18:e9:ea:2a:bc: 8a:37:ee:c6:f2:81:e7:ac:11:2d:a2:bf:46:85:cb:f2:65:de: 55:52:f7:00:50:b6:14:20:5a:c5:6d:57:36:95:fb:1d:25:eb: 82:9b:8c:31:70:c9:47:82:60:9f:ae:e5:a5:84:21:6b:62:6b: 23:cb:4a:e0:6c:0c:8f:47:25:a4:57:09:8b:02:d8:0c:01:81: 73:dd:3f:bc:ba:49:89:e8:2d:0f:d3:56:55:8c:b8:5d:0e:f8: 33:d6:68:d6:5b:6e:d1:40:70:e9:9e:38:98:65:e7:fb:9e:11: 39:d1:a9:3b:89:38:08:e8:a2:f7:9c:dd:7c:33:94:fc:12:a4: 72:6f:82:52:7b:0d:fc:82:5f:3d:d3:14:88:ae:1e:7d:7e:93: ec:64:42:4d:e4:2a:d4:4d:0c:c7:46:fe:41:ae:77:29:ce:87: 49:ad:bf:ac:53:65:2a:3b:5a:40:77:82:a3:3b:6e:30:a3:06: 7f:82:c9:63:e4:f5:95:0c:cc:72:da:bd:2d:a6:31:f6:15:7f: 95:23:5c:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NDYxMTAvBgNVBAUTKEFGOTAwMjlCRTEwMUM5MjJDRkNGNEJEMTQ1RDdBRjFE QzY0MEU1RTAwHhcNMjUwNjMwMjAwMTE2WhcNMjUwNzA3MjAwMTE2WjAYMRYwFAYD VQQDEw02ODYyZWQwYy01ZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7yRb4E6K8UtgAqOCsClPEH9sAxdLakorlfLgXoUWGNhiXiSNb30yILR5rsoK D+xt2OOZdc3KrGVgRQeJQ4wNILNo0MqtWy4mWYF5npqklWQiC11xqNacm/XMJQac Rd0xEKBJbPbk887F33JgzWvWF71bqmM5FGdnrDfw+M/pKURkjbGbR9yUlGMkuy9T CUUOgVlN+bw5QvjW3fHJ2Febp67+ujB+RZQauphcqqIdb4qobPFUfsWd1Cb1We3M Vligo2Xyew5eNSPfaweNcgjmfhYe+K5Vz5FfiC+g8g5oI6q1+m6v052KxIB8lSYe FNkSA68FGaxHu3U7RTueLAt1PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbjHZJm LxP3ddMEzUiZiGrrv9+xMB8GA1UdIwQYMBaAFK+QApvhAckiz89L0UXXrx3GQOXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY0Ni9EMjAzN0QxMjdC RUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlTTFB6MHZSUmRldkhjWkE1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I1QUNtLUVCeVNMUHowdlJSZGV2SGNaQTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY0Ni9EMjAzN0QxMjdCRUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlT TFB6MHZSUmRldkhjWkE1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLnuV4wW2Ke825GqsJlHGe/gjBx4o5PIoT8RQZU7llq8OvO0jelkEi 4mS214lvnVIsGOnqKryKN+7G8oHnrBEtor9GhcvyZd5VUvcAULYUIFrFbVc2lfsd JeuCm4wxcMlHgmCfruWlhCFrYmsjy0rgbAyPRyWkVwmLAtgMAYFz3T+8ukmJ6C0P 01ZVjLhdDvgz1mjWW27RQHDpnjiYZef7nhE50ak7iTgI6KL3nN18M5T8EqRyb4JS ew38gl890xSIrh59fpPsZEJN5CrUTQzHRv5BrncpzodJrb+sU2UqO1pAd4KjO24w owZ/gslj5PWVDMxy2r0tpjH2FX+VI1x/ -----END CERTIFICATE-----Generated at Tue Jul 1 17:26:29 2025 by rpki-client