$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft File: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft (raw, json) Hash identifier: EcXK/BSa9qRhUE/vL4iuuW7CiRpAwCu8USXLqgJrgpM= Subject key identifier: 33:3A:92:2F:E1:71:39:D6:59:F8:D0:26:45:53:0A:81:0D:03:B2:7C Authority key identifier: E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE Certificate issuer: /CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE Certificate serial: 0712 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft Manifest number: 2195 Signing time: Wed 02 Jul 2025 16:04:50 +0000 Manifest this update: Wed 02 Jul 2025 16:04:50 +0000 Manifest next update: Wed 09 Jul 2025 16:04:50 +0000 Files and hashes: 1: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl (hash: i0uEEh2TtxYLK0cqhiYIDcgGKWU7jXITqrHsNGkaEe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1810 (0x712) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE Validity Not Before: Jul 2 16:04:50 2025 GMT Not After : Jul 9 16:04:50 2025 GMT Subject: CN=686558a2-59f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1e:0e:98:42:d8:6f:e9:89:86:1c:c2:65:dc: ff:5c:c6:7e:55:c2:38:ba:cc:9f:11:85:5e:a5:83: c0:2d:68:cf:6f:47:c9:b5:3a:d0:ae:8d:c5:54:5e: 08:93:f2:0f:dc:4c:5d:f1:48:be:6f:12:07:11:f1: d1:a5:6f:d0:a7:4a:df:e5:10:e8:79:f5:59:15:fe: 39:f8:89:65:a8:70:0b:d7:c6:ee:b6:30:42:6a:ec: 39:71:83:de:09:2e:d5:5e:cc:1d:be:ae:84:23:fe: 2a:0e:d1:3e:e8:0e:c2:7e:6e:e5:e3:6b:1e:14:89: b7:32:32:05:df:63:61:ae:6b:26:42:51:f2:eb:88: d7:13:ea:c7:c8:93:d9:bc:77:0a:a3:4f:7d:2e:1a: ee:3e:fc:42:c0:52:a4:57:72:1a:9c:d2:db:9a:93: 25:3b:24:43:d9:7f:5e:73:5a:7b:de:44:ad:77:d9: bf:95:d8:04:3d:db:b9:b6:2b:90:18:69:fd:09:01: 07:d8:02:4e:e7:49:bd:d5:e5:e1:41:47:66:55:b7: b2:1f:e2:fd:58:81:6f:ef:c5:65:99:db:d7:d2:39: 8a:c1:4e:f4:e2:c3:26:cd:b2:dc:ba:21:21:00:41: 6a:56:12:c0:c0:68:a8:38:15:e1:33:20:3a:51:48: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3A:92:2F:E1:71:39:D6:59:F8:D0:26:45:53:0A:81:0D:03:B2:7C X509v3 Authority Key Identifier: keyid:E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:a9:7c:f6:02:54:1e:fe:c3:f8:89:57:c8:0c:71:8d:e8:03: 64:1d:4f:29:42:8e:bb:86:30:36:cf:d5:29:6d:d7:91:dd:31: 70:e2:50:75:d0:13:91:5a:ae:ee:b8:50:12:82:9e:d4:2a:8f: 89:4c:57:86:96:e5:fa:6d:d4:3d:55:3f:57:b5:41:bb:53:63: 88:5b:4e:b1:8b:39:4c:75:91:5f:78:7a:b0:ac:74:11:91:f9: f5:6c:87:9e:42:b8:44:5f:59:07:49:7f:ac:43:5d:60:15:5e: 39:70:a7:02:9d:0c:28:d8:57:90:f2:08:35:0e:1e:9b:e9:38: 83:e0:ba:23:ac:b8:02:d2:79:23:75:82:4f:13:03:f0:9e:63: 6a:83:13:a6:f7:27:7e:b9:76:c9:7c:ae:c2:41:41:60:77:79: 0a:79:98:b6:c8:8c:29:20:64:1d:cb:67:d0:cb:16:fd:63:e2: c8:da:ac:05:ef:20:9f:a8:49:6c:21:c7:f2:2e:9f:cf:35:95: a4:c5:1c:0f:8a:45:69:6c:91:38:e5:fa:5b:aa:7f:ab:4a:73: d6:2a:48:b1:f5:3a:a8:60:c1:d4:14:76:0d:f4:28:bc:1d:4a: f4:cb:8e:65:c8:c8:56:46:67:e7:7c:81:74:6d:0e:7e:f2:5d: 76:cb:3c:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKEU3M0ZCODg2OEREM0I0NjFFQTFBNjczQzdBMzY5NDUy MzVFOUNBQUUwHhcNMjUwNzAyMTYwNDUwWhcNMjUwNzA5MTYwNDUwWjAYMRYwFAYD VQQDEw02ODY1NThhMi01OWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsh4OmELYb+mJhhzCZdz/XMZ+VcI4usyfEYVepYPALWjPb0fJtTrQro3FVF4I k/IP3Exd8Ui+bxIHEfHRpW/Qp0rf5RDoefVZFf45+IllqHAL18butjBCauw5cYPe CS7VXswdvq6EI/4qDtE+6A7Cfm7l42seFIm3MjIF32NhrmsmQlHy64jXE+rHyJPZ vHcKo099LhruPvxCwFKkV3IanNLbmpMlOyRD2X9ec1p73kStd9m/ldgEPdu5tiuQ GGn9CQEH2AJO50m91eXhQUdmVbeyH+L9WIFv78VlmdvX0jmKwU704sMmzbLcuiEh AEFqVhLAwGioOBXhMyA6UUiNkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDM6ki/h cTnWWfjQJkVTCoENA7J8MB8GA1UdIwQYMBaAFOc/uIaN07Rh6hpnPHo2lFI16cqu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi81ei00aG8zVHRHSHFHbWM4ZWphVVVqWHB5 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzV6LTRobzNUdEdIcUdtYzhlamFVVWpYcHlxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi81ei00aG8zVHRH SHFHbWM4ZWphVVVqWHB5cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAqXz2AlQe/sP4iVfIDHGN6ANkHU8pQo67hjA2z9UpbdeR3TFw4lB1 0BORWq7uuFASgp7UKo+JTFeGluX6bdQ9VT9XtUG7U2OIW06xizlMdZFfeHqwrHQR kfn1bIeeQrhEX1kHSX+sQ11gFV45cKcCnQwo2FeQ8gg1Dh6b6TiD4LojrLgC0nkj dYJPEwPwnmNqgxOm9yd+uXbJfK7CQUFgd3kKeZi2yIwpIGQdy2fQyxb9Y+LI2qwF 7yCfqElsIcfyLp/PNZWkxRwPikVpbJE45fpbqn+rSnPWKkix9TqoYMHUFHYN9Ci8 HUr0y45lyMhWRmfnfIF0bQ5+8l12yzxX -----END CERTIFICATE-----Generated at Thu Jul 3 23:32:58 2025 by rpki-client