$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft File: 5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json) Hash identifier: nAaxdpIEGd2JdcFKJYfGRkpJX+1ntbSkxj5/jpb0JS0= Subject key identifier: 1B:B3:3A:16:D9:8C:F0:EC:0D:46:15:68:0A:45:BC:99:BD:64:00:2E Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Certificate serial: 34B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft Manifest number: 349E Signing time: Sat 14 Jun 2025 14:54:50 +0000 Manifest this update: Sat 14 Jun 2025 14:54:49 +0000 Manifest next update: Sat 21 Jun 2025 14:54:49 +0000 Files and hashes: 1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: ksOnqNiJL9/+VeDiPMtdIMYhsg3tR6irEPW+rzq7PT8=) 2: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: HW9R1Ep56SryGIz4W6P5CqXSgSxlXz4KavtGaF387a4=) 3: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: AqcTvl3JE8iQmp2mHhzhnxH+2xnTnNkhAQ8gJbtZg+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13490 (0x34b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Validity Not Before: Jun 14 14:54:49 2025 GMT Not After : Jun 21 14:54:49 2025 GMT Subject: CN=684d8d39-8049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:17:99:f9:08:b5:55:d6:8a:04:8a:52:50: 96:a6:a3:9a:93:aa:7a:c5:01:37:f9:20:51:9f:f9: 8b:db:3e:62:e1:65:5a:1e:30:7c:36:29:f4:95:f9: 90:0f:94:45:c4:e9:13:1d:fc:92:7c:e7:71:ff:d3: ea:5e:64:1c:00:3d:a2:c2:18:5c:86:6b:1f:57:d6: 60:e3:79:2b:11:94:66:66:81:13:82:2b:00:b0:f8: c2:b6:a5:83:e4:eb:a2:27:11:38:2a:7b:53:e9:b1: 33:74:60:fb:4f:24:27:47:27:2f:0e:ee:bf:8f:38: 80:33:51:30:fd:c1:aa:0e:9b:d2:0a:14:15:2d:d2: 73:a9:08:7b:c9:26:64:e4:9e:a9:9f:5a:b0:a4:d2: fb:7f:e7:fa:d8:cd:f1:15:1b:95:91:75:3a:b8:38: b6:f7:5c:01:81:9f:0d:62:da:7e:f9:0e:45:54:ec: 12:a7:32:7b:44:2b:fa:25:c1:7c:fa:70:4d:e8:61: 43:6d:79:c5:df:44:95:90:ef:0e:9e:f6:5c:04:c6: 29:d1:7c:0b:3e:c3:37:22:f5:4d:41:fc:8b:00:50: e4:52:f5:6d:86:65:89:a2:a6:12:18:f7:56:76:1b: 26:da:10:ee:3b:b3:d3:f5:c9:98:8a:1e:04:6d:e4: ac:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B3:3A:16:D9:8C:F0:EC:0D:46:15:68:0A:45:BC:99:BD:64:00:2E X509v3 Authority Key Identifier: keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:66:ce:f9:96:69:3b:80:8a:39:c4:8f:fb:63:0a:24:12:4f: ee:dc:e1:5d:83:d8:08:54:e6:19:54:4e:1f:e0:64:23:c5:62: f1:00:de:ca:2b:b7:63:b0:72:43:f9:b0:9f:80:25:06:09:21: ca:20:c2:64:7f:9d:56:14:5a:1e:cb:39:dc:23:ec:0c:de:91: d7:e9:ac:66:06:2d:a7:b6:63:11:f6:0c:df:3b:5a:6f:8b:2b: 1f:a3:2a:c5:47:fc:cc:ca:8e:86:85:35:cb:12:b1:be:45:ba: 27:85:a0:89:97:b8:43:a4:e0:e4:ec:8a:04:b8:57:ae:79:6f: d5:1a:84:ac:33:ae:82:4e:76:9e:c6:68:07:16:6d:f7:7a:74: 25:20:3e:2f:ad:1a:4c:52:36:b1:99:b7:1a:ea:90:7b:16:f4: 0e:1d:50:96:3b:e1:65:d0:b9:a1:1b:7a:75:69:04:8c:5a:e0: 96:37:69:b5:9f:08:8e:01:04:bb:c1:c4:9b:fc:06:ca:fe:4e: a3:db:9e:2b:53:94:cd:db:72:7d:51:e7:a6:fd:c0:09:f9:1e: 8e:72:68:a3:ce:fb:40:57:71:9c:02:54:aa:80:62:53:b2:84: 31:3e:4c:35:72:6c:21:99:00:63:4b:fe:e4:52:99:3f:16:4a: b4:af:a4:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3RjkxMTAvBgNVBAUTKEU2QkY0NkU1MzBERjkyMjk4RkFDMDMyQUZCQzk4NDA5 QzQ0MzA0MzkwHhcNMjUwNjE0MTQ1NDQ5WhcNMjUwNjIxMTQ1NDQ5WjAYMRYwFAYD VQQDEw02ODRkOGQzOS04MDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8kXmfkItVXWigSKUlCWpqOak6p6xQE3+SBRn/mL2z5i4WVaHjB8Nin0lfmQ D5RFxOkTHfySfOdx/9PqXmQcAD2iwhhchmsfV9Zg43krEZRmZoETgisAsPjCtqWD 5OuiJxE4KntT6bEzdGD7TyQnRycvDu6/jziAM1Ew/cGqDpvSChQVLdJzqQh7ySZk 5J6pn1qwpNL7f+f62M3xFRuVkXU6uDi291wBgZ8NYtp++Q5FVOwSpzJ7RCv6JcF8 +nBN6GFDbXnF30SVkO8OnvZcBMYp0XwLPsM3IvVNQfyLAFDkUvVthmWJoqYSGPdW dhsm2hDuO7PT9cmYih4EbeSswwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuzOhbZ jPDsDUYVaApFvJm9ZAAuMB8GA1UdIwQYMBaAFOa/RuUw35Ipj6wDKvvJhAnEQwQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjdGOS82RUQyRUJBQTFE OUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtpbVByQU1xLThtRUNjUkRC RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyOUc1VERma2ltUHJBTXEtOG1FQ2NSREJEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjdGOS82RUQyRUJBQTFEOUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtp bVByQU1xLThtRUNjUkRCRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACZs75lmk7gIo5xI/7YwokEk/u3OFdg9gIVOYZVE4f4GQjxWLxAN7K K7djsHJD+bCfgCUGCSHKIMJkf51WFFoeyzncI+wM3pHX6axmBi2ntmMR9gzfO1pv iysfoyrFR/zMyo6GhTXLErG+RbonhaCJl7hDpODk7IoEuFeueW/VGoSsM66CTnae xmgHFm33enQlID4vrRpMUjaxmbca6pB7FvQOHVCWO+Fl0LmhG3p1aQSMWuCWN2m1 nwiOAQS7wcSb/AbK/k6j254rU5TN23J9Ueem/cAJ+R6OcmijzvtAV3GcAlSqgGJT soQxPkw1cmwhmQBjS/7kUpk/Fkq0r6SR -----END CERTIFICATE-----Generated at Sun Jun 15 04:54:04 2025 by rpki-client