$ rpki-client -vvf rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft File: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft (raw, json) Hash identifier: xOnxUEQnVBpVMUJ6XUUuuBSHki7l7f1H9iS43oGGC4Y= Subject key identifier: B1:C1:45:F4:2C:4D:20:15:79:DF:7E:B1:78:33:9C:2B:98:89:5B:3E Authority key identifier: E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 Certificate issuer: /CN=A914C7F8/serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft Manifest number: 017B Signing time: Fri 13 Jun 2025 02:47:59 +0000 Manifest this update: Fri 13 Jun 2025 02:47:59 +0000 Manifest next update: Fri 20 Jun 2025 02:47:59 +0000 Files and hashes: 1: 5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl (hash: GBZEu26Umar4uJrYijWYnF91l4ZcijamPImVTwsSkP8=) 2: 47862E7E129C11EEA43CFD46C4F9AE02.roa (hash: M9MqZsVmz62prCxeOcSq9CpUw3/czHK+Un3uXWoG0WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C7F8, serialNumber=E50963D70468727356B78B7FC4380974429B64E1 Validity Not Before: Jun 13 02:47:59 2025 GMT Not After : Jun 20 02:47:59 2025 GMT Subject: CN=684b915f-c75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:95:80:29:66:56:c1:83:e2:94:67:22:03: 92:0a:d4:18:65:e2:6e:4e:ca:5e:ef:c2:c4:a9:0b: 9e:1f:88:70:5c:f1:1c:52:9e:42:ba:ea:e6:ca:ae: b3:05:9f:11:49:3c:c4:ff:7e:36:23:4e:d0:54:dd: 61:8c:16:6d:8f:02:d5:7f:59:be:8e:20:38:56:f9: 61:9d:7c:92:e1:fb:c1:2a:8c:e2:42:ad:56:55:ad: aa:d5:d1:5d:68:11:d3:05:41:b1:b6:d5:3e:61:97: 24:71:49:af:6e:3e:e9:7c:3b:8d:3f:4c:c7:79:d4: e7:5e:b9:d9:bd:d4:00:c9:02:0c:3b:3b:a8:6b:a7: 55:c9:9d:da:f1:16:90:aa:b4:bb:47:b5:a9:ed:ea: ad:94:ea:3b:22:9a:30:1e:8f:eb:da:36:aa:54:89: 48:a4:e3:18:b8:97:93:64:4d:1c:df:97:0c:87:44: 6c:0a:cf:1e:81:23:89:f1:cd:cf:8b:58:e3:3e:95: 2a:2d:71:44:25:fd:31:b4:77:d3:5b:a4:bf:30:5f: e1:69:60:02:26:1a:f2:64:96:95:47:67:22:ec:50: ab:6d:f7:e3:95:5f:95:3e:9d:64:ac:3b:0e:8d:94: a4:bf:36:52:0c:ee:1a:b1:1c:a0:e3:53:4e:05:53: 61:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C1:45:F4:2C:4D:20:15:79:DF:7E:B1:78:33:9C:2B:98:89:5B:3E X509v3 Authority Key Identifier: keyid:E5:09:63:D7:04:68:72:73:56:B7:8B:7F:C4:38:09:74:42:9B:64:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qlj1wRocnNWt4t_xDgJdEKbZOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C7F8/E2510E1C129511EE84BAD746C4F9AE02/5Qlj1wRocnNWt4t_xDgJdEKbZOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:d9:33:64:39:6c:c7:b8:f7:1c:9e:13:80:ff:57:dd:65:2d: 4f:2b:1f:d0:3e:0a:bd:5f:72:f8:3e:ce:4b:86:59:99:92:9c: 3b:b6:1b:77:fb:47:6e:5f:77:bf:06:28:c9:a0:d7:0a:ad:52: b5:e4:7e:d2:69:b4:0c:6e:69:ac:de:a9:1f:af:b9:3b:9d:62: ab:44:d3:24:06:19:66:5e:92:38:aa:9b:b5:17:ce:c0:1e:50: eb:a7:bf:c6:49:74:f3:02:99:5a:ad:ff:01:e2:f1:bc:05:61: d2:6c:0c:24:9b:82:ef:a6:2f:ad:aa:1c:58:7d:7e:cd:b9:50: f3:85:d3:1f:fd:fc:32:4e:21:2b:12:bc:56:22:ca:43:7d:c5: 76:97:88:bd:ca:68:80:58:d0:6e:30:8b:67:dc:f5:7a:b3:ec: b9:53:31:00:2e:1a:f3:16:a7:1e:ce:b1:8b:59:68:89:6d:37: 47:7b:55:06:a6:38:18:f5:fd:b3:5d:5d:ad:9e:91:bc:c2:f9: 65:92:82:17:f9:a8:bc:ac:86:e0:45:3f:73:50:45:3b:b9:3e: 42:6e:0d:82:c0:6a:72:d9:a6:fa:1f:f9:f6:da:74:55:69:18: 67:ff:18:0e:f9:b7:9a:c5:6d:ab:b2:8a:33:0d:91:86:3d:a8: de:e3:63:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3RjgxMTAvBgNVBAUTKEU1MDk2M0Q3MDQ2ODcyNzM1NkI3OEI3RkM0MzgwOTc0 NDI5QjY0RTEwHhcNMjUwNjEzMDI0NzU5WhcNMjUwNjIwMDI0NzU5WjAYMRYwFAYD VQQDEw02ODRiOTE1Zi1jNzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VSVgClmVsGD4pRnIgOSCtQYZeJuTspe78LEqQueH4hwXPEcUp5Cuurmyq6z BZ8RSTzE/342I07QVN1hjBZtjwLVf1m+jiA4VvlhnXyS4fvBKoziQq1WVa2q1dFd aBHTBUGxttU+YZckcUmvbj7pfDuNP0zHedTnXrnZvdQAyQIMOzuoa6dVyZ3a8RaQ qrS7R7Wp7eqtlOo7IpowHo/r2jaqVIlIpOMYuJeTZE0c35cMh0RsCs8egSOJ8c3P i1jjPpUqLXFEJf0xtHfTW6S/MF/haWACJhryZJaVR2ci7FCrbffjlV+VPp1krDsO jZSkvzZSDO4asRyg41NOBVNhEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHBRfQs TSAVed9+sXgznCuYiVs+MB8GA1UdIwQYMBaAFOUJY9cEaHJzVreLf8Q4CXRCm2Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzdGOC9FMjUxMEUxQzEy OTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2NuTld0NHRfeERnSmRFS2Ja T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRbGoxd1JvY25OV3Q0dF94RGdKZEVLYlpPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzdGOC9FMjUxMEUxQzEyOTUxMUVFODRCQUQ3NDZDNEY5QUUwMi81UWxqMXdSb2Nu Tld0NHRfeERnSmRFS2JaT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA02TNkOWzHuPccnhOA/1fdZS1PKx/QPgq9X3L4Ps5LhlmZkpw7tht3 +0duX3e/BijJoNcKrVK15H7SabQMbmms3qkfr7k7nWKrRNMkBhlmXpI4qpu1F87A HlDrp7/GSXTzAplarf8B4vG8BWHSbAwkm4Lvpi+tqhxYfX7NuVDzhdMf/fwyTiEr ErxWIspDfcV2l4i9ymiAWNBuMItn3PV6s+y5UzEALhrzFqcezrGLWWiJbTdHe1UG pjgY9f2zXV2tnpG8wvllkoIX+ai8rIbgRT9zUEU7uT5Cbg2CwGpy2ab6H/n22nRV aRhn/xgO+beaxW2rsoozDZGGPaje42Ox -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:24 2025 by rpki-client