$ rpki-client -vvf rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft File: 5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft (raw, json) Hash identifier: 7gjQxv5ZM/dj+kiYydc11Tmlf1Frj2YmVxxUYr2Gvuw= Subject key identifier: F2:AF:B5:C5:AE:04:95:6F:3D:EF:98:B0:07:E9:A1:E9:62:DC:51:5F Authority key identifier: E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0 Certificate issuer: /CN=A91529FC/serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0 Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft Manifest number: 068D Signing time: Sat 14 Jun 2025 22:00:24 +0000 Manifest this update: Sat 14 Jun 2025 22:00:23 +0000 Manifest next update: Sat 21 Jun 2025 22:00:23 +0000 Files and hashes: 1: 5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl (hash: Olt3Ym+apy/4hz/FBdYG4RJVJv8jA55VU+P2h7BixjY=) 2: 78ACE25C7FD811ECB5AA233AC4F9AE02.roa (hash: MxKWutQC0EcuRji5odYG9UP8P1SDvkoxib+Ch43rjh0=) 3: 44E8364E7FDB11EC8A268343C4F9AE02.roa (hash: 1pVbnf50ph3sVf6UCkoKWrOgrUMC2r6DGZa8ts6UopE=) 4: B440BFA6324C11ED94FD883AC4F9AE02.roa (hash: yWCloSXl0jHUU4lKP4fqhekgcparm2OxTeAAa5K4mZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91529FC, serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0 Validity Not Before: Jun 14 22:00:23 2025 GMT Not After : Jun 21 22:00:23 2025 GMT Subject: CN=684df0f8-f44b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6a:c6:93:f0:7a:d1:03:27:47:e4:44:0d:db: 17:97:0e:47:8b:52:51:f8:2d:46:03:f3:d7:f9:5b: 78:1d:a9:dd:17:6d:04:02:28:92:f6:58:37:5d:a2: 5b:47:87:bb:fa:ed:13:da:de:93:d2:6a:15:1b:42: 94:e0:6f:ea:47:be:b9:b0:26:f5:b5:d9:29:e8:b4: 53:ca:30:99:a2:14:7e:b1:36:9c:01:35:31:7a:2a: d4:65:6c:a0:ea:4d:23:a1:1d:5b:6f:29:85:3a:78: a9:4b:da:d4:6d:13:b5:d2:9d:62:bf:b1:b4:c5:f1: 1a:c3:af:0a:cc:da:61:53:48:37:1c:28:2d:f9:48: 63:22:0a:8f:b8:c3:81:a5:88:fd:34:8d:24:ce:3a: 8a:ac:2d:f3:ab:55:89:29:93:94:80:8a:a1:b5:bd: 56:3c:44:c1:af:7d:28:9d:e1:33:14:a1:64:9e:95: 56:20:66:8a:c7:03:75:56:f7:a0:c1:44:c1:97:77: 72:27:6f:0f:91:e3:be:54:c1:4e:76:52:3c:90:ed: 9f:b9:24:43:32:9f:93:68:52:99:90:bd:38:ca:c8: 8c:01:92:47:8b:e5:cb:fc:1c:28:0c:c5:5d:16:74: 56:45:81:04:1b:ff:87:b8:f5:ee:ed:7d:54:94:d3: e8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AF:B5:C5:AE:04:95:6F:3D:EF:98:B0:07:E9:A1:E9:62:DC:51:5F X509v3 Authority Key Identifier: keyid:E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fe:b4:5f:50:fe:af:8f:a4:17:71:65:8c:52:ba:2e:e4:85: ea:7f:c0:57:2c:11:11:a2:85:4a:2d:b2:47:82:70:ba:25:c9: a1:3d:a2:8c:6e:24:71:ad:0e:d2:13:89:61:bf:5f:13:9f:70: 00:f6:c7:4c:66:72:36:9d:a4:60:1a:3d:8f:89:18:88:5a:0a: bf:e8:08:7d:3d:74:c2:87:67:e9:d2:0b:4f:c0:32:6d:0b:c3: 23:a8:c6:ad:4e:7a:e1:3e:4f:15:07:c9:c6:d7:f9:5f:f8:b9: 42:38:91:5a:04:c8:89:94:c6:8f:4b:82:cc:4d:80:6a:43:61: c0:96:d1:bb:09:6d:4b:ce:61:9c:56:5a:1e:51:a0:64:1c:56: 19:c5:ce:74:3d:cb:c9:4f:b9:fe:7a:8b:f3:4d:2d:72:29:58: da:dc:d9:38:81:31:69:47:39:58:3b:4e:3f:3a:1a:91:1d:d1: fa:70:aa:db:1e:af:fc:02:2c:80:eb:eb:fe:88:ba:99:a0:b5: 5b:2f:96:7f:71:74:6e:e5:8a:fd:4e:f2:b2:a6:16:43:fd:9f: 18:aa:51:94:4d:1c:52:56:68:30:54:21:74:31:78:a8:10:bb: 53:c9:65:c7:b8:82:9d:f5:ea:82:89:d4:68:44:6a:4b:b2:a6: 5a:68:f2:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI5RkMxMTAvBgNVBAUTKEU0NThFQTMwNDAwOTg3M0M4ODg0QUY4OUFBOTMxRDQ4 QkE4NTlDRDAwHhcNMjUwNjE0MjIwMDIzWhcNMjUwNjIxMjIwMDIzWjAYMRYwFAYD VQQDEw02ODRkZjBmOC1mNDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmrGk/B60QMnR+REDdsXlw5Hi1JR+C1GA/PX+Vt4HandF20EAiiS9lg3XaJb R4e7+u0T2t6T0moVG0KU4G/qR765sCb1tdkp6LRTyjCZohR+sTacATUxeirUZWyg 6k0joR1bbymFOnipS9rUbRO10p1iv7G0xfEaw68KzNphU0g3HCgt+UhjIgqPuMOB pYj9NI0kzjqKrC3zq1WJKZOUgIqhtb1WPETBr30oneEzFKFknpVWIGaKxwN1Vveg wUTBl3dyJ28PkeO+VMFOdlI8kO2fuSRDMp+TaFKZkL04ysiMAZJHi+XL/BwoDMVd FnRWRYEEG/+HuPXu7X1UlNPoEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKvtcWu BJVvPe+YsAfpoeli3FFfMB8GA1UdIwQYMBaAFORY6jBACYc8iISviaqTHUi6hZzQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjlGQy9ENjlGNzRCODc3 RTgxMUVCQjdGOTlBNDBDNEY5QUUwMi81RmpxTUVBSmh6eUloSy1KcXBNZFNMcUZu TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVGanFNRUFKaHp5SWhLLUpxcE1kU0xxRm5OQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjlGQy9ENjlGNzRCODc3RTgxMUVCQjdGOTlBNDBDNEY5QUUwMi81RmpxTUVBSmh6 eUloSy1KcXBNZFNMcUZuTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7/rRfUP6vj6QXcWWMUrou5IXqf8BXLBERooVKLbJHgnC6JcmhPaKM biRxrQ7SE4lhv18Tn3AA9sdMZnI2naRgGj2PiRiIWgq/6Ah9PXTCh2fp0gtPwDJt C8MjqMatTnrhPk8VB8nG1/lf+LlCOJFaBMiJlMaPS4LMTYBqQ2HAltG7CW1LzmGc VloeUaBkHFYZxc50PcvJT7n+eovzTS1yKVja3Nk4gTFpRzlYO04/OhqRHdH6cKrb Hq/8AiyA6+v+iLqZoLVbL5Z/cXRu5Yr9TvKyphZD/Z8YqlGUTRxSVmgwVCF0MXio ELtTyWXHuIKd9eqCidRoRGpLsqZaaPIp -----END CERTIFICATE-----Generated at Sun Jun 15 10:00:04 2025 by rpki-client