$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft File: 5TfQw0j9fcSfX8OwBmoxxYT64as.mft (raw, json) Hash identifier: 1bCM759yklakUAeGDrif3FYvdOKwKtNApddQBM7GXHM= Subject key identifier: 0E:C3:1F:38:C3:EF:66:3E:F1:33:72:B1:94:FE:37:FF:40:39:1D:68 Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Certificate serial: 0C67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft Manifest number: 0C5A Signing time: Mon 30 Jun 2025 18:36:53 +0000 Manifest this update: Mon 30 Jun 2025 18:36:53 +0000 Manifest next update: Mon 07 Jul 2025 18:36:53 +0000 Files and hashes: 1: 5TfQw0j9fcSfX8OwBmoxxYT64as.crl (hash: t1Es/13oJPnr5y6q3WBlVI5MVK8YdNUQKitQnvbLGv0=) 2: F3529CDCAE1511EE92D99E46C4F9AE02.roa (hash: hTD7DjMK2EnPCWqJypUdiJk7jUHRPt10GcfYU8sN4po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3175 (0xc67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Validity Not Before: Jun 30 18:36:53 2025 GMT Not After : Jul 7 18:36:53 2025 GMT Subject: CN=6862d945-96bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:98:06:3e:ca:85:02:08:4d:db:0a:84:e7:c2: 08:77:68:d0:60:dc:a5:70:c1:4e:52:c7:6e:50:01: 40:9f:19:a3:9d:c4:c9:40:25:7b:e0:34:ec:27:d2: 99:62:9e:68:0e:4e:51:78:a4:5e:4b:59:c7:95:bf: e2:3a:d5:fd:df:c9:f2:93:05:20:bb:81:b0:e8:b2: 69:6b:39:1d:00:31:49:9f:b2:6c:39:3f:64:27:ef: 99:88:5f:6c:3b:89:a2:52:10:86:0a:d7:16:34:00: 73:5a:e6:b0:69:06:b1:09:3c:53:06:6d:31:97:1f: 88:32:20:80:f3:99:2b:0a:46:da:53:29:7e:f8:21: d6:79:f1:07:88:b6:fa:e6:45:b4:92:e4:a2:10:9b: ca:e8:92:3a:ee:d0:c2:33:bd:73:4a:2c:7e:a4:d3: 6e:11:40:7e:ee:b2:ff:8d:06:54:c5:6a:7a:ce:37: d2:c3:cd:b8:17:f3:a8:1d:62:03:15:76:da:37:26: 54:b4:7a:be:7d:2a:a9:07:ae:e5:23:b4:d1:7e:59: 31:c3:3b:45:b5:10:23:8c:d7:c8:13:35:02:3e:5c: 39:14:16:73:d7:8f:e6:8b:c5:bf:66:cc:98:9d:aa: 53:4d:b1:ee:04:7e:ad:b0:6b:aa:e4:af:38:e0:57: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C3:1F:38:C3:EF:66:3E:F1:33:72:B1:94:FE:37:FF:40:39:1D:68 X509v3 Authority Key Identifier: keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3d:59:bd:73:aa:3a:48:38:45:a1:cf:f4:55:86:38:c6:23: 03:87:83:70:eb:0b:2d:7a:bf:31:ad:24:43:66:02:06:2e:3b: 48:46:24:0c:fb:a3:26:63:f8:65:f3:e5:98:bf:ae:43:61:65: 9c:e9:63:7a:3e:c4:6f:6b:30:bc:7c:75:f8:42:28:cb:3e:1b: b4:16:04:3e:67:1e:f3:dc:59:b9:8e:67:97:99:7b:08:0f:e6: 56:2f:fd:b0:22:c0:63:49:f9:bd:09:d9:08:d6:7f:6c:14:95: 6e:95:a8:1f:3a:48:43:30:93:e0:92:2f:7f:54:1b:76:cf:03: 2f:96:de:97:a4:e6:ec:37:bb:9a:94:8e:0f:56:3e:67:7d:f7: 0d:9b:d5:ea:45:10:ee:d9:2e:57:8d:c4:ff:61:84:df:31:4c: 59:f2:42:ae:30:3d:c1:54:5e:86:e1:c8:50:4a:7b:8e:44:04: d5:1f:92:96:b3:23:4f:03:ca:5c:a5:24:a6:d2:6e:b9:8f:4b: 51:00:bb:27:41:17:e5:d4:b5:05:73:15:0d:37:bf:96:44:2b: ee:cf:19:97:80:cd:e1:24:d1:03:14:0d:19:96:98:78:a4:29: c1:f2:ef:6d:8f:ac:ae:f4:63:c1:41:d3:a5:e6:e2:1d:be:e0: 0c:68:2f:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzNDUxMTAvBgNVBAUTKEU1MzdEMEMzNDhGRDdEQzQ5RjVGQzNCMDA2NkEzMUM1 ODRGQUUxQUIwHhcNMjUwNjMwMTgzNjUzWhcNMjUwNzA3MTgzNjUzWjAYMRYwFAYD VQQDEw02ODYyZDk0NS05NmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ZgGPsqFAghN2wqE58IId2jQYNylcMFOUsduUAFAnxmjncTJQCV74DTsJ9KZ Yp5oDk5ReKReS1nHlb/iOtX938nykwUgu4Gw6LJpazkdADFJn7JsOT9kJ++ZiF9s O4miUhCGCtcWNABzWuawaQaxCTxTBm0xlx+IMiCA85krCkbaUyl++CHWefEHiLb6 5kW0kuSiEJvK6JI67tDCM71zSix+pNNuEUB+7rL/jQZUxWp6zjfSw824F/OoHWID FXbaNyZUtHq+fSqpB67lI7TRflkxwztFtRAjjNfIEzUCPlw5FBZz14/mi8W/ZsyY napTTbHuBH6tsGuq5K844FfRzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7DHzjD 72Y+8TNysZT+N/9AOR1oMB8GA1UdIwQYMBaAFOU30MNI/X3En1/DsAZqMcWE+uGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDM0NS9FQzc4Q0REQTA1 MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZjU2ZYOE93Qm1veHhZVDY0 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVUZlF3MGo5ZmNTZlg4T3dCbW94eFlUNjRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDM0NS9FQzc4Q0REQTA1MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZj U2ZYOE93Qm1veHhZVDY0YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7PVm9c6o6SDhFoc/0VYY4xiMDh4Nw6wster8xrSRDZgIGLjtIRiQM +6MmY/hl8+WYv65DYWWc6WN6PsRvazC8fHX4QijLPhu0FgQ+Zx7z3Fm5jmeXmXsI D+ZWL/2wIsBjSfm9CdkI1n9sFJVulagfOkhDMJPgki9/VBt2zwMvlt6XpObsN7ua lI4PVj5nffcNm9XqRRDu2S5XjcT/YYTfMUxZ8kKuMD3BVF6G4chQSnuORATVH5KW syNPA8pcpSSm0m65j0tRALsnQRfl1LUFcxUNN7+WRCvuzxmXgM3hJNEDFA0Zlph4 pCnB8u9tj6yu9GPBQdOl5uIdvuAMaC++ -----END CERTIFICATE-----Generated at Wed Jul 2 11:33:57 2025 by rpki-client