$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json) Hash identifier: IUNIo7p8wEd/3OLGm8vMdylp7jTKrox3Xy5pHr7p9To= Subject key identifier: 1B:A0:BB:55:47:37:39:5C:CB:F4:61:05:D9:80:75:3C:F7:4A:23:D9 Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Certificate serial: 16D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft Manifest number: 16B8 Signing time: Wed 02 Jul 2025 16:46:55 +0000 Manifest this update: Wed 02 Jul 2025 16:46:54 +0000 Manifest next update: Wed 09 Jul 2025 16:46:54 +0000 Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: NjgAM12da7CkQuY/N4gWsXAzaSoKO/Pm2RTUgb0oqvg=) 2: 07D665E0862711EBAC147872C4F9AE02.roa (hash: h1jWRhCaXCGscugt7m7NPkJTh1NUHltfWypGJXiPwZw=) 3: F9E21144D90F11EDB2DBEA49C4F9AE02.roa (hash: fP45NGSHNvdQShMBiD1rePe2Esz9p+VlDQo2vfi2cz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5841 (0x16d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Validity Not Before: Jul 2 16:46:54 2025 GMT Not After : Jul 9 16:46:54 2025 GMT Subject: CN=6865627f-858e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fd:ff:48:8c:17:ea:cf:ad:34:c7:99:c5:7e: 85:68:ad:05:60:30:01:f9:ec:1d:2d:f4:8c:72:26: 31:de:c7:20:0e:a7:67:8c:48:5b:81:f5:8f:41:33: 18:01:9e:17:48:a2:04:3f:d7:97:ec:7e:e6:63:92: de:de:aa:99:1a:bc:f4:20:5f:91:22:c0:79:b3:45: ab:d5:99:01:f1:72:b8:de:7c:40:f9:ac:17:23:4d: e5:52:f9:04:49:bf:de:e8:37:3f:98:e5:9e:5f:46: ec:82:db:b4:e0:b0:9c:11:f1:89:75:2c:30:84:93: 0f:1c:61:11:4e:70:57:51:76:35:33:03:76:14:31: 60:f2:b0:d1:68:11:ea:33:4e:23:61:09:a9:95:e9: d7:7c:6d:5e:62:80:0a:d6:c8:01:59:c3:0e:09:0e: 78:eb:c1:35:f3:58:4c:11:ae:be:08:1c:13:6c:e1: 26:35:4b:ca:a9:18:65:76:1a:a3:df:8a:2b:27:0c: 77:36:e5:b5:e4:12:2d:e9:57:67:b4:9b:e0:d9:f2: f6:a7:a5:9a:c8:25:fa:bf:88:cb:7a:56:ba:b9:a5: 60:32:15:76:05:39:56:02:d1:61:18:65:b6:ce:5f: f2:1d:20:57:9e:a6:41:ad:1e:db:f6:dc:17:8c:25: ac:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A0:BB:55:47:37:39:5C:CB:F4:61:05:D9:80:75:3C:F7:4A:23:D9 X509v3 Authority Key Identifier: keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:78:a0:80:ba:f1:65:92:db:02:18:b9:77:4b:62:c4:e8:bd: ff:71:53:85:4e:0f:b9:1d:ed:4f:b4:ba:22:c7:15:b6:7e:dd: 07:e7:44:29:ea:44:d2:52:3a:aa:9a:c7:5b:5e:40:cd:40:64: c4:4e:7c:5c:38:69:4a:df:ab:e7:14:89:3e:2f:bd:cb:35:8a: 7f:0a:90:3a:4f:e2:90:48:1a:c0:99:03:c3:d9:4d:d6:af:f4: d4:23:ba:4e:b9:e6:2a:1c:1b:89:1c:80:4d:57:3d:7d:76:d8: 70:1b:7e:84:3b:5e:6a:fc:ad:1d:04:0d:ec:29:61:cf:78:f1: 14:f2:db:18:72:97:fd:87:60:86:a2:9c:f8:23:a4:86:31:d4: e0:60:e2:09:a2:95:5c:4f:2f:4f:1e:e5:f3:49:b8:ea:f8:ef: 96:fd:40:68:b9:e0:21:82:ae:7f:f6:5d:97:43:1e:ff:4a:21: 62:2e:8b:e6:1f:3b:00:a8:c7:f0:f7:0b:a2:36:d0:15:d6:c1: 98:63:ad:73:d6:84:45:ce:5d:33:5d:5e:45:86:1e:d2:a5:6a: a1:23:b5:8c:13:bc:87:90:cf:fd:16:86:ea:fe:ae:f3:65:f9: b4:7a:cf:35:37:a3:1f:d1:91:31:d8:f5:b4:10:a8:ba:b7:21: 90:03:7d:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw QUVEREJCNkIwHhcNMjUwNzAyMTY0NjU0WhcNMjUwNzA5MTY0NjU0WjAYMRYwFAYD VQQDEw02ODY1NjI3Zi04NThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4/3/SIwX6s+tNMeZxX6FaK0FYDAB+ewdLfSMciYx3scgDqdnjEhbgfWPQTMY AZ4XSKIEP9eX7H7mY5Le3qqZGrz0IF+RIsB5s0Wr1ZkB8XK43nxA+awXI03lUvkE Sb/e6Dc/mOWeX0bsgtu04LCcEfGJdSwwhJMPHGERTnBXUXY1MwN2FDFg8rDRaBHq M04jYQmplenXfG1eYoAK1sgBWcMOCQ5468E181hMEa6+CBwTbOEmNUvKqRhldhqj 34orJwx3NuW15BIt6VdntJvg2fL2p6WayCX6v4jLela6uaVgMhV2BTlWAtFhGGW2 zl/yHSBXnqZBrR7b9twXjCWsEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBugu1VH Nzlcy/RhBdmAdTz3SiPZMB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1 MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVBOS8wMEI3MTUxQ0ZEMDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lS UjlnQms5bDNEclVLN2R1MnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfeKCAuvFlktsCGLl3S2LE6L3/cVOFTg+5He1PtLoixxW2ft0H50Qp 6kTSUjqqmsdbXkDNQGTETnxcOGlK36vnFIk+L73LNYp/CpA6T+KQSBrAmQPD2U3W r/TUI7pOueYqHBuJHIBNVz19dthwG36EO15q/K0dBA3sKWHPePEU8tsYcpf9h2CG opz4I6SGMdTgYOIJopVcTy9PHuXzSbjq+O+W/UBoueAhgq5/9l2XQx7/SiFiLovm HzsAqMfw9wuiNtAV1sGYY61z1oRFzl0zXV5Fhh7SpWqhI7WME7yHkM/9Fobq/q7z Zfm0es81N6Mf0ZEx2PW0EKi6tyGQA33J -----END CERTIFICATE-----Generated at Thu Jul 3 20:35:49 2025 by rpki-client