$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json) Hash identifier: B3NCpz0SrVtjkCynvzXlLdy5uKEe+KI5fEY8Ib8mDt0= Subject key identifier: F5:F4:9D:2F:A7:96:FC:0C:56:AF:70:26:1E:62:6D:2C:88:9A:B7:0F Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Certificate serial: 0824 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft Manifest number: 07D7 Signing time: Thu 12 Jun 2025 21:10:37 +0000 Manifest this update: Thu 12 Jun 2025 21:10:36 +0000 Manifest next update: Thu 19 Jun 2025 21:10:36 +0000 Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: 4jBVWWbPsZAlxvcu+0isWy4AjdUGvZLNrU7xcS5e0iY=) 2: 9D00ABAC089C11F09075A534C4F9AE02.roa (hash: HmTougKy3rF1ntb28J+0HCxyJCj3J7caTv76b+CnSpw=) 3: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: 58z0sDsYRtdYBAtwDhNvP7kyEQJboZJS4GpwJLh2ing=) 4: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: gdVUdTDJS2HzCLE0SH5abxwvNMrpuz9i+05KM/O5dKM=) 5: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: d4eF712UMcuWBXICMHSbDq1rVUXEx57Lk10/0qmDX9M=) 6: 06166DF4DC6D11EFBD34F40EC4F9AE02.roa (hash: zAVhFCx+Y0sm2rtgFn1OnJdCE1tYjDSThjKJO14bltw=) 7: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: oPWHOSVVHxMTlEOgiAm0tO2SzI3zA9mMs78DXNw+B34=) 8: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: ewzgLIZLx9Y5nPTQhL+AITVEb8oh3TwTplFpZhdDOMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2084 (0x824) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Validity Not Before: Jun 12 21:10:36 2025 GMT Not After : Jun 19 21:10:36 2025 GMT Subject: CN=684b424d-8e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f7:e9:c4:cf:0f:c2:4a:ac:76:19:e0:33:ab: 2e:7c:b0:3c:8d:aa:ff:21:76:ef:0a:89:0d:f3:54: e3:15:d3:56:28:73:85:49:16:37:96:44:88:e1:80: fd:56:8d:fe:45:af:07:e9:88:0c:f6:67:ff:20:c0: 7e:18:4a:6c:a8:86:d7:86:4e:59:aa:96:a0:3f:ef: 3a:41:cd:a3:53:cf:a5:c0:e9:66:a7:0d:35:df:75: c8:bf:b0:53:b0:5b:fd:5a:64:23:00:f0:0c:bd:72: ca:30:2f:f9:9c:87:5f:56:76:9f:01:47:bf:48:1a: d8:19:94:db:9c:f8:ef:f1:89:53:9c:87:48:50:be: 62:7b:d9:17:90:4d:ab:5b:71:db:6b:67:7f:3b:e9: 6d:a5:c4:06:57:40:f8:b4:d7:8a:e4:be:d3:be:2d: c4:43:63:6d:b9:0c:3a:ab:99:a0:71:7a:ac:e8:48: bf:2c:a7:1d:ad:53:5f:c7:be:83:34:ae:5c:1e:56: 3d:c3:7c:f1:14:25:65:e4:63:05:eb:a3:ed:7d:b1: dc:4b:b9:25:e6:0f:ac:d7:2f:67:9b:e5:64:ac:68: b9:b6:3e:07:a2:6d:43:3a:60:bd:58:e1:73:ac:80: 11:1c:2f:3d:72:8c:e7:35:e1:65:ea:c7:1b:bf:f2: b5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F4:9D:2F:A7:96:FC:0C:56:AF:70:26:1E:62:6D:2C:88:9A:B7:0F X509v3 Authority Key Identifier: keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b7:a3:2d:52:09:8d:e9:54:69:1b:de:53:dd:d6:4c:7e:58: e1:72:4d:0d:63:7c:17:74:80:8f:ff:58:d0:0d:69:d9:db:e1: 8e:74:9c:fc:6f:e4:3e:43:d7:a2:fc:3e:a6:cf:82:42:24:e7: b2:01:1b:28:5b:65:51:5a:b8:5f:a4:04:d8:79:e5:3d:f5:af: ee:ca:28:ca:95:ab:30:88:bd:3f:0f:59:0f:12:1f:08:63:c5: 5a:a4:5d:9a:c3:46:40:84:40:0a:cd:c8:3c:52:82:75:c0:da: 96:93:f0:aa:23:ca:13:e2:0c:86:30:de:70:27:a5:fc:ec:63: 3a:b3:cd:fc:2b:a2:c0:6e:80:5b:09:fe:4c:1c:67:0b:3c:34: f0:6d:c8:91:32:30:da:4e:be:e0:56:af:34:d1:45:f5:bf:5d: 4d:b3:0f:d8:90:33:3b:ec:10:b0:35:8d:8b:c0:39:0f:cd:78: a8:26:09:10:ed:7f:e9:f6:27:1f:b5:e9:c5:36:84:fb:75:63: 7d:3c:09:61:84:76:b0:74:cd:4f:1c:67:f3:fe:4e:b0:de:2b: 11:7c:77:54:a2:1c:f2:f1:c1:0f:37:be:cf:71:25:d9:9b:56: 93:20:fe:65:a8:62:b4:21:16:c6:40:7c:b5:ac:70:46:88:f4: 08:a8:4d:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE QzNDQkNENjMwHhcNMjUwNjEyMjExMDM2WhcNMjUwNjE5MjExMDM2WjAYMRYwFAYD VQQDEw02ODRiNDI0ZC04ZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/fpxM8PwkqsdhngM6sufLA8jar/IXbvCokN81TjFdNWKHOFSRY3lkSI4YD9 Vo3+Ra8H6YgM9mf/IMB+GEpsqIbXhk5ZqpagP+86Qc2jU8+lwOlmpw0133XIv7BT sFv9WmQjAPAMvXLKMC/5nIdfVnafAUe/SBrYGZTbnPjv8YlTnIdIUL5ie9kXkE2r W3Hba2d/O+ltpcQGV0D4tNeK5L7Tvi3EQ2NtuQw6q5mgcXqs6Ei/LKcdrVNfx76D NK5cHlY9w3zxFCVl5GMF66PtfbHcS7kl5g+s1y9nm+VkrGi5tj4Hom1DOmC9WOFz rIARHC89coznNeFl6scbv/K1LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPX0nS+n lvwMVq9wJh5ibSyImrcPMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3 M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDFFQS85QzkzMkI0ODE3M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThj SUVSRG44T1FyVmJjUEx6V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvt6MtUgmN6VRpG95T3dZMfljhck0NY3wXdICP/1jQDWnZ2+GOdJz8 b+Q+Q9ei/D6mz4JCJOeyARsoW2VRWrhfpATYeeU99a/uyijKlaswiL0/D1kPEh8I Y8VapF2aw0ZAhEAKzcg8UoJ1wNqWk/CqI8oT4gyGMN5wJ6X87GM6s838K6LAboBb Cf5MHGcLPDTwbciRMjDaTr7gVq800UX1v11Nsw/YkDM77BCwNY2LwDkPzXioJgkQ 7X/p9icftenFNoT7dWN9PAlhhHawdM1PHGfz/k6w3isRfHdUohzy8cEPN77PcSXZ m1aTIP5lqGK0IRbGQHy1rHBGiPQIqE25 -----END CERTIFICATE-----Generated at Sat Jun 14 19:11:52 2025 by rpki-client