$ rpki-client -vvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json) Hash identifier: npBGoebkH5JKbY1k1FuDpQvcjFfjEWp0Ogjfgw/MNgQ= Subject key identifier: 1C:E6:11:21:62:7E:B1:EC:BE:2D:63:CD:B9:40:A8:56:95:13:3D:14 Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft Manifest number: 04CC Signing time: Tue 01 Jul 2025 00:17:36 +0000 Manifest this update: Tue 01 Jul 2025 00:17:35 +0000 Manifest next update: Tue 08 Jul 2025 00:17:35 +0000 Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: 3xGpWBqwg1Wywq7BJTDG/NJSoPkXcqh65f2fhLvbQBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F35BB, serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Validity Not Before: Jul 1 00:17:35 2025 GMT Not After : Jul 8 00:17:35 2025 GMT Subject: CN=6863291f-7a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:89:f1:24:fa:4a:72:27:17:91:3f:b2:4a: 34:85:2a:fc:de:83:8e:d3:22:b4:8f:a5:a0:b8:59: 2a:c9:6c:e5:b7:b6:ff:6c:86:22:37:97:35:9d:da: f1:e8:6a:44:04:84:6b:60:ca:0b:63:01:e3:7e:96: ea:65:8c:aa:34:28:9f:0c:80:12:3f:ac:82:ea:d8: 5e:dd:1f:72:fc:b7:65:af:72:44:bc:56:92:b2:d7: 63:ea:76:a0:37:6d:d5:b9:bb:25:36:2f:c4:54:26: 29:79:c3:38:a2:ca:66:6a:a7:0a:ad:54:b4:e0:36: 77:a7:6c:1f:e3:b6:e1:0b:28:25:ba:d3:98:dc:b8: 82:e1:93:67:2b:a2:ea:e8:7a:cb:ce:43:46:b7:0e: a4:ab:a4:ce:b9:a6:11:fc:f8:d6:64:8f:e3:58:90: 82:d8:26:8f:73:b0:0c:c5:ac:f9:ad:4c:03:37:9c: 1a:83:d6:f2:52:c2:52:67:13:26:14:11:e2:6c:0a: 2b:15:81:1d:7d:fb:7c:da:8d:e4:6d:4b:ac:98:b3: ae:9e:c1:45:f9:b5:1f:fa:77:63:42:7a:c7:ba:7b: 7e:c6:95:ab:7d:3e:a2:bb:7f:4c:7b:3d:78:9e:85: 49:3b:99:97:72:79:6a:5c:ff:da:db:04:6e:10:5a: 16:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E6:11:21:62:7E:B1:EC:BE:2D:63:CD:B9:40:A8:56:95:13:3D:14 X509v3 Authority Key Identifier: keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c6:92:e0:a9:c3:9d:f9:e7:8c:8b:6b:ec:33:bb:5b:5b:cf: 5e:40:69:df:8e:0b:b7:c0:37:73:09:28:77:01:f3:af:d8:86: ab:6d:66:f8:2c:f2:7f:ab:31:7e:67:4e:4a:bc:8d:cf:1d:d6: ee:ab:d8:a4:4c:43:20:b3:38:91:b8:24:3f:eb:2a:a8:68:dc: 9c:1d:c5:5c:4a:64:2d:90:c4:e8:ef:ce:e3:52:df:31:df:81: d5:4a:11:5e:24:fd:4c:f7:0c:29:58:a3:44:37:89:91:2b:8f: 05:15:ac:1b:2f:1f:6d:af:a6:06:9b:3a:8a:23:90:39:78:12: 82:18:ea:2d:4b:5e:60:51:7e:d9:ba:11:6e:a3:49:ea:c6:21: ea:f7:76:17:ef:59:52:27:f7:8b:40:0c:45:fb:d1:2a:ad:26: c3:b7:68:c7:39:9c:02:ab:39:d4:d5:07:92:19:d9:9e:aa:d0: 34:f6:51:21:7e:06:fe:8c:66:7b:02:c2:88:18:5e:75:c4:d8: 80:f8:a0:bd:0f:b0:97:0b:26:39:90:96:d2:3c:61:a8:04:2d: 4e:8f:9c:94:90:26:4b:52:5f:ae:30:bd:b0:ef:e1:0e:85:a6: f6:b9:61:59:a3:d8:5b:be:96:97:33:69:a7:60:1f:8b:29:86: 53:6f:17:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM1QkIxMTAvBgNVBAUTKEU2MUZBMTI0QTYxOEUyNTY2N0NDMzFDQ0ZDNDkxNkNF MDc2RkRBNTcwHhcNMjUwNzAxMDAxNzM1WhcNMjUwNzA4MDAxNzM1WjAYMRYwFAYD VQQDEw02ODYzMjkxZi03YTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZmJ8ST6SnInF5E/sko0hSr83oOO0yK0j6WguFkqyWzlt7b/bIYiN5c1ndrx 6GpEBIRrYMoLYwHjfpbqZYyqNCifDIASP6yC6the3R9y/Ldlr3JEvFaSstdj6nag N23VubslNi/EVCYpecM4ospmaqcKrVS04DZ3p2wf47bhCyglutOY3LiC4ZNnK6Lq 6HrLzkNGtw6kq6TOuaYR/PjWZI/jWJCC2CaPc7AMxaz5rUwDN5wag9byUsJSZxMm FBHibAorFYEdfft82o3kbUusmLOunsFF+bUf+ndjQnrHunt+xpWrfT6iu39Mez14 noVJO5mXcnlqXP/a2wRuEFoWJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzmESFi frHsvi1jzblAqFaVEz0UMB8GA1UdIwQYMBaAFOYfoSSmGOJWZ8wxzPxJFs4Hb9pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzVCQi8wNzYzN0QwMjI3 RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRsWm56REhNX0VrV3pnZHYy bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoLWhKS1lZNGxabnpESE1fRWtXemdkdjJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzVCQi8wNzYzN0QwMjI3RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRs Wm56REhNX0VrV3pnZHYybGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdxpLgqcOd+eeMi2vsM7tbW89eQGnfjgu3wDdzCSh3AfOv2IarbWb4 LPJ/qzF+Z05KvI3PHdbuq9ikTEMgsziRuCQ/6yqoaNycHcVcSmQtkMTo787jUt8x 34HVShFeJP1M9wwpWKNEN4mRK48FFawbLx9tr6YGmzqKI5A5eBKCGOotS15gUX7Z uhFuo0nqxiHq93YX71lSJ/eLQAxF+9EqrSbDt2jHOZwCqznU1QeSGdmeqtA09lEh fgb+jGZ7AsKIGF51xNiA+KC9D7CXCyY5kJbSPGGoBC1Oj5yUkCZLUl+uML2w7+EO hab2uWFZo9hbvpaXM2mnYB+LKYZTbxet -----END CERTIFICATE-----Generated at Wed Jul 2 19:17:45 2025 by rpki-client