$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft File: C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json) Hash identifier: XuuSmfB5FGRX3+foRI/LPCmAc61ol/whbTMHUBvyGBc= Subject key identifier: 69:E9:28:15:76:E7:3A:A2:E3:3A:01:25:B8:42:9C:A8:F9:D5:D9:75 Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft Manifest number: 4B Signing time: Sun 29 Jun 2025 06:22:57 +0000 Manifest this update: Sun 29 Jun 2025 06:22:57 +0000 Manifest next update: Sun 06 Jul 2025 06:22:57 +0000 Files and hashes: 1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: RhkJ1V+QAddVo23mnKsaEUnVYT8a7t4Bq/6mpHdVHsw=) 2: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: bP9/t2AlBY53g2t6Q5eQ3rldZs73eo2gwKpDvHbyV4Y=) 3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DqTJbrCn4Uj3CYLjBwjQvRunEdKhXtsy8A7Y63yZ9r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Validity Not Before: Jun 29 06:22:57 2025 GMT Not After : Jul 6 06:22:57 2025 GMT Subject: CN=6860dbc1-07a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:9e:8b:48:29:18:5d:99:f8:4c:20:a7:99: b8:63:7a:59:c4:4b:6e:75:5e:08:88:73:59:15:88: 66:3a:be:4e:b6:4c:75:d6:06:99:e4:d2:74:e0:6b: 25:97:9e:f8:88:67:a6:1b:2d:0e:90:70:29:1d:ff: 4e:e0:91:38:b3:58:59:d5:2d:af:4e:1c:ff:f6:a7: 92:8d:79:83:cd:80:d0:e5:ac:60:e2:86:30:ba:3b: f7:85:91:1f:fa:db:be:d8:0b:ac:4b:38:1d:bc:c2: d1:11:03:54:c1:12:e4:75:06:3d:ad:a3:bc:68:40: 57:70:4f:c3:24:99:0d:6e:59:29:51:82:58:1e:92: e0:e9:3e:a1:73:5d:79:28:f4:e8:a2:32:9b:f2:87: 83:c4:1a:d1:61:6a:23:9a:dc:24:3a:53:90:5b:f7: 5f:44:02:64:5e:a0:42:87:6c:3b:53:08:b7:48:e9: be:c8:e3:65:bd:0b:00:cc:a8:ce:09:e3:8e:47:08: 7e:b4:b1:b2:53:67:aa:20:78:b2:01:c8:2f:56:48: 42:66:d6:7c:28:7d:f9:79:6e:e6:11:45:75:5b:4f: 02:83:2f:c4:21:64:6d:71:61:25:7f:07:3a:7d:a7: 82:28:a6:a5:e0:30:45:6b:69:0e:07:3a:b5:c8:61: d4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E9:28:15:76:E7:3A:A2:E3:3A:01:25:B8:42:9C:A8:F9:D5:D9:75 X509v3 Authority Key Identifier: keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:b9:3e:d8:4b:26:b2:a8:dc:82:70:6d:62:b6:fa:fc:18:19: ab:00:29:06:20:6d:b3:d7:b6:ee:b9:e2:a5:c4:2b:cd:f3:6d: 30:9e:5d:4e:ac:3f:84:74:e7:c2:e3:b4:82:11:70:43:04:d7: 00:b0:b6:5f:fc:89:99:ae:b5:49:c2:74:58:69:d4:11:80:ff: 90:20:71:e4:d3:9b:33:14:75:f2:07:ef:c3:fa:f1:26:0d:2d: 3f:64:07:a0:05:4b:1b:d6:12:9d:5e:18:8b:2a:2b:f2:85:d5: 90:30:78:e3:53:a5:c6:6b:22:ec:c2:08:4e:84:d9:52:52:66: e5:18:ec:36:36:87:38:28:9b:a3:ce:d1:5c:64:54:07:2e:22: 10:10:f6:09:8a:77:02:40:a9:61:34:99:2d:16:f8:5d:28:ca: 91:8d:8d:b0:0c:7f:7f:b4:cc:eb:00:9a:d6:3c:58:cf:71:b1: 3e:d7:05:3e:76:53:00:13:87:b5:f1:24:3b:13:db:7f:ef:7c: b3:5e:90:f7:10:9b:0c:c8:01:bf:79:8f:e4:8a:ae:c8:3a:2f: 97:e2:03:fc:fc:bc:7a:8d:13:9a:4e:e9:60:0f:4d:3e:cb:31: 6f:fe:25:54:59:e5:71:92:ea:d3:62:8f:95:88:f0:31:53:a0: ce:c4:96:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDhGQTExMC8GA1UEBRMoMEI5MjM3RTNCMDg2QjU4QzNDRDlDRTZGRDQ5QUMyNjFG N0Q1MjVBMzAeFw0yNTA2MjkwNjIyNTdaFw0yNTA3MDYwNjIyNTdaMBgxFjAUBgNV BAMTDTY4NjBkYmMxLTA3YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3Mp6LSCkYXZn4TCCnmbhjelnES251XgiIc1kViGY6vk62THXWBpnk0nTgayWX nviIZ6YbLQ6QcCkd/07gkTizWFnVLa9OHP/2p5KNeYPNgNDlrGDihjC6O/eFkR/6 277YC6xLOB28wtERA1TBEuR1Bj2to7xoQFdwT8MkmQ1uWSlRglgekuDpPqFzXXko 9OiiMpvyh4PEGtFhaiOa3CQ6U5Bb919EAmReoEKHbDtTCLdI6b7I42W9CwDMqM4J 445HCH60sbJTZ6ogeLIByC9WSEJm1nwoffl5buYRRXVbTwKDL8QhZG1xYSV/Bzp9 p4IopqXgMEVraQ4HOrXIYdTbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaekoFXbn OqLjOgEluEKcqPnV2XUwHwYDVR0jBBgwFoAUC5I347CGtYw82c5v1JrCYffVJaMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOEZBL0QzN0Y2MjVDRTcz RDExRUY4QTA0NjIxN0M0RjlBRTAyL0M1STM0N0NHdFl3ODJjNXYxSnJDWWZmVkph TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzVJMzQ3Q0d0WXc4MmM1djFKckNZZmZWSmFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OEZBL0QzN0Y2MjVDRTczRDExRUY4QTA0NjIxN0M0RjlBRTAyL0M1STM0N0NHdFl3 ODJjNXYxSnJDWWZmVkphTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAi5PthLJrKo3IJwbWK2+vwYGasAKQYgbbPXtu654qXEK83zbTCeXU6s P4R058LjtIIRcEME1wCwtl/8iZmutUnCdFhp1BGA/5AgceTTmzMUdfIH78P68SYN LT9kB6AFSxvWEp1eGIsqK/KF1ZAweONTpcZrIuzCCE6E2VJSZuUY7DY2hzgom6PO 0VxkVAcuIhAQ9gmKdwJAqWE0mS0W+F0oypGNjbAMf3+0zOsAmtY8WM9xsT7XBT52 UwATh7XxJDsT23/vfLNekPcQmwzIAb95j+SKrsg6L5fiA/z8vHqNE5pO6WAPTT7L MW/+JVRZ5XGS6tNij5WI8DFToM7Elkw= -----END CERTIFICATE-----Generated at Tue Jul 1 01:09:06 2025 by rpki-client