$ rpki-client -vvf rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft File: 5c6UvYXPCPR6j97JcE8dztA4Bow.mft (raw, json) Hash identifier: 7Fq5zp6+QcgVR2rWmcZ4Fm1WGG1wXjjdZZF3cfQvHY8= Subject key identifier: 0D:63:AB:B5:C7:64:21:F6:DB:5C:F8:8E:96:10:7F:D9:51:39:70:01 Authority key identifier: E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C Certificate issuer: /CN=A91517A0/serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft Manifest number: 70 Signing time: Sun 15 Jun 2025 05:57:39 +0000 Manifest this update: Sun 15 Jun 2025 05:57:39 +0000 Manifest next update: Sun 22 Jun 2025 05:57:39 +0000 Files and hashes: 1: 5c6UvYXPCPR6j97JcE8dztA4Bow.crl (hash: I9L6A18MG90KtOVczSNAOZy7/Te4GIeN7vbFJsJlagI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91517A0, serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C Validity Not Before: Jun 15 05:57:39 2025 GMT Not After : Jun 22 05:57:39 2025 GMT Subject: CN=684e60d3-4c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:15:19:3e:92:46:4d:d0:1b:a9:80:17:fc: c9:63:36:2c:8c:3e:c9:13:73:7a:c1:03:96:aa:75: 42:21:c8:19:38:5c:30:a7:f7:94:ce:b4:4a:6b:c3: dc:79:d1:3f:a2:83:d0:8a:0d:5b:a1:e6:98:29:90: ed:6e:1a:62:60:43:18:ba:a8:d6:99:42:ce:b3:7d: 4a:ab:ee:78:a5:f7:34:dd:7e:c8:e5:44:e7:2f:3c: 20:50:30:26:45:a2:05:73:10:45:9d:da:85:54:1e: 28:66:f3:ab:11:7e:21:64:e8:37:18:d7:9c:b3:5d: cd:91:cc:e4:e6:18:89:ca:25:19:6e:19:02:04:e5: 4c:70:b4:fd:dc:95:f6:62:5f:4c:a4:a0:69:ea:d6: 07:13:b0:7b:6a:00:ca:68:71:c6:7d:b9:16:43:5c: 0f:ee:ee:e0:78:79:37:1b:25:ec:11:60:be:26:e1: 67:79:84:58:c4:99:62:17:c6:2e:21:f8:5f:32:79: 0b:f7:05:da:b4:4e:9e:99:dd:24:54:11:b4:36:1b: 22:ea:76:6c:df:5c:12:9b:18:f4:78:61:7a:46:3d: 9b:fa:d3:df:ae:9d:99:a5:a9:19:8f:9f:bb:20:22: 74:20:df:79:32:06:ac:8d:2b:74:04:10:fe:3a:5d: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:63:AB:B5:C7:64:21:F6:DB:5C:F8:8E:96:10:7F:D9:51:39:70:01 X509v3 Authority Key Identifier: keyid:E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ef:81:ce:fe:3f:33:be:3d:61:aa:52:57:7f:e7:17:80:48: 06:59:d0:10:13:ec:0e:36:3c:e8:b3:98:8d:00:62:f0:bb:ac: f6:77:07:9d:18:17:a3:b5:6c:ae:84:7f:8d:99:77:03:f5:96: c2:3e:92:e8:33:c5:5f:d9:b6:ce:f9:57:6b:d2:da:8a:01:41: 61:2d:98:7f:50:ce:5a:21:fe:c1:06:5e:0c:b3:7b:c2:4f:71: a1:46:ee:8a:90:3c:52:38:c9:6a:b1:4e:97:68:a1:b4:d2:08: df:b0:d8:6d:ec:8b:5a:5d:c0:1b:aa:14:39:59:cb:12:81:bf: 7a:4c:f8:ff:43:4a:96:a3:4b:2c:b7:d8:23:5a:5d:e9:ff:62: 78:47:5b:cc:c2:cb:e1:2f:97:0f:f9:2e:ff:ca:d6:4b:e6:48: 5f:25:47:66:c7:b5:6f:40:c4:6c:cd:d2:de:d0:cf:8a:47:69: c9:65:14:46:60:47:95:6f:99:e4:08:e0:21:31:a4:0d:9b:20: 82:c4:cc:36:12:33:38:96:08:a6:26:38:74:97:61:eb:bd:d5: 6b:5c:c4:ac:13:39:d3:a6:b9:26:3c:b0:22:9a:0d:2a:eb:4d: a5:c7:20:22:c3:8d:2a:ee:c0:11:41:64:54:3f:26:7b:c0:6f: d1:b1:9e:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTdBMDExMC8GA1UEBRMoRTVDRTk0QkQ4NUNGMDhGNDdBOEZERUM5NzA0RjFEQ0VE MDM4MDY4QzAeFw0yNTA2MTUwNTU3MzlaFw0yNTA2MjIwNTU3MzlaMBgxFjAUBgNV BAMTDTY4NGU2MGQzLTRjNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4OhUZPpJGTdAbqYAX/MljNiyMPskTc3rBA5aqdUIhyBk4XDCn95TOtEprw9x5 0T+ig9CKDVuh5pgpkO1uGmJgQxi6qNaZQs6zfUqr7nil9zTdfsjlROcvPCBQMCZF ogVzEEWd2oVUHihm86sRfiFk6DcY15yzXc2RzOTmGInKJRluGQIE5UxwtP3clfZi X0ykoGnq1gcTsHtqAMpoccZ9uRZDXA/u7uB4eTcbJewRYL4m4Wd5hFjEmWIXxi4h +F8yeQv3Bdq0Tp6Z3SRUEbQ2GyLqdmzfXBKbGPR4YXpGPZv609+unZmlqRmPn7sg InQg33kyBqyNK3QEEP46XfI5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDWOrtcdk IfbbXPiOlhB/2VE5cAEwHwYDVR0jBBgwFoAU5c6UvYXPCPR6j97JcE8dztA4Boww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxN0EwLzk1NUZBNTUyOUY2 OTExRUZBNEZFQUY2NUM0RjlBRTAyLzVjNlV2WVhQQ1BSNmo5N0pjRThkenRBNEJv dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNWM2VXZZWFBDUFI2ajk3SmNFOGR6dEE0Qm93LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx N0EwLzk1NUZBNTUyOUY2OTExRUZBNEZFQUY2NUM0RjlBRTAyLzVjNlV2WVhQQ1BS Nmo5N0pjRThkenRBNEJvdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF/vgc7+PzO+PWGqUld/5xeASAZZ0BAT7A42POizmI0AYvC7rPZ3B50Y F6O1bK6Ef42ZdwP1lsI+kugzxV/Zts75V2vS2ooBQWEtmH9Qzloh/sEGXgyze8JP caFG7oqQPFI4yWqxTpdoobTSCN+w2G3si1pdwBuqFDlZyxKBv3pM+P9DSpajSyy3 2CNaXen/YnhHW8zCy+Evlw/5Lv/K1kvmSF8lR2bHtW9AxGzN0t7Qz4pHacllFEZg R5VvmeQI4CExpA2bIILEzDYSMziWCKYmOHSXYeu91WtcxKwTOdOmuSY8sCKaDSrr TaXHICLDjSruwBFBZFQ/JnvAb9Gxnik= -----END CERTIFICATE-----Generated at Sun Jun 15 08:39:25 2025 by rpki-client