$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft File: 5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json) Hash identifier: T5DmOHW5paC5MFyb/0tKP64zIIFORcvMdCrxrqCt4q4= Subject key identifier: E5:34:99:80:18:54:33:66:45:A3:9C:8F:33:7D:09:D6:65:BF:C4:AB Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft Manifest number: 01A1 Signing time: Fri 13 Jun 2025 02:25:42 +0000 Manifest this update: Fri 13 Jun 2025 02:25:41 +0000 Manifest next update: Fri 20 Jun 2025 02:25:41 +0000 Files and hashes: 1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: I10U1nK2YE0FoJQOa9A3GfcJv8lf2vHjQtaWNv9tZVA=) 2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: KXSCbuQLHG9xWL+hihrwdJUS/R0sgZW/C4dlIANzg14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Validity Not Before: Jun 13 02:25:41 2025 GMT Not After : Jun 20 02:25:41 2025 GMT Subject: CN=684b8c25-6266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:38:57:08:cc:bb:85:38:b8:5e:3a:c9:6e: 0a:3d:00:69:dd:48:b1:e8:22:40:aa:43:cd:fc:66: e1:6c:a0:9d:8b:01:0c:1b:1c:2b:6d:18:e7:41:e3: d7:0a:cb:8e:1c:b0:3d:ea:39:a7:60:60:b4:37:79: 09:28:6e:48:a9:8d:eb:99:e2:e9:d4:a0:5b:4a:ea: de:2e:ce:99:e3:ad:33:91:77:5c:3e:46:75:50:d5: 51:bd:7e:4e:32:33:33:27:62:b7:88:f2:0e:15:7b: 05:ac:5b:59:ac:88:02:2b:6d:ae:a5:7a:03:bd:31: 9c:b3:7e:c3:7a:ed:3e:e9:9a:16:0f:81:50:44:a9: d0:4d:29:aa:49:d6:f7:44:54:64:5e:99:c4:5b:99: f0:61:b0:db:1f:84:66:a0:10:bf:15:57:57:dc:fc: 5f:97:42:78:cf:51:f0:8a:01:f3:38:68:92:43:80: d7:46:18:56:59:89:98:27:9d:99:bd:1e:88:2d:e6: 5a:11:81:a8:84:3c:5d:5c:cd:70:a9:7a:a2:3a:e8: f0:d0:f2:97:02:b7:50:c7:ad:b5:d1:6b:d1:b1:2e: 5a:ec:2e:bf:f9:aa:59:b9:9f:20:9a:13:0d:85:0b: 3a:43:ef:02:71:59:0b:f6:1b:f4:81:d4:2f:74:3e: c4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:34:99:80:18:54:33:66:45:A3:9C:8F:33:7D:09:D6:65:BF:C4:AB X509v3 Authority Key Identifier: keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ec:b7:3e:11:26:03:e4:43:32:be:15:3a:9e:8f:1f:14:39: b6:27:45:c8:10:04:00:af:d5:9e:2c:c8:83:93:21:8f:8d:94: f2:c5:a2:cf:e0:ed:fc:6c:e5:63:49:b1:e6:2a:fc:e1:e6:f7: a4:75:ff:f9:5b:6c:7d:f0:bc:13:69:d6:7c:6e:87:27:c6:da: 5e:45:1e:98:b4:24:7b:03:91:44:07:20:58:77:93:df:b9:d3: 8d:b6:b7:bf:df:1b:73:a3:40:d4:92:09:09:6b:3f:55:3e:d2: f4:68:c2:31:b1:79:82:9d:a8:b3:3a:51:61:5f:72:0f:fa:12: 85:62:4c:1b:65:52:d3:d0:03:be:0f:b3:54:2f:1b:38:74:af: 4b:84:b6:8e:5d:d0:15:88:4c:7e:a5:15:01:15:5f:f0:65:e7: 67:83:86:a2:d2:51:85:35:a2:21:77:d8:c4:f0:42:91:d7:07: 70:03:1b:fe:93:4c:54:e9:6c:45:c2:d9:da:5e:7e:86:c1:d1: 1b:01:6a:49:59:f2:00:41:ec:03:28:cc:cf:a8:43:59:d7:79: 4f:04:f9:1d:cd:5b:f9:6f:8d:d7:d3:85:b9:e5:44:ac:2e:fd: 9a:43:85:3b:6e:c9:1c:fe:7a:69:bf:ac:9b:aa:17:9c:b6:2a: ca:d4:d3:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyQkYxMTAvBgNVBAUTKEU2QkIwM0FBNThBMEMyNzBFQjY2QjNFQUVCMjQwOEZG RkFCQTVFQzcwHhcNMjUwNjEzMDIyNTQxWhcNMjUwNjIwMDIyNTQxWjAYMRYwFAYD VQQDEw02ODRiOGMyNS02MjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjM4VwjMu4U4uF46yW4KPQBp3Uix6CJAqkPN/GbhbKCdiwEMGxwrbRjnQePX CsuOHLA96jmnYGC0N3kJKG5IqY3rmeLp1KBbSureLs6Z460zkXdcPkZ1UNVRvX5O MjMzJ2K3iPIOFXsFrFtZrIgCK22upXoDvTGcs37Deu0+6ZoWD4FQRKnQTSmqSdb3 RFRkXpnEW5nwYbDbH4RmoBC/FVdX3Pxfl0J4z1HwigHzOGiSQ4DXRhhWWYmYJ52Z vR6ILeZaEYGohDxdXM1wqXqiOujw0PKXArdQx6210WvRsS5a7C6/+apZuZ8gmhMN hQs6Q+8CcVkL9hv0gdQvdD7EUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU0mYAY VDNmRaOcjzN9CdZlv8SrMB8GA1UdIwQYMBaAFOa7A6pYoMJw62az6uskCP/6ul7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJCRi8yQTcxRTZCQ0Qz NDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3duRHJaclBxNnlRSV9fcTZY c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyc0RxbGlnd25EclpyUHE2eVFJX19xNlhzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJCRi8yQTcxRTZCQ0QzNDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3du RHJaclBxNnlRSV9fcTZYc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw7Lc+ESYD5EMyvhU6no8fFDm2J0XIEAQAr9WeLMiDkyGPjZTyxaLP 4O38bOVjSbHmKvzh5vekdf/5W2x98LwTadZ8bocnxtpeRR6YtCR7A5FEByBYd5Pf udONtre/3xtzo0DUkgkJaz9VPtL0aMIxsXmCnaizOlFhX3IP+hKFYkwbZVLT0AO+ D7NULxs4dK9LhLaOXdAViEx+pRUBFV/wZedng4ai0lGFNaIhd9jE8EKR1wdwAxv+ k0xU6WxFwtnaXn6GwdEbAWpJWfIAQewDKMzPqENZ13lPBPkdzVv5b43X04W55USs Lv2aQ4U7bskc/nppv6ybqhectirK1NPd -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:53 2025 by rpki-client