$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: i9P63onWhpnZxvV2JXiVorCg1HqDrcJ0BA6F3fDXkSc= Subject key identifier: 5B:F0:EF:79:FF:03:FB:A7:22:8F:47:C0:DC:9D:B3:CD:5A:3C:34:87 Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0CBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0CB2 Signing time: Mon 30 Jun 2025 18:22:28 +0000 Manifest this update: Mon 30 Jun 2025 18:22:28 +0000 Manifest next update: Mon 07 Jul 2025 18:22:28 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: UceKK0pgnPbOw5ljvL6jBCaIUSl/7QjoSItqD48HdoY=) 2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: chBs/iSmoBtAd9EtvA3mnCGyh8XU8yYYJZGBD7EHNow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3263 (0xcbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: Jun 30 18:22:28 2025 GMT Not After : Jul 7 18:22:28 2025 GMT Subject: CN=6862d5e4-894d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:df:4e:8e:34:75:5f:36:b1:b8:12:07:ae:83: c2:13:dd:21:16:7a:3d:ec:d2:1a:c6:56:6f:de:8f: fb:1f:21:74:31:43:36:fa:a5:63:6c:b7:10:ac:db: cb:fe:8a:81:98:70:03:62:c1:8e:b1:38:0c:d4:94: a5:3f:52:9d:49:d5:da:c4:86:a1:fe:b3:56:61:cf: 78:49:17:7f:b8:ae:6d:89:cc:c0:96:7c:28:d2:e9: 48:ec:98:d0:75:be:e5:87:ef:87:bd:5a:d7:8c:31: d2:e4:ee:bd:fc:ad:6e:b3:33:4d:3a:88:7d:b7:fd: b7:0a:10:af:73:7f:27:d7:e0:4b:29:aa:d7:0f:76: 35:a4:7e:f5:7f:d3:ae:a5:f6:c2:b4:b5:42:eb:86: 28:83:8b:8d:57:d4:1c:2c:cd:8b:2e:1b:77:99:bb: ad:46:b8:79:82:4b:e3:8c:33:fd:a4:59:ec:81:28: 96:bd:db:45:1b:8f:a2:54:b2:9e:1e:6d:53:53:d1: c9:78:23:ba:57:64:a0:50:6b:99:c4:be:c8:22:03: cb:c0:71:58:25:7b:65:9e:04:9f:7c:fc:fa:87:18: d6:7c:4f:e3:d9:03:95:ce:a5:04:00:f4:3b:28:8f: fc:2b:c2:24:e7:de:73:fb:ec:22:e7:45:b7:79:88: 3e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F0:EF:79:FF:03:FB:A7:22:8F:47:C0:DC:9D:B3:CD:5A:3C:34:87 X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:83:91:d9:e6:e1:b6:17:68:3b:89:c2:b8:a3:b4:58:3c:68: 10:59:cf:9a:d8:8b:c7:88:9d:19:ce:03:b3:7f:c3:2d:bf:aa: 8c:3f:f1:bf:35:c5:52:1f:8e:02:ea:9c:28:b5:56:a8:6b:cf: a1:5f:48:4b:eb:e4:7f:3d:e8:dd:bb:e8:a2:cc:51:00:dc:eb: 18:ed:16:7f:47:3b:60:66:8d:b5:c0:84:b9:23:22:3b:57:6c: 31:8a:af:84:79:26:b7:49:d0:7a:46:c6:02:a9:49:4a:82:0a: b8:e5:79:95:a5:d0:a8:86:66:76:bb:91:41:80:5c:49:b4:82: 01:65:95:6c:23:42:8e:94:ea:aa:7e:04:37:85:a7:6a:db:24: 2a:e0:25:8d:f3:00:23:e5:f7:4e:b0:21:fe:ec:99:bf:1c:63: a9:1c:d8:af:cc:bf:67:3e:ff:b8:fa:8b:d6:fd:30:8f:e6:4a: 00:3c:85:8d:f5:9a:04:0f:e6:e8:9c:06:47:fc:33:1a:d0:6f: b9:ae:c1:9b:9d:83:d3:cc:8d:8b:81:6a:a1:b8:14:2d:85:0e: 23:33:22:b9:38:9d:ba:a6:ff:41:25:04:92:aa:79:a3:a0:4c: a7:80:bf:fb:32:9d:ed:49:00:e3:77:32:f6:d0:7e:7a:5b:a2: a5:fb:bd:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjUwNjMwMTgyMjI4WhcNMjUwNzA3MTgyMjI4WjAYMRYwFAYD VQQDEw02ODYyZDVlNC04OTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5t9OjjR1XzaxuBIHroPCE90hFno97NIaxlZv3o/7HyF0MUM2+qVjbLcQrNvL /oqBmHADYsGOsTgM1JSlP1KdSdXaxIah/rNWYc94SRd/uK5ticzAlnwo0ulI7JjQ db7lh++HvVrXjDHS5O69/K1uszNNOoh9t/23ChCvc38n1+BLKarXD3Y1pH71f9Ou pfbCtLVC64Yog4uNV9QcLM2LLht3mbutRrh5gkvjjDP9pFnsgSiWvdtFG4+iVLKe Hm1TU9HJeCO6V2SgUGuZxL7IIgPLwHFYJXtlngSffPz6hxjWfE/j2QOVzqUEAPQ7 KI/8K8Ik595z++wi50W3eYg+dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvw73n/ A/unIo9HwNyds81aPDSHMB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBg5HZ5uG2F2g7icK4o7RYPGgQWc+a2IvHiJ0ZzgOzf8Mtv6qMP/G/ NcVSH44C6pwotVaoa8+hX0hL6+R/Pejdu+iizFEA3OsY7RZ/RztgZo21wIS5IyI7 V2wxiq+EeSa3SdB6RsYCqUlKggq45XmVpdCohmZ2u5FBgFxJtIIBZZVsI0KOlOqq fgQ3hadq2yQq4CWN8wAj5fdOsCH+7Jm/HGOpHNivzL9nPv+4+ovW/TCP5koAPIWN 9ZoED+bonAZH/DMa0G+5rsGbnYPTzI2LgWqhuBQthQ4jMyK5OJ26pv9BJQSSqnmj oEyngL/7Mp3tSQDjdzL20H56W6Kl+70L -----END CERTIFICATE-----Generated at Wed Jul 2 12:48:11 2025 by rpki-client