$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft File: 5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json) Hash identifier: AzJ67jvAg6ZwiHdborCFVAJ/dvlQEnIt6GESx4ZgO0U= Subject key identifier: 6F:C9:A5:30:65:F5:18:7E:1C:25:59:FB:BF:22:2F:DC:ED:CF:B6:0E Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 Certificate issuer: /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Certificate serial: 030F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft Manifest number: 030B Signing time: Thu 03 Jul 2025 01:35:33 +0000 Manifest this update: Thu 03 Jul 2025 01:35:33 +0000 Manifest next update: Thu 10 Jul 2025 01:35:33 +0000 Files and hashes: 1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: vQuNIsXaYPZHRefeqamxdf0HPHUqL64B1v0RmChQfMo=) 2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: nd3BoBWmWncY6CXZjinblw8tRKQ0C9HJdvIgBJwhEHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 783 (0x30f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8 Validity Not Before: Jul 3 01:35:33 2025 GMT Not After : Jul 10 01:35:33 2025 GMT Subject: CN=6865de65-678d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:68:ef:64:02:c1:04:0c:b8:1a:71:2c:86: 89:58:d1:79:cb:e1:31:a8:e0:58:60:48:a1:df:80: 28:86:8d:b7:b4:a4:d3:43:2c:68:7c:49:2d:f2:7d: 01:c6:9c:f4:e8:e1:fa:5d:4d:87:b2:14:8f:32:13: 4c:e9:76:8c:c9:e8:49:c0:eb:42:51:5c:3a:2d:78: 6c:c3:8d:b0:4e:d6:29:08:7a:11:b6:32:c9:8c:aa: ec:d7:28:8a:ab:d3:89:bd:8e:37:05:a7:e2:ae:c4: 12:0e:56:db:c1:e2:5b:d7:67:4d:64:19:53:52:cc: 0e:f4:48:14:8c:25:53:a3:7c:2f:90:98:0b:6b:03: df:cd:95:eb:8e:31:10:5a:53:c0:10:8d:b8:31:cb: c4:1f:fc:8d:bf:dd:85:72:13:bc:c7:cc:4b:df:7a: 93:b0:d0:2f:b5:b0:e6:b2:f6:48:c8:2a:ae:de:f2: 1c:3e:22:7e:52:f9:cd:67:ec:82:bc:e1:d3:2b:4a: b8:17:1a:de:cf:bf:e9:0d:f9:3a:19:fe:8b:55:fd: dc:f0:2e:9a:31:20:40:0f:87:b7:0b:86:93:18:0d: a1:91:6f:c7:89:15:a0:79:84:b8:18:6a:0c:9f:97: 4e:51:5c:1d:b7:46:03:be:5a:ae:68:37:10:c3:7e: d5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C9:A5:30:65:F5:18:7E:1C:25:59:FB:BF:22:2F:DC:ED:CF:B6:0E X509v3 Authority Key Identifier: keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8a:29:ad:b5:56:f3:c7:69:18:91:2d:24:60:55:05:04:8c: 82:06:2b:7b:9d:3d:a6:f1:ce:8a:68:74:dd:b6:e9:69:f2:75: f6:08:7a:5b:f5:5c:df:3a:f0:09:d2:88:c7:dc:7f:11:03:4f: e7:51:02:a7:4e:68:89:7b:47:ad:09:e4:b4:f1:c3:bf:7e:6d: 67:8f:8d:b3:66:ba:7f:e1:67:3f:34:40:92:bb:75:99:b1:1f: 64:b4:dd:96:60:0d:0e:5c:8f:1e:ad:ae:52:7e:91:b8:eb:71: 51:da:1b:7d:ec:ef:81:90:0b:45:af:f5:57:e1:e5:0c:71:83: 99:95:0d:e3:9d:31:f8:cf:1f:c1:49:3b:d4:b4:80:a3:1d:34: 4e:54:ec:d4:72:63:ef:c1:6d:c6:c7:57:90:1f:ef:f5:f7:16: 30:5e:45:6f:3b:68:4e:d8:76:b8:f6:dd:ce:e7:bd:63:83:4d: 4c:b1:40:e4:e7:dd:09:ff:7b:b4:5e:ab:c4:1f:92:4a:cc:cd: ff:20:68:59:00:1d:43:d9:62:04:0a:3c:ef:b6:93:40:73:ee: 76:cc:d9:de:40:7a:b8:72:6e:8a:6b:ec:b8:f5:43:79:1f:2a: 96:09:1d:01:bb:c4:cc:41:4d:a0:84:f8:cd:77:a6:34:43:79: 6d:7a:dd:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUzQTUxMTAvBgNVBAUTKEU0QkY3RDU5NjBCNkIyRjNDNTIxNDFFRjJCNjAyQUQx MTRGNDBDQTgwHhcNMjUwNzAzMDEzNTMzWhcNMjUwNzEwMDEzNTMzWjAYMRYwFAYD VQQDEw02ODY1ZGU2NS02NzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGdo72QCwQQMuBpxLIaJWNF5y+ExqOBYYEih34Aoho23tKTTQyxofEkt8n0B xpz06OH6XU2HshSPMhNM6XaMyehJwOtCUVw6LXhsw42wTtYpCHoRtjLJjKrs1yiK q9OJvY43BafirsQSDlbbweJb12dNZBlTUswO9EgUjCVTo3wvkJgLawPfzZXrjjEQ WlPAEI24McvEH/yNv92FchO8x8xL33qTsNAvtbDmsvZIyCqu3vIcPiJ+UvnNZ+yC vOHTK0q4Fxrez7/pDfk6Gf6LVf3c8C6aMSBAD4e3C4aTGA2hkW/HiRWgeYS4GGoM n5dOUVwdt0YDvlquaDcQw37VjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/JpTBl 9Rh+HCVZ+78iL9ztz7YOMB8GA1UdIwQYMBaAFOS/fVlgtrLzxSFB7ytgKtEU9Ayo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTNBNS81MDBDRkU5OERB NjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2UEZJVUh2SzJBcTBSVDBE S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVMOTlXV0Myc3ZQRklVSHZLMkFxMFJUMERLZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTNBNS81MDBDRkU5OERBNjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2 UEZJVUh2SzJBcTBSVDBES2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeiimttVbzx2kYkS0kYFUFBIyCBit7nT2m8c6KaHTdtulp8nX2CHpb 9VzfOvAJ0ojH3H8RA0/nUQKnTmiJe0etCeS08cO/fm1nj42zZrp/4Wc/NECSu3WZ sR9ktN2WYA0OXI8era5SfpG463FR2ht97O+BkAtFr/VX4eUMcYOZlQ3jnTH4zx/B STvUtICjHTROVOzUcmPvwW3Gx1eQH+/19xYwXkVvO2hO2Ha49t3O571jg01MsUDk 590J/3u0XqvEH5JKzM3/IGhZAB1D2WIECjzvtpNAc+52zNneQHq4cm6Ka+y49UN5 HyqWCR0Bu8TMQU2ghPjNd6Y0Q3ltet05 -----END CERTIFICATE-----Generated at Fri Jul 4 22:27:18 2025 by rpki-client