$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft File: 5G6s3CFDhcFCA0Z05Gxo57vilSU.mft (raw, json) Hash identifier: k1e0/wWNvMF95IgHUeWJDoiZs17ZoKDJ2Sn2F5gLtf4= Subject key identifier: 05:3B:F8:25:D2:1A:14:4B:B8:28:5B:F2:E5:98:54:6A:59:72:5A:17 Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25 Certificate issuer: /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft Manifest number: DA Signing time: Sun 15 Jun 2025 04:42:33 +0000 Manifest this update: Sun 15 Jun 2025 04:42:33 +0000 Manifest next update: Sun 22 Jun 2025 04:42:33 +0000 Files and hashes: 1: 5G6s3CFDhcFCA0Z05Gxo57vilSU.crl (hash: 3pwUWNB8hUJ+GOQcCQwbxmgRWC5jdvkP+buUxUuVTTo=) 2: 44B42A0EFDE511EEAD5A6432C4F9AE02.roa (hash: N/lCfyLCfQ6pGJZnFWlWQxmi4U70D1DfmNioR3drqK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91372E6, serialNumber=E46EACDC214385C142034674E46C68E7BBE29525 Validity Not Before: Jun 15 04:42:33 2025 GMT Not After : Jun 22 04:42:33 2025 GMT Subject: CN=684e4f39-a8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:da:81:78:b7:e6:60:bc:72:1c:8d:90:ee:0c: 74:b0:82:13:20:c4:f5:01:9d:5f:cd:c1:c0:40:7c: 21:3b:76:3d:24:b3:6d:12:85:76:56:7b:2b:4d:84: ac:00:ff:d7:e1:24:76:94:e5:16:a4:95:dc:73:ca: 6d:cd:b7:1c:a2:55:de:e9:5e:29:a3:af:f1:5c:ac: 99:ff:29:63:f0:b0:cd:9c:94:36:61:ab:2f:bd:fa: ab:dd:6d:56:8b:d6:ce:4b:2c:ee:08:ab:8c:4e:8b: a9:3f:05:b4:57:ef:64:82:48:83:d2:f8:46:51:18: 10:f7:f0:6e:03:1a:f5:91:ef:19:d6:a8:aa:53:b1: 18:30:e4:80:34:fb:7d:53:ee:c1:ef:e2:79:04:31: 96:ac:da:4b:80:df:8a:0c:9f:2a:d7:0d:f7:fa:08: be:57:5d:fe:04:31:ee:42:b8:99:a0:9f:5c:26:b6: 3f:00:53:2a:3d:df:72:33:f6:96:74:0a:d6:21:d9: e6:98:75:af:e0:f6:fa:2c:70:5b:b1:2e:61:ab:36: 9f:3a:36:a2:d3:58:4b:59:ef:f9:37:36:cc:e6:94: 92:c2:5f:c6:43:2a:3c:4a:5f:64:fb:86:2e:ab:af: 24:3c:9a:1f:33:7c:94:d1:2a:32:8a:6a:f7:da:21: d2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3B:F8:25:D2:1A:14:4B:B8:28:5B:F2:E5:98:54:6A:59:72:5A:17 X509v3 Authority Key Identifier: keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:7b:3b:72:43:f5:5c:b5:10:82:59:27:9e:48:15:d1:e7:81: 7e:4e:cc:f8:f1:68:24:cc:c4:a7:c6:a4:4c:74:b3:71:54:5d: b5:af:02:df:ac:b7:1f:35:99:f0:72:9e:68:f5:6b:a9:8b:03: 7d:e7:b2:dd:e6:cc:2d:c8:42:2b:b8:cd:ea:1c:dc:b5:d0:87: 16:fa:eb:48:35:da:6c:7b:b3:ce:54:64:41:b7:92:19:70:da: 25:6a:c9:23:1a:64:72:bd:28:6e:c6:bb:a7:f9:1c:9e:c0:c5: 85:ce:f8:30:16:a4:c9:2e:e5:4e:fa:15:96:ed:c0:cf:40:f4: 58:48:77:20:41:7d:44:e9:88:8f:42:29:6a:91:8e:03:29:56: 81:1d:a8:26:b4:a8:32:7d:ac:8b:56:ed:50:91:78:df:1d:c4: 86:99:9b:9a:75:0e:f2:1b:aa:da:16:97:a9:f1:ea:cd:ba:0d: 4d:69:03:50:de:af:c5:5f:90:d7:f6:d4:83:fd:db:fb:f2:ef: 49:a4:81:e9:93:1f:41:c1:63:e7:36:ce:e2:47:95:3b:38:8f: a7:3a:73:6d:cf:a2:14:28:07:2c:47:0e:2d:09:ba:52:cd:f2: d2:cf:08:77:7e:4e:31:22:98:79:82:77:a2:50:5a:db:1f:3c: fd:97:fe:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcyRTYxMTAvBgNVBAUTKEU0NkVBQ0RDMjE0Mzg1QzE0MjAzNDY3NEU0NkM2OEU3 QkJFMjk1MjUwHhcNMjUwNjE1MDQ0MjMzWhcNMjUwNjIyMDQ0MjMzWjAYMRYwFAYD VQQDEw02ODRlNGYzOS1hOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtqBeLfmYLxyHI2Q7gx0sIITIMT1AZ1fzcHAQHwhO3Y9JLNtEoV2VnsrTYSs AP/X4SR2lOUWpJXcc8ptzbccolXe6V4po6/xXKyZ/ylj8LDNnJQ2Yasvvfqr3W1W i9bOSyzuCKuMToupPwW0V+9kgkiD0vhGURgQ9/BuAxr1ke8Z1qiqU7EYMOSANPt9 U+7B7+J5BDGWrNpLgN+KDJ8q1w33+gi+V13+BDHuQriZoJ9cJrY/AFMqPd9yM/aW dArWIdnmmHWv4Pb6LHBbsS5hqzafOjai01hLWe/5NzbM5pSSwl/GQyo8Sl9k+4Yu q68kPJofM3yU0Soyimr32iHSMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAU7+CXS GhRLuChb8uWYVGpZcloXMB8GA1UdIwQYMBaAFORurNwhQ4XBQgNGdORsaOe74pUl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzJFNi9GMzU5MDgyNEZE RTMxMUVFQUE3NzdEMTFDNEY5QUUwMi81RzZzM0NGRGhjRkNBMFowNUd4bzU3dmls U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNnMzQ0ZEaGNGQ0EwWjA1R3hvNTd2aWxTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzJFNi9GMzU5MDgyNEZERTMxMUVFQUE3NzdEMTFDNEY5QUUwMi81RzZzM0NGRGhj RkNBMFowNUd4bzU3dmlsU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5eztyQ/VctRCCWSeeSBXR54F+Tsz48WgkzMSnxqRMdLNxVF21rwLf rLcfNZnwcp5o9WupiwN957Ld5swtyEIruM3qHNy10IcW+utINdpse7POVGRBt5IZ cNolaskjGmRyvShuxrun+RyewMWFzvgwFqTJLuVO+hWW7cDPQPRYSHcgQX1E6YiP QilqkY4DKVaBHagmtKgyfayLVu1QkXjfHcSGmZuadQ7yG6raFpep8erNug1NaQNQ 3q/FX5DX9tSD/dv78u9JpIHpkx9BwWPnNs7iR5U7OI+nOnNtz6IUKAcsRw4tCbpS zfLSzwh3fk4xIph5gneiUFrbHzz9l/5+ -----END CERTIFICATE-----Generated at Sun Jun 15 10:00:29 2025 by rpki-client