$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft File: 5G4YncjpEKGrvi42TdCBd1zkhGA.mft (raw, json) Hash identifier: yaUJOWrOL+l1FvHOVQY64PJs9JT0RHBx+jhRcaU0ThQ= Subject key identifier: 54:8C:11:0B:91:7E:E5:E9:C9:A0:57:70:F7:C4:A4:A9:E3:D3:61:B8 Authority key identifier: E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 Certificate issuer: /CN=A9135B44/serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft Manifest number: 020F Signing time: Sun 15 Jun 2025 01:41:17 +0000 Manifest this update: Sun 15 Jun 2025 01:41:16 +0000 Manifest next update: Sun 22 Jun 2025 01:41:16 +0000 Files and hashes: 1: 5G4YncjpEKGrvi42TdCBd1zkhGA.crl (hash: 8Uxzv58PTmbs5p8l1qmSUiCSNIUMjScXM6fILmHnICk=) 2: D4B06AAA3A6E11ED8266115DC4F9AE02.roa (hash: rXyXJ/J6rVFIkAmCNmdDPvJdD/VKGdNuveHL3e4vBN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135B44, serialNumber=E46E189DC8E910A1ABBE2E364DD081775CE48460 Validity Not Before: Jun 15 01:41:16 2025 GMT Not After : Jun 22 01:41:16 2025 GMT Subject: CN=684e24bc-b5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:35:cc:9b:86:90:c0:89:4e:25:a6:a0:46:f8: bf:c5:ed:31:75:45:ec:59:ca:50:6b:34:5e:c1:f2: c5:c0:29:c9:26:c3:b6:25:2d:a9:8d:e3:54:7c:e2: 4f:3b:96:79:2b:16:07:91:0f:12:6d:fe:22:ab:88: 97:6d:8c:1a:ef:ba:8b:59:dc:e1:06:b9:3e:ac:4d: 1b:4c:f4:fc:7d:ce:52:eb:b6:97:3e:71:30:3f:81: 9b:2b:6c:24:2e:48:bb:22:1d:6c:59:53:1e:cb:3d: e9:83:14:02:1a:3d:25:2d:82:ee:09:8d:5d:25:3a: 1f:9f:1b:a6:ca:cd:8a:85:70:d1:cf:75:45:21:c2: ab:a7:cd:54:6d:6d:f6:1f:31:ae:5e:99:62:66:f5: 8c:6c:43:17:13:89:db:e0:18:03:91:81:4e:b7:ee: 44:ea:bf:88:31:29:f8:20:2f:2d:7c:d7:98:56:5e: cf:33:fa:07:8a:34:8a:55:3b:e8:de:d6:f3:cb:2e: 42:16:f2:ca:a4:c7:8f:58:f7:ad:04:5c:fc:c5:ab: ca:4d:c4:e8:5e:bb:de:28:39:53:78:89:5d:67:d2: ef:3f:e8:36:1f:2a:4f:37:f2:db:46:de:02:df:73: fa:95:20:28:33:1a:f3:7f:5b:3a:9e:a8:4a:ad:ba: 9c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8C:11:0B:91:7E:E5:E9:C9:A0:57:70:F7:C4:A4:A9:E3:D3:61:B8 X509v3 Authority Key Identifier: keyid:E4:6E:18:9D:C8:E9:10:A1:AB:BE:2E:36:4D:D0:81:77:5C:E4:84:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G4YncjpEKGrvi42TdCBd1zkhGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B44/AD0D61F83A6C11ED9941F55CC4F9AE02/5G4YncjpEKGrvi42TdCBd1zkhGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:02:51:9a:01:c5:17:04:8f:ed:37:b3:61:c7:9d:e3:e8:7f: 26:66:5a:04:4a:ea:04:c6:9d:90:b5:dc:20:2d:76:56:5a:20: 44:80:41:17:fc:e1:a5:0a:1c:33:a4:a3:0f:5f:9c:1f:93:4e: af:eb:cf:1e:74:39:fe:0e:66:b4:4e:b9:9c:9f:2a:da:1f:c6: 8c:2b:10:eb:aa:54:1d:40:be:a9:5a:42:9b:8a:79:44:8c:74: dc:9a:b4:08:f5:a6:37:d0:69:9f:19:90:31:e5:65:4a:de:33: fa:6d:08:ce:64:09:35:3d:a1:82:58:ff:54:c0:ea:73:0f:b0: c2:a3:28:54:d3:fb:06:8f:61:b0:d7:a5:61:a5:3d:20:a3:28: 00:87:42:4a:ac:97:29:2c:b1:a3:fd:99:32:a7:30:f8:66:3f: 09:61:9b:61:48:9f:58:40:83:55:ff:55:eb:e8:97:7e:41:da: d4:38:71:e0:0f:81:c9:c6:c8:60:62:41:9f:5c:27:70:31:8b: fd:58:6f:8a:d9:bf:09:24:78:42:1d:87:e9:48:e4:36:5b:54: 59:a8:d2:13:4b:86:31:dd:f4:3e:b7:fa:71:37:f4:2e:6a:30: 4d:47:25:61:b8:28:8c:83:19:48:5b:2d:af:35:9a:1a:b0:19: f4:38:e4:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVCNDQxMTAvBgNVBAUTKEU0NkUxODlEQzhFOTEwQTFBQkJFMkUzNjRERDA4MTc3 NUNFNDg0NjAwHhcNMjUwNjE1MDE0MTE2WhcNMjUwNjIyMDE0MTE2WjAYMRYwFAYD VQQDEw02ODRlMjRiYy1iNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzXMm4aQwIlOJaagRvi/xe0xdUXsWcpQazRewfLFwCnJJsO2JS2pjeNUfOJP O5Z5KxYHkQ8Sbf4iq4iXbYwa77qLWdzhBrk+rE0bTPT8fc5S67aXPnEwP4GbK2wk Lki7Ih1sWVMeyz3pgxQCGj0lLYLuCY1dJTofnxumys2KhXDRz3VFIcKrp81UbW32 HzGuXpliZvWMbEMXE4nb4BgDkYFOt+5E6r+IMSn4IC8tfNeYVl7PM/oHijSKVTvo 3tbzyy5CFvLKpMePWPetBFz8xavKTcToXrveKDlTeIldZ9LvP+g2HypPN/LbRt4C 33P6lSAoMxrzf1s6nqhKrbqcawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSMEQuR fuXpyaBXcPfEpKnj02G4MB8GA1UdIwQYMBaAFORuGJ3I6RChq74uNk3QgXdc5IRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0NC9BRDBENjFGODNB NkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVLR3J2aTQyVGRDQmQxemto R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNFluY2pwRUtHcnZpNDJUZENCZDF6a2hHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUI0NC9BRDBENjFGODNBNkMxMUVEOTk0MUY1NUNDNEY5QUUwMi81RzRZbmNqcEVL R3J2aTQyVGRDQmQxemtoR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHAlGaAcUXBI/tN7Nhx53j6H8mZloESuoExp2QtdwgLXZWWiBEgEEX /OGlChwzpKMPX5wfk06v688edDn+Dma0TrmcnyraH8aMKxDrqlQdQL6pWkKbinlE jHTcmrQI9aY30GmfGZAx5WVK3jP6bQjOZAk1PaGCWP9UwOpzD7DCoyhU0/sGj2Gw 16VhpT0goygAh0JKrJcpLLGj/ZkypzD4Zj8JYZthSJ9YQINV/1Xr6Jd+QdrUOHHg D4HJxshgYkGfXCdwMYv9WG+K2b8JJHhCHYfpSOQ2W1RZqNITS4Yx3fQ+t/pxN/Qu ajBNRyVhuCiMgxlIWy2vNZoasBn0OOQ1 -----END CERTIFICATE-----Generated at Sun Jun 15 09:36:51 2025 by rpki-client