$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft File: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json) Hash identifier: Kwy0wGxorInyLDtIAAubpw3vgMavhbcvSVTvXgq5Vt4= Subject key identifier: 41:79:06:0E:41:4F:31:8A:3E:16:A4:D5:B0:0A:4E:76:0D:BF:86:B0 Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 Certificate issuer: /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft Manifest number: 0153 Signing time: Fri 13 Jun 2025 03:07:18 +0000 Manifest this update: Fri 13 Jun 2025 03:07:17 +0000 Manifest next update: Fri 20 Jun 2025 03:07:17 +0000 Files and hashes: 1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: JXUFSDPOk+H3EXrXLY2yAOerGkUicYIcFHpPJ0KzAfQ=) 2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: HxWrs2XE/yxdbhgHCsYXC3cP1Nukb/SzqytOwhYHUgs=) 3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: zhWHaUx74UFv//O6sI95zwvuuZgRyOVSokAfykLA4G4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Validity Not Before: Jun 13 03:07:17 2025 GMT Not After : Jun 20 03:07:17 2025 GMT Subject: CN=684b95e5-01b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1e:ad:65:5e:6e:43:6c:3a:53:85:89:e2:9f: 1a:f7:23:f4:fa:4e:66:dd:40:03:11:af:ad:33:7a: 18:00:74:dd:ee:9e:fc:1e:2e:34:d4:e9:1d:d8:8a: 4d:99:7a:43:20:9b:57:99:ec:e4:33:04:e6:2b:0a: 50:58:65:81:67:ed:33:16:55:b3:73:52:0c:a8:ad: bc:d6:de:b1:64:1f:b0:6a:67:55:b8:2f:41:b6:1e: d2:ae:12:44:5c:fc:5a:73:af:2a:bb:3e:69:65:9c: b9:29:0d:67:08:4d:df:9f:0f:80:4f:9d:ba:c9:b9: 40:f3:eb:fb:3c:68:84:0d:d2:09:15:50:4b:dd:b9: 9e:4f:6a:75:90:a7:8d:04:bd:e5:ed:fe:5c:f3:62: c5:dd:00:be:a0:74:1d:81:46:e0:d2:b3:cf:50:bf: 2a:a1:2f:92:1d:6f:bf:da:09:80:14:1f:7d:96:ec: 64:05:ee:5c:7f:14:08:20:69:1e:90:f3:ca:71:0b: 98:ff:04:31:3e:fb:d2:52:7c:43:62:fb:c9:9a:bd: be:ae:5b:9a:34:1d:64:b9:6b:f1:51:f2:ef:67:3f: 04:4f:08:76:04:af:26:73:b1:3c:ac:8b:1a:02:12: 5c:f4:34:b0:73:3c:a3:f7:97:61:92:18:ae:d4:be: 66:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:79:06:0E:41:4F:31:8A:3E:16:A4:D5:B0:0A:4E:76:0D:BF:86:B0 X509v3 Authority Key Identifier: keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:20:e1:75:a2:8c:30:90:18:fe:91:35:eb:c9:f5:25:00:15: 5b:c3:8b:5d:83:8f:e1:23:00:aa:a5:20:d4:cc:16:0f:92:45: 42:aa:32:03:a2:13:f5:7b:ee:3e:48:5c:ee:4f:97:6a:1f:a3: 25:16:01:8e:64:f9:f2:e5:a7:60:9e:d7:0a:f8:d9:da:48:bd: 26:a4:b0:68:f4:fe:76:b0:cb:2a:78:eb:47:a8:06:61:23:ee: e0:c5:4e:27:44:cb:d7:1f:d9:c8:10:51:6e:16:a3:1c:b6:ef: ce:8d:70:4c:5a:9f:35:88:a1:e4:fb:18:d0:61:87:74:d2:04: 3e:a9:1a:5b:51:b0:4b:c5:00:d7:1c:6a:ad:89:ff:45:dc:64: 6e:74:95:28:d4:52:55:eb:3a:ce:92:6a:60:69:e8:bf:2d:72: 05:ce:7b:c1:13:96:e5:35:2f:ba:81:98:f1:79:28:20:b8:56: e0:bb:7f:ed:01:d9:36:72:45:cf:03:75:9d:88:6a:cd:d2:d1: 67:db:d2:d6:d8:0b:b1:c6:d6:18:86:0e:10:12:d7:4a:dd:84: d3:cc:0d:73:21:b5:a3:7a:b1:ff:d1:8a:2e:b1:00:8a:a1:f0: 92:1f:61:b2:59:0a:c0:e9:b7:cf:00:6d:85:68:5d:02:f2:59: 6b:d7:7e:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY3RTAxMTAvBgNVBAUTKEU2MUJFQzEzOTI4NjMyODNEQzk5RTJGRjkzMTU3NUEz MTgxQzI4MTgwHhcNMjUwNjEzMDMwNzE3WhcNMjUwNjIwMDMwNzE3WjAYMRYwFAYD VQQDEw02ODRiOTVlNS0wMWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3B6tZV5uQ2w6U4WJ4p8a9yP0+k5m3UADEa+tM3oYAHTd7p78Hi401Okd2IpN mXpDIJtXmezkMwTmKwpQWGWBZ+0zFlWzc1IMqK281t6xZB+wamdVuC9Bth7SrhJE XPxac68quz5pZZy5KQ1nCE3fnw+AT526yblA8+v7PGiEDdIJFVBL3bmeT2p1kKeN BL3l7f5c82LF3QC+oHQdgUbg0rPPUL8qoS+SHW+/2gmAFB99luxkBe5cfxQIIGke kPPKcQuY/wQxPvvSUnxDYvvJmr2+rluaNB1kuWvxUfLvZz8ETwh2BK8mc7E8rIsa AhJc9DSwczyj95dhkhiu1L5mbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEF5Bg5B TzGKPhak1bAKTnYNv4awMB8GA1UdIwQYMBaAFOYb7BOShjKD3Jni/5MVdaMYHCgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjdFMC9FNDE4OTkxMDQ1 OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01vUGNtZUxfa3hWMW94Z2NL QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVodnNFNUtHTW9QY21lTF9reFYxb3hnY0tCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjdFMC9FNDE4OTkxMDQ1OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01v UGNtZUxfa3hWMW94Z2NLQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQIOF1oowwkBj+kTXryfUlABVbw4tdg4/hIwCqpSDUzBYPkkVCqjID ohP1e+4+SFzuT5dqH6MlFgGOZPny5adgntcK+NnaSL0mpLBo9P52sMsqeOtHqAZh I+7gxU4nRMvXH9nIEFFuFqMctu/OjXBMWp81iKHk+xjQYYd00gQ+qRpbUbBLxQDX HGqtif9F3GRudJUo1FJV6zrOkmpgaei/LXIFznvBE5blNS+6gZjxeSgguFbgu3/t Adk2ckXPA3WdiGrN0tFn29LW2AuxxtYYhg4QEtdK3YTTzA1zIbWjerH/0YousQCK ofCSH2GyWQrA6bfPAG2FaF0C8llr134/ -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:20 2025 by rpki-client