$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft File: S5R0cysQASlff10ywBNpOhk3aBM.mft (raw, json) Hash identifier: hoJceZIfWqHd/UJxmbFn3Xt1p1qbg3+ixxU871Jw+mk= Subject key identifier: E8:16:42:09:B2:4E:1A:F8:B7:C4:62:D7:96:87:39:46:83:31:BE:C8 Authority key identifier: 4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 Certificate issuer: /CN=A915393C/serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft Manifest number: 97 Signing time: Tue 17 Jun 2025 05:16:34 +0000 Manifest this update: Tue 17 Jun 2025 05:16:33 +0000 Manifest next update: Tue 24 Jun 2025 05:16:33 +0000 Files and hashes: 1: S5R0cysQASlff10ywBNpOhk3aBM.crl (hash: fWXDi1H1p5NjBfu4u6mtdUvT1uqmkH+DmcMi5iqWJNI=) 2: D970354A640E11EF93D18659C4F9AE02.roa (hash: k3HZpqynszzvTxkVmhHqGRdf/ZQZ2uvnxZO8lo9Yzko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915393C, serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Validity Not Before: Jun 17 05:16:33 2025 GMT Not After : Jun 24 05:16:33 2025 GMT Subject: CN=6850fa31-bc41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:15:3b:99:e7:2a:58:71:11:da:d7:24:22:16: 54:71:5f:a1:fc:de:73:77:ea:5f:13:ea:7c:5c:c6: 25:b7:72:d9:5c:d6:a9:fa:cb:9a:bd:d1:d4:10:57: 93:31:8d:a6:c1:d6:3e:21:16:39:c9:e4:9a:0e:05: 93:b2:c4:c2:bf:3f:d0:af:39:20:5c:90:c3:2a:b9: b0:c3:6a:88:a3:ae:ec:db:8d:bb:50:5d:5d:1a:72: 44:60:40:5d:f5:6f:b1:0b:99:76:c1:a0:1f:9c:64: 17:1f:22:9e:0e:86:2b:65:90:63:61:ad:93:2f:71: df:3e:84:ff:f1:01:c8:4d:ca:25:06:85:15:20:2f: 19:89:45:44:06:0d:43:09:4c:69:76:b6:e8:4d:03: 42:f5:1a:cf:d1:31:11:7c:24:7d:9d:12:e2:32:c3: 95:69:90:6a:7b:a3:6c:48:99:7e:06:ad:bd:b2:35: 5c:2a:69:6c:61:85:ad:24:9b:39:9e:05:dc:83:69: d6:d4:ae:4a:95:58:2e:6f:39:a5:ce:00:58:67:70: b8:b0:90:5d:7b:5b:22:e7:6a:d7:ad:0d:47:e3:9f: 4a:dd:3a:cc:5b:53:15:b5:ab:9b:37:4f:1a:bb:f6: dc:bb:22:b8:86:47:2d:f5:c3:02:80:25:19:48:d4: de:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:16:42:09:B2:4E:1A:F8:B7:C4:62:D7:96:87:39:46:83:31:BE:C8 X509v3 Authority Key Identifier: keyid:4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2d:36:6e:91:bb:81:a3:91:c0:7a:b9:a6:76:8b:86:c1:57: 66:ad:15:cb:ec:6c:0e:7f:ac:20:a4:0a:7e:c9:90:2a:21:20: 9d:7a:cd:18:3d:96:f6:29:1c:d6:92:52:18:b8:6c:e7:dd:70: ff:43:24:9f:d5:4b:10:77:37:8a:d6:a2:44:08:f3:f0:e9:35: 8b:e6:a4:d5:8e:ed:0b:79:93:bb:19:1f:38:d2:fc:b0:39:c2: 5b:0c:5f:f6:d1:d5:27:e7:fa:97:be:11:46:b6:c5:e8:c2:c1: 47:83:0b:26:ab:ba:2d:7d:1c:d2:e6:3f:4f:4a:9b:6d:09:8d: 18:15:0c:3f:c1:56:c8:18:cd:3e:c1:d3:51:e0:0a:f2:d7:b0: 2c:04:9f:ea:4a:51:e1:6b:f5:0a:bb:49:e1:31:86:b2:73:31: 87:5a:2f:b6:61:97:17:4c:d5:8f:56:3b:ca:bf:df:41:77:9f: b9:13:45:c1:e6:35:d7:bf:f8:6c:94:48:c9:03:c8:1e:41:08: 5e:4e:98:ae:3f:b5:79:61:b2:ee:22:80:aa:08:6b:5e:d9:10: 7a:f9:f5:f6:f3:0a:98:81:c4:d9:11:0f:14:62:22:2b:85:38: c2:b7:c8:e4:ed:1d:58:31:de:9e:64:4b:b1:f5:71:d8:d8:91: 0b:b2:4f:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM5M0MxMTAvBgNVBAUTKDRCOTQ3NDczMkIxMDAxMjk1RjdGNUQzMkMwMTM2OTNB MTkzNzY4MTMwHhcNMjUwNjE3MDUxNjMzWhcNMjUwNjI0MDUxNjMzWjAYMRYwFAYD VQQDEw02ODUwZmEzMS1iYzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBU7mecqWHER2tckIhZUcV+h/N5zd+pfE+p8XMYlt3LZXNap+suavdHUEFeT MY2mwdY+IRY5yeSaDgWTssTCvz/QrzkgXJDDKrmww2qIo67s2427UF1dGnJEYEBd 9W+xC5l2waAfnGQXHyKeDoYrZZBjYa2TL3HfPoT/8QHITcolBoUVIC8ZiUVEBg1D CUxpdrboTQNC9RrP0TERfCR9nRLiMsOVaZBqe6NsSJl+Bq29sjVcKmlsYYWtJJs5 ngXcg2nW1K5KlVgubzmlzgBYZ3C4sJBde1si52rXrQ1H459K3TrMW1MVtaubN08a u/bcuyK4hkct9cMCgCUZSNTeZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgWQgmy Thr4t8Ri15aHOUaDMb7IMB8GA1UdIwQYMBaAFEuUdHMrEAEpX39dMsATaToZN2gT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzkzQy82RDA0MzE1RTY0 MEUxMUVGQjU0NDY0NThDNEY5QUUwMi9TNVIwY3lzUUFTbGZmMTB5d0JOcE9oazNh Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1UjBjeXNRQVNsZmYxMHl3Qk5wT2hrM2FCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzkzQy82RDA0MzE1RTY0MEUxMUVGQjU0NDY0NThDNEY5QUUwMi9TNVIwY3lzUUFT bGZmMTB5d0JOcE9oazNhQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+LTZukbuBo5HAermmdouGwVdmrRXL7GwOf6wgpAp+yZAqISCdes0Y PZb2KRzWklIYuGzn3XD/QySf1UsQdzeK1qJECPPw6TWL5qTVju0LeZO7GR840vyw OcJbDF/20dUn5/qXvhFGtsXowsFHgwsmq7otfRzS5j9PSpttCY0YFQw/wVbIGM0+ wdNR4Ary17AsBJ/qSlHha/UKu0nhMYayczGHWi+2YZcXTNWPVjvKv99Bd5+5E0XB 5jXXv/hslEjJA8geQQheTpiuP7V5YbLuIoCqCGte2RB6+fX28wqYgcTZEQ8UYiIr hTjCt8jk7R1YMd6eZEux9XHY2JELsk8N -----END CERTIFICATE-----Generated at Wed Jun 18 18:17:35 2025 by rpki-client