$ rpki-client -vvf rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft File: 5v6wYDITaH99TA3YxdHl8ycflmo.mft (raw, json) Hash identifier: amqsZzxGmYneXJXcaA3KbaBcNTpE3+uyjiX1ey0kZPs= Subject key identifier: 53:A1:1A:DD:D1:B5:C7:A0:5C:79:7D:6E:9F:CA:8A:E1:54:BA:CB:E5 Authority key identifier: E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A Certificate issuer: /CN=A9117602/serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft Manifest number: F5 Signing time: Fri 13 Jun 2025 04:10:57 +0000 Manifest this update: Fri 13 Jun 2025 04:10:57 +0000 Manifest next update: Fri 20 Jun 2025 04:10:57 +0000 Files and hashes: 1: 5v6wYDITaH99TA3YxdHl8ycflmo.crl (hash: Hc7szQBAtW7i1Jdevf32V9NN+/7qG432B7IPQYkVKCg=) 2: 1EF0CB38CEFB11EE9D1FB686C4F9AE02.roa (hash: TdWbrQouM5tMsxDZgyF71MAPlIDYzdDMiQL7lgFXRP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117602, serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A Validity Not Before: Jun 13 04:10:57 2025 GMT Not After : Jun 20 04:10:57 2025 GMT Subject: CN=684ba4d1-6873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ea:b4:db:93:18:06:9f:52:3e:44:6a:b1:61: 1a:43:87:24:d8:c7:b2:29:29:1d:c0:f2:ce:0a:d1: 3f:2a:8b:ad:24:de:f6:a4:e1:1e:f1:4c:f0:68:12: eb:f7:75:e9:69:c4:56:d5:76:93:9f:c7:ab:61:ca: 82:37:e1:56:7b:80:38:13:d5:46:0e:7d:57:72:cd: 6c:cb:3b:15:ce:87:98:c6:a1:75:86:81:f2:a3:b2: e5:1c:2e:b6:61:3b:3e:07:02:06:de:de:6c:fe:50: a6:88:c6:f1:ae:04:d2:3a:30:6f:74:ab:23:97:ff: 70:e3:56:63:a4:6f:f7:c6:6e:61:9d:d2:7c:6f:3e: ec:58:0b:14:f2:94:04:a0:54:c8:d0:96:58:f6:45: a9:c2:fc:4f:96:26:f0:47:4b:01:2c:d6:46:c2:10: 9e:f8:d7:26:15:32:6e:9f:4c:e0:42:aa:96:af:e8: fc:df:8b:77:5e:5d:f9:c0:fa:13:5d:51:d5:28:20: 72:7f:73:14:a5:63:93:6a:28:6d:8e:9e:84:52:bc: 09:50:c9:80:ce:4f:d1:8a:82:73:97:37:51:dd:af: 7f:e1:6c:ee:a2:49:69:b9:27:0f:0a:a4:48:75:ec: fd:70:4c:29:74:b3:31:04:a0:b3:6d:b5:fc:56:8c: 69:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A1:1A:DD:D1:B5:C7:A0:5C:79:7D:6E:9F:CA:8A:E1:54:BA:CB:E5 X509v3 Authority Key Identifier: keyid:E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:9c:85:25:6f:ad:e6:11:61:74:b1:1a:93:4c:16:eb:60:96: 5f:7f:4c:0a:58:8f:ac:3e:ec:fe:b1:3f:61:69:74:53:2e:3a: 2c:15:c4:39:61:69:5d:08:d1:e1:23:c4:14:01:32:2b:f6:5b: c3:82:11:3d:8f:60:f2:c4:12:70:47:f2:d4:d3:f7:47:94:56: 30:dc:c1:ee:21:df:c6:c7:01:04:fd:29:65:57:6e:7e:5f:8c: c9:5b:2f:88:d5:9f:eb:9f:41:f0:8e:04:73:8a:d3:4a:ed:fe: 9c:bb:e8:79:ca:30:4f:77:1c:ab:63:4c:64:5b:16:ee:d9:7a: 08:e4:9e:f4:8c:09:9b:e0:a0:c2:9b:c6:d8:d0:52:9a:4f:5d: 46:0b:d1:1b:13:fd:a6:e8:79:ae:a3:a2:6a:d3:cb:a1:ee:ef: 36:ab:8e:20:9a:13:cd:f1:f2:d8:68:15:d1:41:0d:58:5a:3c: 00:87:0b:b8:0b:99:a0:6a:3f:3d:8e:6a:f6:ec:f0:9d:bd:38: d5:3b:7c:d5:81:f1:b0:ae:a9:c8:bf:8b:13:90:a0:cd:2e:59: c8:ff:66:d9:fe:81:f8:d8:57:ef:54:38:b0:ed:e4:82:a6:7d: ef:0e:d5:4a:bc:3c:1c:b4:3f:71:0c:fd:d3:8c:33:d2:78:d1: f2:61:86:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc2MDIxMTAvBgNVBAUTKEU2RkVCMDYwMzIxMzY4N0Y3RDRDMEREOEM1RDFFNUYz MjcxRjk2NkEwHhcNMjUwNjEzMDQxMDU3WhcNMjUwNjIwMDQxMDU3WjAYMRYwFAYD VQQDEw02ODRiYTRkMS02ODczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOq025MYBp9SPkRqsWEaQ4ck2MeyKSkdwPLOCtE/KoutJN72pOEe8UzwaBLr 93XpacRW1XaTn8erYcqCN+FWe4A4E9VGDn1Xcs1syzsVzoeYxqF1hoHyo7LlHC62 YTs+BwIG3t5s/lCmiMbxrgTSOjBvdKsjl/9w41ZjpG/3xm5hndJ8bz7sWAsU8pQE oFTI0JZY9kWpwvxPlibwR0sBLNZGwhCe+NcmFTJun0zgQqqWr+j834t3Xl35wPoT XVHVKCByf3MUpWOTaihtjp6EUrwJUMmAzk/RioJzlzdR3a9/4WzuoklpuScPCqRI dez9cEwpdLMxBKCzbbX8Voxp0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOhGt3R tcegXHl9bp/KiuFUusvlMB8GA1UdIwQYMBaAFOb+sGAyE2h/fUwN2MXR5fMnH5Zq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzYwMi9BRUJDNUNGNkNF RkExMUVFOTdGODhDODVDNEY5QUUwMi81djZ3WURJVGFIOTlUQTNZeGRIbDh5Y2Zs bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2NndZRElUYUg5OVRBM1l4ZEhsOHljZmxtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzYwMi9BRUJDNUNGNkNFRkExMUVFOTdGODhDODVDNEY5QUUwMi81djZ3WURJVGFI OTlUQTNZeGRIbDh5Y2ZsbW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJnIUlb63mEWF0sRqTTBbrYJZff0wKWI+sPuz+sT9haXRTLjosFcQ5 YWldCNHhI8QUATIr9lvDghE9j2DyxBJwR/LU0/dHlFYw3MHuId/GxwEE/SllV25+ X4zJWy+I1Z/rn0HwjgRzitNK7f6cu+h5yjBPdxyrY0xkWxbu2XoI5J70jAmb4KDC m8bY0FKaT11GC9EbE/2m6Hmuo6Jq08uh7u82q44gmhPN8fLYaBXRQQ1YWjwAhwu4 C5mgaj89jmr27PCdvTjVO3zVgfGwrqnIv4sTkKDNLlnI/2bZ/oH42FfvVDiw7eSC pn3vDtVKvDwctD9xDP3TjDPSeNHyYYbw -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:58 2025 by rpki-client