$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft File: A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft (raw, json) Hash identifier: 5VUUbleqTyNtXihZVg6kIvgYlMGyScu7s9JVThb7VqQ= Subject key identifier: 63:BC:69:85:88:29:79:3B:47:0C:81:C7:70:87:F8:F6:A5:8E:F1:66 Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 Certificate issuer: /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft Manifest number: 6C Signing time: Thu 19 Jun 2025 06:17:24 +0000 Manifest this update: Thu 19 Jun 2025 06:17:23 +0000 Manifest next update: Thu 26 Jun 2025 06:17:23 +0000 Files and hashes: 1: A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl (hash: TC4/FlgLZwtrasE2x7IG3Gfl2FDu8nOjkhEHJc29ccs=) 2: 9B3FE178A7FA11EFA7886875C4F9AE02.roa (hash: wskyOCDE340iqc6+xbxJBMsRJGfe9vODWh/hz8Ga1HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Validity Not Before: Jun 19 06:17:23 2025 GMT Not After : Jun 26 06:17:23 2025 GMT Subject: CN=6853ab74-04c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ce:ca:5e:2f:84:32:17:e1:52:4d:6d:7d:0f: 4c:3c:46:a9:e2:2b:01:9f:83:91:ed:f3:7b:fa:f7: 98:33:ad:f1:ff:d2:25:29:6c:d4:7c:9f:3f:b2:41: da:26:56:72:f7:c0:05:af:86:93:d6:a2:47:8d:9f: 15:77:37:90:b7:13:46:e7:bc:e3:e0:75:26:6b:b0: 93:7b:31:48:bb:b7:0c:c7:c2:4c:c0:a6:c5:eb:e7: 3e:9f:d4:f6:44:dd:61:29:6f:a9:dc:26:94:fe:93: f2:3e:c6:0b:04:3e:e6:5f:7b:c8:bd:23:c2:28:fe: 41:da:f2:e0:d7:cd:c2:bb:d9:32:0e:c8:25:e5:89: 26:44:59:f8:55:d8:78:24:d3:ef:d9:d4:5a:59:9e: 44:c9:7a:f0:a9:1c:af:b4:d2:d8:8a:6d:ae:b3:49: 66:d1:f2:a9:2c:d3:08:f0:bf:40:88:20:1b:4b:e2: fa:78:7e:87:04:f1:40:bb:75:c2:28:42:36:f1:dc: b6:a3:0f:2e:6c:ff:d9:26:e3:5e:20:4f:b1:1f:cd: 7d:c0:25:81:68:a8:d4:62:a4:f9:29:41:16:93:4f: 53:a7:d6:2f:d5:94:e3:00:1b:4b:2c:e1:69:9a:f6: df:af:22:9b:ed:c1:b1:bc:5c:f1:00:ec:7f:07:95: 0c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BC:69:85:88:29:79:3B:47:0C:81:C7:70:87:F8:F6:A5:8E:F1:66 X509v3 Authority Key Identifier: keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:9e:65:2f:a8:a3:2b:fd:af:a7:59:6b:e9:c0:f7:0c:06:1b: 97:5d:55:12:01:cd:a9:36:c2:22:6b:9a:88:59:b3:25:74:39: 65:f8:9f:ba:89:d4:5a:46:24:30:b2:db:4b:f6:cb:b4:a8:ff: 03:18:11:38:18:74:d6:05:6b:16:a6:df:f4:41:01:46:49:48: 3a:5c:15:81:2b:f6:d4:09:0a:b4:4d:71:2e:25:59:df:ea:ee: c3:0e:a8:40:99:a4:e3:b6:97:24:88:a0:a2:7e:0a:f6:54:3f: c6:5c:33:14:e5:2f:c4:c6:00:36:e8:47:bc:0f:ab:cd:41:f0: 60:09:58:1f:68:ae:fb:fc:8f:cb:49:91:9d:3c:48:53:19:a5: 6a:10:f7:ec:88:7b:f2:81:c3:84:88:53:18:8e:82:6b:e3:31: 24:14:3a:be:9b:93:f2:93:41:ab:4b:46:bc:dd:a7:5d:fe:9e: dd:11:8e:fd:d7:72:c8:9f:58:aa:4a:b8:37:81:29:c7:1f:3c: 1e:e3:00:4a:81:c3:b1:ca:87:1a:a3:ac:c8:63:d5:fc:55:00: 8b:f5:d3:7a:1f:a3:73:52:4c:28:34:8c:76:01:b7:50:f6:e8: 01:e8:57:cf:00:3b:d5:ad:35:46:31:02:1f:80:83:cb:41:3d: eb:0c:20:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODBGNzExMC8GA1UEBRMoMDM5MUQ5QTcwRTg5M0U3NTFCQzYxMjg5QzU0NDE3Qjg3 QTEwNDU1OTAeFw0yNTA2MTkwNjE3MjNaFw0yNTA2MjYwNjE3MjNaMBgxFjAUBgNV BAMTDTY4NTNhYjc0LTA0YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZzspeL4QyF+FSTW19D0w8RqniKwGfg5Ht83v695gzrfH/0iUpbNR8nz+yQdom VnL3wAWvhpPWokeNnxV3N5C3E0bnvOPgdSZrsJN7MUi7twzHwkzApsXr5z6f1PZE 3WEpb6ncJpT+k/I+xgsEPuZfe8i9I8Io/kHa8uDXzcK72TIOyCXliSZEWfhV2Hgk 0+/Z1FpZnkTJevCpHK+00tiKba6zSWbR8qks0wjwv0CIIBtL4vp4focE8UC7dcIo Qjbx3LajDy5s/9km414gT7EfzX3AJYFoqNRipPkpQRaTT1On1i/VlOMAG0ss4Wma 9t+vIpvtwbG8XPEA7H8HlQzbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUY7xphYgp eTtHDIHHcIf49qWO8WYwHwYDVR0jBBgwFoAUA5HZpw6JPnUbxhKJxUQXuHoQRVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4MEY3L0E3RUJDMUQyQTdG ODExRUZCQjQ0RjM3MUM0RjlBRTAyL0E1SFpwdzZKUG5VYnhoS0p4VVFYdUhvUVJW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTVIWnB3NkpQblVieGhLSnhVUVh1SG9RUlZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 MEY3L0E3RUJDMUQyQTdGODExRUZCQjQ0RjM3MUM0RjlBRTAyL0E1SFpwdzZKUG5V YnhoS0p4VVFYdUhvUVJWay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFmeZS+ooyv9r6dZa+nA9wwGG5ddVRIBzak2wiJrmohZsyV0OWX4n7qJ 1FpGJDCy20v2y7So/wMYETgYdNYFaxam3/RBAUZJSDpcFYEr9tQJCrRNcS4lWd/q 7sMOqECZpOO2lySIoKJ+CvZUP8ZcMxTlL8TGADboR7wPq81B8GAJWB9orvv8j8tJ kZ08SFMZpWoQ9+yIe/KBw4SIUxiOgmvjMSQUOr6bk/KTQatLRrzdp13+nt0Rjv3X csifWKpKuDeBKccfPB7jAEqBw7HKhxqjrMhj1fxVAIv103ofo3NSTCg0jHYBt1D2 6AHoV88AO9WtNUYxAh+Ag8tBPesMINc= -----END CERTIFICATE-----Generated at Sat Jun 21 08:08:58 2025 by rpki-client