$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft File: 5HfTiqrEo3zG3xZlvxyICvmbe08.mft (raw, json) Hash identifier: 8nsmpTuCY8Jh6C9/0srObJOffxHzGrMTsw8NsnhFvII= Subject key identifier: 5A:59:10:D4:A3:A6:D7:2F:67:18:CF:76:9B:AA:00:91:0D:93:B2:D6 Authority key identifier: E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F Certificate issuer: /CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Certificate serial: 03D0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft Manifest number: 03C4 Signing time: Thu 03 Jul 2025 01:01:50 +0000 Manifest this update: Thu 03 Jul 2025 01:01:50 +0000 Manifest next update: Thu 10 Jul 2025 01:01:50 +0000 Files and hashes: 1: 5HfTiqrEo3zG3xZlvxyICvmbe08.crl (hash: TNdLZYgtIo8jnlqdVOq5dS5C9KjJzTMeSvAdMOvjy2M=) 2: 5F9FA12E0CA411ED96936D79C4F9AE02.roa (hash: 0ekBq+u3qTtCrN1H3WBpcyEBXqtT/nmRB1wnzUy864Q=) 3: 06820D08961011ECA540626AC4F9AE02.roa (hash: AajhgEbZBOC20FRVNZHV44NbIbhPj9V3ePlv/pPgwT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 976 (0x3d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Validity Not Before: Jul 3 01:01:50 2025 GMT Not After : Jul 10 01:01:50 2025 GMT Subject: CN=6865d67e-42b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4b:81:15:6d:95:e6:8a:c2:f0:81:81:17:e6: d1:da:ae:0f:37:13:f9:f2:65:21:98:7a:c4:39:86: b6:91:c3:2f:a4:f4:c0:06:7e:fd:0a:17:d2:0f:10: ba:c6:93:16:97:d7:00:a8:96:57:fe:e7:19:37:29: de:84:8f:92:ac:db:f1:31:01:9c:a8:b3:1c:98:5d: 6a:15:cc:cc:c5:37:36:5c:17:d2:33:e8:01:4b:01: d6:1f:19:39:fb:99:b6:5d:2f:68:d3:61:08:c5:82: ea:a5:d9:31:1c:f2:20:95:86:31:5a:e4:a0:85:be: 8f:d5:dd:2f:08:24:8c:0c:53:5d:a0:35:84:a5:a4: 35:4d:37:f6:6b:89:ab:4c:93:a9:ab:0e:36:b3:67: 50:ec:50:e5:2b:ed:b7:4e:b0:65:95:87:bf:3f:b2: 09:a7:18:14:e9:05:95:76:af:96:d4:f2:4b:f9:ec: 9f:e7:a1:e0:b8:8c:4b:4f:e1:82:48:47:fb:88:89: 8a:e4:46:5a:af:51:85:7e:cc:da:45:c9:eb:f8:5c: 6c:6a:79:87:10:31:74:07:72:f5:38:bc:14:a9:97: 6d:3d:a3:ee:a3:b5:a7:73:ee:8f:e5:3d:0d:06:be: 79:34:28:15:ce:1d:9d:24:b4:e7:d0:ff:91:73:81: 6d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:59:10:D4:A3:A6:D7:2F:67:18:CF:76:9B:AA:00:91:0D:93:B2:D6 X509v3 Authority Key Identifier: keyid:E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:b8:ba:6e:d5:7c:da:8b:fa:d3:4b:51:7c:49:34:47:35:39: c4:17:e0:d3:cf:2f:cd:98:53:dc:49:e3:9e:70:d2:f2:bf:92: be:96:57:24:49:d4:77:00:56:ea:59:9d:f7:33:06:f7:37:15: ca:22:c0:6a:de:19:7d:1e:d4:2c:3a:b0:22:23:4b:67:27:a7: 55:ef:7b:a5:b5:df:5d:69:bd:c6:8b:18:82:ea:6f:b5:4e:5c: 42:0d:50:6e:b2:93:24:38:24:e2:7c:4a:57:38:51:ea:cc:96: 46:e5:cb:ee:0b:cc:f6:a4:88:a8:c3:13:c3:bf:e4:81:c2:68: e4:c8:30:75:e0:5c:87:f0:f6:59:09:e0:18:b4:47:00:17:97: 9c:46:5a:7f:fa:27:2e:9d:19:ac:46:72:e3:7b:c9:5a:04:02: ea:ad:bc:ec:a7:23:31:f6:12:ce:c6:56:5c:fc:07:43:61:6e: 5a:58:67:72:fe:74:1a:f1:ce:66:86:f6:ff:a6:67:df:d5:85: ff:25:80:b6:6c:55:20:97:b7:df:74:34:cb:12:98:81:85:6f: e5:8c:5a:0d:2e:d0:8e:24:38:b9:22:0c:22:9d:5f:a0:2a:9c: bf:5d:c4:c8:a2:68:d3:91:d8:03:cf:fd:42:e7:0a:0d:53:46: 79:71:ee:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEU0NzdEMzhBQUFDNEEzN0NDNkRGMTY2NUJGMUM4ODBB Rjk5QjdCNEYwHhcNMjUwNzAzMDEwMTUwWhcNMjUwNzEwMDEwMTUwWjAYMRYwFAYD VQQDEw02ODY1ZDY3ZS00MmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0uBFW2V5orC8IGBF+bR2q4PNxP58mUhmHrEOYa2kcMvpPTABn79ChfSDxC6 xpMWl9cAqJZX/ucZNynehI+SrNvxMQGcqLMcmF1qFczMxTc2XBfSM+gBSwHWHxk5 +5m2XS9o02EIxYLqpdkxHPIglYYxWuSghb6P1d0vCCSMDFNdoDWEpaQ1TTf2a4mr TJOpqw42s2dQ7FDlK+23TrBllYe/P7IJpxgU6QWVdq+W1PJL+eyf56HguIxLT+GC SEf7iImK5EZar1GFfszaRcnr+FxsanmHEDF0B3L1OLwUqZdtPaPuo7Wnc+6P5T0N Br55NCgVzh2dJLTn0P+Rc4FtNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpZENSj ptcvZxjPdpuqAJENk7LWMB8GA1UdIwQYMBaAFOR304qqxKN8xt8WZb8ciAr5m3tP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80RTNFMzY3RTk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8zekczeFpsdnh5SUN2bWJl MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVIZlRpcXJFbzN6RzN4Wmx2eHlJQ3ZtYmUwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80RTNFMzY3RTk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8z ekczeFpsdnh5SUN2bWJlMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1uLpu1Xzai/rTS1F8STRHNTnEF+DTzy/NmFPcSeOecNLyv5K+llck SdR3AFbqWZ33Mwb3NxXKIsBq3hl9HtQsOrAiI0tnJ6dV73ultd9dab3GixiC6m+1 TlxCDVBuspMkOCTifEpXOFHqzJZG5cvuC8z2pIiowxPDv+SBwmjkyDB14FyH8PZZ CeAYtEcAF5ecRlp/+icunRmsRnLje8laBALqrbzspyMx9hLOxlZc/AdDYW5aWGdy /nQa8c5mhvb/pmff1YX/JYC2bFUgl7ffdDTLEpiBhW/ljFoNLtCOJDi5IgwinV+g Kpy/XcTIomjTkdgDz/1C5woNU0Z5ce7f -----END CERTIFICATE-----Generated at Thu Jul 3 06:11:55 2025 by rpki-client