$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft File: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft (raw, json) Hash identifier: +fIifiuAD7Jtn+oElNRE1pfBNQOwJI/7J4inyAoPXLo= Subject key identifier: F4:C1:D3:83:C3:59:6F:6E:17:68:0F:C7:51:BC:F6:96:DB:76:57:C1 Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 Certificate issuer: /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Certificate serial: 3497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft Manifest number: 3491 Signing time: Mon 16 Jun 2025 14:54:56 +0000 Manifest this update: Mon 16 Jun 2025 14:54:55 +0000 Manifest next update: Mon 23 Jun 2025 14:54:55 +0000 Files and hashes: 1: 5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl (hash: Z83RZ7e7EapP/Dp8nDx+yhAyGUdLRIl2Ris6k46uI68=) 2: A5C01D6ED15511EA904EF30BC4F9AE02.roa (hash: tieWSzu8lKOoBqQ293X6Mhk+ox3CzZ2+KgEe+KsaI+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 14:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13463 (0x3497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25 Validity Not Before: Jun 16 14:54:55 2025 GMT Not After : Jun 23 14:54:55 2025 GMT Subject: CN=68503040-7d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:1b:d0:b3:68:b1:18:74:e6:4e:53:c7:ad: d2:6d:b6:3c:1e:24:a1:18:0d:d1:64:fd:83:e2:03: b7:82:d6:06:02:9d:fd:1b:0d:11:77:9b:31:d2:fe: b3:33:a0:0b:3c:b5:81:0b:21:62:2e:22:e0:24:07: c4:31:e1:10:b0:26:24:5a:b9:93:88:77:b4:78:6f: 73:9e:9d:09:fa:70:03:17:2b:93:cd:93:23:43:98: 8a:72:31:42:93:9d:26:a6:5c:4b:f6:9f:b2:a4:e1: b9:f8:dd:ca:11:0a:17:b1:c7:e5:23:22:2b:bd:8d: f4:22:18:51:b3:28:f5:75:6c:73:45:77:79:da:9c: 34:96:f6:0e:0b:59:b9:bd:84:38:f6:54:76:ea:7f: cb:4a:43:00:ec:d5:6c:2f:62:9f:51:95:d6:e2:64: 08:b2:b2:e0:d6:9d:3a:25:f9:1c:8f:83:98:50:3f: 93:fd:24:a0:20:80:ae:a0:8a:68:49:7c:9b:c7:9c: a4:db:3d:5c:57:37:40:d4:5c:f9:17:e5:86:6d:2f: a5:69:1d:c8:67:fe:32:2f:51:c1:6f:94:af:cb:ad: f5:2f:51:4c:05:09:37:3c:3f:e9:c3:c1:e5:7f:de: 9a:52:30:fc:33:a4:e0:a3:b8:03:58:ce:33:f3:10: 03:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C1:D3:83:C3:59:6F:6E:17:68:0F:C7:51:BC:F6:96:DB:76:57:C1 X509v3 Authority Key Identifier: keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:20:c1:15:ae:b4:1f:58:48:ef:29:1e:3a:82:15:34:ae:e8: 8f:99:b1:d8:d3:ec:93:e6:ec:e1:7f:4d:b5:d3:89:91:8e:79: 7a:b8:e3:fb:12:05:a4:65:c8:75:c5:5d:20:12:33:45:b4:a4: bb:3d:9d:84:56:77:df:59:08:59:0f:3a:70:6d:f3:e3:d1:aa: 15:a6:7c:72:72:e9:38:2c:2c:08:a9:c5:39:eb:dc:f4:64:54: dc:ae:0c:21:45:e9:57:e7:d2:e5:4d:c6:60:3a:f3:51:f1:63: 14:4e:c1:c6:cd:8b:3c:99:07:95:c9:f5:99:b8:36:d8:61:99: 56:7c:23:c8:b9:b8:0f:09:ff:be:91:40:63:03:0d:cf:02:82: 05:cd:4f:a5:02:75:f6:cf:f5:ad:ea:21:da:61:13:57:b7:d7: 2e:15:a1:a9:8b:56:a7:d2:3b:3f:91:ff:04:0c:7d:bc:1a:64: d5:b6:94:3d:17:f5:01:3f:95:e4:57:38:9d:07:5b:ff:d6:fe: 55:8c:be:92:7c:04:91:cb:82:af:3e:11:c7:16:a3:9a:d4:62: 12:da:7c:c3:16:66:88:bb:fa:5e:ac:8f:7e:8d:4d:52:02:00: bf:84:a3:ee:82:1b:82:1b:d4:5e:d6:1b:7e:97:51:e6:7c:ec: 1f:7a:04:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE0N0ExMTAvBgNVBAUTKEU1MkQ3RjdGQkFBQzFGNzVBRkZBNzYyRURCM0YyODE2 MEJDRkJEMjUwHhcNMjUwNjE2MTQ1NDU1WhcNMjUwNjIzMTQ1NDU1WjAYMRYwFAYD VQQDEw02ODUwMzA0MC03ZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jsb0LNosRh05k5Tx63SbbY8HiShGA3RZP2D4gO3gtYGAp39Gw0Rd5sx0v6z M6ALPLWBCyFiLiLgJAfEMeEQsCYkWrmTiHe0eG9znp0J+nADFyuTzZMjQ5iKcjFC k50mplxL9p+ypOG5+N3KEQoXscflIyIrvY30IhhRsyj1dWxzRXd52pw0lvYOC1m5 vYQ49lR26n/LSkMA7NVsL2KfUZXW4mQIsrLg1p06Jfkcj4OYUD+T/SSgIICuoIpo SXybx5yk2z1cVzdA1Fz5F+WGbS+laR3IZ/4yL1HBb5Svy631L1FMBQk3PD/pw8Hl f96aUjD8M6Tgo7gDWM4z8xADjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTB04PD WW9uF2gPx1G89pbbdlfBMB8GA1UdIwQYMBaAFOUtf3+6rB91r/p2Lts/KBYLz70l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ3QS80QUYyMjFEQTFE OTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gzV3Ytbll1Mno4b0ZndlB2 U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVTMV9mN3FzSDNXdi1uWXUyejhvRmd2UHZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTQ3QS80QUYyMjFEQTFEOTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gz V3Ytbll1Mno4b0ZndlB2U1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOIMEVrrQfWEjvKR46ghU0ruiPmbHY0+yT5uzhf02104mRjnl6uOP7 EgWkZch1xV0gEjNFtKS7PZ2EVnffWQhZDzpwbfPj0aoVpnxycuk4LCwIqcU569z0 ZFTcrgwhRelX59LlTcZgOvNR8WMUTsHGzYs8mQeVyfWZuDbYYZlWfCPIubgPCf++ kUBjAw3PAoIFzU+lAnX2z/Wt6iHaYRNXt9cuFaGpi1an0js/kf8EDH28GmTVtpQ9 F/UBP5XkVzidB1v/1v5VjL6SfASRy4KvPhHHFqOa1GIS2nzDFmaIu/perI9+jU1S AgC/hKPughuCG9Re1ht+l1HmfOwfegT/ -----END CERTIFICATE-----Generated at Tue Jun 17 00:32:49 2025 by rpki-client